Viruses war Résolu/Fermé

Question

Bonjour,
Voilà quelques jours que je lutte contre virus persistent, bien que j'en connaissent que peu en la matière. C'est un ordinateur neuf et le voilà malade et virulent. Au début, je n'avais que Avast, spyware blaster, et le pare-feu microsoft. Tout à commencer avec un spyware, qui me redirigeait à une page de pub d'anti-spyware en affichant de notification en forme de triangle jaune et de bouclier d'alerte. Voyant spyware blaster impuissant malgré les régulière mise à jour, je me suis mis en quête d'un nouvel anti-spyware gratuit et suis tombé sur stopzilla version d'essai. Au début ça semblait fonctionner mais ça n'a fait que dégénérer davantage. Je suis aller un antivirus dont j'avais déjà bonne confiance, AVG ainsi que hijackthis, puis désinstallé stopzilla, ce qui a ms fin a mes problème de spyware, mais entre-temps, en me risquant a fouiner pour une serial key trainant sur le web, pour l'installation complète d'un anti-spyware, j'ai contracter un virus, avec tout ses petit bébé, dont j'ai éliminer une partie mais il continu toujours de me lancer de nouvelles infection, variant de quelque minute a quelque heures d'intervalle.
AVG décèle quelques infections qu'il répare mais le problème est toujours là.
J'ai peu d'expérience avec hijackthis mais un certain C:\WINDOWS\SYSTEM32\efccyyvs.dll qui n'était pas là au début me rend perplexe et il ne fix pas le problème..
Avast détecte parfois la présence d'un rootkit qu'il essaie de supprimer mais perd sa trace aussitôt et ne corrige pas le problème non plus mais réussi a contenir le virus qui semble vouloir se propager( je supprime ou envoie l'infection dans la virus vault mais un nouveau au même emplacement(windows\system32) sous un nom différent.

Utilisateur anonyme · Answer

Bonsoir,
Commence par poster un rapport HijackThis stp,
>Télécharge HiJackThis : https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/ 
- Lance Hijackthis, sélectionne < do a system scan and save a logfile > 
- Enregistre le rapport sur ton bureau.
Et envoie stp, par collier/coller, ton log Hijackthis sur le forum,

;)

A+

Utilisateur anonyme · Answer

Re,
ok tu as une infection Vundo (entre autres...).

Bon, nettoyage :
> Les logiciels suivants (AVG et Ccleaner) te seront utiles par la suite - ils sont à conserver...

> Télécharge et installe sur ton PC AVG anti-spyware (si tu as déjà les programmes alors fais juste les mises à jour) : https://www.commentcamarche.net/telecharger/securite/4275-avg-antivirus-free/, fais les mises à jour puis ferme le programme.

> Télécharge et installe Ccleaner : http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner, fais les mises à jour puis ferme le programme.
Si besoin est tu trouveras des Tutoriaux ici :
https://kerio.probb.fr/t242-tuto-ccleaner-v-2 , https://www.malekal.com/tutoriel-ccleaner/ et [http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner

> Télécharge Clean : http://www.malekal.com/download/clean.zip (différent de Ccleaner),

> Commence par faire un copier/coller de ce poste (c'est manip.) : (conseillé)
Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" => "Programmes" =>"Accessoires" => "Bloc notes"),
puis fait un copier/coller de tout le contenu de la fenêtre de ce poste dans le fichier texte.
Sauvegarde le sur le bureau, tu pourras alors y avoir accès même déconnecté ou en mode sans échec.

> Démarre en mode sans échec : (image). Si problème : tuto ici

> Lance AVG,
- Clique sur le menu Analyse (de la barre d'outils). Clique après sur l'onglet Paramètres, puis <Dans Comment réagir?> clique sur <Actions recommandées> et choisi <Supprimer>.
- Vérifie que toutes les cases sont cochées dans <Comment faire l'analyse ?> et dans <Programmes potentiellement dangereux> et vérifie que le bouton-radio <Générer un rapport après chaque analyse> soit aussi coché.
- Vas dans l'onglet 'Analyse', puis clique <Analyse complète du système>.
Remarque : Une fois l'analyse terminée, il faut faire un clique droit sur un fichier infecté et demander à "AVG Anti-Spyware 7.5" de le supprimer.
Puis clique sur "Appliquer toutes les actions" afin de tout supprimer automatiquement.
- Clique sur "Enregistrer le rapport" puis enregistre le sur ton bureau.
- Fais un copier/coller du rapport généré dans ton prochain poste.

> Lance Ccleaner,
- Choisi l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures" (tout doit être supprimé).
- Dans l'onglet "Nettoyeur" clique sur "Analyse".
- Une fois l'analyse terminée, clique sur "Lancer le Nettoyage".
- Dans l'onglet "registre" => Recherches des erreurs => Réparer les erreurs sélectionnées => enregistre une sauvegarde => corriger toutes erreurs sélectionnées => ok => fermer.
N.B : Si Ccleaner te propose d'enregistrer une sauvegarde, reponds oui et enregistre sous 'Bureau'
Recommence jusqu’à ce qu’il ne trouve plus rien (cela varie en général entre 1 et 4 fois).

> Pour Clean (encore en mode sans échec) :
- Double-clic sur clean.cmd
- Une fenêtre va apparaître, choisis l'option 2, suis les consignes et poste le rapport clean (Le rapport clean se trouve ici : C:\rapport_clean.txt)
NB : Si besoin, clean : http://mickael.barroux.free.fr/securite/clean.php

> Relance ton PC en mode normal

> Télécharge ComboFix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur ton Bureau.
Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement.
- Double clique combofix.exe
- Tape sur la touche 1 (Yes) pour démarrer le scan.
- Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

> Relance Hijackthis :
Puis sélectionne < do a system scan and save a logfile >,

Et envoie moi, par collier/coller, ton log Hijackthis stp,

Bon courage,

:)

NB : N'oublie pas de poster TOUS les rapports stp (AVG, Clean (différent de Ccleaner), SDFix puis HiJAckT).

A+

Deirheim · Answer

Alors voilà, dans l'ordre 1. Historique de l'analyse AVG - - - @HL_UpdateOK avi:1286-1276;banner:492-490;iavi:1371-1333; - @HL_TestStarted @TestName_02 - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\BN4D.tmp @EID_Id_trj Downloader.Agent.AEUQ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\gos69.tmp @EID_Id_trj Dialer.28.AS - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0-1.rar @EID_Id_trj SHeur.BCUJ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0.rar @EID_Id_trj SHeur.BCUJ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0.zip @EID_Id_trj Dialer.28.AV - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\win5C.exe @EID_Id_trj Generic10.HOC - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\zfe1.exe @EID_Id_trj Downloader.Generic7.DYZ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\zfe10.exe @EID_Id_trj Downloader.Generic7.DYZ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\zfe3.exe @EID_Id_trj Downloader.Generic7.DYZ - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\zfe8.exe @EID_Id_trj Downloader.Generic7.DYZ - @HL_ReportFind C:\Program Files\Fichiers communs\iS3\Anti-Spyware\patch.exe @EID_Id_trj Dialer.28.AV - @HL_ReportFind C:\WINDOWS\system32\dcggain.dll @EID_Id_trj Downloader.Generic7.DXL - @HL_ReportFind C:\WINDOWS\system32\drvsud.dll @EID_Id_trj Dialer.28.AS - @HL_ReportFind C:\WINDOWS\system32 tload.dll @EID_Id_trj Generic10.HOD - @HL_ReportFind C:\WINDOWS\system32\winmxw32.dll @EID_Id_trj Lop.4.F - @HL_ReportFind C:\WINDOWS\system32\winupdate.exe @EID_Id_trj Generic10.HOC - @HL_TestEnded @TestName_02 19 - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\BN4D.tmp @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\gos69.tmp @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0-1.rar @HL_ActVVInserted - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0.rar @HL_ActVVInserted - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\STOPZILLA 4.0.zip @HL_ActVVInserted - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\win5C.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\zfe1.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\zfe10.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\zfe3.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\zfe8.exe @HL_ActCleaned - @HL_ActionTaken C:\Program Files\Fichiers communs\iS3\Anti-Spyware\patch.exe @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32\dcggain.dll @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32\drvsud.dll @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32 tload.dll @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32\winmxw32.dll @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32\winupdate.exe @HL_ActCleaned - @HL_TestStarted @TestName_02 - @HL_TestEnded @TestName_02 0 - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\CDNUMW3V\CAYJOB9Y @EID_Fi_vir Vundo - @HL_TestStarted @TestName_13 - @HL_TestEnded @TestName_13 0 - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CAVUXDRC @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\CDNUMW3V\CAV12FC9 @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS F:\daemon347.exe @EID_Fi_vir Win32/Virut - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS F:\daemon347.exe @EID_Fi_vir Win32/Virut - @HL_ReportFindRS F:\daemon347.exe @EID_Fi_vir Win32/Virut - @HL_ReportFindRS F:\daemon347.exe @EID_Fi_vir Win32/Virut - @HL_TestStarted @TestName_02 - @HL_TestEnded @TestName_02 0 - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\5IVKIJNC\CA98UHPN @EID_Fi_vir Vundo - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\WP4XMZOV\CAVQIL73 @EID_Fi_vir Vundo - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CA3Q6LBR @EID_Fi_vir Vundo - @HL_TestStarted @TestName_12 - @HL_TestEnded @TestName_12 0 - @HL_TestStarted @TestName_12 - @HL_TestEnded @TestName_12 0 - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_TestStarted @TestName_12 - @HL_TestEnded @TestName_12 0 - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CAFUWV79 @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\5IVKIJNC\CA67GVBK @EID_Fi_vir Vundo - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CAFE07NP @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\5IVKIJNC\CAODMF4X @EID_Fi_vir Vundo - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CA8IBQT9 @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\CDNUMW3V\CA1CE5XN @EID_Fi_vir Vundo - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_UpdateOK avi:1287-1286;iavi:1373-1371; - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\V8OM59JW\CAM7GLA3 @EID_Fi_vir Vundo - @HL_TestStarted @TestName_02 - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\7ehxz0op.exe @EID_Id_trj Downloader.Zlob.VTG - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\jgy1zeqo.exe @EID_Id_trj Downloader.Zlob.VTG - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\jxi9ekgg.exe @EID_Id_trj Downloader.Zlob.VTG - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\kpcayac1.exe @EID_Id_trj Downloader.Zlob.VTG - @HL_ReportFind C:\Documents and Settings\MSI\Local Settings\Temp\p6o1yrnn.exe @EID_Id_trj Downloader.Zlob.VTG - @HL_ReportFindRS C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\5IVKIJNC\CA2J0XO1 @EID_Fi_vir Vundo - @HL_ReportFind C:\WINDOWS\system32\fccbXrPh.dll @EID_Id_trj Generic10.IFJ - @HL_ReportFindRS C:\WINDOWS\system32\fccbXrPh.dll @EID_Id_trj Generic10.IFJ - @HL_ReportFind C:\WINDOWS\system32 nnoOETl.dll @EID_Id_trj Generic10.IFJ - @HL_TestEnded @TestName_02 7 - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\7ehxz0op.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\jgy1zeqo.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\jxi9ekgg.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\kpcayac1.exe @HL_ActCleaned - @HL_ActionTaken C:\Documents and Settings\MSI\Local Settings\Temp\p6o1yrnn.exe @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32\fccbXrPh.dll @HL_ActCleaned - @HL_ActionTaken C:\WINDOWS\system32 nnoOETl.dll @HL_ActCleaned - @HL_TestStarted @TestName_02 - @HL_TestStopped @TestName_02 0 - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_TestStarted @TestName_12 - @HL_TestEnded @TestName_12 0 - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_ReportFindRS C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe @EID_Id_trj Downloader.Small.BXG - @HL_TestStarted @TestName_02 - @HL_TestStopped @TestName_02 0 - @HL_TestStarted @TestName_02 - @HL_TestEnded @TestName_02 0

Deirheim · Answer

2. AVG antispyaware

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	07:55:03 2008-04-08

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004958.exe -> Downloader.Tiny.ali : Nettoyé.
C:\Documents and Settings\MSI\Local Settings\Temp\removalfile.bat -> Not-A-Virus.Adware.Virtumonde : Nettoyé.
:mozilla.684:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.
:mozilla.706:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.708:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.709:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.710:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.711:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.712:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.713:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.824:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.937:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.678:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.680:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.681:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.823:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.825:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.
:mozilla.273:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adengage : Nettoyé.
:mozilla.720:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.721:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.733:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.734:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.736:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.737:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.738:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.740:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Adrevolver : Nettoyé.
:mozilla.723:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.731:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.732:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.735:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.739:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
:mozilla.700:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
:mozilla.811:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
:mozilla.722:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Burstnet : Nettoyé.
:mozilla.161:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.162:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.163:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.164:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.165:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.166:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Casalemedia : Nettoyé.
:mozilla.654:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Clickbank : Nettoyé.
:mozilla.64:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Clickhype : Nettoyé.
:mozilla.513:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
:mozilla.514:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Clickzs : Nettoyé.
:mozilla.690:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
:mozilla.171:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.172:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.173:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.174:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.175:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Euroclick : Nettoyé.
:mozilla.696:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.697:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.698:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.699:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Fastclick : Nettoyé.
:mozilla.783:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.
:mozilla.862:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.863:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.951:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.
:mozilla.119:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.121:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.
:mozilla.814:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Information : Nettoyé.
:mozilla.545:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Ivwbox : Nettoyé.
:mozilla.300:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Liveperson : Nettoyé.
:mozilla.743:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
:mozilla.210:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.211:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.
:mozilla.741:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.742:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Questionmarket : Nettoyé.
:mozilla.727:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.728:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.729:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Realmedia : Nettoyé.
:mozilla.813:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Revenue : Nettoyé.
:mozilla.724:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.
:mozilla.340:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.341:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.342:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.343:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.344:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.345:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.346:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
:mozilla.397:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.398:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.763:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.764:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.765:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.766:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.242:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.243:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.244:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.245:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.246:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.247:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.248:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.249:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\MSI\Cookies\msi@statcounter[1].txt -> TrackingCookie.Statcounter : Nettoyé.
:mozilla.365:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.366:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.367:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.368:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.212:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Trafic : Nettoyé.
:mozilla.730:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.
:mozilla.354:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.355:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.356:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.357:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.358:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.359:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.360:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.361:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.199:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Webtrends : Nettoyé.
:mozilla.122:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yadro : Nettoyé.
:mozilla.671:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.672:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.673:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.674:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.675:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
:mozilla.676:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.677:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.679:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.682:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.
:mozilla.683:C:\Documents and Settings\MSI\Application Data\Mozilla\Firefox\Profiles\hjojj1ao.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.


Fin du rapport

Deirheim · Answer

3.CCleaner

Script execute en mode sans echec
Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 2008-04-08 a 8:03:52,75

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files

*** Suppression des clefs du registre effectuee..
*** Fin du rapport !

et

4.Combo fix

ComboFix 08-04-08.4 - MSI 2008-04-08 15:41:42.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1356 [GMT -3:00]
Endroit: C:\Documents and Settings\MSI\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\efccyyvs.dll
C:\WINDOWS\system32\qomnonmn.dll
C:\WINDOWS\system32\urqolljg.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NQAPLWJ
-------\Legacy_SZKG5
-------\Legacy_{fbe1d620-5418-4aae-a0f0-316d590663a1}
-------\Service_{fbe1d620-5418-4aae-a0f0-316d590663a1}

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-08 to 2008-04-08 ))))))))))))))))))))))))))))))))))))
.

2008-04-08 00:10 . 2008-04-08 00:10 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Grisoft
2008-04-08 00:10 . 2007-05-30 09:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-04-08 00:08 . 2008-04-08 00:08 <REP> d-------- C:\Program Files\clean
2008-04-08 00:06 . 2008-04-08 00:06 <REP> d-------- C:\Program Files\CCleaner
2008-04-07 22:01 . 2008-04-07 22:01 <REP> d-------- C:\Program Files\Fichiers communs\Noesis 3D Content Creation
2008-04-07 22:00 . 2008-04-07 22:01 <REP> d-------- C:\Program Files\Noesis Interactive
2008-04-07 22:00 . 2008-04-07 22:00 <REP> d-------- C:\Program Files\NOESIS
2008-04-06 18:22 . 2008-04-06 18:54 <REP> d-------- C:\Documents and Settings\MSI\Application Data\GetRightToGo
2008-04-06 15:53 . 2008-04-06 15:53 <REP> d-------- C:\Program Files\Google
2008-04-05 17:19 . 2008-04-06 18:13 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Azureus
2008-04-05 17:19 . 2008-04-05 17:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2008-04-05 17:07 . 2008-04-05 17:07 <REP> d-------- C:\Documents and Settings\MSI\Application Data\vlc
2008-04-05 16:44 . 2008-04-05 16:44 <REP> d-------- C:\Update
2008-04-05 16:41 . 2008-04-05 16:41 <REP> d-------- C:\Program Files\VideoLAN
2008-04-05 14:52 . 2008-04-05 14:52 736 --a------ C:\WINDOWS\DigimaxMaster.INI
2008-04-05 14:49 . 2008-04-05 14:49 8,192 --ahs---- C:\WINDOWS\Thumbs.db
2008-04-05 11:54 . 2008-04-08 00:52 <REP> d-------- C:\Documents and Settings\MSI\Application Data\AVG7
2008-04-05 11:54 . 2008-04-05 11:54 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AVG7
2008-04-05 11:54 . 2008-04-08 00:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-04-05 11:54 . 2008-04-05 11:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg7
2008-04-05 01:17 . 2008-04-05 01:17 0 --a------ C:\WINDOWS\system32\wscmp.dll.tmp
2008-04-05 01:17 . 2008-04-05 01:17 0 --a------ C:\WINDOWS\system32\update32.exe.tmp
2008-04-05 01:15 . 2008-04-05 01:35 3,262 --a------ C:\WINDOWS\system32\sex1.ico
2008-04-05 01:15 . 2008-04-05 01:15 0 --a------ C:\WINDOWS\system32\sex2.ico.tmp
2008-04-05 01:08 . 2008-03-29 15:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
2008-04-05 01:08 . 2008-03-29 15:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
2008-04-05 00:54 . 2008-04-05 00:54 <REP> d-------- C:\Program Files\Samsung
2008-04-05 00:54 . 2005-12-14 15:10 552,960 --a------ C:\WINDOWS\system32\xvidcore.dll
2008-04-05 00:54 . 1998-07-09 19:41 217,088 --a------ C:\WINDOWS\system32\skjpeg40.dll
2008-04-05 00:54 . 2005-12-14 15:08 159,744 --a------ C:\WINDOWS\system32\xvidvfw.dll
2008-04-05 00:54 . 1998-03-04 10:40 83,968 --a------ C:\WINDOWS\system32\Skbase40.dll
2008-04-05 00:54 . 2005-12-14 15:11 61,440 --a------ C:\WINDOWS\system32\xvid.ax
2008-04-05 00:54 . 2004-03-09 09:39 8,704 --a------ C:\WINDOWS\system32\vidccleaner.exe
2008-04-04 20:30 . 2008-04-04 20:36 <REP> d-------- C:\WINDOWS\system32\209789
2008-04-04 02:35 . 2008-04-04 02:35 <REP> d-------- C:\Program Files\iPod
2008-04-03 16:11 . 2008-04-03 16:11 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Lost Marble
2008-04-03 16:09 . 2008-04-08 01:13 <REP> d-------- C:\Program Files\Anime Studio Pro
2008-04-03 00:31 . 2008-04-03 16:08 <REP> d-------- C:\Program Files\Toon Boom Animation
2008-04-02 17:15 . 2008-04-02 17:15 <REP> d-------- C:\Program Files\Fichiers communs\iS3
2008-04-02 17:15 . 2008-04-05 01:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
2008-04-02 17:15 . 2008-04-05 00:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SITEguard
2008-04-02 17:09 . 2008-04-02 17:14 <REP> d-------- C:\Program Files\killad
2008-04-02 16:29 . 2008-04-02 16:29 <REP> d-------- C:\Program Files\Trend Micro
2008-04-02 14:26 . 2008-04-02 16:41 <REP> d-------- C:\WINDOWS\system32\375013
2008-04-02 00:37 . 2008-04-02 17:31 <REP> d-------- C:\Program Files\Puzzle Quest
2008-04-02 00:37 . 2008-04-02 00:37 <REP> d-------- C:\Program Files\OpenAL
2008-04-02 00:37 . 2008-04-02 00:37 409,600 --a------ C:\WINDOWS\system32\wrap_oal.dll
2008-04-02 00:37 . 2008-04-02 00:37 114,688 --a------ C:\WINDOWS\system32\OpenAL32.dll
2008-04-01 22:57 . 2008-04-01 22:57 <REP> d-------- C:\WINDOWS\Sun
2008-04-01 22:34 . 2008-04-01 22:34 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-04-01 15:04 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2008-04-01 15:04 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2008-04-01 15:04 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2008-04-01 15:04 . 2006-09-28 16:03 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2008-04-01 15:03 . 2008-04-01 15:03 <REP> d-------- C:\Program Files\Microsoft XNA
2008-04-01 14:38 . 2008-04-01 14:38 <REP> d-------- C:\Program Files\OGPlanet
2008-04-01 13:35 . 2008-04-01 13:36 <REP> d-------- C:\Program Files\Microsoft Visual Studio 8
2008-04-01 13:35 . 2008-04-01 15:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-04-01 12:58 . 2008-04-01 13:22 27 --a------ C:\WINDOWS\ic.ini
2008-04-01 01:52 . 2008-04-02 14:30 <REP> d-------- C:\Program Files\Eden_World
2008-03-31 16:12 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-31 16:12 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-03-31 16:12 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-30 22:08 . 2008-03-30 22:08 <REP> d-------- C:\Program Files\MSXML 4.0
2008-03-30 21:58 . 2008-03-30 22:03 <REP> d-------- C:\Program Files\Windows Live
2008-03-30 21:58 . 2008-03-30 22:01 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-30 21:57 . 2008-03-30 21:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-30 18:41 . 2008-03-30 18:41 <REP> d-------- C:\Users
2008-03-30 18:20 . 2008-03-30 18:25 <REP> d-------- C:\Program Files\Fichiers communs\Softimage
2008-03-30 18:19 . 2007-08-14 18:12 45,056 --------- C:\WINDOWS\system32\XSIChooser.exe
2008-03-30 18:18 . 2008-03-30 18:25 <REP> d-------- C:\Softimage
2008-03-30 18:12 . 2008-03-30 18:12 <REP> d-------- C:\Documents and Settings\MSI\Application Data\InstallShield
2008-03-30 02:15 . 2008-03-30 02:16 <REP> d-------- C:\Program Files\OFFICE One Games
2008-03-30 02:15 . 2008-03-30 02:15 <REP> d-------- C:\Documents and Settings\MSI\Application Data\OFFICE One v7
2008-03-30 02:15 . 2008-03-30 02:15 16,384 --a------ C:\WINDOWS\system32\DsrSleep.dll
2008-03-30 02:14 . 2008-03-30 02:14 <REP> d-------- C:\Program Files\Fichiers communs\Ciel
2008-03-30 02:14 . 2008-03-30 02:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\OFFICE One v7
2008-03-30 02:14 . 2008-03-30 02:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Ciel
2008-03-30 02:14 . 2008-03-30 02:14 2,248,704 --a------ C:\WINDOWS\system32\PDFCreatorPilot3.dll
2008-03-30 02:14 . 2008-03-30 02:14 110,592 --a------ C:\WINDOWS\system32\oopmdisp.exe
2008-03-30 02:14 . 2008-03-30 02:14 90,112 --a------ C:\WINDOWS\system32\oopmagent.exe
2008-03-30 02:14 . 2008-03-30 02:14 45,568 --a------ C:\WINDOWS\system32\progress.exe
2008-03-30 02:14 . 2008-03-30 02:14 26,112 --a------ C:\WINDOWS\system32\oopmpm.dll
2008-03-30 02:14 . 2008-03-30 02:14 4,521 --a------ C:\WINDOWS\system32\oopm.lng
2008-03-30 02:13 . 2008-03-30 02:13 <REP> d-------- C:\Program Files\Ciel
2008-03-30 02:07 . 2008-03-30 02:07 <REP> d-------- C:\Program Files\Windows Media Connect 2
2008-03-30 02:05 . 2008-03-30 02:05 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-03-30 02:05 . 2008-03-30 02:06 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-03-30 02:01 . 2008-04-02 17:27 <REP> d-------- C:\Documents and Settings\MSI\Application Data\OFFICEOne7
2008-03-30 01:56 . 2004-08-19 18:09 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-03-30 01:51 . 2008-03-30 01:51 <REP> d-------- C:\Program Files\MSBuild
2008-03-30 01:49 . 2008-03-30 01:49 <REP> d-------- C:\WINDOWS\system32\XPSViewer
2008-03-30 01:48 . 2008-03-30 01:48 <REP> d-------- C:\Program Files\Reference Assemblies
2008-03-30 01:48 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2008-03-30 01:47 . 2008-03-30 02:18 <REP> d-------- C:\Program Files\OFFICE One v7
2008-03-30 01:46 . 2008-03-30 02:05 <REP> d-------- C:\Program Files\Java
2008-03-30 01:46 . 2008-03-30 01:46 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-03-30 01:46 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-30 01:45 . 2008-03-30 01:45 <REP> d-------- C:\Program Files\OFFICE One 7.0
2008-03-29 23:23 . 2008-04-02 16:53 <REP> d-------- C:\Documents and Settings\MSI\Application Data\DivX

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-08 01:01 2,418 ----a-w C:\Program Files\Fichiers communs\Noesis 3D Content Creation.log
2008-04-07 14:28 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-07 14:27 --------- d-----w C:\Program Files\SpywareBlaster
2008-03-29 18:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2008-03-29 18:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2008-03-29 18:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2008-03-29 18:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2008-03-26 13:25 --------- d-----w C:\Program Files\Alwil Software
2008-03-26 13:14 --------- d-----w C:\Program Files\microsoft frontpage
2008-03-26 13:12 --------- d-----w C:\Program Files\Services en ligne
2008-02-21 02:05 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-02-21 02:05 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-02-21 02:05 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitComet"="C:\Program Files\BitLord\BitLord.exe" [2005-05-06 21:47 2224128]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 13:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-05-18 16:53 8433664]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-19 17:10 110592 C:\WINDOWS\system32\bthprops.cpl]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-09-15 16:50 815104]
"ACU"="C:\Program Files\Atheros\ACU.exe" [2007-05-03 18:42 376921]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-06-01 11:51 823296]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-06-01 11:49 974848]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 16:10 56928]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 23:55 54832]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 07:48 157592]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-04-05 11:54 579072]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 06:25 6731312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-04-05 11:54 219136]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\cmw23.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\BitLord\\BitLord.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"C:\\Program Files\\Microsoft Games\\Impossible Creatures\\IC.exe"=
"C:\\Softimage\\XSI_6_Mod_Tool\\Application\\bin\\XSI.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 O2MDRDR;O2MDRDR;C:\WINDOWS\system32\DRIVERS\o2media.sys [2007-04-03 11:04]
R0 O2SDRDR;O2SDRDR;C:\WINDOWS\system32\DRIVERS\o2sd.sys [2007-04-02 17:11]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 15:31]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 15:35]
R3 WSIMD;wsimd Service;C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-03-28 20:52]
S3 XDva121;XDva121;C:\WINDOWS\system32\XDva121.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\Setup.exe

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-04-07 18:54:04 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-08 15:47:15
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-04-08 15:49:27 - machine was rebooted [MSI]
ComboFix-quarantined-files.txt 2008-04-08 18:49:24
Pre-Run: 100,492,832,768 octets libres
Post-Run: 100,410,503,168 octets libres
.
2008-04-02 01:34:15 --- E O F ---

Deirheim · Answer

et enfin Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:51:06, on 2008-04-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (avg7alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (avg7updsvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (avgems) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Utilisateur anonyme · Answer

Bonjour Deirheim,

Bon,
le rapport AVG ne correspond pas à celui que j'attendais.

Alors fais ceci stp :
> Télécharge MalwareByte's Anti-Malware : http://www.malwarebytes.org/mbam/program/mbam-setup.exe
- Installe le programme puis lance le stp.
NB : S'il te manque COMCTL32.OCX alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
- Fais les mises à jour (clique sur "Mises à jour" puis "Recherche de mises à jour")
- Démarre en mode sans échec (image). Si problème : tuto ici
- Lance le MalwareByte's Anti-Malware puis clique sur "Executer un examen complet" puis "Rechercher" et sélectionne tous tes disques durs => le scan débute....patiente...
- A la fin clique sur clique "supprimer" (Si des éléments très difficiles à supprimer, un message te demandera de rédémarrer : clique sur "Oui" alors)
- Un rapport va être généré : sauvegarde le et poste le sur forum stp.

Ensuite,
poste un nouveau rapport HiJackT stp.

Comment va le PC ?

je vous remercie pour celui que vous prenez pour mon cas^^,
comment ça ? Je ne comprends pas ?

A+

Deirheim · Answer

Malwarebyte:
Malwarebytes' Anti-Malware 1.11
Version de la base de données: 604

Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 116644
Temps écoulé: 1 hour(s), 19 minute(s), 14 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 44

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DataDisp32 (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\NetProject (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\videoPl.chl (Trojan.Zlob) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\WINDOWS\system32\375013 (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\209789 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Fichiers communs\iS3\Anti-Spyware\crack.exe (Spyware.LDPinch) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-013314-651.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-013333-565.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-014259-121.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-015941-413.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-020111-167.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-020211-625.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-080724-210.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-123447-379.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-130826-706.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-134403-606.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080405-212815-355.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080406-202023-889.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080406-202059-359.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20080407-184516-572.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\qomnonmn.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\urqolljg.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP43\A0004220.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP43\A0004221.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP43\A0004222.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP43\A0004223.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP43\A0004224.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004659.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004660.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004768.exe (Spyware.LDPinch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004844.dll (Trojan.Qqpass) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004959.exe (Worm.Socks) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004960.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP51\A0004967.exe (Dialer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP51\A0004968.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP51\A0004970.dll (Trojan.Qqpass) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP51\A0004971.dll (Dialer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP51\A0004972.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009466.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009467.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009527.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009528.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009529.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009530.dll (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wscmp.dll.tmp (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\sex1.ico (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Security Troubleshooting.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\MSI\Favoris\Online Security Test.url (Rogue.Link) -> Quarantined and deleted successfully.




et HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:22, on 2008-04-09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (avg7alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (avg7updsvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (avgems) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Utilisateur anonyme · Answer

Salut,
le HiJackt doit toujours être fait en mode normal.

Tu as deux antivirus qui tournent en même temps sur ton PC (=> conflits). Je te conseille de supprimer AVG7 et de conserver Avast.

Ensuite refais un HiJack stp puis poste le.

Après on termine.

A+

Deirheim · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:50:41, on 2008-04-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\BitLord\BitLord.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Readereader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Utilisateur anonyme · Answer

BONJOUR ?

Tu n'as pas répondu à mes questions, d'ailleurs tu n'es pas très communicatif....:-/

ici : http://www.commentcamarche.net/forum/affich 5826389 viruses war#9

=> 

Comment va le PC ?

je vous remercie pour celui que vous prenez pour mon cas^^,
comment ça ? Je ne comprends pas ? 

Installe IE7 : https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

Après on fini.....car il en reste....

A+

Deirheim · Answer

Re, dsl du retard...

Alors voilà, maintenant le dernier internet explorer est installé, avg antivirus désinstallé et tout le reste accomplis.
Ce qui donne: J'ai n'ai plus eu d'alerte virus depuis un moment, mais la notification d'avast ne s'affiche plus et maintenant mon setup de noesis 3d content creation se ferme dès que je le lance, ce qui n'était pas le cas avant(est-ce possible que l'un des programme l'aie dérégler/altéré ou quoique ce soit?)


je vous remercie pour celui que vous prenez pour mon cas^^,
comment ça ? Je ne comprends pas ? 
Je vous remerciais du temps que vous prenez pour m'aider

Utilisateur anonyme · Answer

Bonsoir,
Alors,
> Bon il te faut un pare feu :
- Je te conseille Kerio : http://www.commentcamarche.net/telecharger/telecharger 206 kerio . Si problème, tuto : https://kerio.probb.fr/
- Si tu as des difficultés avec les configuration de Kerio, alors installe Zone Alarme : /telecharger/telecharger-157-zonealarm, en cas de problème : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm 
- Installe le nouveau pare-feu, puis désactive le pare-feu windows.    

Après,
avant de finir :
> Fais un scan en ligne avec Kaspersky :  https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr 
- Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >.
Le scan ne marche que sous Internet Explorer.
- On va te demander de télécharger un contôle active x, accepte .
- Dans le menu Choisissez la cible de l'analyse, sélectionne Poste de travail. Le scan va commencer.
- Poste le rapport qui sera généré stp.
S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : http://www.inoculer.com/activex.php3
Rappel : le scan est à faire sous Internet Explorer 
Tuto ici si problème : http://www.vista-xp.fr/forum/topic109.html

Ensuite,
Poste un nouveau rapport HiJackT stp.

A+

Deirheim · Answer

Bonjour, 
voilà le résultat : file:///C:/Documents%20and%20Settings/MSI/Bureau/analyse.html

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:03:30, on 2008-04-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\BitLord\BitLord.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Utilisateur anonyme · Answer

Bonsoir,
voici le résultat...voici le résultat....
Ton lien ne marche pas et même s'il fonctionnait je ne pourrai pas voir ton rapport....

Il faut obligatoirement que tu me le poste (copier/coller).

Peux-tu le poster stp ?

Après on termine : il reste encore quelques trucs à gérer d'un coup.

Bon courage.

A+

Deirheim · Answer

Re, dsl, voilà le rapport, j'ai pu voir qu'il restait des trojan-downloader:
KASPERSKY ON-LINE SCANNER REPORT
Sunday, April 13, 2008 12:01:24 PM
Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version : 5.0.83.0
Dernière mise à jour de la base antivirus Kaspersky : 13/04/2008
Enregistrements dans la base antivirus Kaspersky : 701099
Paramètres d'analyse
Analyser avec la base antivirus suivante 	étendue
Analyser les archives 	vrai
Analyser les bases de messagerie 	vrai
Cible de l'analyse 	Poste de travail
C:\
D:\
E:\
F:\
Statistiques de l'analyse
Total d'objets analysés 	102661
Nombre de virus trouvés 	13
Nombre d'objets infectés 	41 / 0
Nombre d'objets suspects 	0
Durée de l'analyse 	01:36:34

Nom de l'objet infecté 	Nom du virus 	Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\temp\Cookies\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\temp\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\LocalService\ntuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Cookies\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db.shadow 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Logs\Dfsr00005.log 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\pending.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\dfsr.db 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\fsr.log 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\fsrtmp.log 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\tmp.edb 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows Live Contacts\alcoolwolf@hotmail.com\real\members.stg 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows Live Contacts\alcoolwolf@hotmail.com\shadow\members.stg 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Temp\~DF7C5D.tmp 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Temp\~DF7CC7.tmp 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Temp\~DFC819.tmp 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Temp\~DFC83D.tmp 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\NTUSER.DAT 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\MSI\ntuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Cookies\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT 	L'objet est verrouillé 	ignoré
C:\Documents and Settings\NetworkService\ntuser.dat.LOG 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\gnomon_asi02.7z.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\03 Sabbra Cadabra.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\04 Turn the Page.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\07 Mercyful Fate.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\08 Astronomy.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\09 Whiskey in the Jar.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\10 Tuesday's Gone.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\01 Helpless.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\02 The Small Hours.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\03 The Wait.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\06 Am I Evil_.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\07 Blitzkrieg.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\08 Breadfan.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\11 So What.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\12 Killing Time.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\13 Overkill.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\14 Damage Case.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\15 Stone Dead Forever.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\16 Too Late Too Late.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\01 Battery.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\02 Master of Puppets.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\03 The Thing That Should Not Be.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\04 Welcome Home (Sanitarium).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\05 Disposable Heroes.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\07 Orion [Instrumental].mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\08 Damage, Inc..mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Creeping Death (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Helpless (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\I Disappear.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Last Caress (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Let It Loose.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Low Man's Lyric (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Poor Twisted Me (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Sucking My Love.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\The Chase Is Better Than The Catch.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\other Metallica\The Four Horsemen (acoustic).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\01) Motorbreath.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\02) The Mechanix.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\03) Jump In The Fire.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\04) Seek And Destroy.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\06) Metal Militia.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\07) Hit The Lights.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\01) Hit The Lights.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\02) The Four Horsemen.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\03) Motorbreath.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\04) Jump In The Fire.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\05) (Anesthesia) - Pulling Teeth.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\06) Whiplash.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\07) Phantom Lord.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\08) No Remorse.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\09) Seek And Destroy.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\10) Metal Militia.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\01) Fight Fire With Fire.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\04) Fade To Black.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\05) Trapped Under Ice.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\06) Escape.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\07) Creeping Death.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\01) Helpless.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\02) The Small Hours.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\04) Crash Course In Brain Surgery.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\01) Blackened.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\02) And Justice For All.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\03) Eye Of The Beholder.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\04) One.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\05) The Shortest Straw.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\06) Harvester Of Sorrow.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\07) The Frayed Ends Of Sanity.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\08) To Live Is To Die.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\09) Dyers Eve.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\01) Enter Sandman.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\02) Sad But True.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\03) Holier Than Thou.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\04) The Unforgiven.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\05) Wherever I May Roam.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\06) Don't Tread On Me.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\07) Through The Never.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\08) Nothing Else Matters.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\10) The God That Failed.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\11) My Friend Of Misery.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\12) The Struggle Within.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-01) Enter Sandman.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-02) Creeping Death.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-03) Harvester Of Sorrow.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-04) Welcome Home (Sanitarium).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-05) Sad But True.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-06) Of Wolf And Man.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-07) The Unforgiven.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-08) Justice Medley.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-09) Solos (bass-guitar).mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-02) For Whom The Bell Tolls.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-03) Fade To Black.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-05) Seek & Destroy.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-01) Nothing Else Matters.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-02) Wherever I May Roam.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-03) Am I Evil.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-05) One.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-06) Battery.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-07) The Four Horsemen.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-08) Motorbreath.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-09) Stone Cold Crazy.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\01) Ain't My Bitch.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\02) 2 X 4.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\03) The House Jack Built.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\04) Until It Sleeps.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\05) King Nothing.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\06) Hero Of The Day.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\07) Bleeding Me.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\08) Cure.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\11) Mama Said.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\12) Thorn Within.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\13) Ronnie.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\14) The Outlaw Torn.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\02) The Memory Remains.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\03) Devil's Dance.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\04) The Unforgiven II.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\05) Better Then You.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\06) Slither.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\07) Carpe Diem Baby.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\08) Bad Seed.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\09) Where The Wild Things Are.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\10) Prince Charming.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\11) Low Man's Lyric.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\12) Attitude.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\13) Fixxxer.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-01) The Ecstasy Of Gold.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-02) The Call Of Ktulu.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-04) Of Wolf And Man.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-05) The Thing That Should Not Be.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-06) Fuel.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-07) The Memory Remains.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-08) No Leaf Clover.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-10) Devil's Dance.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-11) Bleeding Me.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-01) Nothing Else Matters.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-03) For Whom The Bell Tolls.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-04) -Human.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-05) Wherever I May Roam.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-06) The Outlaw Torn.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-07) Sad But True.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-08) One.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-09) Enter Sandman.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-10) Battery.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\02) St. Anger.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\03) Some Kind Of Monster.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\04) Dirty Window.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\05) Invisible Kid.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\06) My World.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\07) Shoot Me Again.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\08) Sweet Amber.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\09) The Unnamed Feeling.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\10) Purify.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\11) All Within My Hands.mp3.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\BitLord\Downloads\NOESIS\Noesis Advanced Source Level Design\NOESIS - Advanced Level Design.iso.bc! 	L'objet est verrouillé 	ignoré
C:\Program Files\clean\pskill.exe 	Infecté : not-a-virus:RiskTool.Win32.PsKill.k 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log.idx 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log 	L'objet est verrouillé 	ignoré
C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log.idx 	L'objet est verrouillé 	ignoré
C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip/Documents and Settings/MSI/Bureau/catchme.zip/efccyyvs.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip/Documents and Settings/MSI/Bureau/catchme.zip 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip 	ZIP: infecté - 2 	ignoré
C:\System Volume Information\MountPointManagerRemoteDatabase 	L'objet est verrouillé 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004667.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kye 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004707.exe 	Infecté : Trojan-Downloader.Win32.Zlob.kvd 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004708.exe 	Infecté : Trojan-Downloader.Win32.Zlob.kyy 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004709.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004717.exe 	Infecté : Trojan-Downloader.Win32.Zlob.kue 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004718.exe 	Infecté : Trojan-Downloader.Win32.Zlob.kux 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004719.exe 	Infecté : Trojan-Downloader.Win32.Zlob.lad 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/keygen.exe 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/patch.exe 	Infecté : Trojan.Win32.Dialer.yz 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/crack.exe 	Infecté : Trojan-Downloader.Win32.Small.ude 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar 	Infecté : Trojan-Downloader.Win32.Small.ude 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe 	RarSFX: infecté - 4 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004961.exe 	Infecté : Rootkit.Win32.Agent.ahc 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0007120.dll 	Infecté : not-a-virus:AdWare.Win32.Virtumonde.mhf 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0007121.dll 	Infecté : not-a-virus:AdWare.Win32.Virtumonde.mhf 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0008116.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0008117.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009531.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009532.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009533.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009534.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009535.dll 	Infecté : Trojan-Downloader.Win32.Zlob.kyi 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013539.exe 	Infecté : Trojan-Downloader.Win32.Small.ude 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013540.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013541.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013542.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013543.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013544.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013545.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013546.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013547.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013548.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013549.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013550.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013551.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013552.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013553.dll 	Infecté : Packed.Win32.Monder.gen 	ignoré
C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP68\change.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\Debug\PASSWD.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\SchedLgU.Txt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\Sti_Trace.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\CatRoot2\edb.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\CatRoot2\tmp.edb 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\ACS.evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\Antivirus.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\AppEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\default 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\default.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SAM 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SAM.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SecEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SECURITY 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SECURITY.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\software 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\software.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\SysEvent.Evt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\system 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\config\system.LOG 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\drivers\sptd.sys 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\h323log.txt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA 	L'objet est verrouillé 	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP 	L'objet est verrouillé 	ignoré
C:\WINDOWS\Temp\fa56d7ec.$$$ 	L'objet est verrouillé 	ignoré
C:\WINDOWS\Temp\Perflib_Perfdata_32c.dat 	L'objet est verrouillé 	ignoré
C:\WINDOWS\Temp\_avast4_\Webshlock.txt 	L'objet est verrouillé 	ignoré
C:\WINDOWS\wiadebug.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\wiaservc.log 	L'objet est verrouillé 	ignoré
C:\WINDOWS\WindowsUpdate.log 	L'objet est verrouillé 	ignoré
Analyse terminée.

Utilisateur anonyme · Answer

Bonjour,
Ok, super.
Alors on termine :

> Installe IE7 stp : https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/

> Télécharge ToolsCleaner : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/ sur ton bureau.
- Clique sur Recherche et laisse le scan agir ...
- Clique sur Suppression pour finaliser (tu peux, si tu le souhaites, te servir des Options facultatives)
- Clique sur Quitter pour obtenir le rapport et poste le dans ta réponse (TCleaner.txt se trouve à la racine de ton disque dur (C:\)).
- Supprime ToolsCleaner ensuite.

> Télécharge et installe Easy Cleaner stp : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/

> Tu peux aussi vider ta corbeille.

> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924

> Passe un coup d'AGV et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC). Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser. Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être alaise))
Rappel des liens :
- http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware
- https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]

> Quelques liens utiles :
- http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)

> Refais un scanne Kaspersky pour vérifier qu'il ne reste plus rien et poste le rapport stp.

Voila,
Bonne lecture....

A+

Deirheim · Answer

Re,
cela fait bien deux jour que j'essaie d'installer ie7 mais je retourne toujours a ie6 comme s'il ne s'était rien passé, je viens d'installer le service pack 2 dont j'ai remarqué l'absence mais il ne s'installe pas plus. Adobe reader 8 est déjà installer et jsais pas si ca dérange que je fasse le reste en attendant ie7, mais son absence reste toujours un problème.

Utilisateur anonyme · Answer

Bonsoir,
ok,
peux tu poster un rapport DSS stp :

> Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau : http://www.techsupportforum.com/sectools/Deckard/dss.exe
- Choisis <enregistrer> et <Bureau> pour l'emplacement.
- Ferme toutes les applications en cours (même internet). C'est important car sinon le PC peut planter.
- Double-clique sur dss.exe pour lancer l'outil.
- S'il ne trouve pas HijackThis, clique sur Oui.
- Clique sur OK à chaque fois que cela te sera demandé.
- Une fois l'analyse finie un rapport s'affichera. Poste son contenu dans ta réponse.
NB : Le rapport se trouve aussi ici : C:\Deckard\System Scanner\main.txt
PS : Si tu obtiens deux rapports (main + extra) alors poste les deux.

Bon courage,

A+

Deirheim · Answer

Re, 

voilà le rapport, suivi de l'extra:

-main.txt


Deckard's System Scanner v20071014.68
Run by MSI on 2008-04-16 21:15:30
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
88: 2008-04-17 00:15:36 UTC - RP88 - Deckard's System Scanner Restore Point
87: 2008-04-16 04:38:05 UTC - RP87 - Software Distribution Service 3.0
86: 2008-04-16 00:08:19 UTC - RP86 - Installed Windows IDNMitigationAPIs.
85: 2008-04-16 00:08:00 UTC - RP85 - Installed Windows NLSDownlevelMapping.
84: 2008-04-16 00:07:30 UTC - RP84 - Installed Windows XP KB915865.


-- First Restore Point -- 
1: 2008-03-26 13:20:22 UTC - RP1 - Point de vérification système


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as MSI.exe) -------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:16:28, on 2008-04-16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\MSI\Bureau\dss.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\MSI.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

Utilisateur anonyme · Answer

Bonjour, Pourtant le service pack2 est bel et bien installé sur ta bécane !? Pourquoi dis tu que non ? En effet, il reste une vilaine crasse collée à ton navigateur web (c'est donc pour cela que tu ne peux installer IE7...). Alors, >Ouvre ce lien (merci a S!RI pour ce fix) http://siri.urz.free.fr/Fix/SmitfraudFix.php et télécharge SmitfraudFix.exe. - Regarde le tuto - Exécute le programme et choisi l’option 1 (et uniquement). Le programme va générer un rapport, copie/colle le sur le forum stp. Ensuite, > Télécharge OTMoveIT (de Old_Timer) : http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe sur ton bureau... - Double-clique sur OTMoveIt.exe pour le lancer. - Assure toi que la case "Unregister Dll's and Ocx's" est bien cochée !!! - Copie le texte qui se trouve ci-dessous et colle-le dans le cadre de gauche de OTMoveIt nommé . C:\WINDOWS\system32\winupdate.exe - Clique sur < MoveIt! > pour lancer la suppression. - Lorsqu'un résultat apparaît dans le cadre Results clique sur Exit N.B :Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES. Un rapport est créé dans %SYSTEMDRIVE%\_OTMoveIt\MovedFiles\date du jour (C:\_OTMoveIt\MovedFiles\), copie-colle-le dans ta réponse suivante stp. ..... Arff, je regarde au fur et à mesure.....il reste encore pas mal de trojans, vers.....bref, On va encore reste un p'tit moment ensemble mon ami... :) A+

Deirheim · Answer

Re,

(Je ne pense pas que le service pack était bien installé avant alors j'ai été le chercher quand je voyais qu'ie7 ne voulais pas fonctionner)

Voilà le rapport de smitfraudfix:

SmitFraudFix v2.314

Rapport fait à 13:03:51,31, 2008-04-17
Executé à partir de C:\Documents and Settings\MSI\Bureau\Security\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MSI\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin




et voilà pour OTMoveIT2, je ne pense pas que ça a fonctionné correctement:

File/Folder  not found.
File/Folder C:\WINDOWS\system32\winupdate.exe not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04172008_133234


Erf, je ne pensais pas être aussi atteint que ça...merci encore pour le coup de main!

Utilisateur anonyme · Answer

Hello, alors le smitfraudfix devait être fait en mode normal (si je te ne dis pas en MSE alors c'est en mode normal qu'il faut le faire). Bon, je ne sais pas si c'est à cause de cela mais je n'ai pas les résultat escomptés... Refais le en mode normal stp puis poste le rapport, Ensuite, >Télécharge VundoFix : http://www.atribune.org/ccount/click.php?id=4 (par Atribune) sur ton Bureau. - Lance le programme, puis clique sur le bouton - Lorsque le scan est complété, clique sur le bouton - Une invite te demandera si tu veux supprimer les fichiers, clique (le Bureau disparaîtra lors de la suppression des fichiers). - Tu verras une invite qui t'annonce que ton PC va redémarrer; clique - Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ton prochain poste. Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage. Si un message runtime error '339' s'affiche : télécharge MSWINSCK.OCX du lien ci-dessous, et place-le dans le dossier C:\Windows\System32 http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX Après, > Télécharge ComboFix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur ton Bureau. Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement. - Double clique combofix.exe - Tape sur la touche 1 (Yes) pour démarrer le scan. - Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. NOTE : Le rapport se trouve également ici : C:\Combofix.txt Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. PS : combo peut remplacer Vundo....mais dans ton cas...c'est bizarre...je préfère qu'on fasse les deux...et puis Combo fourni un rapport très révélateur... Bon courage A+

Deirheim · Answer

Aloorss.... voilà le nouveau rapport de smitfraudfix, suivi de vundo et combo: -Smitfraudfi: rapport.txt SmitFraudFix v2.314 Rapport fait à 17:18:14,65, 2008-04-18 Executé à partir de C:\Documents and Settings\MSI\Bureau\Security\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Le type du système de fichiers est NTFS Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\O2Micro Oz128 Driver\o2flash.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Atheros\ACU.exe C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\BitLord\BitLord.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\cmd.exe »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MSI\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» IEDFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» VACFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\WINDOWS\system32\userinit.exe," "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Rustock »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets DNS Server Search Order: 192.168.0.1 HKLM\SYSTEM\CCS\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS2\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin ---------------------------------------------------------------------------------- -Vundofix: vundofix.txt VundoFix V7.0.3 Scan started at 00:45:38 2008-04-18 Listing files found while scanning.... No infected files were found. -------------------------------------------------------------------------------------- Combofix: log.txt ComboFix 08-04-08.4 - MSI 2008-04-18 19:14:31.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1445 [GMT -3:00] Endroit: C:\Documents and Settings\MSI\Bureau\ComboFix.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color . ((((((((((((((((((((((((((((( Fichiers créés 2008-03-18 to 2008-04-18 )))))))))))))))))))))))))))))))))))) . 2008-04-18 18:41 . 2008-04-18 18:41 d-------- C:\WINDOWS\LastGood 2008-04-18 00:45 . 2008-04-18 00:45 d-------- C:\VundoFix Backups 2008-04-18 00:43 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2008-04-18 00:43 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2008-04-18 00:43 . 2008-04-14 19:28 86,528 --a------ C:\WINDOWS\system32\VACFix.exe 2008-04-18 00:43 . 2008-04-12 13:49 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe 2008-04-18 00:43 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2008-04-18 00:43 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2008-04-18 00:43 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2008-04-17 13:32 . 2008-04-17 13:32 d-------- C:\_OTMoveIt 2008-04-17 13:03 . 2008-04-18 17:18 3,562 --a------ C:\WINDOWS\system32\tmp.reg 2008-04-16 21:14 . 2008-04-16 21:14 d-------- C:\Deckard 2008-04-15 01:42 . 2008-04-15 01:42 d-------- C:\WINDOWS\ServicePackFiles 2008-04-15 01:41 . 2004-07-17 11:40 19,528 --a------ C:\WINDOWS\[u]0/u00001_.tmp 2008-04-14 17:26 . 2008-04-14 17:26 d-------- C:\Program Files\Fichiers communs\Noesis 3D Content Creation 2008-04-13 13:52 . 2008-04-13 13:52 d-------- C:\Program Files\NOESIS 2008-04-13 13:50 . 2008-04-13 13:50 d-------- C:\Program Files\Fichiers communs\Noesis - Custom Props & Animation 2008-04-13 13:46 . 2008-04-13 13:46 d-------- C:\Program Files\Fichiers communs\Noesis HL2 Character Design 2008-04-13 13:46 . 2004-03-29 16:23 90,112 --a------ C:\WINDOWS\unvise32.exe 2008-04-13 13:45 . 2008-04-14 17:26 d-------- C:\Program Files\Noesis Interactive 2008-04-13 13:45 . 2008-04-13 13:45 d-------- C:\Program Files\Noesis HL2 Character Design 2008-04-13 00:08 . 2008-04-13 00:08 d-------- C:\WINDOWS\system32\Kaspersky Lab 2008-04-13 00:08 . 2008-04-18 18:42 6,149 --a------ C:\WINDOWS\system32\drivers\fwdrv.err 2008-04-12 23:20 . 2008-04-12 23:20 d-------- C:\Program Files\Sunbelt Software 2008-04-12 14:28 . 2008-04-12 14:28 d-------- C:\Program Files\Fichiers communs\Adobe AIR 2008-04-12 14:28 . 2008-04-12 14:28 d-------- C:\Program Files\Adobe Media Player 2008-04-12 14:19 . 2008-04-12 14:20 d-------- C:\WINDOWS\system32\Adobe 2008-04-12 12:28 . 2008-04-12 12:28 d-------- C:\Program Files\SystemRequirementsLab 2008-04-12 12:28 . 2008-04-12 12:28 d-------- C:\Documents and Settings\MSI\Application Data\SystemRequirementsLab 2008-04-11 20:55 . 2008-04-11 20:55 d-------- C:\Program Files\Fichiers communs\Avid 2008-04-11 20:55 . 2006-01-04 23:00 2,981,888 --a------ C:\WINDOWS\system32\iplw7.dll 2008-04-11 20:55 . 2006-01-04 23:00 2,973,696 --a------ C:\WINDOWS\system32\iplA6.dll 2008-04-11 20:55 . 2006-01-04 23:00 2,785,280 --a------ C:\WINDOWS\system32\iplM6.dll 2008-04-11 20:55 . 2006-01-04 23:00 2,686,976 --a------ C:\WINDOWS\system32\iplM5.dll 2008-04-11 20:55 . 2006-01-04 23:00 2,531,328 --a------ C:\WINDOWS\system32\iplP6.dll 2008-04-11 20:55 . 2006-01-04 23:00 2,502,656 --a------ C:\WINDOWS\system32\iplPX.dll 2008-04-11 20:55 . 2006-01-04 23:00 53,248 --a------ C:\WINDOWS\system32\ipl.dll 2008-04-11 18:47 . 2008-04-14 21:18 d--h----- C:\WINDOWS\msdownld.tmp 2008-04-10 14:57 . 2008-04-11 20:30 d-------- C:\WINDOWS\system32\QuickTime 2008-04-10 04:56 . 2008-04-10 04:56 1,409 --a------ C:\WINDOWS\system32\tmpD8A03.FOT 2008-04-10 04:55 . 2005-06-15 03:00 102,400 --a------ C:\WINDOWS\system32\tsccvid.dll 2008-04-10 04:07 . 2005-06-15 03:00 80,788 --a------ C:\WINDOWS\system32\tsccvid.zsx 2008-04-10 03:00 . 2008-04-11 18:47 1,374 --a------ C:\WINDOWS\imsins.BAK 2008-04-09 18:57 . 2008-04-09 18:57 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-04-09 18:57 . 2008-04-09 18:57 d-------- C:\Documents and Settings\MSI\Application Data\Malwarebytes 2008-04-09 18:57 . 2008-04-09 18:57 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-04-08 00:10 . 2008-04-08 00:10 d-------- C:\Documents and Settings\MSI\Application Data\Grisoft 2008-04-08 00:10 . 2007-05-30 09:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-04-08 00:08 . 2008-04-08 00:08 d-------- C:\Program Files\clean 2008-04-08 00:06 . 2008-04-08 00:06 d-------- C:\Program Files\CCleaner 2008-04-06 18:22 . 2008-04-06 18:54 d-------- C:\Documents and Settings\MSI\Application Data\GetRightToGo 2008-04-06 15:53 . 2008-04-06 15:53 d-------- C:\Program Files\Google 2008-04-05 17:19 . 2008-04-06 18:13 d-------- C:\Documents and Settings\MSI\Application Data\Azureus 2008-04-05 17:19 . 2008-04-05 17:19 d-------- C:\Documents and Settings\All Users\Application Data\Azureus 2008-04-05 17:07 . 2008-04-05 17:07 d-------- C:\Documents and Settings\MSI\Application Data\vlc 2008-04-05 16:44 . 2008-04-05 16:44 d-------- C:\Update 2008-04-05 16:41 . 2008-04-05 16:41 d-------- C:\Program Files\VideoLAN 2008-04-05 14:52 . 2008-04-05 14:52 736 --a------ C:\WINDOWS\DigimaxMaster.INI 2008-04-05 14:49 . 2008-04-05 14:49 8,192 --ahs---- C:\WINDOWS\Thumbs.db 2008-04-05 11:54 . 2008-04-08 16:30 d-------- C:\Documents and Settings\MSI\Application Data\AVG7 2008-04-05 11:54 . 2008-04-05 11:54 d-------- C:\Documents and Settings\LocalService\Application Data\AVG7 2008-04-05 11:54 . 2008-04-10 00:36 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-04-05 11:54 . 2008-04-10 00:36 d-------- C:\Documents and Settings\All Users\Application Data\avg7 2008-04-05 01:17 . 2008-04-05 01:17 0 --a------ C:\WINDOWS\system32\update32.exe.tmp 2008-04-05 01:15 . 2008-04-05 01:15 0 --a------ C:\WINDOWS\system32\sex2.ico.tmp 2008-04-05 01:08 . 2008-03-29 15:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys 2008-04-05 01:08 . 2008-03-29 15:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys 2008-04-05 00:54 . 2008-04-05 00:54 d-------- C:\Program Files\Samsung 2008-04-05 00:54 . 2005-12-14 15:10 552,960 --a------ C:\WINDOWS\system32\xvidcore.dll 2008-04-05 00:54 . 1998-07-09 19:41 217,088 --a------ C:\WINDOWS\system32\skjpeg40.dll 2008-04-05 00:54 . 2005-12-14 15:08 159,744 --a------ C:\WINDOWS\system32\xvidvfw.dll 2008-04-05 00:54 . 1998-03-04 10:40 83,968 --a------ C:\WINDOWS\system32\Skbase40.dll 2008-04-05 00:54 . 2005-12-14 15:11 61,440 --a------ C:\WINDOWS\system32\xvid.ax 2008-04-05 00:54 . 2004-03-09 09:39 8,704 --a------ C:\WINDOWS\system32\vidccleaner.exe 2008-04-05 00:07 . 1998-07-09 19:41 14,404 --a------ C:\WINDOWS\system32\skjpeg40.cbs 2008-04-04 02:35 . 2008-04-04 02:35 d-------- C:\Program Files\iPod 2008-04-03 16:11 . 2008-04-03 16:11 d-------- C:\Documents and Settings\MSI\Application Data\Lost Marble 2008-04-03 16:09 . 2008-04-08 01:13 d-------- C:\Program Files\Anime Studio Pro 2008-04-03 00:31 . 2008-04-03 16:08 d-------- C:\Program Files\Toon Boom Animation 2008-04-02 17:15 . 2008-04-02 17:15 d-------- C:\Program Files\Fichiers communs\iS3 2008-04-02 17:15 . 2008-04-05 01:39 d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla! 2008-04-02 17:15 . 2008-04-05 00:26 d-------- C:\Documents and Settings\All Users\Application Data\SITEguard 2008-04-02 17:09 . 2008-04-02 17:14 d-------- C:\Program Files\killad 2008-04-02 16:29 . 2008-04-02 16:29 d-------- C:\Program Files\Trend Micro 2008-04-02 00:37 . 2008-04-02 17:31 d-------- C:\Program Files\Puzzle Quest 2008-04-02 00:37 . 2008-04-02 00:37 d-------- C:\Program Files\OpenAL 2008-04-02 00:37 . 2008-04-02 00:37 409,600 --a------ C:\WINDOWS\system32\wrap_oal.dll 2008-04-02 00:37 . 2008-04-02 00:37 114,688 --a------ C:\WINDOWS\system32\OpenAL32.dll 2008-04-01 22:57 . 2008-04-01 22:57 d-------- C:\WINDOWS\Sun 2008-04-01 22:34 . 2008-04-01 22:34 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2008-04-01 15:04 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2008-04-01 15:04 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2008-04-01 15:04 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll 2008-04-01 15:04 . 2006-09-28 16:03 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2008-04-01 15:03 . 2008-04-01 15:03 d-------- C:\Program Files\Microsoft XNA 2008-04-01 14:38 . 2008-04-01 14:38 d-------- C:\Program Files\OGPlanet 2008-04-01 13:35 . 2008-04-01 13:36 d-------- C:\Program Files\Microsoft Visual Studio 8 2008-04-01 13:35 . 2008-04-01 15:04 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-04-01 12:58 . 2008-04-01 13:22 27 --a------ C:\WINDOWS\ic.ini 2008-04-01 01:52 . 2008-04-15 22:50 d-------- C:\Program Files\Eden_World . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-04-17 14:58 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-04-17 14:57 --------- d-----w C:\Program Files\SpywareBlaster 2008-04-14 20:26 2,418 ----a-w C:\Program Files\Fichiers communs\Noesis 3D Content Creation.log 2008-04-13 16:50 2,561 ----a-w C:\Program Files\Fichiers communs\Noesis - Custom Props & Animation.log 2008-04-13 16:46 2,471 ----a-w C:\Program Files\Fichiers communs\Noesis HL2 Character Design.log 2008-03-29 18:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe 2008-03-29 18:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2008-03-29 18:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2008-03-29 18:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2008-03-29 18:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2008-03-29 18:23 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2008-03-26 13:25 --------- d-----w C:\Program Files\Alwil Software 2008-03-26 13:14 --------- d-----w C:\Program Files\microsoft frontpage 2008-03-26 13:12 --------- d-----w C:\Program Files\Services en ligne 2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys 2008-02-21 02:05 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-02-21 02:05 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-02-21 02:05 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe 2008-02-21 02:05 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys 2008-02-21 02:05 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll 2008-02-21 02:05 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll 2008-02-21 02:05 129,784 ------w C:\WINDOWS\system32\pxafs.dll 2008-02-21 02:05 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe 2008-02-21 02:05 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe 2008-02-21 02:05 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll 2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll 2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll 2008-02-21 02:04 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-02-21 02:04 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll 2008-02-21 02:04 682,496 ----a-w C:\WINDOWS\system32\DivX.dll 2008-02-21 02:04 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll 2008-02-21 02:04 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll 2008-02-21 02:04 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll 2008-02-21 02:04 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll 2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll 2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll 2008-02-21 02:04 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll 2008-02-21 02:03 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe 2008-02-21 02:03 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll 2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll 2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll 2008-02-16 09:02 663,552 ----a-w C:\WINDOWS\system32\wininet.dll 2008-01-29 15:02 107,368 ----a-w C:\WINDOWS\system32\GEARAspi.dll . ((((((((((((((((((((((((((((( snapshot@2008-04-08_15.49.15.45 ))))))))))))))))))))))))))))))))))))))))) . + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll + 2007-12-18 14:32:57 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\jscript.dll + 2007-12-18 14:32:57 417,792 ----a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\vbscript.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944338\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944338\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\updspapi.dll + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll + 2008-02-16 09:31:57 1,024,512 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\browseui.dll + 2008-02-16 09:31:57 152,064 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\cdfview.dll + 2008-02-16 09:31:58 1,056,768 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\danim.dll + 2008-02-16 09:31:58 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\dxtmsft.dll + 2008-02-16 09:31:58 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\dxtrans.dll + 2008-02-16 09:31:58 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\extmgr.dll + 2008-02-15 09:07:53 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\iedw.exe + 2008-02-16 09:31:58 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\iepeers.dll + 2008-02-16 09:31:58 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\inseng.dll + 2008-02-16 09:31:58 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\jsproxy.dll + 2008-02-16 09:31:59 3,087,872 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mshtml.dll + 2008-02-16 09:31:59 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mshtmled.dll + 2008-02-16 09:31:59 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\msrating.dll + 2008-02-16 09:31:59 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mstime.dll + 2008-02-16 09:31:59 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\pngfilt.dll + 2008-02-16 09:32:00 1,499,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\shdocvw.dll + 2008-02-16 09:32:00 474,624 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\shlwapi.dll + 2008-02-15 23:03:14 370,176 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\spru040c.dll + 2008-02-16 09:32:00 620,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\urlmon.dll + 2008-02-16 09:32:00 670,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\updspapi.dll + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll - 2008-03-28 02:15:43 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-04-11 06:02:11 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2008-03-28 02:15:48 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-04-11 06:02:17 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2008-03-28 02:15:49 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-04-11 06:01:49 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2008-03-28 02:15:49 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-04-11 06:02:19 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2008-03-28 02:15:46 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2008-04-11 06:02:04 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2008-03-28 02:15:41 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-04-11 06:02:22 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2008-03-28 02:15:41 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-04-11 06:02:22 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2008-03-28 02:15:51 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2008-04-11 06:02:18 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2008-03-28 02:15:45 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2008-04-11 06:02:01 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2008-03-28 02:15:43 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-04-11 06:02:09 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2008-03-28 02:15:41 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-04-11 06:02:02 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2008-03-28 02:15:41 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2008-04-11 06:02:10 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2008-03-28 02:15:47 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2008-04-11 06:02:13 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2008-03-28 02:15:48 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2008-04-11 06:02:14 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2008-03-28 02:15:48 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-04-11 06:02:15 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2008-03-28 02:15:42 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2008-04-11 06:02:23 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2008-03-28 02:15:42 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-04-11 06:02:23 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2008-03-28 02:15:43 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2008-04-11 06:02:24 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll - 2008-03-28 02:15:43 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2008-04-11 06:02:25 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll - 2008-03-28 02:15:42 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-04-11 06:02:15 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2008-03-28 02:15:52 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-04-11 06:02:14 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2008-03-28 02:15:52 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2008-04-11 06:02:13 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2008-03-28 02:15:40 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2008-04-11 06:02:20 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2008-03-28 02:15:51 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-04-11 06:02:12 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2008-03-28 02:15:52 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2008-04-11 06:01:58 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2008-03-28 02:15:41 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-04-11 06:02:21 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2008-03-28 02:15:40 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2008-04-11 06:02:12 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2008-03-28 02:15:40 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-04-11 06:02:11 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll - 2008-03-28 02:15:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2008-04-11 06:02:16 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2008-03-28 02:15:43 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-04-11 06:02:17 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2008-03-28 02:15:50 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2008-04-11 06:02:03 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2008-03-28 02:15:49 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2008-04-11 06:02:05 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2008-03-28 02:15:41 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2008-04-11 06:02:05 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2008-03-28 02:15:47 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2008-04-11 06:02:25 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2008-03-28 02:15:44 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2008-04-11 06:02:24 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2008-03-28 02:15:44 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-04-11 06:02:09 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2008-03-28 02:15:44 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-04-11 06:02:21 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll - 2008-03-28 02:15:51 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-04-11 06:01:59 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2008-03-28 02:15:49 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2008-04-11 06:02:22 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2008-03-28 02:15:51 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-04-11 06:02:20 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2008-03-28 02:15:49 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-04-11 06:02:19 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2008-03-28 02:15:50 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-04-11 06:02:18 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2008-03-28 02:15:43 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2008-04-11 06:02:00 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2008-03-28 02:15:44 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2008-04-11 06:02:00 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2008-03-28 02:15:51 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll + 2008-04-11 06:02:08 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll - 2008-03-28 02:15:45 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2008-04-11 06:02:08 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll - 2008-03-28 02:15:45 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2008-04-11 06:02:07 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2008-03-28 02:15:46 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2008-04-11 06:02:10 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2008-03-28 02:15:46 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll + 2008-04-11 06:02:01 2,068,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll - 2008-03-28 02:15:50 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2008-04-11 06:02:06 3,076,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2008-04-11 06:05:47 27,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll + 2008-04-11 06:05:48 884,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll + 2008-04-11 06:06:17 503,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\373d5acced35e392e1f413a69042340d\ComSvcConfig.ni.exe + 2008-04-11 06:07:17 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll + 2008-04-11 06:06:16 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe + 2008-04-11 06:05:49 589,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE\afd14e699e99ce00e420ef889a717168\EnvDTE.ni.dll + 2008-04-11 06:07:18 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE80\e5ff1ac14e40f15cbcdb29aec2b443dd\EnvDTE80.ni.dll + 2008-04-11 06:07:19 876,544 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll + 2008-04-11 06:07:20 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll + 2008-04-11 06:07:22 1,695,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll + 2008-04-11 06:07:23 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll + 2008-04-11 06:06:19 1,114,112 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\[u]0/u19a85babfbe02cecdbb63a65d391aba\Microsoft.Transactions.Bridge.ni.dll + 2008-04-11 06:06:20 401,408 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cb8d7b6cc6827e9f2d66c4d7ef9b5d54\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2008-04-11 06:07:25 1,740,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll + 2008-04-11 06:06:36 17,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll + 2008-04-11 06:07:31 2,011,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3796def4270f354abc34710ab0365c7b\Microsoft.VisualStudio.CommonIDE.ni.dll + 2008-04-11 06:07:41 315,392 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\39d36c3299b9a8a771e491fd50a73181\Microsoft.VisualStudio.OLE.Interop.ni.dll + 2008-04-11 06:07:42 905,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5daf472325e0f988711e5943b1707e50\Microsoft.VisualStudio.Shell.ni.dll + 2008-04-11 06:07:34 1,191,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\64b4794dbb51a7d6ec4a57570a604c00\Microsoft.VisualStudio.Design.ni.dll + 2008-04-11 06:07:40 4,046,848 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6ae0ea49ecd456fad0187449ca78569f\Microsoft.VisualStudio.Editors.ni.dll + 2008-04-11 06:07:32 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8599fc303951ee6d202b9e53b1fc5770\Microsoft.VisualStudio.Configuration.ni.dll + 2008-04-11 06:07:35 23,040 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8acff37d1532e69ddd3d18c091f52541\Microsoft.VisualStudio.Designer.Interfaces.ni.dll + 2008-04-11 06:07:44 372,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8da786ed57087f3f38b4a962ba0c2790\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll + 2008-04-11 06:07:28 704,512 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a7f8ad4fbd178f8f44b54acd347cc233\Microsoft.VisualStudio.ni.dll + 2008-04-11 06:07:43 655,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ccce5aec2a7bf73bcfccac6b0952bb88\Microsoft.VisualStudio.Shell.Design.ni.dll + 2008-04-11 06:07:45 868,352 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f8ac4925ea76fbe0e1582087cadfdfdf\Microsoft.VisualStudio.Windows.Forms.ni.dll + 2008-04-11 06:03:39 11,722,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll + 2008-04-11 06:07:47 1,564,672 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\41bd82648d480ec304ea0c04034787bc\PresentationBuildTasks.ni.dll + 2008-04-11 06:07:16 40,448 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\9385f2c37b2e00e06ec3f57153f63a2d\PresentationCFFRasterizer.ni.dll + 2008-04-11 06:06:53 11,980,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\7e413273e9d6710be8a39dcce2e45c2c\PresentationCore.ni.dll + 2008-04-11 06:06:26 48,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\599806acdd6dc0aeed19ebf9d622dcad\PresentationFontCache.ni.exe + 2008-04-11 06:08:23 552,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\[u]0/u766df362854f0330a4a45179773657e\PresentationFramework.Luna.ni.dll + 2008-04-11 06:08:24 274,432 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8aaa2b56f733902cc1ba9d8300d2a0e3\PresentationFramework.Royale.ni.dll + 2008-04-11 06:08:22 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d87c2740add3b0f86833159ce57c71ec\PresentationFramework.Classic.ni.dll + 2008-04-11 06:08:11 14,659,584 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\de20226274a5739a4b42d8e26b546180\PresentationFramework.ni.dll + 2008-04-11 06:08:21 393,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e389aa7f3dd4eb1ee585724f130a79cb\PresentationFramework.Aero.ni.dll + 2008-04-11 06:08:14 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\f97ac4e9c402e98d2b5b7114e4fbbd2a\PresentationUI.ni.dll + 2008-04-11 06:08:18 2,416,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework\1fe0f79dd0d47e4d1eb474f98a1949fb\ReachFramework.ni.dll + 2008-04-11 06:06:21 139,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\[u]0/ubcc4abbe0c5c3feeda7f711304ac4a0\ServiceModelReg.ni.exe + 2008-04-11 06:06:21 286,720 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\5e3765ee346151c26a3793ddf3a8d6d7\SMDiagnostics.ni.dll + 2008-04-11 06:06:22 323,584 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMSvcHost\c6f33f28f5bb403981ac148da447e3c5\SMSvcHost.ni.exe + 2008-04-11 06:08:30 262,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\sysglobl\6a075eb8e0f13de87d1278aa8562d51e\sysglobl.ni.dll + 2008-04-11 06:06:33 163,840 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll + 2008-04-11 06:06:28 1,011,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll + 2008-04-11 06:07:13 1,183,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll + 2008-04-11 06:06:31 2,756,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll + 2008-04-11 06:03:58 7,049,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll + 2008-04-11 06:06:35 1,798,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll + 2008-04-11 06:04:10 10,969,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll + 2008-04-11 06:06:57 1,224,704 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll + 2008-04-11 06:07:15 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll + 2008-04-11 06:04:13 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll + 2008-04-11 06:04:12 1,667,072 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0/ue83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll + 2008-04-11 06:06:56 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll + 2008-04-11 06:06:56 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll + 2008-04-11 06:05:52 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\dd8f551c39409fa95b0c22cf2ee48b65\System.IdentityModel.Selectors.ni.dll + 2008-04-11 06:05:51 978,944 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\581d8571e61ebe24154ae912624c3c9d\System.IdentityModel.ni.dll + 2008-04-11 06:05:53 417,792 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IO.Log\86cd41998dc72b213d9464b56fe245b9\System.IO.Log.ni.dll + 2008-04-11 06:08:45 655,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Messaging\[u]0/u0e3750e478bac4913ee7a6c3b7cd392\System.Messaging.ni.dll + 2008-04-11 06:08:20 1,118,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing\690a965457e274ad13f6b1f9ac2bad4e\System.Printing.ni.dll + 2008-04-11 06:06:58 815,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\[u]0/u898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll + 2008-04-11 06:06:34 339,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2008-04-11 06:05:55 2,351,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c4838d300f677f34c9d44ead84b8603b\System.Runtime.Serialization.ni.dll + 2008-04-11 06:06:33 733,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll + 2008-04-11 06:06:15 17,354,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7a2bc3302a133e235ec99193c56a0571\System.ServiceModel.ni.dll + 2008-04-11 06:06:26 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll + 2008-04-11 06:08:29 2,039,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Speech\d38908d5c6a11dd7dceaf9bd34adb437\System.Speech.ni.dll + 2008-04-11 06:06:54 679,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll + 2008-04-11 06:08:32 2,342,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll + 2008-04-11 06:07:14 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll + 2008-04-11 06:07:11 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll + 2008-04-11 06:07:09 12,509,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll + 2008-04-11 06:04:24 13,193,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll + 2008-04-11 06:08:36 2,994,176 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5e0df5685ce40f838eea52a5f1454b68\System.Workflow.Activities.ni.dll + 2008-04-11 06:08:41 4,587,520 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\2689e361e42d0bb9e3d19f1ecd30c26a\System.Workflow.ComponentModel.ni.dll + 2008-04-11 06:08:44 2,093,056 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\41b6c3a0c115c43c53697efa1607fe49\System.Workflow.Runtime.ni.dll + 2008-04-11 06:04:31 5,771,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll + 2008-04-11 06:03:50 8,265,728 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll + 2008-04-11 06:08:47 483,328 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\f61803ded1c123ed9ed5849e7dcebf25\UIAutomationClient.ni.dll + 2008-04-11 06:08:48 1,118,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\679889309b57024e8abbe80c6c7d48bc\UIAutomationClientsideProviders.ni.dll + 2008-04-11 06:07:15 50,688 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9865738a916ad3664dd374582b9ea873\UIAutomationProvider.ni.dll + 2008-04-11 06:07:16 196,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\71605ce631809dcbfba38842fdf59acf\UIAutomationTypes.ni.dll + 2008-04-11 06:08:49 118,784 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\VSLangProj\e4788a914c41f4a5ae90451dbe93180e\VSLangProj.ni.dll + 2008-04-11 06:06:39 3,260,416 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\50652bfd061ead84841e6c9bfffacfb1\WindowsBase.ni.dll + 2008-04-11 06:08:50 270,336 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\2c96738a6ba8ff9e88889f331590e181\WindowsFormsIntegration.ni.dll + 2008-04-11 06:06:23 380,928 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WsatConfig\[u]0/u2436080d129210828823210ce879fd8\WsatConfig.ni.exe + 2006-06-19 19:02:55 274,433 ----a-w C:\WINDOWS\Downloaded Installations\{54C0D94A-F467-4ABC-9D02-6E58748668D4}\iTunesSetup.exe + 2006-05-10 13:23:26 35,177,616 ----a-w C:\WINDOWS\Downloaded Installations\{54C0D94A-F467-4ABC-9D02-6E58748668D4}\QuickTimeInstaller.exe + 2008-03-24 22:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe + 2004-08-19 19:09:56 58,368 ------w C:\WINDOWS\ehome\medctrro.exe + 2004-08-04 01:31:50 175,104 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL + 2004-08-04 01:31:50 53,760 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSD.DLL + 2004-08-04 01:31:52 97,792 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTMBX.DLL + 2004-08-04 01:31:54 56,320 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKDIC.DLL + 2004-08-04 01:31:54 173,568 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKF.DLL + 2004-08-04 01:32:36 426,041 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicepad.dll + 2004-08-04 01:32:36 86,073 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicesub.dll + 2004-08-04 01:31:40 57,399 ----a-w C:\WINDOWS\ime\imjp8_1\cplexe.exe + 2004-08-04 01:31:52 368,696 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcic.dll + 2004-08-04 01:31:52 716,856 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcus.dll + 2004-08-04 01:31:54 81,976 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.dll + 2004-08-04 01:31:54 307,257 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.exe + 2004-08-04 01:31:56 155,705 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdsvr.exe + 2004-08-04 01:31:58 196,665 ----a-w C:\WINDOWS\ime\imjp8_1\imjpinst.exe + 2004-08-04 01:32:00 208,952 ----a-w C:\WINDOWS\ime\imjp8_1\imjpmig.exe + 2004-08-04 01:32:12 233,527 ----a-w C:\WINDOWS\ime\imjp8_1\imjprw.exe + 2004-08-04 01:32:16 262,200 ----a-w C:\WINDOWS\ime\imjp8_1\imjputy.exe + 2004-08-04 01:32:16 274,489 ----a-w C:\WINDOWS\ime\imjp8_1\imjputyc.dll + 2004-08-04 02:04:34 86,016 ----a-w C:\WINDOWS\ime\imkr6_1\applets\imekrmbx.dll + 2004-08-04 02:04:38 106,496 ----a-w C:\WINDOWS\ime\imkr6_1\imekrcic.dll + 2004-08-04 01:32:28 102,456 ----a-w C:\WINDOWS\ime\shared\imlang.dll + 2004-08-04 01:32:12 15,872 ----a-w C:\WINDOWS\ime\shared\res\PADRS404.DLL + 2004-08-04 01:31:50 15,360 ----a-w C:\WINDOWS\ime\shared\res\padrs804.dll + 2008-04-10 17:57:14 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\ARPPRODUCTICON.exe + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\NewShortcut1_E659E0EE10E649B7869660F38D0EB174.exe + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\NewShortcut2_8315396A5EA1419DBEC4978284BDF556.exe + 2004-08-04 01:31:50 175,104 ----a-w C:\WINDOWS\LastGood\IME\CHSIME\APPLETS\PINTLCSA.DLL + 2004-08-04 01:31:50 53,760 ----a-w C:\WINDOWS\LastGood\IME\CHSIME\APPLETS\PINTLCSD.DLL + 2004-08-04 01:31:52 97,792 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTMBX.DLL + 2004-08-04 01:31:54 56,320 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTSKDIC.DLL + 2004-08-04 01:31:54 173,568 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTSKF.DLL + 2004-08-04 01:32:36 426,041 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\APPLETS\voicepad.dll + 2004-08-04 01:32:36 86,073 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\APPLETS\voicesub.dll + 2004-08-04 01:31:40 57,399 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\cplexe.exe + 2004-08-04 01:31:52 368,696 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpcic.dll + 2004-08-04 01:31:52 716,856 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpcus.dll + 2004-08-04 01:31:54 81,976 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdct.dll + 2004-08-04 01:31:54 307,257 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdct.exe + 2004-08-04 01:31:56 155,705 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdsvr.exe + 2004-08-04 01:31:58 196,665 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpinst.exe + 2004-08-04 01:32:00 208,952 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpmig.exe + 2004-08-04 01:32:12 233,527 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjprw.exe + 2004-08-04 01:32:16 262,200 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjputy.exe + 2004-08-04 01:32:16 274,489 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjputyc.dll + 2004-08-04 02:04:34 86,016 ----a-w C:\WINDOWS\LastGood\IME\IMKR6_1\Applets\imekrmbx.dll + 2004-08-04 02:04:38 106,496 ----a-w C:\WINDOWS\LastGood\IME\IMKR6_1\imekrcic.dll + 2004-08-04 01:32:28 102,456 ----a-w C:\WINDOWS\LastGood\IME\SHARED\imlang.dll + 2004-08-04 01:32:12 15,872 ----a-w C:\WINDOWS\LastGood\IME\SHARED\RES\PADRS404.DLL + 2004-08-04 01:31:50 15,360 ----a-w C:\WINDOWS\LastGood\IME\SHARED\RES\padrs804.dll + 2004-08-04 01:31:54 198,656 ----a-w C:\WINDOWS\LastGood\system32\IME\CINTLGNT\CINTIME.DLL + 2004-08-04 01:31:56 480,256 ----a-w C:\WINDOWS\LastGood\system32\IME\CINTLGNT\CINTSETP.EXE + 2004-08-04 01:31:50 59,392 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\IMSCINST.EXE + 2004-08-04 01:31:50 70,144 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\PINTLPHR.EXE + 2004-08-04 01:31:50 67,584 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\PMIGRATE.DLL + 2004-08-04 01:32:16 44,032 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TINTLPHR.EXE + 2004-08-04 01:32:16 455,168 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TINTSETP.EXE + 2004-08-04 01:32:14 10,240 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TMIGRATE.DLL + 2004-08-04 01:31:50 811,064 ----a-w C:\WINDOWS\LastGood\system32\imjp81k.dll + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd101b.dll + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd101c.dll + 2001-08-18 01:55:56 5,632 ----a-w C:\WINDOWS\LastGood\system32\kbd103.dll + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd106.dll + 2001-08-23 20:47:06 8,704 ----a-w C:\WINDOWS\LastGood\system32\kbdjpn.dll + 2001-08-23 20:47:06 8,192 ----a-w C:\WINDOWS\LastGood\system32\kbdkor.dll + 2004-08-04 02:04:12 76,288 ----a-w C:\WINDOWS\LastGood\system32\uniime.dll - 2005-09-23 10:28:52 72,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe + 2007-10-24 04:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe - 2005-09-23 10:28:52 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll + 2007-10-24 04:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll - 2005-09-23 10:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2007-10-24 04:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll - 2005-09-23 10:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2007-10-24 04:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll - 2005-09-23 10:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll + 2007-10-24 04:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll - 2005-09-23 10:28:52 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2007-10-24 04:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll - 2005-09-23 10:28:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2007-10-24 04:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll - 2005-09-23 10:28:42 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll + 2007-10-24 04:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll - 2005-09-23 10:28:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll + 2007-10-24 04:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2005-09-23 10:29:04 183,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll + 2007-10-24 04:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll - 2005-09-23 10:28:28 208,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll + 2007-10-24 04:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll - 2005-09-23 10:28:56 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2007-10-24 04:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll - 2005-09-23 10:28:58 138,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll + 2007-10-24 04:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll - 2005-09-23 10:28:36 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2007-10-24 04:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll - 2005-09-23 10:28:58 55,488 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2007-10-24 04:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe - 2005-09-23 10:28:32 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2007-10-24 04:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe - 2005-09-23 10:28:32 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2007-10-24 04:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll - 2005-09-23 10:28:32 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2007-10-24 04:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll - 2005-09-23 10:28:32 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2007-10-24 04:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727

Deirheim · Answer

- 2005-09-23 10:28:32	70,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2007-10-24 04:47:22	84,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2005-09-23 10:28:32	13,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-10-24 04:47:22	24,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2005-09-23 10:28:32	26,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2007-10-24 04:47:22	32,776	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2005-09-23 10:28:32	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-10-24 04:47:22	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2005-09-23 10:28:32	29,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-10-24 04:47:22	33,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2005-09-23 10:28:32	29,888	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-10-24 04:47:22	33,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2005-09-23 10:28:32	503,808	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2007-10-24 04:47:22	507,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 10:28:56	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-10-24 04:47:40	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2005-09-23 10:28:56	88,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2007-10-24 04:47:40	101,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2005-09-23 10:28:42	76,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2007-10-24 04:47:30	80,376	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2005-09-23 10:28:42	1,144,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2007-10-24 04:47:30	1,162,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2005-09-23 10:28:42	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2007-10-24 04:47:30	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 10:28:58	17,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2007-10-24 04:47:42	27,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 10:28:56	68,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2007-10-24 04:47:40	69,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2005-09-23 10:28:44	31,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2007-10-24 04:47:30	35,320	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2005-09-23 10:28:38	52,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-10-24 04:47:28	66,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2005-09-23 10:28:38	4,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2007-10-24 04:47:28	5,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2005-09-23 10:29:12	547,840	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2007-10-24 04:47:54	572,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 10:28:56	788,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-24 04:47:40	798,224	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2005-09-23 10:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-24 04:47:36	18,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2005-09-23 10:28:56	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2007-10-24 04:47:40	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 10:28:56	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2007-10-24 04:47:40	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 10:28:56	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2007-10-24 04:47:40	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2005-09-23 10:28:56	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-10-24 04:47:40	6,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2005-09-23 10:28:56	224,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-10-24 04:47:40	230,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2005-09-23 10:28:56	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2007-10-24 04:47:40	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 10:28:56	55,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2007-10-24 04:47:40	65,032	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 10:28:56	72,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2007-10-24 04:47:40	72,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 10:28:48	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2007-10-24 04:47:34	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 10:28:48	413,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2007-10-24 04:47:36	348,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2005-09-23 10:28:48	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-10-24 04:47:36	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 10:28:48	647,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2007-10-24 04:47:36	655,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2005-09-23 10:28:48	73,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-10-24 04:47:36	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2005-09-23 10:28:48	745,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2007-10-24 04:47:34	749,568	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2005-09-23 10:29:10	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-10-24 04:47:52	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 10:29:10	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2007-10-24 04:47:52	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 10:29:08	667,648	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2007-10-24 04:47:50	671,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 10:28:30	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2007-10-24 04:47:20	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 10:29:10	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2007-10-24 04:47:52	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-23 10:28:30	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2007-10-24 04:47:20	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 10:28:30	12,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-10-24 04:47:20	12,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 10:28:30	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-10-24 04:47:20	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 10:28:32	87,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2007-10-24 04:47:22	97,792	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 10:28:48	69,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-10-24 04:47:36	69,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 10:28:56	800,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2007-10-24 04:47:40	822,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2005-09-23 10:28:56	73,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2007-10-24 04:47:40	83,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 10:28:56	288,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-10-24 04:47:40	308,224	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2005-09-23 10:28:56	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-10-24 04:47:40	47,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2005-09-23 10:28:56	326,144	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2007-10-24 04:47:40	348,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2005-09-23 10:28:56	81,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-10-24 04:47:40	94,208	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2005-09-23 10:28:56	4,308,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-10-24 04:47:40	4,444,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2005-09-23 10:28:56	102,400	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2007-10-24 04:47:40	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2005-09-23 10:29:00	330,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2007-10-24 04:47:44	340,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2005-09-23 10:28:56	67,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2007-10-24 04:47:40	77,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2005-09-23 10:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-10-24 04:47:36	18,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2005-09-23 10:28:56	226,816	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-10-24 04:47:40	242,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2005-09-23 10:28:56	66,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2007-10-24 04:47:40	70,144	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2005-09-23 10:28:56	10,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-10-24 04:47:40	19,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2005-09-23 10:28:50	5,615,616	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2007-10-24 04:47:36	5,814,784	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2005-09-23 10:29:00	22,528	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
+ 2007-10-24 04:47:44	31,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
- 2005-09-23 10:28:56	96,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-10-24 04:47:40	101,880	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2005-09-23 10:28:56	14,848	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2007-10-24 04:47:40	24,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2005-09-23 10:28:56	78,336	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-10-24 04:47:40	89,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2005-09-23 10:28:50	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2007-10-24 04:47:36	144,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2005-09-23 10:28:56	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2007-10-24 04:47:40	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 10:28:56	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2007-10-24 04:47:40	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 10:29:02	59,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2007-10-24 04:47:46	61,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 10:28:58	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2007-10-24 04:47:42	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2005-09-23 10:28:56	107,520	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2007-10-24 04:47:40	119,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2005-09-23 10:29:00	85,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-10-24 04:47:44	95,232	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2005-09-23 10:28:56	377,344	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-10-24 04:47:40	392,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2005-09-23 10:28:56	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-10-24 04:47:40	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2005-09-23 10:28:58	389,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2007-10-24 04:47:42	425,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 10:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-10-24 04:47:40	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2005-09-23 10:28:56	2,878,976	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-10-24 04:47:40	3,036,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2005-09-23 10:28:56	482,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-10-24 04:47:40	483,840	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2005-09-23 10:28:56	716,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-10-24 04:47:40	741,376	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2005-09-23 10:28:38	884,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-10-24 04:47:28	933,888	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2005-09-23 10:28:56	5,050,368	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2007-10-24 04:47:40	5,070,848	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2005-09-23 10:28:56	397,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-10-24 04:47:40	401,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2005-09-23 10:28:56	188,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-10-24 04:47:40	188,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2005-09-23 10:28:56	3,018,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2007-10-24 04:47:40	3,076,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2005-09-23 10:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-10-24 04:47:40	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2005-09-23 10:28:56	700,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-10-24 04:47:40	630,784	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2005-09-23 10:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-10-24 04:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
- 2005-09-23 10:28:56	47,616	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-10-24 04:47:40	57,392	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2005-09-23 10:28:56	114,176	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-10-24 04:47:40	113,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-23 10:28:56	368,640	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2007-10-24 04:47:40	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2005-09-23 10:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-10-24 04:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2005-09-23 10:28:56	299,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2007-10-24 04:47:40	299,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 10:28:56	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-10-24 04:47:40	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-23 10:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2007-10-24 04:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 10:28:56	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-10-24 04:47:40	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 10:28:56	260,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-10-24 04:47:40	261,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2005-09-23 10:28:56	5,025,792	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2007-10-24 04:47:40	5,431,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2005-09-23 10:28:56	835,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2007-10-24 04:47:40	884,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 10:28:56	86,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2007-10-24 04:47:40	90,112	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2005-09-23 10:28:56	823,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-10-24 04:47:40	839,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2005-09-23 10:28:56	5,316,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-10-24 04:47:40	5,013,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2005-09-23 10:28:56	2,035,712	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2007-10-24 04:47:40	2,068,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2005-09-23 10:28:56	71,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-10-24 04:47:40	81,400	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2005-09-23 10:29:06	1,140,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-10-24 04:47:48	1,172,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2005-09-23 10:28:30	1,306,624	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-10-24 04:47:20	1,344,000	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2005-09-23 10:28:32	298,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2007-10-24 04:47:22	434,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2005-09-23 10:28:56	28,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-24 04:47:40	37,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2006-06-02 19:32:20	33,792	------w	C:\WINDOWS\network diagnostic\custsat.dll
+ 2006-10-10 12:44:50	557,568	------w	C:\WINDOWS\network diagnostic\xpnetdiag.exe
+ 2004-08-04 02:10:08	53,248	------w	C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
+ 2004-08-04 02:00:04	12,288	------w	C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
+ 2004-08-04 02:10:12	48,128	------w	C:\WINDOWS\ServicePackFiles\i386\61883.sys
+ 2004-08-19 19:09:20	100,352	------w	C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
+ 2004-08-04 01:32:22	231,552	------w	C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
+ 2004-08-04 01:32:32	84,480	------w	C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
+ 2004-08-19 19:09:52	189,952	------w	C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
+ 2004-08-19 19:09:20	1,852,416	------w	C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
+ 2004-08-19 19:09:20	450,048	------w	C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
+ 2004-08-19 19:09:20	137,728	------w	C:\WINDOWS\ServicePackFiles\i386\aclua.dll
+ 2004-08-19 19:09:20	119,296	------w	C:\WINDOWS\ServicePackFiles\i386\aclui.dll
+ 2004-08-19 18:51:56	188,672	------w	C:\WINDOWS\ServicePackFiles\i386\acpi.sys
+ 2004-08-19 19:09:20	244,736	------w	C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
+ 2004-08-19 19:09:20	194,048	------w	C:\WINDOWS\ServicePackFiles\i386\activeds.dll
+ 2004-08-19 19:09:52	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
+ 2004-08-19 19:09:20	101,888	------w	C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
+ 2004-08-19 19:09:20	116,224	------w	C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
+ 2004-08-19 19:09:20	29,696	------w	C:\WINDOWS\ServicePackFiles\i386\admexs.dll
+ 2004-08-19 19:09:20	20,540	------w	C:\WINDOWS\ServicePackFiles\i386\admin.dll
+ 2004-08-19 19:09:52	16,439	------w	C:\WINDOWS\ServicePackFiles\i386\admin.exe
+ 2004-08-04 01:32:24	10,880	------w	C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
+ 2004-08-19 19:09:20	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\admparse.dll
+ 2004-08-19 19:09:20	43,520	------w	C:\WINDOWS\ServicePackFiles\i386\admwprox.dll
+ 2004-08-19 19:09:20	290,816	------w	C:\WINDOWS\ServicePackFiles\i386\adsiis51.dll
+ 2004-08-19 19:09:20	175,616	------w	C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
+ 2004-08-19 19:09:20	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
+ 2004-08-19 19:09:20	68,096	------w	C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
+ 2004-08-19 19:09:20	263,680	------w	C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
+ 2004-07-17 14:35:20	85,813	------w	C:\WINDOWS\ServicePackFiles\i386\adsutil.vbs
+ 2004-08-19 19:09:20	4,255	------w	C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
+ 2004-08-19 19:09:20	3,967	------w	C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
+ 2004-08-19 19:09:20	3,615	------w	C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
+ 2004-08-19 19:09:20	3,647	------w	C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
+ 2004-08-19 19:09:20	3,135	------w	C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
+ 2004-08-19 19:09:20	3,711	------w	C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
+ 2004-08-19 19:09:20	3,775	------w	C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
+ 2004-08-19 19:09:20	685,056	------w	C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
+ 2004-08-19 19:09:20	101,888	------w	C:\WINDOWS\ServicePackFiles\i386\advpack.dll
+ 2004-08-04 01:39:38	142,464	------w	C:\WINDOWS\ServicePackFiles\i386\aec.sys
+ 2004-08-04 02:14:16	138,496	------w	C:\WINDOWS\ServicePackFiles\i386\afd.sys
+ 2004-08-19 19:09:20	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
+ 2004-08-19 19:09:20	214,016	------w	C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
+ 2004-08-19 19:09:20	41,984	------w	C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
+ 2004-08-19 19:09:20	58,880	------w	C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
+ 2004-08-19 19:09:20	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
+ 2004-08-19 19:09:20	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
+ 2004-08-19 19:09:20	44,032	------w	C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
+ 2004-08-19 19:09:52	256,512	------w	C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
+ 2004-08-04 02:07:42	42,368	------w	C:\WINDOWS\ServicePackFiles\i386\agp440.sys
+ 2004-08-04 02:07:44	44,928	------w	C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
+ 2004-08-19 19:09:20	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
+ 2004-08-19 19:09:52	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\ahui.exe
+ 2004-08-19 19:09:52	44,544	------w	C:\WINDOWS\ServicePackFiles\i386\alg.exe
+ 2004-08-04 02:07:42	42,752	------w	C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
+ 2004-08-19 19:09:20	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
+ 2004-08-04 02:07:44	43,008	------w	C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
+ 2004-08-19 18:52:42	41,216	------w	C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
+ 2004-08-19 18:52:44	41,600	------w	C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
+ 2004-08-19 19:09:20	70,656	------w	C:\WINDOWS\ServicePackFiles\i386\amstream.dll
+ 2004-08-04 01:31:20	36,224	------w	C:\WINDOWS\ServicePackFiles\i386\an983.sys
+ 2004-08-19 19:09:20	110,080	------w	C:\WINDOWS\ServicePackFiles\i386\appconf.dll
+ 2004-08-19 19:09:20	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
+ 2004-08-19 19:09:20	176,640	------w	C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll
+ 2004-08-19 19:09:20	302,592	------w	C:\WINDOWS\ServicePackFiles\i386\appmgr.dll
+ 2004-08-19 19:09:20	334,336	------w	C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
+ 2004-08-04 01:58:30	60,800	------w	C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
+ 2004-08-19 19:08:02	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\asferror.dll
+ 2004-08-19 19:09:20	377,344	------w	C:\WINDOWS\ServicePackFiles\i386\asp51.dll
+ 2004-08-04 01:11:02	200,704	------w	C:\WINDOWS\ServicePackFiles\i386\aspnet_isapi.dll
+ 2004-08-04 01:11:06	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\aspnet_regiis.exe
+ 2004-08-04 01:11:06	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\aspnet_wp.exe
+ 2004-08-19 19:09:52	30,720	------w	C:\WINDOWS\ServicePackFiles\i386\asr_fmt.exe
+ 2004-08-19 19:09:52	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\asr_pfu.exe
+ 2004-08-19 19:09:20	65,024	------w	C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
+ 2004-08-04 02:05:04	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
+ 2004-08-19 19:09:52	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\at.exe
+ 2004-08-04 01:59:44	95,360	------w	C:\WINDOWS\ServicePackFiles\i386\atapi.sys
+ 2004-08-04 01:29:30	56,623	------w	C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
+ 2004-08-04 01:29:30	11,615	------w	C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
+ 2004-08-04 01:29:30	12,047	------w	C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
+ 2004-08-04 01:29:32	30,671	------w	C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
+ 2004-08-04 01:29:32	63,663	------w	C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
+ 2004-08-04 01:29:32	26,367	------w	C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
+ 2004-08-04 01:29:32	21,343	------w	C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
+ 2004-08-04 01:29:32	36,463	------w	C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
+ 2004-08-04 01:29:32	29,455	------w	C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
+ 2004-08-04 01:29:32	34,735	------w	C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
+ 2004-08-19 19:09:20	229,376	------w	C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
+ 2004-08-19 19:09:20	377,984	------w	C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
+ 2004-08-19 19:09:20	201,728	------w	C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
+ 2004-08-19 18:53:40	327,168	------w	C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
+ 2004-08-19 18:53:42	701,440	------w	C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
+ 2004-08-19 19:09:20	870,784	------w	C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
+ 2004-08-19 19:09:20	1,057,760	------w	C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
+ 2004-08-19 19:09:20	1,888,992	------w	C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
+ 2004-08-04 01:29:28	57,856	------w	C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
+ 2004-08-04 01:29:30	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
+ 2004-08-04 01:29:30	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
+ 2004-08-04 01:29:30	52,224	------w	C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
+ 2004-08-04 01:29:32	104,960	------w	C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
+ 2004-08-04 01:29:32	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
+ 2004-08-04 01:29:32	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
+ 2004-08-04 01:29:32	73,216	------w	C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
+ 2004-08-04 01:29:32	31,744	------w	C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
+ 2004-08-04 01:29:32	63,488	------w	C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
+ 2004-08-19 19:09:20	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
+ 2004-08-19 19:09:20	516,768	------w	C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
+ 2004-08-19 19:09:20	58,880	------w	C:\WINDOWS\ServicePackFiles\i386\atl.dll
+ 2004-08-19 19:09:52	11,264	------w	C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
+ 2004-08-04 01:58:32	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
+ 2004-08-19 19:08:02	285,696	------w	C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
+ 2004-08-04 01:58:36	55,936	------w	C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
+ 2004-08-19 19:09:22	30,208	------w	C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
+ 2004-08-19 19:09:22	21,183	------w	C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
+ 2004-08-19 19:09:22	11,359	------w	C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
+ 2004-08-19 19:09:22	25,471	------w	C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
+ 2004-08-19 19:09:22	14,143	------w	C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
+ 2004-08-19 19:09:22	17,279	------w	C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
+ 2004-08-19 19:09:22	42,496	------w	C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
+ 2004-08-19 19:09:52	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
+ 2004-08-19 19:09:22	20,540	------w	C:\WINDOWS\ServicePackFiles\i386\author.dll
+ 2004-08-19 19:09:52	16,439	------w	C:\WINDOWS\ServicePackFiles\i386\author.exe
+ 2004-08-19 19:09:22	56,832	------w	C:\WINDOWS\ServicePackFiles\i386\authz.dll
+ 2004-08-19 19:09:52	625,152	------w	C:\WINDOWS\ServicePackFiles\i386\autochk.exe
+ 2004-08-19 19:09:52	638,976	------w	C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
+ 2004-08-19 19:09:52	616,960	------w	C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
+ 2004-08-19 19:09:52	11,264	------w	C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
+ 2004-08-04 02:10:12	38,912	------w	C:\WINDOWS\ServicePackFiles\i386\avc.sys
+ 2004-08-04 02:10:00	13,696	------w	C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
+ 2004-08-19 19:09:22	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
+ 2004-08-19 19:09:22	52,736	------w	C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
+ 2004-08-19 19:09:22	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
+ 2004-08-19 19:09:22	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\batt.dll
+ 2004-08-04 02:10:14	11,776	------w	C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
+ 2004-08-19 19:09:22	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
+ 2004-08-19 19:09:22	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
+ 2004-08-19 19:09:22	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
+ 2004-08-19 19:09:22	286,208	------w	C:\WINDOWS\ServicePackFiles\i386\blackbox.dll
+ 2004-08-19 19:09:52	71,680	------w	C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
+ 2004-08-04 01:59:58	71,552	------w	C:\WINDOWS\ServicePackFiles\i386\bridge.sys
+ 2004-08-19 19:08:04	70,144	------w	C:\WINDOWS\ServicePackFiles\i386\browselc.dll
+ 2004-08-19 19:09:22	77,312	------w	C:\WINDOWS\ServicePackFiles\i386\browser.dll
+ 2004-08-19 19:09:22	1,017,344	------w	C:\WINDOWS\ServicePackFiles\i386\browseui.dll
+ 2004-08-19 19:09:22	78,336	------w	C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
+ 2004-08-19 19:09:22	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\bthci.dll
+ 2004-08-04 02:10:40	17,024	------w	C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
+ 2004-08-04 02:10:40	38,016	------w	C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
+ 2004-08-04 01:58:40	100,992	------w	C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
+ 2004-08-19 18:55:32	274,944	------w	C:\WINDOWS\ServicePackFiles\i386\bthport.sys
+ 2004-08-04 02:10:38	35,456	------w	C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
+ 2004-08-19 19:09:22	30,208	------w	C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
+ 2004-08-04 02:10:36	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
+ 2004-08-19 19:09:22	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
+ 2004-08-19 19:09:22	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
+ 2004-08-19 19:09:22	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\cabview.dll
+ 2004-08-19 19:09:22	385,024	------w	C:\WINDOWS\ServicePackFiles\i386\callcont.dll
+ 2004-08-19 19:09:22	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\camocx.dll
+ 2004-07-19 21:54:04	94,208	------w	C:\WINDOWS\ServicePackFiles\i386\caspol.exe
+ 2004-08-19 19:09:22	229,888	------w	C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
+ 2004-08-19 19:09:22	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
+ 2004-08-19 19:09:22	628,224	------w	C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
+ 2004-08-04 02:10:18	17,024	------w	C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
+ 2004-08-04 02:14:12	63,744	------w	C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
+ 2004-08-19 19:09:22	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
+ 2004-08-19 19:09:22	66,560	------w	C:\WINDOWS\ServicePackFiles\i386\cdm.dll
+ 2004-08-19 19:09:22	2,067,968	------w	C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
+ 2004-08-04 01:59:54	49,536	------w	C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
+ 2004-08-19 19:09:22	200,192	------w	C:\WINDOWS\ServicePackFiles\i386\certcli.dll
+ 2004-08-19 19:09:22	467,968	------w	C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
+ 2004-08-19 19:09:22	159,232	------w	C:\WINDOWS\ServicePackFiles\i386\cewmdm.dll
+ 2004-08-19 19:09:22	39,424	------w	C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
+ 2004-08-19 19:08:04	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
+ 2004-08-19 19:09:52	188,480	------w	C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
+ 2004-08-19 19:09:22	15,423	------w	C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
+ 2004-08-04 02:00:14	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\changer.sys
+ 2004-08-19 19:09:22	1,352,704	------w	C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
+ 2004-08-19 19:09:22	69,120	------w	C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
+ 2004-08-19 19:09:52	56,832	------w	C:\WINDOWS\ServicePackFiles\i386\cipher.exe
+ 2004-08-19 19:09:52	5,632	------w	C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
+ 2004-08-04 02:14:28	49,664	------w	C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
+ 2004-08-19 19:09:22	110,080	------w	C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
+ 2004-08-19 19:09:22	501,248	------w	C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
+ 2004-08-19 19:09:52	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
+ 2004-08-19 19:09:22	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
+ 2004-08-19 19:09:52	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
+ 2004-08-19 19:09:52	104,448	------w	C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
+ 2004-08-19 19:09:52	33,280	------w	C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
+ 2004-08-19 19:09:22	57,856	------w	C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
+ 2004-08-04 02:07:40	14,080	------w	C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
+ 2004-08-19 19:09:22	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
+ 2004-08-19 19:09:52	400,896	------w	C:\WINDOWS\ServicePackFiles\i386\cmd.exe
+ 2004-08-19 19:09:22	352,256	------w	C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
+ 2004-08-19 19:09:52	47,104	------w	C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
+ 2004-08-19 19:09:52	40,448	------w	C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
+ 2004-08-19 19:09:22	191,488	------w	C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
+ 2004-08-19 19:09:22	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
+ 2004-08-19 19:09:52	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
+ 2004-08-19 19:09:22	40,960	------w	C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
+ 2004-08-19 19:09:22	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
+ 2004-08-19 19:09:22	83,968	------w	C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
+ 2004-08-19 19:09:22	47,104	------w	C:\WINDOWS\ServicePackFiles\i386\coadmin.dll
+ 2004-08-19 19:09:22	62,464	------w	C:\WINDOWS\ServicePackFiles\i386\colbact.dll
+ 2004-08-19 19:09:22	195,584	------w	C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
+ 2004-08-19 19:09:22	611,328	------w	C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
+ 2004-08-19 19:09:22	281,088	------w	C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
+ 2004-08-19 19:09:22	253,440	------w	C:\WINDOWS\ServicePackFiles\i386\compatui.dll
+ 2004-08-19 19:09:22	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\compfilt.dll
+ 2004-08-19 19:09:22	230,912	------w	C:\WINDOWS\ServicePackFiles\i386\compstui.dll
+ 2004-08-19 19:09:52	9,728	------w	C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
+ 2004-08-19 19:09:22	851,968	------w	C:\WINDOWS\ServicePackFiles\i386\comres.dll
+ 2004-08-04 01:59:36	9,728	------w	C:\WINDOWS\ServicePackFiles\i386\comsdupd.exe
+ 2004-08-19 19:09:22	1,251,840	------w	C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
+ 2004-08-19 19:09:22	540,160	------w	C:\WINDOWS\ServicePackFiles\i386\comuid.dll
+ 2004-08-19 19:09:52	1,044,480	------w	C:\WINDOWS\ServicePackFiles\i386\conf.exe
+ 2004-08-19 19:09:22	45,056	------w	C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
+ 2004-08-19 19:09:52	27,648	------w	C:\WINDOWS\ServicePackFiles\i386\conime.exe
+ 2004-08-04 01:11:12	69,632	------w	C:\WINDOWS\ServicePackFiles\i386\corperfmonext.dll
+ 2004-08-19 19:09:22	35,328	------w	C:\WINDOWS\ServicePackFiles\i386\corpol.dll
+ 2004-08-19 19:09:22	165,888	------w	C:\WINDOWS\ServicePackFiles\i386\credui.dll
+ 2004-08-19 18:59:26	40,704	------w	C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
+ 2004-08-19 19:09:22	604,672	------w	C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
+ 2004-08-19 19:09:22	75,776	------w	C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
+ 2004-08-19 19:09:22	33,280	------w	C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
+ 2004-08-19 19:09:22	54,784	------w	C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
+ 2004-08-19 19:09:22	63,488	------w	C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
+ 2004-08-19 19:09:22	60,416	------w	C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
+ 2004-08-19 19:09:22	530,432	------w	C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
+ 2004-08-04 01:11:18	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\csc.exe
+ 2004-08-19 19:09:22	102,912	------w	C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
+ 2004-07-19 21:54:04	589,824	------w	C:\WINDOWS\ServicePackFiles\i386\cscomp.dll
+ 2004-08-19 19:09:52	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\cscript.exe
+ 2004-08-19 19:09:22	337,920	------w	C:\WINDOWS\ServicePackFiles\i386\cscui.dll
+ 2004-08-19 19:09:22	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
+ 2004-08-19 19:09:52	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\csrss.exe
+ 2004-08-19 19:09:52	15,360	------w	C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
+ 2004-08-19 19:09:22	252,416	------w	C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
+ 2004-08-19 19:09:22	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\custsat.dll
+ 2004-08-04 01:32:26	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
+ 2004-08-19 19:09:22	1,179,648	------w	C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
+ 2004-08-19 19:09:22	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
+ 2004-08-19 19:09:22	1,689,088	------w	C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
+ 2004-08-19 19:09:24	825,344	------w	C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
+ 2004-08-19 19:09:24	1,056,256	------w	C:\WINDOWS\ServicePackFiles\i386\danim.dll
+ 2004-08-19 19:09:24	561,179	------w	C:\WINDOWS\ServicePackFiles\i386\dao360.dll
+ 2004-08-19 19:09:24	55,296	------w	C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
+ 2004-08-19 19:09:52	42,496	------w	C:\WINDOWS\ServicePackFiles\i386\davcdata.exe
+ 2004-08-19 19:09:24	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
+ 2004-08-19 19:09:24	640,000	------w	C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
+ 2004-08-19 19:09:24	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
+ 2004-08-19 19:09:24	110,592	------w	C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
+ 2004-08-19 19:09:24	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
+ 2004-08-19 19:09:24	40,960	------w	C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
+ 2004-08-19 19:09:24	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
+ 2004-08-19 19:09:52	31,744	------w	C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
+ 2004-08-19 19:09:24	266,240	------w	C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
+ 2004-08-19 19:09:24	27,136	------w	C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
+ 2004-08-19 19:09:52	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\defrag.exe
+ 2004-08-19 19:09:24	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\devenum.dll
+ 2004-08-19 19:09:24	290,816	------w	C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
+ 2004-08-19 19:09:52	82,432	------w	C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
+ 2004-08-19 19:09:52	104,960	------w	C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
+ 2004-08-19 19:09:24	39,424	------w	C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
+ 2004-08-19 19:09:24	123,904	------w	C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
+ 2004-08-19 19:09:24	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
+ 2004-08-19 19:09:24	115,200	------w	C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
+ 2004-08-19 19:09:24	111,616	------w	C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
+ 2004-08-19 19:09:52	548,352	------w	C:\WINDOWS\ServicePackFiles\i386\dialer.exe
+ 2004-08-19 19:09:52	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\diantz.exe
+ 2004-08-19 19:09:24	68,608	------w	C:\WINDOWS\ServicePackFiles\i386\digest.dll
+ 2004-08-19 19:09:24	165,376	------w	C:\WINDOWS\ServicePackFiles\i386\dinput.dll
+ 2004-08-19 19:09:24	187,904	------w	C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
+ 2004-08-19 19:09:24	81,408	------w	C:\WINDOWS\ServicePackFiles\i386\directdb.dll
+ 2004-08-04 01:59:56	36,352	------w	C:\WINDOWS\ServicePackFiles\i386\disk.sys
+ 2004-08-04 01:59:54	14,208	------w	C:\WINDOWS\ServicePackFiles\i386\diskdump.sys
+ 2004-08-19 19:09:52	167,936	------w	C:\WINDOWS\ServicePackFiles\i386\diskpart.exe
+ 2004-08-19 19:09:52	294,912	------w	C:\WINDOWS\ServicePackFiles\i386\dlimport.exe
+ 2004-08-19 19:09:52	5,120	------w	C:\WINDOWS\ServicePackFiles\i386\dllhost.exe
+ 2004-08-04 02:00:06	8,320	------w	C:\WINDOWS\ServicePackFiles\i386\dlttape.sys
+ 2004-08-19 19:09:52	225,280	------w	C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe
+ 2004-08-19 19:09:24	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\dmband.dll
+ 2004-08-19 19:01:16	800,256	------w	C:\WINDOWS\ServicePackFiles\i386\dmboot.sys
+ 2004-08-19 19:09:24	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll
+ 2004-08-19 19:09:24	200,704	------w	C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll
+ 2004-08-19 19:09:24	181,248	------w	C:\WINDOWS\ServicePackFiles\i386\dmime.dll
+ 2004-08-19 19:01:22	154,496	------w	C:\WINDOWS\ServicePackFiles\i386\dmio.sys
+ 2004-08-19 19:09:24	35,840	------w	C:\WINDOWS\ServicePackFiles\i386\dmloader.dll
+ 2004-08-19 19:09:52	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\dmremote.exe
+ 2004-08-19 19:09:24	82,432	------w	C:\WINDOWS\ServicePackFiles\i386\dmscript.dll
+ 2004-08-19 19:09:24	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\dmserver.dll
+ 2004-08-19 19:09:24	105,984	------w	C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll
+ 2004-08-19 19:09:24	103,424	------w	C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll
+ 2004-08-19 19:09:24	104,448	------w	C:\WINDOWS\ServicePackFiles\i386\dmusic.dll
+ 2004-08-04 02:07:40	52,864	------w	C:\WINDOWS\ServicePackFiles\i386\dmusic.sys
+ 2004-08-19 19:09:24	58,880	------w	C:\WINDOWS\ServicePackFiles\i386\dmutil.dll
+ 2004-08-19 19:09:24	148,480	------w	C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll
+ 2004-08-19 19:09:24	45,568	------w	C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll
+ 2004-08-19 19:09:24	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\docprop2.dll
+ 2004-08-04 01:51:28	54,080	------w	C:\WINDOWS\ServicePackFiles\i386\dosx.exe
+ 2004-08-04 01:58:30	207,360	------w	C:\WINDOWS\ServicePackFiles\i386\dot4.sys
+ 2004-08-19 19:09:24	97,280	------w	C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll
+ 2004-08-19 19:09:52	30,208	------w	C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe
+ 2004-08-19 19:09:24	229,888	------w	C:\WINDOWS\ServicePackFiles\i386\dplayx.dll
+ 2004-08-19 19:09:24	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
+ 2004-08-19 19:08:08	3,584	------w	C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll
+ 2004-08-19 19:09:24	375,296	------w	C:\WINDOWS\ServicePackFiles\i386\dpnet.dll
+ 2004-08-19 19:09:24	35,328	------w	C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll
+ 2004-08-19 19:09:24	60,928	------w	C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll
+ 2004-08-19 19:08:08	3,584	------w	C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll
+ 2004-08-19 19:09:52	18,432	------w	C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe
+ 2004-08-19 19:09:24	21,504	------w	C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll
+ 2004-08-19 19:09:24	213,504	------w	C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
+ 2004-08-19 19:09:52	83,456	------w	C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe
+ 2004-08-19 19:09:24	116,736	------w	C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll
+ 2004-08-19 19:09:24	57,856	------w	C:\WINDOWS\ServicePackFiles\i386\dpwsockx.dll
+ 2004-08-19 19:10:16	299,520	------w	C:\WINDOWS\ServicePackFiles\i386\drmclien.dll
+ 2004-08-04 02:08:00	60,288	------w	C:\WINDOWS\ServicePackFiles\i386\drmk.sys
+ 2004-08-19 19:09:24	87,040	------w	C:\WINDOWS\ServicePackFiles\i386\drmstor.dll
+ 2004-08-19 19:10:14	695,296	------w	C:\WINDOWS\ServicePackFiles\i386\drmv2clt.dll
+ 2004-08-19 19:09:24	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\drprov.dll
+ 2004-07-17 14:36:44	4,656	------w	C:\WINDOWS\ServicePackFiles\i386\ds16gt.dll
+ 2004-08-19 19:09:24	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\ds32gt.dll
+ 2004-08-19 19:09:24	181,760	------w	C:\WINDOWS\ServicePackFiles\i386\dsdmo.dll
+ 2004-08-19 19:09:24	72,192	------w	C:\WINDOWS\ServicePackFiles\i386\dsdmoprp.dll
+ 2004-08-19 19:09:24	93,696	------w	C:\WINDOWS\ServicePackFiles\i386\dskquota.dll
+ 2004-08-19 19:09:24	367,616	------w	C:\WINDOWS\ServicePackFiles\i386\dsound.dll
+ 2004-08-19 19:09:24	1,294,336	------w	C:\WINDOWS\ServicePackFiles\i386\dsound3d.dll
+ 2004-08-19 19:09:24	145,408	------w	C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
+ 2004-08-19 19:08:10	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\dsprpres.dll
+ 2004-08-19 19:09:24	240,640	------w	C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
+ 2004-08-19 19:09:24	52,736	------w	C:\WINDOWS\ServicePackFiles\i386\dssec.dll
+ 2004-08-04 01:31:44	137,216	------w	C:\WINDOWS\ServicePackFiles\i386\dssenh.dll
+ 2004-08-19 19:09:24	113,664	------w	C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
+ 2004-08-19 19:09:24	19,456	------w	C:\WINDOWS\ServicePackFiles\i386\dswave.dll
+ 2004-08-19 19:09:52	10,752	------w	C:\WINDOWS\ServicePackFiles\i386\dumprep.exe
+ 2004-08-19 19:09:24	304,128	------w	C:\WINDOWS\ServicePackFiles\i386\duser.dll
+ 2004-08-19 19:09:52	17,920	------w	C:\WINDOWS\ServicePackFiles\i386\dvdupgrd.exe
+ 2004-08-19 19:09:52	180,224	------w	C:\WINDOWS\ServicePackFiles\i386\dwwin.exe
+ 2004-08-19 19:09:24	619,008	------w	C:\WINDOWS\ServicePackFiles\i386\dx7vb.dll
+ 2004-08-19 19:09:24	1,227,264	------w	C:\WINDOWS\ServicePackFiles\i386\dx8vb.dll
+ 2004-08-19 19:09:52	1,298,432	------w	C:\WINDOWS\ServicePackFiles\i386\dxdiag.exe
+ 2004-08-19 19:09:24	2,113,536	------w	C:\WINDOWS\ServicePackFiles\i386\dxdiagn.dll
+ 2004-08-04 02:00:56	71,040	------w	C:\WINDOWS\ServicePackFiles\i386\dxg.sys
+ 2004-08-19 19:09:24	499,741	------w	C:\WINDOWS\ServicePackFiles\i386\dxmasf.dll
+ 2004-08-19 19:09:24	357,888	------w	C:\WINDOWS\ServicePackFiles\i386\dxtmsft.dll
+ 2004-08-19 19:09:24	201,728	------w	C:\WINDOWS\ServicePackFiles\i386\dxtrans.dll
+ 2004-08-19 19:09:24	27,136	------w	C:\WINDOWS\ServicePackFiles\i386\efsadu.dll
+ 2004-08-19 19:09:26	187,392	------w	C:\WINDOWS\ServicePackFiles\i386\els.dll
+ 2004-08-19 19:09:26	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\encapi.dll
+ 2004-08-19 19:09:26	186,368	------w	C:\WINDOWS\ServicePackFiles\i386\encdec.dll
+ 2004-08-19 19:08:12	40,960	------w	C:\WINDOWS\ServicePackFiles\i386\ep9res.dll
+ 2004-08-19 18:52:52	121,344	------w	C:\WINDOWS\ServicePackFiles\i386\epcl5res.dll
+ 2004-08-19 19:09:26	23,040	------w	C:\WINDOWS\ServicePackFiles\i386\ersvc.dll
+ 2004-08-19 19:09:26	243,200	------w	C:\WINDOWS\ServicePackFiles\i386\es.dll
+ 2004-08-19 19:09:26	1,097,728	------w	C:\WINDOWS\ServicePackFiles\i386\esent.dll
+ 2004-08-19 19:09:26	247,808	------w	C:\WINDOWS\ServicePackFiles\i386\esscli.dll
+ 2004-08-04 01:32:28	137,088	------w	C:\WINDOWS\ServicePackFiles\i386\essm2e.sys
+ 2004-08-19 19:09:52	195,072	------w	C:\WINDOWS\ServicePackFiles\i386\eudcedit.exe
+ 2004-08-19 19:09:52	52,736	------w	C:\WINDOWS\ServicePackFiles\i386\evcreate.exe
+ 2004-08-19 19:09:26	55,808	------w	C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
+ 2004-07-19 21:54:06	798,720	------w	C:\WINDOWS\ServicePackFiles\i386\eventlogmessages.dll
+ 2004-08-19 19:09:26	109,568	------w	C:\WINDOWS\ServicePackFiles\i386\evntagnt.dll
+ 2004-08-19 19:09:54	26,112	------w	C:\WINDOWS\ServicePackFiles\i386\evntcmd.exe
+ 2004-08-19 19:09:26	22,016	------w	C:\WINDOWS\ServicePackFiles\i386\evntrprv.dll
+ 2004-08-19 19:09:54	94,720	------w	C:\WINDOWS\ServicePackFiles\i386\evntwin.exe
+ 2004-08-19 19:09:26	45,568	------w	C:\WINDOWS\ServicePackFiles\i386\evtgprov.dll
+ 2004-08-19 19:09:54	1,036,288	------w	C:\WINDOWS\ServicePackFiles\i386\explorer.exe
+ 2004-08-19 19:09:26	380,957	------w	C:\WINDOWS\ServicePackFiles\i386\expsrv.dll
+ 2004-08-19 19:09:26	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\exstrace.dll
+ 2004-08-19 19:09:26	55,808	------w	C:\WINDOWS\ServicePackFiles\i386\extmgr.dll
+ 2004-08-19 19:09:54	45,568	------w	C:\WINDOWS\ServicePackFiles\i386\extrac32.exe
+ 2004-08-04 02:14:18	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\fastfat.sys
+ 2004-08-19 19:09:26	472,064	------w	C:\WINDOWS\ServicePackFiles\i386\fastprox.dll
+ 2004-08-19 19:09:26	80,896	------w	C:\WINDOWS\ServicePackFiles\i386\faultrep.dll
+ 2004-08-19 19:09:54	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\faxpatch.exe
+ 2004-08-04 01:59:28	27,392	------w	C:\WINDOWS\ServicePackFiles\i386\fdc.sys
+ 2004-08-19 19:09:26	76,288	------w	C:\WINDOWS\ServicePackFiles\i386\fdeploy.dll
+ 2004-08-19 19:09:26	21,504	------w	C:\WINDOWS\ServicePackFiles\i386\feclient.dll
+ 2004-08-19 19:09:26	348,160	------w	C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
+ 2004-08-19 19:09:56	29,184	------w	C:\WINDOWS\ServicePackFiles\i386\findstr.exe
+ 2004-08-19 19:09:26	88,064	------w	C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
+ 2004-08-04 01:59:28	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys
+ 2004-08-19 19:09:26	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\fltlib.dll
+ 2004-08-19 19:09:56	22,528	------w	C:\WINDOWS\ServicePackFiles\i386\fltmc.exe
+ 2004-08-04 02:01:20	124,800	------w	C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys
+ 2004-08-19 19:09:26	386,560	------w	C:\WINDOWS\ServicePackFiles\i386\fontext.dll
+ 2004-08-19 19:09:56	21,504	------w	C:\WINDOWS\ServicePackFiles\i386\fontview.exe
+ 2004-08-04 01:31:24	34,173	------w	C:\WINDOWS\ServicePackFiles\i386\forehe.sys
+ 2004-08-19 19:09:26	32,828	------w	C:\WINDOWS\ServicePackFiles\i386\fp40ext.dll
+ 2004-08-19 19:09:26	184,435	------w	C:\WINDOWS\ServicePackFiles\i386\fp4amsft.dll
+ 2004-08-19 19:09:26	82,035	------w	C:\WINDOWS\ServicePackFiles\i386\fp4anscp.dll
+ 2004-08-19 19:09:26	147,513	------w	C:\WINDOWS\ServicePackFiles\i386\fp4apws.dll
+ 2004-08-19 19:09:26	49,210	------w	C:\WINDOWS\ServicePackFiles\i386\fp4areg.dll
+ 2004-08-19 19:09:26	102,509	------w	C:\WINDOWS\ServicePackFiles\i386\fp4atxt.dll
+ 2004-08-19 19:09:26	618,605	------w	C:\WINDOWS\ServicePackFiles\i386\fp4autl.dll
+ 2004-08-19 19:09:26	41,020	------w	C:\WINDOWS\ServicePackFiles\i386\fp4avnb.dll
+ 2004-08-19 19:09:26	32,826	------w	C:\WINDOWS\ServicePackFiles\i386\fp4avss.dll
+ 2004-08-19 19:09:26	49,212	------w	C:\WINDOWS\ServicePackFiles\i386\fp4awebs.dll
+ 2004-08-19 19:09:26	876,653	------w	C:\WINDOWS\ServicePackFiles\i386\fp4awel.dll
+ 2004-08-19 19:09:56	15,120	------w	C:\WINDOWS\ServicePackFiles\i386\fp98sadm.exe
+ 2004-08-19 19:09:56	109,840	------w	C:\WINDOWS\ServicePackFiles\i386\fp98swin.exe
+ 2004-08-19 19:09:56	24,632	------w	C:\WINDOWS\ServicePackFiles\i386\fpadmcgi.exe
+ 2004-08-19 19:09:26	20,541	------w	C:\WINDOWS\ServicePackFiles\i386\fpadmdll.dll
+ 2004-08-19 19:09:56	188,494	------w	C:\WINDOWS\ServicePackFiles\i386\fpcount.exe
+ 2004-08-19 19:09:26	94,208	------w	C:\WINDOWS\ServicePackFiles\i386\fpencode.dll
+ 2004-08-19 19:09:26	20,541	------w	C:\WINDOWS\ServicePackFiles\i386\fpexedll.dll
+ 2004-08-19 19:09:28	598,071	------w	C:\WINDOWS\ServicePackFiles\i386\fpmmc.dll
+ 2004-08-19 19:08:14	217,088	------w	C:\WINDOWS\ServicePackFiles\i386\fpmmcsat.dll
+ 2004-08-19 19:09:56	20,538	------w	C:\WINDOWS\ServicePackFiles\i386\fpremadm.exe
+ 2004-08-19 19:09:56	28,728	------w	C:\WINDOWS\ServicePackFiles\i386\fpsrvadm.exe
+ 2004-08-19 19:08:14	9,344	------w	C:\WINDOWS\ServicePackFiles\i386\framebuf.dll
+ 2004-08-19 19:09:28	185,856	------w	C:\WINDOWS\ServicePackFiles\i386\framedyn.dll
+ 2004-08-19 19:09:56	193,024	------w	C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
+ 2004-08-19 19:09:56	46,080	------w	C:\WINDOWS\ServicePackFiles\i386\ftp.exe
+ 2004-08-19 19:09:28	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\ftpmib.dll
+ 2004-08-19 19:09:28	127,488	------w	C:\WINDOWS\ServicePackFiles\i386\ftpsv251.dll
+ 2004-07-19 21:54:06	233,472	------w	C:\WINDOWS\ServicePackFiles\i386\fusion.dll
+ 2004-08-19 19:09:28	60,416	------w	C:\WINDOWS\ServicePackFiles\i386\fwcfg.dll
+ 2004-08-19 19:09:28	452,096	------w	C:\WINDOWS\ServicePackFiles\i386\fxsapi.dll
+ 2004-08-19 19:09:56	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\fxsclnt.exe
+ 2004-08-19 19:09:28	72,192	------w	C:\WINDOWS\ServicePackFiles\i386\fxscom.dll
+ 2004-08-19 19:09:28	285,184	------w	C:\WINDOWS\ServicePackFiles\i386\fxscomex.dll
+ 2004-08-19 19:09:56	238,592	------w	C:\WINDOWS\ServicePackFiles\i386\fxscover.exe
+ 2004-08-19 19:09:28	27,136	------w	C:\WINDOWS\ServicePackFiles\i386\fxsdrv.dll
+ 2004-08-19 19:09:28	66,048	------w	C:\WINDOWS\ServicePackFiles\i386\fxsevent.dll
+ 2004-08-19 19:09:28	23,552	------w	C:\WINDOWS\ServicePackFiles\i386\fxsext32.dll
+ 2004-08-19 19:09:28	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\fxsmon.dll
+ 2004-08-19 19:09:28	132,608	------w	C:\WINDOWS\ServicePackFiles\i386\fxsocm.dll
+ 2004-08-19 19:09:28	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\fxsperf.dll
+ 2004-08-19 19:08:14	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\fxsres.dll
+ 2004-08-19 19:09:28	563,712	------w	C:\WINDOWS\ServicePackFiles\i386\fxsst.dll
+ 2004-08-19 19:09:56	268,800	------w	C:\WINDOWS\ServicePackFiles\i386\fxssvc.exe
+ 2004-08-19 19:09:28	246,272	------w	C:\WINDOWS\ServicePackFiles\i386\fxst30.dll
+ 2004-08-19 19:09:28	397,312	------w	C:\WINDOWS\ServicePackFiles\i386\fxstiff.dll
+ 2004-08-19 19:09:28	156,672	------w	C:\WINDOWS\ServicePackFiles\i386\fxsui.dll
+ 2004-08-19 19:09:28	197,120	------w	C:\WINDOWS\ServicePackFiles\i386\fxswzrd.dll
+ 2004-08-19 19:09:28	400,896	------w	C:\WINDOWS\ServicePackFiles\i386\fxsxp32.dll
+ 2004-08-04 02:07:44	46,464	------w	C:\WINDOWS\ServicePackFiles\i386\gagp30kx.sys
+ 2004-08-04 02:08:22	10,624	------w	C:\WINDOWS\ServicePackFiles\i386\gameenum.sys
+ 2004-08-04 02:08:30	59,136	------w	C:\WINDOWS\ServicePackFiles\i386\gckernel.sys
+ 2004-08-19 19:09:28	278,016	------w	C:\WINDOWS\ServicePackFiles\i386\gdi32.dll
+ 2004-08-19 19:09:28	123,904	------w	C:\WINDOWS\ServicePackFiles\i386\glu32.dll
+ 2004-08-19 19:09:28	577,536	------w	C:\WINDOWS\ServicePackFiles\i386\gpedit.dll
+ 2004-08-04 01:31:44	101,888	------w	C:\WINDOWS\ServicePackFiles\i386\gpkcsp.dll
+ 2004-08-19 19:08:14	10,240	------w	C:\WINDOWS\ServicePackFiles\i386\gpkrsrc.dll
+ 2004-08-19 19:09:56	123,392	------w	C:\WINDOWS\ServicePackFiles\i386\gprslt.exe
+ 2004-08-19 19:09:28	201,216	------w	C:\WINDOWS\ServicePackFiles\i386\gptext.dll
+ 2004-08-19 19:09:56	39,424	------w	C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
+ 2004-08-19 18:55:22	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\grserial.sys
+ 2004-08-19 19:09:28	125,440	------w	C:\WINDOWS\ServicePackFiles\i386\guitrn.dll
+ 2004-08-19 19:09:28	109,056	------w	C:\WINDOWS\ServicePackFiles\i386\guitrn_a.dll
+ 2004-08-19 19:09:28	32,256	------w	C:\WINDOWS\ServicePackFiles\i386\gzip.dll
+ 2004-08-19 19:09:28	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\h323cc.dll
+ 2004-08-19 19:09:28	614,912	------w	C:\WINDOWS\ServicePackFiles\i386\h323msp.dll
+ 2004-08-04 01:59:20	105,472	------w	C:\WINDOWS\ServicePackFiles\i386\hal.dll
+ 2004-08-04 01:59:10	131,968	------w	C:\WINDOWS\ServicePackFiles\i386\halaacpi.dll
+ 2004-08-04 01:59:08	81,280	------w	C:\WINDOWS\ServicePackFiles\i386\halacpi.dll
+ 2004-08-04 01:59:14	150,656	------w	C:\WINDOWS\ServicePackFiles\i386\halapic.dll
+ 2004-08-04 01:59:14	134,400	------w	C:\WINDOWS\ServicePackFiles\i386\halmacpi.dll
+ 2004-08-04 01:59:20	152,704	------w	C:\WINDOWS\ServicePackFiles\i386\halmps.dll
+ 2004-08-04 01:59:20	77,696	------w	C:\WINDOWS\ServicePackFiles\i386\halsp.dll
+ 2004-08-19 19:09:28	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\hccoin.dll
+ 2004-08-19 19:09:56	768,512	------w	C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
+ 2004-08-19 19:09:56	743,936	------w	C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe
+ 2004-08-19 19:09:56	10,752	------w	C:\WINDOWS\ServicePackFiles\i386\hh.exe
+ 2004-08-19 19:09:28	38,912	------w	C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll
+ 2004-08-19 19:09:28	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\hid.dll
+ 2004-08-19 18:55:52	25,856	------w	C:\WINDOWS\ServicePackFiles\i386\hidbth.sys
+ 2004-08-04 02:08:20	36,224	------w	C:\WINDOWS\ServicePackFiles\i386\hidclass.sys
+ 2004-08-04 02:08:20	15,104	------w	C:\WINDOWS\ServicePackFiles\i386\hidir.sys
+ 2004-08-04 02:08:18	24,960	------w	C:\WINDOWS\ServicePackFiles\i386\hidparse.sys
+ 2004-08-19 19:09:28	21,504	------w	C:\WINDOWS\ServicePackFiles\i386\hidserv.dll
+ 2004-08-19 19:09:28	38,912	------w	C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
+ 2004-08-19 19:09:28	347,648	------w	C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
+ 2004-08-19 19:09:28	336,384	------w	C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
+ 2004-08-19 19:09:

Deirheim · Answer

+ 2004-08-19 19:09:28	39,936	------w	C:\WINDOWS\ServicePackFiles\i386\hostmib.dll
+ 2004-08-19 19:09:28	146,944	------w	C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
+ 2004-08-19 19:09:28	10,752	------w	C:\WINDOWS\ServicePackFiles\i386\hpcjrr.dll
+ 2004-08-19 19:09:28	10,240	------w	C:\WINDOWS\ServicePackFiles\i386\hpcjrrps.dll
+ 2004-08-19 19:09:28	87,552	------w	C:\WINDOWS\ServicePackFiles\i386\hpfud50.dll
+ 2004-08-19 19:09:56	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\hscupd.exe
+ 2004-08-04 01:41:48	220,032	------w	C:\WINDOWS\ServicePackFiles\i386\hsfbs2s2.sys
+ 2004-08-19 19:09:28	32,285	------w	C:\WINDOWS\ServicePackFiles\i386\hsfcisp2.dll
+ 2004-08-04 01:41:50	685,056	------w	C:\WINDOWS\ServicePackFiles\i386\hsfcxts2.sys
+ 2004-08-04 01:41:56	1,041,536	------w	C:\WINDOWS\ServicePackFiles\i386\hsfdpsp2.sys
+ 2004-08-04 02:00:14	263,040	------w	C:\WINDOWS\ServicePackFiles\i386\http.sys
+ 2004-08-19 19:09:28	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\httpapi.dll
+ 2004-08-19 19:09:28	268,288	------w	C:\WINDOWS\ServicePackFiles\i386\httpext.dll
+ 2004-08-19 19:09:28	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\httpmb51.dll
+ 2004-08-19 19:09:28	62,464	------w	C:\WINDOWS\ServicePackFiles\i386\httpod51.dll
+ 2004-08-19 19:09:28	43,008	------w	C:\WINDOWS\ServicePackFiles\i386\htui.dll
+ 2004-08-19 19:09:28	352,256	------w	C:\WINDOWS\ServicePackFiles\i386\hypertrm.dll
+ 2004-08-04 02:00:52	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\i2omgmt.sys
+ 2004-08-04 02:00:52	18,560	------w	C:\WINDOWS\ServicePackFiles\i386\i2omp.sys
+ 2004-08-19 18:56:40	54,400	------w	C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys
+ 2004-08-19 19:09:28	702,845	------w	C:\WINDOWS\ServicePackFiles\i386\i81xdnt5.dll
+ 2004-08-04 01:29:38	161,020	------w	C:\WINDOWS\ServicePackFiles\i386\i81xnt5.sys
+ 2004-08-19 19:09:28	119,808	------w	C:\WINDOWS\ServicePackFiles\i386\iasrad.dll
+ 2004-08-19 19:09:28	11,264	------w	C:\WINDOWS\ServicePackFiles\i386\icaapi.dll
+ 2004-08-19 19:09:28	80,384	------w	C:\WINDOWS\ServicePackFiles\i386\iccvid.dll
+ 2004-08-19 19:09:28	253,952	------w	C:\WINDOWS\ServicePackFiles\i386\icm32.dll
+ 2004-08-19 19:08:16	3,584	------w	C:\WINDOWS\ServicePackFiles\i386\icmp.dll
+ 2004-08-19 19:09:28	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\iconlib.dll
+ 2004-08-19 19:09:28	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\icwconn.dll
+ 2004-08-19 19:09:56	218,624	------w	C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
+ 2004-08-19 19:09:56	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
+ 2004-08-19 19:09:28	73,728	------w	C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
+ 2004-08-19 19:09:28	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\icwdl.dll
+ 2004-08-19 19:09:28	176,128	------w	C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
+ 2004-08-19 19:09:28	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\icwphbk.dll
+ 2004-08-19 19:09:56	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\icwrmind.exe
+ 2004-08-19 19:09:28	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\icwutil.dll
+ 2004-08-19 19:09:28	121,856	------w	C:\WINDOWS\ServicePackFiles\i386\idq.dll
+ 2004-08-19 19:09:56	34,304	------w	C:\WINDOWS\ServicePackFiles\i386\ie4uinit.exe
+ 2004-08-19 19:09:28	139,264	------w	C:\WINDOWS\ServicePackFiles\i386\ieakeng.dll
+ 2004-08-19 19:09:28	221,696	------w	C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
+ 2004-08-19 19:09:28	323,584	------w	C:\WINDOWS\ServicePackFiles\i386\iedkcs32.dll
+ 2004-08-19 19:09:56	18,432	------w	C:\WINDOWS\ServicePackFiles\i386\iedw.exe
+ 2004-08-19 19:09:28	81,920	------w	C:\WINDOWS\ServicePackFiles\i386\ieencode.dll
+ 2004-07-19 21:54:06	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\ieexec.exe
+ 2004-07-19 21:54:06	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\ieexecremote.dll
+ 2004-07-19 21:54:06	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\iehost.dll
+ 2004-08-19 19:09:28	249,344	------w	C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
+ 2004-08-19 19:09:28	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
+ 2004-08-19 19:09:28	63,488	------w	C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
+ 2004-08-19 19:09:56	93,184	------w	C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
+ 2004-08-19 19:09:56	114,688	------w	C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
+ 2004-08-19 19:09:28	142,848	------w	C:\WINDOWS\ServicePackFiles\i386\ifmon.dll
+ 2004-08-19 19:09:28	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\igmpagnt.dll
+ 2004-08-19 19:08:16	508,416	------w	C:\WINDOWS\ServicePackFiles\i386\iis.dll
+ 2004-08-19 19:09:28	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\iisadmin.dll
+ 2004-08-19 19:09:28	145,408	------w	C:\WINDOWS\ServicePackFiles\i386\iische51.dll
+ 2004-08-19 19:09:28	68,608	------w	C:\WINDOWS\ServicePackFiles\i386\iisext51.dll
+ 2004-08-19 19:09:28	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\iisfecnv.dll
+ 2004-08-19 19:09:28	79,872	------w	C:\WINDOWS\ServicePackFiles\i386\iislog51.dll
+ 2004-08-19 19:09:28	64,512	------w	C:\WINDOWS\ServicePackFiles\i386\iismap.dll
+ 2004-08-19 19:09:56	31,232	------w	C:\WINDOWS\ServicePackFiles\i386\iisrstas.exe
+ 2004-08-19 19:09:28	133,632	------w	C:\WINDOWS\ServicePackFiles\i386\iisrtl.dll
+ 2004-08-04 01:11:48	184,320	------w	C:\WINDOWS\ServicePackFiles\i386\ilasm.exe
+ 2004-08-19 19:09:28	81,920	------w	C:\WINDOWS\ServicePackFiles\i386\ils.dll
+ 2004-08-19 19:09:28	144,384	------w	C:\WINDOWS\ServicePackFiles\i386\imagehlp.dll
+ 2004-08-19 19:09:56	150,016	------w	C:\WINDOWS\ServicePackFiles\i386\imapi.exe
+ 2004-08-04 02:00:16	41,856	------w	C:\WINDOWS\ServicePackFiles\i386\imapi.sys
+ 2004-08-19 19:09:28	36,921	------w	C:\WINDOWS\ServicePackFiles\i386\imeshare.dll
+ 2004-08-19 19:09:30	35,840	------w	C:\WINDOWS\ServicePackFiles\i386\imgutil.dll
+ 2004-08-19 19:09:30	110,080	------w	C:\WINDOWS\ServicePackFiles\i386\imm32.dll
+ 2004-08-19 19:09:30	282,624	------w	C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
+ 2004-08-19 19:09:30	678,400	------w	C:\WINDOWS\ServicePackFiles\i386\inetcomm.dll
+ 2004-08-19 19:09:56	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\inetin51.exe
+ 2004-08-19 19:09:30	842,240	------w	C:\WINDOWS\ServicePackFiles\i386\inetmgr.dll
+ 2004-08-19 19:09:30	33,280	------w	C:\WINDOWS\ServicePackFiles\i386\inetmib1.dll
+ 2004-08-19 19:09:30	75,264	------w	C:\WINDOWS\ServicePackFiles\i386\inetpp.dll
+ 2004-08-19 19:09:30	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
+ 2004-08-19 19:08:18	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\inetres.dll
+ 2004-08-19 19:09:56	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
+ 2004-08-19 19:09:30	13,312	------w	C:\WINDOWS\ServicePackFiles\i386\infoadmn.dll
+ 2004-08-19 19:09:30	257,024	------w	C:\WINDOWS\ServicePackFiles\i386\infocomm.dll
+ 2004-08-19 19:09:30	147,456	------w	C:\WINDOWS\ServicePackFiles\i386\initpki.dll
+ 2004-08-19 19:09:30	126,464	------w	C:\WINDOWS\ServicePackFiles\i386\input.dll
+ 2004-08-19 19:09:30	96,768	------w	C:\WINDOWS\ServicePackFiles\i386\inseng.dll
+ 2004-07-19 21:54:06	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\installutil.exe
+ 2004-08-19 18:59:08	5,504	------w	C:\WINDOWS\ServicePackFiles\i386\intelide.sys
+ 2004-08-19 18:59:10	40,320	------w	C:\WINDOWS\ServicePackFiles\i386\intelppm.sys
+ 2004-08-04 02:00:08	29,056	------w	C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys
+ 2004-08-19 19:09:56	58,368	------w	C:\WINDOWS\ServicePackFiles\i386\ipconfig.exe
+ 2004-08-19 19:08:12	97,792	------w	C:\WINDOWS\ServicePackFiles\i386\ipevldpc.dll
+ 2004-08-19 19:08:10	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\ipevlpid.dll
+ 2004-08-19 19:09:32	95,744	------w	C:\WINDOWS\ServicePackFiles\i386\iphlpapi.dll
+ 2004-08-04 02:04:46	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\ipinip.sys
+ 2004-08-19 19:08:22	96,768	------w	C:\WINDOWS\ServicePackFiles\i386\ipmntdpc.dll
+ 2004-08-04 02:04:52	134,912	------w	C:\WINDOWS\ServicePackFiles\i386\ipnat.sys
+ 2004-08-19 19:09:32	332,800	------w	C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll
+ 2004-08-19 19:09:32	355,840	------w	C:\WINDOWS\ServicePackFiles\i386\ippromon.dll
+ 2004-08-19 19:09:32	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\iprip.dll
+ 2004-08-04 02:14:30	74,752	------w	C:\WINDOWS\ServicePackFiles\i386\ipsec.sys
+ 2004-08-19 19:09:32	361,472	------w	C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
+ 2004-08-19 19:09:32	184,320	------w	C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll
+ 2004-08-19 19:08:52	97,280	------w	C:\WINDOWS\ServicePackFiles\i386\ipseldpc.dll
+ 2004-08-19 19:08:10	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\ipselpid.dll
+ 2004-08-19 19:09:32	388,096	------w	C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
+ 2004-08-19 19:09:56	53,760	------w	C:\WINDOWS\ServicePackFiles\i386\ipv6.exe
+ 2004-08-19 19:09:32	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\ipv6mon.dll
+ 2004-08-19 19:09:56	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\ipxroute.exe
+ 2004-08-19 19:09:32	120,320	------w	C:\WINDOWS\ServicePackFiles\i386\ir41_qc.dll
+ 2004-08-19 19:09:32	338,432	------w	C:\WINDOWS\ServicePackFiles\i386\ir41_qcx.dll
+ 2004-08-19 19:09:32	755,200	------w	C:\WINDOWS\ServicePackFiles\i386\ir50_32.dll
+ 2004-08-19 19:09:32	200,192	------w	C:\WINDOWS\ServicePackFiles\i386\ir50_qc.dll
+ 2004-08-19 19:09:32	183,808	------w	C:\WINDOWS\ServicePackFiles\i386\ir50_qcx.dll
+ 2004-08-04 02:08:34	40,832	------w	C:\WINDOWS\ServicePackFiles\i386\irbus.sys
+ 2004-08-04 02:00:54	87,424	------w	C:\WINDOWS\ServicePackFiles\i386\irda.sys
+ 2004-08-04 02:00:48	11,264	------w	C:\WINDOWS\ServicePackFiles\i386\irenum.sys
+ 2004-08-19 19:09:56	154,112	------w	C:\WINDOWS\ServicePackFiles\i386\irftp.exe
+ 2004-08-19 19:09:32	28,160	------w	C:\WINDOWS\ServicePackFiles\i386\irmon.dll
+ 2004-08-19 19:09:32	68,608	------w	C:\WINDOWS\ServicePackFiles\i386\isatq.dll
+ 2004-08-19 19:09:32	27,648	------w	C:\WINDOWS\ServicePackFiles\i386\iscomlog.dll
+ 2004-08-19 19:09:32	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\isign32.dll
+ 2004-08-19 19:09:32	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\isrdbg32.dll
+ 2004-08-19 19:09:32	143,872	------w	C:\WINDOWS\ServicePackFiles\i386\itircl.dll
+ 2004-08-19 19:09:32	134,144	------w	C:\WINDOWS\ServicePackFiles\i386\itss.dll
+ 2004-08-19 19:09:32	192,000	------w	C:\WINDOWS\ServicePackFiles\i386\iuengine.dll
+ 2004-08-19 19:09:32	54,784	------w	C:\WINDOWS\ServicePackFiles\i386\ixsso.dll
+ 2004-08-19 19:09:32	47,616	------w	C:\WINDOWS\ServicePackFiles\i386\iyuv_32.dll
+ 2004-07-19 21:54:06	40,960	------w	C:\WINDOWS\ServicePackFiles\i386\jsc.exe
+ 2004-08-19 19:09:32	450,560	------w	C:\WINDOWS\ServicePackFiles\i386\jscript.dll
+ 2004-08-19 19:09:32	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\jsproxy.dll
+ 2004-08-19 19:00:34	25,216	------w	C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys
+ 2004-08-19 19:08:20	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\kbdfi1.dll
+ 2004-08-19 19:00:36	14,848	------w	C:\WINDOWS\ServicePackFiles\i386\kbdhid.sys
+ 2004-08-19 19:08:20	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\kbdinbe1.dll
+ 2004-08-19 19:08:20	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\kbdinben.dll
+ 2004-08-19 19:08:20	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\kbdinmal.dll
+ 2004-08-19 19:08:20	5,632	------w	C:\WINDOWS\ServicePackFiles\i386\kbdmaori.dll
+ 2004-08-19 19:08:20	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\kbdmlt47.dll
+ 2004-08-19 19:08:20	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\kbdmlt48.dll
+ 2004-08-19 19:08:20	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\kbdno1.dll
+ 2004-08-19 19:08:20	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\kbdsmsfi.dll
+ 2004-08-19 19:08:20	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\kbdsmsno.dll
+ 2004-08-19 19:08:20	7,168	------w	C:\WINDOWS\ServicePackFiles\i386\kbdukx.dll
+ 2004-08-04 01:59:24	7,424	------w	C:\WINDOWS\ServicePackFiles\i386\kd1394.dll
+ 2004-08-19 19:09:32	294,400	------w	C:\WINDOWS\ServicePackFiles\i386\kerberos.dll
+ 2004-08-19 19:09:32	1,048,576	------w	C:\WINDOWS\ServicePackFiles\i386\kernel32.dll
+ 2004-08-04 01:46:56	42,537	------w	C:\WINDOWS\ServicePackFiles\i386\keyboard.sys
+ 2004-08-19 19:09:32	157,184	------w	C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
+ 2004-08-04 02:07:50	171,776	------w	C:\WINDOWS\ServicePackFiles\i386\kmixer.sys
+ 2004-08-04 01:49:58	92,608	------w	C:\WINDOWS\ServicePackFiles\i386\krnl386.exe
+ 2004-08-19 19:09:32	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\krnlprov.dll
+ 2004-08-04 02:15:22	140,928	------w	C:\WINDOWS\ServicePackFiles\i386\ks.sys
+ 2004-08-04 01:59:48	92,032	------w	C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys
+ 2004-08-19 19:09:32	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\ksuser.dll
+ 2004-08-04 01:31:52	97,792	------w	C:\WINDOWS\ServicePackFiles\i386\lang\chtmbx.dll
+ 2004-08-04 01:31:54	56,320	------w	C:\WINDOWS\ServicePackFiles\i386\lang\chtskdic.dll
+ 2004-08-04 01:31:54	173,568	------w	C:\WINDOWS\ServicePackFiles\i386\lang\chtskf.dll
+ 2004-08-04 01:31:54	198,656	------w	C:\WINDOWS\ServicePackFiles\i386\lang\cintime.dll
+ 2004-08-04 01:31:56	480,256	------w	C:\WINDOWS\ServicePackFiles\i386\lang\cintsetp.exe
+ 2004-08-04 01:31:40	57,399	------w	C:\WINDOWS\ServicePackFiles\i386\lang\cplexe.exe
+ 2004-08-04 02:04:38	106,496	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imekrcic.dll
+ 2004-08-04 02:04:34	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imekrmbx.dll
+ 2004-08-04 01:31:50	811,064	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjp81k.dll
+ 2004-08-04 01:31:52	368,696	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpcic.dll
+ 2004-08-04 01:31:52	716,856	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpcus.dll
+ 2004-08-04 01:31:54	81,976	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.dll
+ 2004-08-04 01:31:54	307,257	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.exe
+ 2004-08-04 01:31:56	155,705	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpdsvr.exe
+ 2004-08-04 01:31:58	196,665	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpinst.exe
+ 2004-08-04 01:32:00	208,952	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjpmig.exe
+ 2004-08-04 01:32:12	233,527	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjprw.exe
+ 2004-08-04 01:32:16	262,200	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjputy.exe
+ 2004-08-04 01:32:16	274,489	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imjputyc.dll
+ 2004-08-04 01:32:28	102,456	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imlang.dll
+ 2004-08-04 01:31:50	59,392	------w	C:\WINDOWS\ServicePackFiles\i386\lang\imscinst.exe
+ 2004-08-04 01:32:12	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\lang\padrs404.dll
+ 2004-08-04 01:31:50	15,360	------w	C:\WINDOWS\ServicePackFiles\i386\lang\padrs804.dll
+ 2004-08-04 01:31:50	175,104	------w	C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsa.dll
+ 2004-08-04 01:31:50	53,760	------w	C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsd.dll
+ 2004-08-04 01:31:50	70,144	------w	C:\WINDOWS\ServicePackFiles\i386\lang\pintlphr.exe
+ 2004-08-04 01:31:50	67,584	------w	C:\WINDOWS\ServicePackFiles\i386\lang\pmigrate.dll
+ 2004-08-04 01:32:16	44,032	------w	C:\WINDOWS\ServicePackFiles\i386\lang	intlphr.exe
+ 2004-08-04 01:32:16	455,168	------w	C:\WINDOWS\ServicePackFiles\i386\lang	intsetp.exe
+ 2004-08-04 01:32:14	10,240	------w	C:\WINDOWS\ServicePackFiles\i386\lang	migrate.dll
+ 2004-08-04 02:04:12	76,288	------w	C:\WINDOWS\ServicePackFiles\i386\lang\uniime.dll
+ 2004-08-04 01:32:36	426,041	------w	C:\WINDOWS\ServicePackFiles\i386\lang\voicepad.dll
+ 2004-08-04 01:32:36	86,073	------w	C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll
+ 2004-08-19 19:09:32	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\laprxy.dll
+ 2004-08-04 01:59:34	34,688	------w	C:\WINDOWS\ServicePackFiles\i386\lbrtfdc.sys
+ 2004-08-19 19:09:32	424,960	------w	C:\WINDOWS\ServicePackFiles\i386\licdll.dll
+ 2004-08-19 19:09:32	22,528	------w	C:\WINDOWS\ServicePackFiles\i386\licmgr10.dll
+ 2004-08-19 19:09:32	58,880	------w	C:\WINDOWS\ServicePackFiles\i386\licwmi.dll
+ 2004-08-19 19:09:32	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll
+ 2004-08-19 19:09:32	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\lmhsvc.dll
+ 2004-08-19 19:09:32	33,792	------w	C:\WINDOWS\ServicePackFiles\i386\lmmib2.dll
+ 2004-08-19 19:09:32	399,872	------w	C:\WINDOWS\ServicePackFiles\i386\lmrt.dll
+ 2004-08-19 19:09:32	100,352	------w	C:\WINDOWS\ServicePackFiles\i386\loadperf.dll
+ 2004-08-19 19:09:32	228,352	------w	C:\WINDOWS\ServicePackFiles\i386\localsec.dll
+ 2004-08-19 19:09:32	344,576	------w	C:\WINDOWS\ServicePackFiles\i386\localspl.dll
+ 2004-08-19 19:09:32	11,776	------w	C:\WINDOWS\ServicePackFiles\i386\localui.dll
+ 2004-08-19 19:09:56	75,264	------w	C:\WINDOWS\ServicePackFiles\i386\locator.exe
+ 2004-08-19 19:09:32	19,968	------w	C:\WINDOWS\ServicePackFiles\i386\log.dll
+ 2004-08-19 19:09:56	103,936	------w	C:\WINDOWS\ServicePackFiles\i386\logagent.exe
+ 2004-08-19 19:09:56	61,952	------w	C:\WINDOWS\ServicePackFiles\i386\logman.exe
+ 2004-08-19 19:10:08	221,696	------w	C:\WINDOWS\ServicePackFiles\i386\logon.scr
+ 2004-08-19 19:09:56	515,584	------w	C:\WINDOWS\ServicePackFiles\i386\logonui.exe
+ 2004-08-19 19:09:32	13,312	------w	C:\WINDOWS\ServicePackFiles\i386\lonsint.dll
+ 2004-08-19 19:09:32	23,040	------w	C:\WINDOWS\ServicePackFiles\i386\lpdsvc.dll
+ 2004-08-19 19:09:32	22,016	------w	C:\WINDOWS\ServicePackFiles\i386\lpk.dll
+ 2004-08-19 19:09:32	10,240	------w	C:\WINDOWS\ServicePackFiles\i386\lprhelp.dll
+ 2004-08-19 19:09:32	19,456	------w	C:\WINDOWS\ServicePackFiles\i386\lprmon.dll
+ 2004-08-19 19:09:32	728,576	------w	C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll
+ 2004-08-19 19:09:56	13,312	------w	C:\WINDOWS\ServicePackFiles\i386\lsass.exe
+ 2004-08-19 19:02:02	607,452	------w	C:\WINDOWS\ServicePackFiles\i386\ltmdmnt.sys
+ 2004-08-19 19:02:06	422,528	------w	C:\WINDOWS\ServicePackFiles\i386\ltmdmntt.sys
+ 2004-08-04 02:00:08	7,040	------w	C:\WINDOWS\ServicePackFiles\i386\ltotape.sys
+ 2004-08-04 01:39:32	20,864	------w	C:\WINDOWS\ServicePackFiles\i386\lwadihid.sys
+ 2004-08-19 19:09:56	73,216	------w	C:\WINDOWS\ServicePackFiles\i386\magnify.exe
+ 2004-08-19 19:09:56	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\makecab.exe
+ 2004-08-19 19:09:32	14,848	------w	C:\WINDOWS\ServicePackFiles\i386\mcastmib.dll
+ 2004-08-19 19:09:32	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\mciavi32.dll
+ 2004-08-19 19:09:32	35,328	------w	C:\WINDOWS\ServicePackFiles\i386\mciqtz32.dll
+ 2004-08-19 19:09:32	23,040	------w	C:\WINDOWS\ServicePackFiles\i386\mciseq.dll
+ 2004-08-19 19:09:32	23,552	------w	C:\WINDOWS\ServicePackFiles\i386\mciwave.dll
+ 2004-08-19 19:09:32	37,888	------w	C:\WINDOWS\ServicePackFiles\i386\md5filt.dll
+ 2004-08-19 19:09:32	120,320	------w	C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
+ 2004-08-19 19:09:32	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.dll
+ 2004-08-04 01:41:56	11,868	------w	C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.sys
+ 2004-08-19 19:09:32	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\medctroc.dll
+ 2004-08-04 02:00:50	26,112	------w	C:\WINDOWS\ServicePackFiles\i386\memstpci.sys
+ 2004-08-19 19:09:32	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\metada51.dll
+ 2004-08-04 02:07:46	63,744	------w	C:\WINDOWS\ServicePackFiles\i386\mf.sys
+ 2004-08-19 19:09:32	39,936	------w	C:\WINDOWS\ServicePackFiles\i386\mf3216.dll
+ 2004-08-19 19:09:32	1,028,096	------w	C:\WINDOWS\ServicePackFiles\i386\mfc42.dll
+ 2004-08-19 19:09:32	1,024,000	------w	C:\WINDOWS\ServicePackFiles\i386\mfc42u.dll
+ 2004-08-19 19:09:32	22,528	------w	C:\WINDOWS\ServicePackFiles\i386\mfcsubs.dll
+ 2004-08-19 19:09:32	14,848	------w	C:\WINDOWS\ServicePackFiles\i386\mgmtapi.dll
+ 2004-07-19 21:54:06	712,704	------w	C:\WINDOWS\ServicePackFiles\i386\microsoft.jscript.dll
+ 2004-07-19 21:54:06	286,720	------w	C:\WINDOWS\ServicePackFiles\i386\microsoft.visualbasic.dll
+ 2004-08-19 19:09:32	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\midimap.dll
+ 2004-08-19 19:09:32	201,216	------w	C:\WINDOWS\ServicePackFiles\i386\migism.dll
+ 2004-08-19 19:09:32	192,512	------w	C:\WINDOWS\ServicePackFiles\i386\migism_a.dll
+ 2004-08-19 19:09:32	60,928	------w	C:\WINDOWS\ServicePackFiles\i386\miglibnt.dll
+ 2004-08-19 19:09:56	103,936	------w	C:\WINDOWS\ServicePackFiles\i386\migload.exe
+ 2004-08-19 19:09:56	786,432	------w	C:\WINDOWS\ServicePackFiles\i386\migrate.exe
+ 2004-08-19 19:09:56	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\migregdb.exe
+ 2004-08-19 19:09:56	246,784	------w	C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
+ 2004-08-19 19:09:56	242,688	------w	C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
+ 2004-08-19 19:09:32	586,240	------w	C:\WINDOWS\ServicePackFiles\i386\mlang.dll
+ 2004-08-19 19:09:58	816,128	------w	C:\WINDOWS\ServicePackFiles\i386\mmc.exe
+ 2004-08-19 19:09:32	79,872	------w	C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
+ 2004-08-19 19:09:32	1,198,080	------w	C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
+ 2004-08-19 19:09:32	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
+ 2004-08-19 19:09:32	17,920	------w	C:\WINDOWS\ServicePackFiles\i386\mmfutil.dll
+ 2004-08-19 18:52:22	70,688	------w	C:\WINDOWS\ServicePackFiles\i386\mmsystem.dll
+ 2004-08-19 19:09:32	34,560	------w	C:\WINDOWS\ServicePackFiles\i386\mnmdd.dll
+ 2004-08-19 19:09:58	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
+ 2004-08-19 19:09:32	210,432	------w	C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
+ 2004-08-19 19:09:58	144,384	------w	C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
+ 2004-08-19 18:52:28	30,336	------w	C:\WINDOWS\ServicePackFiles\i386\modem.sys
+ 2004-08-19 19:09:32	156,160	------w	C:\WINDOWS\ServicePackFiles\i386\modemui.dll
+ 2004-08-19 19:09:58	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\mofcomp.exe
+ 2004-08-19 19:09:32	124,928	------w	C:\WINDOWS\ServicePackFiles\i386\mofd.dll
+ 2004-08-19 19:08:24	216,064	------w	C:\WINDOWS\ServicePackFiles\i386\moricons.dll
+ 2004-08-19 18:52:34	23,680	------w	C:\WINDOWS\ServicePackFiles\i386\mouclass.sys
+ 2004-08-04 01:58:32	42,240	------w	C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys
+ 2004-08-19 19:10:00	3,555,328	------w	C:\WINDOWS\ServicePackFiles\i386\moviemk.exe
+ 2004-08-19 19:09:32	310,272	------w	C:\WINDOWS\ServicePackFiles\i386\mp43dmod.dll
+ 2004-08-19 19:09:32	384,512	------w	C:\WINDOWS\ServicePackFiles\i386\mp4sdmod.dll
+ 2004-08-04 02:10:14	15,360	------w	C:\WINDOWS\ServicePackFiles\i386\mpe.sys
+ 2004-08-19 19:09:32	240,640	------w	C:\WINDOWS\ServicePackFiles\i386\mpg4dmod.dll
+ 2004-08-19 19:10:00	124,928	------w	C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
+ 2004-08-19 19:10:00	4,639	------w	C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
+ 2004-08-19 19:09:32	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\mpr.dll
+ 2004-08-19 19:09:32	87,040	------w	C:\WINDOWS\ServicePackFiles\i386\mprapi.dll
+ 2004-08-19 19:09:32	368,640	------w	C:\WINDOWS\ServicePackFiles\i386\mpvis.dll
+ 2004-08-04 01:58:22	72,960	------w	C:\WINDOWS\ServicePackFiles\i386\mqac.sys
+ 2004-08-19 19:09:32	138,240	------w	C:\WINDOWS\ServicePackFiles\i386\mqad.dll
+ 2004-08-19 19:10:00	19,968	------w	C:\WINDOWS\ServicePackFiles\i386\mqbkup.exe
+ 2004-08-19 19:09:32	47,104	------w	C:\WINDOWS\ServicePackFiles\i386\mqdscli.dll
+ 2004-08-19 19:09:32	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\mqise.dll
+ 2004-08-19 19:09:32	89,088	------w	C:\WINDOWS\ServicePackFiles\i386\mqlogmgr.dll
+ 2004-08-19 19:09:32	225,280	------w	C:\WINDOWS\ServicePackFiles\i386\mqoa.dll
+ 2004-08-19 19:09:32	660,992	------w	C:\WINDOWS\ServicePackFiles\i386\mqqm.dll
+ 2004-08-19 19:09:32	177,152	------w	C:\WINDOWS\ServicePackFiles\i386\mqrt.dll
+ 2004-08-19 19:09:32	123,392	------w	C:\WINDOWS\ServicePackFiles\i386\mqrtdep.dll
+ 2004-08-19 19:09:32	95,744	------w	C:\WINDOWS\ServicePackFiles\i386\mqsec.dll
+ 2004-08-19 19:09:34	517,632	------w	C:\WINDOWS\ServicePackFiles\i386\mqsnap.dll
+ 2004-08-19 19:10:00	4,608	------w	C:\WINDOWS\ServicePackFiles\i386\mqsvc.exe
+ 2004-08-19 19:10:00	117,248	------w	C:\WINDOWS\ServicePackFiles\i386\mqtgsvc.exe
+ 2004-08-19 19:09:34	186,880	------w	C:\WINDOWS\ServicePackFiles\i386\mqtrig.dll
+ 2004-08-19 19:09:34	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\mqupgrd.dll
+ 2004-08-19 19:09:34	527,360	------w	C:\WINDOWS\ServicePackFiles\i386\mqutil.dll
+ 2004-08-04 02:00:58	181,248	------w	C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys
+ 2004-08-04 02:15:18	451,456	------w	C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys
+ 2004-08-19 19:09:34	72,192	------w	C:\WINDOWS\ServicePackFiles\i386\msacm32.dll
+ 2004-08-19 19:09:34	331,776	------w	C:\WINDOWS\ServicePackFiles\i386\msadce.dll
+ 2004-08-19 19:08:24	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\msadcer.dll
+ 2004-08-19 19:09:34	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\msadcf.dll
+ 2004-08-19 19:08:24	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msadcfr.dll
+ 2004-08-19 19:09:34	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\msadco.dll
+ 2004-08-19 19:08:24	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msadcor.dll
+ 2004-08-19 19:09:34	53,248	------w	C:\WINDOWS\ServicePackFiles\i386\msadcs.dll
+ 2004-08-19 19:09:34	155,648	------w	C:\WINDOWS\ServicePackFiles\i386\msadds.dll
+ 2004-08-19 19:08:26	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\msaddsr.dll
+ 2004-08-19 19:08:26	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\msader15.dll
+ 2004-08-19 19:09:34	536,576	------w	C:\WINDOWS\ServicePackFiles\i386\msado15.dll
+ 2004-08-19 19:09:34	180,224	------w	C:\WINDOWS\ServicePackFiles\i386\msadomd.dll
+ 2004-08-19 19:09:34	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\msador15.dll
+ 2004-08-19 19:09:34	200,704	------w	C:\WINDOWS\ServicePackFiles\i386\msadox.dll
+ 2004-08-19 19:09:34	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\msadrh15.dll
+ 2004-08-19 19:08:26	3,584	------w	C:\WINDOWS\ServicePackFiles\i386\msafd.dll
+ 2004-08-19 19:09:34	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\msapsspc.dll
+ 2004-08-19 19:09:34	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\msasn1.dll
+ 2004-08-19 19:09:34	220,160	------w	C:\WINDOWS\ServicePackFiles\i386\mscandui.dll
+ 2004-08-19 19:09:34	73,728	------w	C:\WINDOWS\ServicePackFiles\i386\mscms.dll
+ 2004-08-19 19:09:34	69,632	------w	C:\WINDOWS\ServicePackFiles\i386\msconf.dll
+ 2004-08-19 19:10:00	160,768	------w	C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
+ 2004-07-17 14:42:20	116,288	------w	C:\WINDOWS\ServicePackFiles\i386\msconv97.dll
+ 2004-07-19 21:54:06	1,564,672	------w	C:\WINDOWS\ServicePackFiles\i386\mscorcfg.dll
+ 2004-08-04 01:12:02	69,632	------w	C:\WINDOWS\ServicePackFiles\i386\mscordbc.dll
+ 2004-08-04 01:12:02	221,184	------w	C:\WINDOWS\ServicePackFiles\i386\mscordbi.dll
+ 2004-07-19 21:54:08	131,072	------w	C:\WINDOWS\ServicePackFiles\i386\mscoree.dll
+ 2004-08-04 01:12:04	73,728	------w	C:\WINDOWS\ServicePackFiles\i386\mscorie.dll
+ 2004-07-19 21:54:08	303,104	------w	C:\WINDOWS\ServicePackFiles\i386\mscorjit.dll
+ 2004-08-04 01:12:06	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\mscorld.dll
+ 2004-07-19 21:54:08	1,998,848	------w	C:\WINDOWS\ServicePackFiles\i386\mscorlib.dll
+ 2004-08-04 01:12:08	94,208	------w	C:\WINDOWS\ServicePackFiles\i386\mscorpe.dll
+ 2004-08-04 01:12:08	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.chs.dll
+ 2004-08-04 01:12:08	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.cht.dll
+ 2004-08-04 01:12:08	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.dll
+ 2004-08-04 01:12:10	172,032	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.es.dll
+ 2004-08-04 01:12:10	172,032	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.fr.dll
+ 2004-08-04 01:12:10	167,936	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.ger.dll
+ 2004-08-04 01:12:10	167,936	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.it.dll
+ 2004-08-04 01:12:10	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.ja.dll
+ 2004-08-04 01:12:10	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\mscorrc.kor.dll
+ 2004-08-04 01:12:10	46,592	------w	C:\WINDOWS\ServicePackFiles\i386\mscorsec.dll
+ 2004-08-04 01:12:10	69,632	------w	C:\WINDOWS\ServicePackFiles\i386\mscorsn.dll
+ 2004-07-19 21:54:12	2,265,088	------w	C:\WINDOWS\ServicePackFiles\i386\mscorsvr.dll
+ 2004-08-04 01:12:14	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\mscortim.dll
+ 2004-07-19 21:54:14	2,269,184	------w	C:\WINDOWS\ServicePackFiles\i386\mscorwks.dll
+ 2004-08-19 19:08:26	12,288	------w	C:\WINDOWS\ServicePackFiles\i386\mscpx32r.dll
+ 2004-08-19 19:09:34	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\mscpxl32.dll
+ 2004-08-19 19:09:34	294,400	------w	C:\WINDOWS\ServicePackFiles\i386\msctf.dll
+ 2004-08-19 19:09:34	69,120	------w	C:\WINDOWS\ServicePackFiles\i386\msctfp.dll
+ 2004-08-19 19:09:34	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\msdadc.dll
+ 2004-08-19 19:09:34	118,784	------w	C:\WINDOWS\ServicePackFiles\i386\msdadiag.dll
+ 2004-08-19 19:09:34	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\msdaenum.dll
+ 2004-08-19 19:09:34	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\msdaer.dll
+ 2004-08-19 19:09:34	532,480	------w	C:\WINDOWS\ServicePackFiles\i386\msdaipp.dll
+ 2004-08-19 19:09:34	233,472	------w	C:\WINDOWS\ServicePackFiles\i386\msdaora.dll
+ 2004-08-19 19:08:26	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msdaorar.dll
+ 2004-08-19 19:09:34	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\msdaosp.dll
+ 2004-08-19 19:08:26	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msdaprsr.dll
+ 2004-08-19 19:09:34	200,704	------w	C:\WINDOWS\ServicePackFiles\i386\msdaprst.dll
+ 2004-08-19 19:09:34	204,800	------w	C:\WINDOWS\ServicePackFiles\i386\msdaps.dll
+ 2004-08-19 19:09:34	118,784	------w	C:\WINDOWS\ServicePackFiles\i386\msdarem.dll
+ 2004-08-19 19:08:26	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msdaremr.dll
+ 2004-08-19 19:09:34	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\msdart.dll
+ 2004-08-19 19:09:34	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\msdasc.dll
+ 2004-08-19 19:09:34	315,392	------w	C:\WINDOWS\ServicePackFiles\i386\msdasql.dll
+ 2004-08-19 19:08:26	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msdasqlr.dll
+ 2004-08-19 19:09:34	94,208	------w	C:\WINDOWS\ServicePackFiles\i386\msdatl3.dll
+ 2004-08-19 19:09:34	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\msdatt.dll
+ 2004-08-19 19:09:34	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\msdaurl.dll
+ 2004-08-19 19:09:34	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\msdfmap.dll
+ 2004-08-19 19:09:34	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\msdmo.dll
+ 2004-08-19 19:10:00	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
+ 2004-08-19 19:09:34	58,880	------w	C:\WINDOWS\ServicePackFiles\i386\msdtclog.dll
+ 2004-08-19 19:09:34	425,472	------w	C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll
+ 2004-08-19 19:09:34	949,248	------w	C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll
+ 2004-08-19 19:09:34	161,280	------w	C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll
+ 2004-08-04 02:10:00	51,328	------w	C:\WINDOWS\ServicePackFiles\i386\msdv.sys
+ 2004-08-19 19:08:26	4,126	------w	C:\WINDOWS\ServicePackFiles\i386\msdxmlc.dll
+ 2004-08-19 19:09:34	512,029	------w	C:\WINDOWS\ServicePackFiles\i386\msexch40.dll
+ 2004-08-19 19:09:34	319,517	------w	C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll
+ 2004-08-04 02:00:42	19,072	------w	C:\WINDOWS\ServicePackFiles\i386\msfs.sys
+ 2004-08-19 19:09:34	537,088	------w	C:\WINDOWS\ServicePackFiles\i386\msftedit.dll
+ 2004-08-19 19:09:34	1,004,032	------w	C:\WINDOWS\ServicePackFiles\i386\msgina.dll
+ 2004-08-04 02:04:14	35,072	------w	C:\WINDOWS\ServicePackFiles\i386\msgpc.sys
+ 2004-08-19 19:09:34	3,166,208	------w	C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
+ 2004-08-19 19:09:34	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\msgrocm.dll
+ 2004-08-19 19:09:34	82,944	------w	C:\WINDOWS\ServicePackFiles\i386\msgsc.dll
+ 2004-08-19 19:08:28	180,224	------w	C:\WINDOWS\ServicePackFiles\i386\msgslang.dll
+ 2004-08-19 19:09:34	33,792	------w	C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll
+ 2004-08-19 19:10:10	188,416	------w	C:\WINDOWS\ServicePackFiles\i386\msh261.drv
+ 2004-08-19 19:10:10	294,912	------w	C:\WINDOWS\ServicePackFiles\i386\msh263.drv
+ 2004-08-19 19:10:00	29,184	------w	C:\WINDOWS\ServicePackFiles\i386\mshta.exe
+ 2004-08-19 19:09:34	3,003,392	------w	C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
+ 2004-08-19 19:09:34	448,512	------w	C:\WINDOWS\ServicePackFiles\i386\mshtmled.dll
+ 2004-08-19 19:08:28	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\mshtmler.dll
+ 2004-08-19 19:09:34	2,804,224	------w	C:\WINDOWS\ServicePackFiles\i386\msi.dll
+ 2004-08-19 19:09:34	51,712	------w	C:\WINDOWS\ServicePackFiles\i386\msident.dll
+ 2004-08-19 19:09:34	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\msidle.dll
+ 2004-08-19 19:09:34	252,416	------w	C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
+ 2004-08-19 19:10:00	77,312	------w	C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
+ 2004-08-19 19:09:34	331,264	------w	C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
+ 2004-08-19 19:09:34	4,608	------w	C:\WINDOWS\ServicePackFiles\i386\msimg32.dll
+ 2004-08-19 19:10:00	60,416	------w	C:\WINDOWS\ServicePackFiles\i386\msimn.exe
+ 2004-08-19 19:08:34	884,736	------w	C:\WINDOWS\ServicePackFiles\i386\msimsg.dll
+ 2004-08-19 19:09:34	159,232	------w	C:\WINDOWS\ServicePackFiles\i386\msimtf.dll
+ 2004-08-19 19:09:34	381,952	------w	C:\WINDOWS\ServicePackFiles\i386\msinfo.dll
+ 2004-08-04 02:00:48	22,016	------w	C:\WINDOWS\ServicePackFiles\i386\msircomm.sys
+ 2004-08-19 19:10:00	40,960	------w	C:\WINDOWS\ServicePackFiles\i386\msiregmv.exe
+ 2004-08-19 19:09:34	44,032	------w	C:\WINDOWS\ServicePackFiles\i386\msisip.dll
+ 2004-08-19 19:09:34	1,507,356	------w	C:\WINDOWS\ServicePackFiles\i386\msjet40.dll
+ 2004-07-17 14:34:48	358,976	------w	C:\WINDOWS\ServicePackFiles\i386\msjetol1.dll
+ 2004-08-19 19:09:34	184,351	------w	C:\WINDOWS\ServicePackFiles\i386\msjint40.dll
+ 2004-08-19 19:09:34	102,400	------w	C:\WINDOWS\ServicePackFiles\i386\msjro.dll
+ 2004-08-19 19:09:34	53,279	------w	C:\WINDOWS\ServicePackFiles\i386\msjter40.dll
+ 2004-08-19 19:09:34	241,693	------w	C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll
+ 2004-08-04 01:58:42	7,552	------w	C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys
+ 2004-08-19 19:09:34	25,600	------w	C:\WINDOWS\ServicePackFiles\i386\mslbui.dll
+ 2004-08-19 19:09:34	213,023	------w	C:\WINDOWS\ServicePackFiles\i386\msltus40.dll
+ 2004-08-19 19:09:34	39,936	------w	C:\WINDOWS\ServicePackFiles\i386\mslwvtts.dll
+ 2004-08-19 19:09:34	169,984	------w	C:\WINDOWS\ServicePackFiles\i386\msmqocm.dll
+ 2004-08-19 19:10:00	1,667,584	------w	C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
+ 2004-08-19 19:10:10	259,072	------w	C:\WINDOWS\ServicePackFiles\i386\msnetobj.dll
+ 2004-08-19 19:09:34	290,816	------w	C:\WINDOWS\ServicePackFiles\i386\msnsspc.dll
+ 2004-08-19 19:09:34	122,368	------w	C:\WINDOWS\ServicePackFiles\i386\msobcomm.dll
+ 2004-08-19 19:09:34	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\msobdl.dll
+ 2004-08-19 19:09:34	563,200	------w	C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
+ 2004-08-19 19:09:34	30,720	------w	C:\WINDOWS\ServicePackFiles\i386\msobshel.dll
+ 2004-08-19 19:09:34	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\msobweb.dll
+ 2004-08-19 19:09:34	1,311,232	------w	C:\WINDOWS\ServicePackFiles\i386\msoe.dll
+ 2004-08-19 19:09:34	252,928	------w	C:\WINDOWS\ServicePackFiles\i386\msoeacct.dll
+ 2004-08-19 19:08:36	2,534,400	------w	C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
+ 2004-08-19 19:09:34	105,984	------w	C:\WINDOWS\ServicePackFiles\i386\msoert2.dll
+ 2004-08-19 19:08:36	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\msorc32r.dll
+ 2004-08-19 19:09:34	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\msorcl32.dll
+ 2004-08-19 19:10:00	347,648	------w	C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
+ 2004-08-19 19:09:34	30,208	------w	C:\WINDOWS\ServicePackFiles\i386\mspatcha.dll
+ 2004-08-19 19:09:34	348,189	------w	C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll
+ 2004-08-04 01:58:40	5,376	------w	C:\WINDOWS\ServicePackFiles\i386\mspclock.sys
+ 2004-08-19 19:09:34	52,736	------w	C:\WINDOWS\ServicePackFiles\i386\mspmsnsv.dll
+ 2004-08-19 19:09:34	201,728	------w	C:\WINDOWS\ServicePackFiles\i386\mspmsp.dll
+ 2004-08-04 01:58:42	4,992	------w	C:\WINDOWS\ServicePackFiles\i386\mspqm.sys
+ 2004-08-19 19:08:36	48,128	------w	C:\WINDOWS\ServicePackFiles\i386\msprivs.dll
+ 2004-08-19 19:09:34	146,432	------w	C:\WINDOWS\ServicePackFiles\i386\msrating.dll
+ 2004-08-19 19:09:34	421,919	------w	C:\WINDOWS\ServicePackFiles\i386\msrd2x40.dll
+ 2004-08-19 19:09:34	315,423	------w	C:\WINDOWS\ServicePackFiles\i386\msrd3x40.dll
+ 2004-08-19 19:09:34	552,989	------w	C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll
+ 2004-08-19 19:09:34	11,264	------w	C:\WINDOWS\ServicePackFiles\i386\msrle32.dll
+ 2004-08-19 19:09:34	134,656	------w	C:\WINDOWS\ServicePackFiles\i386\mssap.dll
+ 2004-08-19 19:10:12	356,352	------w	C:\WINDOWS\ServicePackFiles\i386\msscp.dll
+ 2004-08-04 02:07:48	15,488	------w	C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys
+ 2004-08-19 19:09:34	274,432	------w	C:\WINDOWS\ServicePackFiles\i386\mst120.dll
+ 2004-08-19 19:09:36	57,344	------w	C:\WINDOWS\ServicePackFiles\i386\mst123.dll
+ 2004-08-04 02:10:00	49,024	------w	C:\WINDOWS\ServicePackFiles\i386\mstape.sys
+ 2004-08-19 19:09:36	281,600	------w	C:\WINDOWS\ServicePackFiles\i386\mstask.dll
+ 2004-08-04 01:58:40	5,504	------w	C:\WINDOWS\ServicePackFiles\i386\mstee.sys
+ 2004-08-19 19:09:36	258,077	------w	C:\WINDOWS\ServicePackFiles\i386\mstext40.dll
+ 2004-08-19 19:09:36	530,432	------w	C:\WINDOWS\ServicePackFiles\i386\mstime.dll
+ 2004-08-19 19:10:00	12,288	------w	C:\WINDOWS\ServicePackFiles\i386\mstinit.exe
+ 2004-08-19 19:09:36	115,712	------w	C:\WINDOWS\ServicePackFiles\i386\mstlsapi.dll
+ 2004-08-19 18:52:00	411,648	------w	C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
+ 2004-08-04 01:59:44	655,360	------w	C:\WINDOWS\ServicePackFiles\i386\mstscax.dll
+ 2004-08-19 19:09:36	195,584	------w	C:\WINDOWS\ServicePackFiles\i386\msutb.dll
+ 2004-08-19 19:09:36	129,536	------w	C:\WINDOWS\ServicePackFiles\i386\msv1_0.dll
+ 2004-08-19 19:09:36	1,392,671	------w	C:\WINDOWS\ServicePackFiles\i386\msvbvm60.dll
+ 2004-08-19 19:09:36	54,784	------w	C:\WINDOWS\ServicePackFiles\i386\msvcirt.dll
+ 2004-08-19 19:09:36	413,696	------w	C:\WINDOWS\ServicePackFiles\i386\msvcp60.dll
+ 2004-08-19 19:09:36	343,040	------w	C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll
+ 2004-08-04 01:58:26	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\msvcrt40.dll
+ 2004-08-19 19:09:36	121,856	------w	C:\WINDOWS\ServicePackFiles\i386\msvfw32.dll
+ 2004-08-19 19:09:36	1,433,600	------w	C:\WINDOWS\ServicePackFiles\i386\msvidctl.dll
+ 2004-08-19 19:09:36	72,704	------w	C:\WINDOWS\ServicePackFiles\i386\msw3prt.dll
+ 2004-08-19 19:09:36	831,519	------w	C:\WINDOWS\ServicePackFiles\i386\mswdat10.dll
+ 2004-08-19 19:09:36	204,800	------w	C:\WINDOWS\ServicePackFiles\i386\mswebdvd.dll
+ 2004-08-19 19:09:36	246,272	------w	C:\WINDOWS\ServicePackFiles\i386\mswmdm.dll
+ 2004-08-19 19:09:36	247,808	------w	C:\WINDOWS\ServicePackFiles\i386\mswsock.dll
+ 2004-08-19 19:09:36	614,429	------w	C:\WINDOWS\ServicePackFiles\i386\mswstr10.dll
+ 2004-08-19 19:09:36	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\msxactps.dll
+ 2004-08-19 19:09:36	348,189	------w	C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll
+ 2004-08-19 19:09:36	506,368	------w	C:\WINDOWS\ServicePackFiles\i386\msxml.dll
+ 2004-08-19 19:09:36	701,440	------w	C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
+ 2004-08-19 19:09:36	1,236,480	------w	C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
+ 2004-08-19 19:09:36	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\msyuv.dll
+ 2004-08-04 01:41:40	126,686	------w	C:\WINDOWS\ServicePackFiles\i386\mtlmnt5.sys
+ 2004-08-04 01:41:38	1,309,184	------w	C:\WINDOWS\ServicePackFiles\i386\mtlstrm.sys
+ 2004-08-19 19:09:36	66,560	------w	C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll
+ 2004-08-19 19:09:36	90,112	------w	C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll
+ 2004-08-19 19:09:36	1,737,856	------w	C:\WINDOWS\ServicePackFiles\i386\mtxparhd.dll
+ 2004-08-04 01:29:38	452,736	------w	C:\WINDOWS\ServicePackFiles\i386\mtxparhm.sys
+ 2004-08-04 02:15:22	107,904	------w	C:\WINDOWS\ServicePackFiles\i386\mup.sys
+ 2004-08-04 02:04:52	12,672	------w	C:\WINDOWS\ServicePackFiles\i386\mutohpen.sys
+ 2004-08-19 19:09:36	91,648	------w	C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
+ 2004-08-04 02:10:30	85,376	------w	C:\WINDOWS\ServicePackFiles\i386
abtsfec.sys
+ 2004-08-19 19:09:36	221,184	------w	C:\WINDOWS\ServicePackFiles\i386
ac.dll
+ 2004-08-19 19:10:00	55,296	------w	C:\WINDOWS\ServicePackFiles\i386
arrator.exe
+ 2004-08-19 19:09:36	36,352	------w	C:\WINDOWS\ServicePackFiles\i386
cobjapi.dll
+ 2004-08-19 19:09:36	47,104	------w	C:\WINDOWS\ServicePackFiles\i386
cprov.dll
+ 2004-08-19 19:09:36	9,728	------w	C:\WINDOWS\ServicePackFiles\i386
cpsres.dll
+ 2004-08-19 19:09:36	18,432	------w	C:\WINDOWS\ServicePackFiles\i386
ddeapi.dll
+ 2004-08-19 19:10:00	4,096	------w	C:\WINDOWS\ServicePackFiles\i386
ddeapir.exe
+ 2004-08-19 19:09:36	19,456	------w	C:\WINDOWS\ServicePackFiles\i386
ddenb32.dll
+ 2004-08-04 02:14:30	182,912	------w	C:\WINDOWS\ServicePackFiles\i386
dis.sys
+ 2004-08-04 02:10:14	10,880	------w	C:\WINDOWS\ServicePackFiles\i386
disip.sys
+ 2004-08-19 19:09:36	57,344	------w	C:\WINDOWS\ServicePackFiles\i386
disnpp.dll
+ 2004-08-04 02:03:14	12,928	------w	C:\WINDOWS\ServicePackFiles\i386
disuio.sys
+ 2004-08-04 02:14:32	91,776	------w	C:\WINDOWS\ServicePackFiles\i386
diswan.sys
+ 2004-08-19 19:10:00	42,496	------w	C:\WINDOWS\ServicePackFiles\i386
et.exe
+ 2004-08-19 19:10:00	124,928	------w	C:\WINDOWS\ServicePackFiles\i386
et1.exe
+ 2004-08-19 19:09:36	332,288	------w	C:\WINDOWS\ServicePackFiles\i386
etapi32.dll
+ 2004-08-04 02:03:22	34,560	------w	C:\WINDOWS\ServicePackFiles\i386
etbios.sys
+ 2004-08-04 02:14:38	162,816	------w	C:\WINDOWS\ServicePackFiles\i386
etbt.sys
+ 2004-08-19 19:09:36	633,856	------w	C:\WINDOWS\ServicePackFiles\i386
etcfgx.dll
+ 2004-08-19 19:10:00	114,176	------w	C:\WINDOWS\ServicePackFiles\i386
etdde.exe
+ 2004-08-04 01:10:58	126,976	------w	C:\WINDOWS\ServicePackFiles\i386
etfxocm.dll
+ 2004-08-04 01:12:20	106,496	------w	C:\WINDOWS\ServicePackFiles\i386
etfxupdate.exe
+ 2004-08-19 19:09:36	144,896	------w	C:\WINDOWS\ServicePackFiles\i386
etid.dll
+ 2004-08-19 19:09:38	407,040	------w	C:\WINDOWS\ServicePackFiles\i386
etlogon.dll
+ 2004-08-19 19:09:38	198,144	------w	C:\WINDOWS\ServicePackFiles\i386
etman.dll
+ 2004-08-19 19:09:38	78,336	------w	C:\WINDOWS\ServicePackFiles\i386
etoc.dll
+ 2004-08-19 19:09:38	885,248	------w	C:\WINDOWS\ServicePackFiles\i386
etplwiz.dll
+ 2004-08-19 19:09:38	12,288	------w	C:\WINDOWS\ServicePackFiles\i386
etrap.dll
+ 2004-08-19 19:12:34	332,800	------w	C:\WINDOWS\ServicePackFiles\i386
etsetup.exe
+ 2004-08-19 19:10:00	88,576	------w	C:\WINDOWS\ServicePackFiles\i386
etsh.exe
+ 2004-08-19 19:09:38	1,723,904	------w	C:\WINDOWS\ServicePackFiles\i386
etshell.dll
+ 2004-08-19 19:10:00	37,888	------w	C:\WINDOWS\ServicePackFiles\i386
etstat.exe
+ 2004-08-19 19:09:38	83,456	------w	C:\WINDOWS\ServicePackFiles\i386
etui0.dll
+ 2004-08-19 19:09:38	245,760	------w	C:\WINDOWS\ServicePackFiles\i386
etui1.dll
+ 2004-08-19 19:03:26	132,695	------w	C:\WINDOWS\ServicePackFiles\i386
etwlan5.sys
+ 2004-08-19 19:09:38	251,392	------w	C:\WINDOWS\ServicePackFiles\i386
ewdev.dll
+ 2004-08-04 01:12:20	147,456	------w	C:\WINDOWS\ServicePackFiles\i386
gen.exe
+ 2004-08-04 01:58:30	61,824	------w	C:\WINDOWS\ServicePackFiles\i386
ic1394.sys
+ 2004-08-19 19:09:38	103,936	------w	C:\WINDOWS\ServicePackFiles\i386
lhtml.dll
+ 2004-08-19 19:09:38	229,376	------w	C:\WINDOWS\ServicePackFiles\i386
mas.dll
+ 2004-08-19 19:09:38	28,672	------w	C:\WINDOWS\ServicePackFiles\i386
masnt.dll
+ 2004-08-19 19:09:38	81,920	------w	C:\WINDOWS\ServicePackFiles\i386
mchat.dll
+ 2004-08-19 19:09:38	77,824	------w	C:\WINDOWS\ServicePackFiles\i386
mcom.dll
+ 2004-08-19 19:09:38	155,648	------w	C:\WINDOWS\ServicePackFiles\i386
mft.dll
+ 2004-08-19 19:09:38	28,672	------w	C:\WINDOWS\ServicePackFiles\i386
mmkcert.dll
+ 2004-08-04 01:59:52	40,320	------w	C:\WINDOWS\ServicePackFiles\i386
mnt.sys
+ 2004-08-19 19:09:38	172,032	------w	C:\WINDOWS\ServicePackFiles\i386
moldwb.dll
+ 2004-08-19 19:09:38	192,512	------w	C:\WINDOWS\ServicePackFiles\i386
mwb.dll
+ 2004-08-19 19:10:00	70,656	------w	C:\WINDOWS\ServicePackFiles\i386
otepad.exe
+ 2004-08-19 19:10:12	226,816	------w	C:\WINDOWS\ServicePackFiles\i386
pdrmv2.dll
+ 2004-08-19 19:09:38	364,544	------w	C:\WINDOWS\ServicePackFiles\i386
pdsplay.dll
+ 2004-08-04 02:00:44	30,848	------w	C:\WINDOWS\ServicePackFiles\i386
pfs.sys
+ 2004-08-19 19:10:00	15,360	------w	C:\WINDOWS\ServicePackFiles\i386
ppagent.exe
+ 2004-08-19 19:09:38	55,296	------w	C:\WINDOWS\ServicePackFiles\i386
pptools.dll
+ 2004-08-19 19:09:38	10,240	------w	C:\WINDOWS\ServicePackFiles\i386
pwmsdrm.dll
+ 2004-08-04 02:00:52	28,672	------w	C:\WINDOWS\ServicePackFiles\i386
scirda.sys
+ 2004-08-19 19:09:38	45,056	------w	C:\WINDOWS\ServicePackFiles\i386
sepm.dll
+ 2004-08-19 19:10:00	79,360	------w	C:\WINDOWS\ServicePackFiles\i386
slookup.exe
+ 2004-08-19 19:10:00	1,230,848	------w	C:\WINDOWS\ServicePackFiles\i386
tbackup.exe
+ 2004-08-04 01:38:34	47,564	------w	C:\WINDOWS\ServicePackFiles\i386
tdetect.com
+ 2004-08-19 19:09:16	733,184	------w	C:\WINDOWS\ServicePackFiles\i386
tdll.dll
+ 2004-08-19 19:09:38	67,072	------w	C:\WINDOWS\ServicePackFiles\i386
tdsapi.dll
+ 2004-08-19 19:09:38	212,992	------w	C:\WINDOWS\ServicePackFiles\i386
tevt.dll
+ 2004-08-04 02:15:10	574,592	------w	C:\WINDOWS\ServicePackFiles\i386
tfs.sys
+ 2004-08-04 01:45:26	34,000	------w	C:\WINDOWS\ServicePackFiles\i386
tio.sys
+ 2004-08-04 01:45:16	34,560	------w	C:\WINDOWS\ServicePackFiles\i386
tio404.sys
+ 2004-08-04 01:45:12	35,648	------w	C:\WINDOWS\ServicePackFiles\i386
tio411.sys
+ 2004-08-04 01:45:16	35,424	------w	C:\WINDOWS\ServicePackFiles\i386
tio412.sys
+ 2004-08-04 01:45:14	34,560	------w	C:\WINDOWS\ServicePackFiles\i386
tio804.sys
+ 2004-08-19 19:04:16	2,150,400	------w	C:\WINDOWS\ServicePackFiles\i386
tkrnlmp.exe
+ 2004-08-19 19:04:20	2,058,880	------w	C:\WINDOWS\ServicePackFiles\i386
tkrnlpa.exe
+ 2004-08-19 19:04:26	2,017,280	------w	C:\WINDOWS\ServicePackFiles\i386
tkrpamp.exe
+ 2004-08-19 19:09:38	43,520	------w	C:\WINDOWS\ServicePackFiles\i386
tlanman.dll
+ 2004-08-19 19:09:38	8,192	------w	C:\WINDOWS\ServicePackFiles\i386
tlsapi.dll
+ 2004-08-19 19:09:38	119,808	------w	C:\WINDOWS\ServicePackFiles\i386
tmarta.dll
+ 2004-08-19 19:09:38	40,960	------w	C:\WINDOWS\ServicePackFiles\i386
tmsapi.dll
+ 2004-08-19 19:09:38	181,248	------w	C:\WINDOWS\ServicePackFiles\i386
tmsdba.dll
+ 2004-08-19 19:09:38	496,640	------w	C:\WINDOWS\ServicePackFiles\i386
tmsmgr.dll
+ 2004-08-19 19:09:38	438,272	------w	C:\WINDOWS\ServicePackFiles\i386
tmssvc.dll
+ 2004-08-04 01:41:40	180,360	------w	C:\WINDOWS\ServicePackFiles\i386
tmtlfax.sys
+ 2004-08-19 19:09:38	63,488	------w	C:\WINDOWS\ServicePackFiles\i386
toc.dll
+ 2004-08-19 19:04:36	2,183,040	------w	C:\WINDOWS\ServicePackFiles\i386
toskrnl.exe
+ 2004-08-19 19:09:38	91,648	------w	C:\WINDOWS\ServicePackFiles\i386
tprint.dll
+ 2004-08-19 19:09:38	145,920	------w	C:\WINDOWS\ServicePackFiles\i386
tshrui.dll
+ 2004-08-19 19:10:00	420,864	------w	C:\WINDOWS\ServicePackFiles\i386
tvdm.exe
+ 2004-08-19 19:09:38	4,274,816	------w	C:\WINDOWS\ServicePackFiles\i386
v4_disp.dll
+ 2004-08-04 01:29:56	1,897,408	------w	C:\WINDOWS\ServicePackFiles\i386
v4_mini.sys
+ 2004-08-04 02:03:36	88,448	------w	C:\WINDOWS\ServicePackFiles\i386
wlnkipx.sys
+ 2004-08-19 19:09:38	147,968	------w	C:\WINDOWS\ServicePackFiles\i386
wprovau.dll
+ 2004-08-04 02:02:24	163,584	------w	C:\WINDOWS\ServicePackFiles\i386
wrdr.sys
+ 2004-08-19 19:09:38	64,000	------w	C:\WINDOWS\ServicePackFiles\i386
wwks.dll
+ 2004-08-19 19:09:38	267,776	------w	C:\WINDOWS\ServicePackFiles\i386\oakley.dll
+ 2004-08-19 19:09:38	288,768	------w	C:\WINDOWS\ServicePackFiles\i386\objsel.dll
+ 2004-08-19 19:08:44	445,440	------w	C:\WINDOWS\ServicePackFiles\i386\obrs040c.dll
+ 2004-08-19 19:09:38	97,280	------w	C:\WINDOWS\ServicePackFiles\i386\occache.dll
+ 2004-08-19 19:09:38	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\ocgen.dll
+ 2004-08-19 19:09:38	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\ocmsn.dll
+ 2004-07-17 14:36:44	26,224	------w	C:\WINDOWS\ServicePackFiles\i386\odbc16gt.dll
+ 2004-08-19 19:09:38	249,856	------w	C:\WINDOWS\ServicePackFiles\i386\odbc32.dll
+ 2004-08-19 19:09:38	16,384	------w	C:\WINDOWS\ServicePackFiles\i386\odbc32gt.dll
+ 2004-08-19 19:10:00	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
+ 2004-08-19 19:09:38	24,576	------w	C:\WINDOWS\ServicePackFiles\i386\odbcbcp.dll
+ 2004-08-19 19:09:38	135,168	------w	C:\WINDOWS\ServicePackFiles\i386\odbcconf.dll
+ 2004-08-19 19:10:00	69,632	------w	C:\WINDOWS\ServicePackFiles\i386\odbcconf.exe
+ 2004-08-19 19:09:38	106,496	------w	C:\WINDOWS\ServicePackFiles\i386\odbccp32.dll
+ 2004-08-19 19:09:38	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\odbccr32.dll
+ 2004-08-19 19:09:38	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\odbccu32.dll
+ 2004-08-19 19:08:44	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
+ 2004-08-19 19:08:44	61,712	------w	C:\WINDOWS\ServicePackFiles\i386\odbcji32.dll
+ 2004-08-19 19:09:38	278,559	------w	C:\WINDOWS\ServicePackFiles\i386\odbcjt32.dll
+ 2004-08-19 19:08:44	12,288	------w	C:\WINDOWS\ServicePackFiles\i386\odbcp32r.dll
+ 2004-08-19 19:09:38	147,456	------w	C:\WINDOWS\ServicePackFiles\i386\odbctrac.dll
+ 2004-08-19 19:09:38	20,511	------w	C:\WINDOWS\ServicePackFiles\i386\oddbse32.dll
+ 2004-08-19 19:09:38	20,510	------w	C:\WINDOWS\ServicePackFiles\i386\odexl32.dll
+ 2004-08-19 19:09:38	20,510	------w	C:\WINDOWS\ServicePackFiles\i386\odfox32.dll
+ 2004-08-19 19:09:38	20,510	------w	C:\WINDOWS\ServicePackFiles\i386\odpdx32.dll
+ 2004-08-19 19:09:38	20,511	------w	C:\WINDOWS\ServicePackFiles\i386\odtext32.dll
+ 2004-08-19 19:09:38	104,448	------w	C:\WINDOWS\ServicePackFiles\i386\oeimport.dll
+ 2004-08-19 19:10:00	60,928	------w	C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
+ 2004-08-19 19:09:38	35,840	------w	C:\WINDOWS\ServicePackFiles\i386\oemiglib.dll
+ 2004-08-19 19:09:38	120,832	------w	C:\WINDOWS\ServicePackFiles\i386\offfilt.dll
+ 2004-08-04 02:10:10	61,056	------w	C:\WINDOWS\ServicePackFiles\i386\ohci1394.sys
+ 2004-08-19 19:09:38	1,281,024	------w	C:\WINDOWS\ServicePackFiles\i386\ole32.dll
+ 2004-08-19 19:09:38	553,472	------w	C:\WINDOWS\ServicePackFiles\i386\oleaut32.dll
+ 2004-08-19 19:09:38	487,424	------w	C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
+ 2004-08-19 19:09:38	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\oledb32r.dll
+ 2004-08-19 19:09:38	110,592	------w	C:\WINDOWS\ServicePackFiles\i386\oleprn.dll
+ 2004-08-19 19:09:38	83,456	------w	C:\WINDOWS\ServicePackFiles\i386\olepro32.dll
+ 2004-08-19 19:10:00	51,712	------w	C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
+ 2004-08-19 19:09:38	713,728	------w	C:\WINDOWS\ServicePackFiles\i386\opengl32.dll
+ 2004-08-19 19:10:00	71,680	------w	C:\WINDOWS\ServicePackFiles\i386\opnfiles.exe
+ 2004-08-04 02:00:22	166,400	------w	C:\WINDOWS\ServicePackFiles\i386\oschoice.exe
+ 2004-08-19 19:10:02	216,576	------w	C:\WINDOWS\ServicePackFiles\i386\osk.exe
+ 2004-08-04 01:59:44	231,936	------w	C:\WINDOWS\ServicePackFiles\i386\osloader.exe
+ 2004-08-19 19:09:38	68,096	------w	C:\WINDOWS\ServicePackFiles\i386\osuninst.dll
+ 2004-08-19 19:09:38	116,224	------w	C:\WINDOWS\ServicePackFiles\i386\p2p.dll
+ 2004-08-19 19:09:38	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\p2pgasvc.dll
+ 2004-08-19 19:09:38	312,320	------w	C:\WINDOWS\ServicePackFiles\i386\p2pgraph.dll
+ 2004-08-19 19:09:38	88,064	------w	C:\WINDOWS\ServicePackFiles\i386\p2pnetsh.dll
+ 2004-08-19 19:09:38	526,848	------w	C:\WINDOWS\ServicePackFiles\i386\p2psvc.dll
+ 2004-08-19 18:51:42	46,720	------w	C:\WINDOWS\ServicePackFiles\i386\p3.sys
+ 2004-08-19 19:10:02	59,904	------w	C:\WINDOWS\ServicePackFiles\i386\packager.exe
+ 2004-08-19 18:51:44	80,384	------w	C:\WINDOWS\ServicePackFiles\i386\parport.sys
+ 2004-08-19 19:09:38	65,024	------w	C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
+ 2004-08-04 01:31:24	29,502	------w	C:\WINDOWS\ServicePackFiles\i386\pca200e.sys
+ 2004-08-19 19:09:38	102,400	------w	C:\WINDOWS\ServicePackFiles\i386\pchshell.dll
+ 2004-08-19 19:09:38	38,912	------w	C:\WINDOWS\ServicePackFiles\i386\pchsvc.dll
+ 2004-08-19 18:52:04	68,608	------w	C:\WINDOWS\ServicePackFiles\i386\pci.sys
+ 2004-08-04 01:59:42	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\pciidex.sys
+ 2004-08-19 19:08:46	679,936	------w	C:\WINDOWS\ServicePackFiles\i386\pcl5eres.dll
+ 2004-08-19 19:08:46	169,472	------w	C:\WINDOWS\ServicePackFiles\i386\pclxl.dll
+ 2004-08-19 18:52:10	120,320	------w	C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys
+ 2004-08-04 01:06:18	169,984	------w	C:\WINDOWS\ServicePackFiles\i386\pcx500.sys
+ 2004-08-19 19:09:38	286,208	------w	C:\WINDOWS\ServicePackFiles\i386\pdh.dll
+ 2004-08-04 01:12:20	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\perfcounter.dll
+ 2004-08-19 19:09:38	42,496	------w	C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll
+ 2004-08-19 19:09:38	27,136	------w	C:\WINDOWS\ServicePackFiles\i386\perfdisk.dll
+ 2004-08-19 19:10:02	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
+ 2004-08-19 19:09:38	26,624	------w	C:\WINDOWS\ServicePackFiles\i386\perfos.dll
+ 2004-08-19 19:09:38	35,840	------w	C:\WINDOWS\ServicePackFiles\i386\perfproc.dll
+ 2004-08-04 02:06:56	27,904	------w	C:\WINDOWS\ServicePackFiles\i386\perm2.sys
+ 2004-08-19 19:08:46	211,712	------w	C:\WINDOWS\ServicePackFiles\i386\perm2dll.dll
+ 2004-08-04 02:06:58	28,032	------w	C:\WINDOWS\ServicePackFiles\i386\perm3.sys
+ 2004-08-19 19:08:46	259,328	------w	C:\WINDOWS\ServicePackFiles\i386\perm3dd.dll
+ 2004-08-19 19:09:38	172,032	------w	C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
+ 2004-08-19 19:09:38	35,328	------w	C:\WINDOWS\ServicePackFiles\i386\pid.dll
+ 2004-08-19 19:09:08	24,064	------w	C:\WINDOWS\ServicePackFiles\i386\pidgen.dll
+ 2004-08-19 19:10:02	284,160	------w	C:\WINDOWS\ServicePackFiles\i386\pinball.exe
+ 2004-08-19 19:10:02	19,456	------w	C:\WINDOWS\ServicePackFiles\i386\ping.exe
+ 2004-08-19 19:09:38	15,360	------w	C:\WINDOWS\ServicePackFiles\i386\pjlmon.dll
+ 2004-08-19 19:09:38	44,544	------w	C:\WINDOWS\ServicePackFiles\i386\plotter.dll
+ 2004-08-19 19:09:38	53,760	------w	C:\WINDOWS\ServicePackFiles\i386\plotui.dll
+ 2004-08-19 19:09:38	39,424	------w	C:\WINDOWS\ServicePackFiles\i386\pngfilt.dll
+ 2004-08-19 19:09:38	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\pnrpnsp.dll
+ 2004-08-19 19:09:38	92,672	------w	C:\WINDOWS\ServicePackFiles\i386\policman.dll
+ 2004-08-19 19:09:38	106,496	------w	C:\WINDOWS\ServicePackFiles\i386\polstore.dll
+ 2004-08-04 02:15:50	145,792	------w	C:\WINDOWS\ServicePackFiles\i386\portcls.sys
+ 2004-08-19 19:10:02	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\powercfg.exe
+ 2004-08-19 19:09:40	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\powrprof.dll
+ 2004-08-04 02:00:18	17,664	------w	C:\WINDOWS\ServicePackFiles\i386\ppa3.sys
+ 2004-08-19 19:09:40	578,560	------w	C:\WINDOWS\ServicePackFiles\i386\printui.dll
+ 2004-08-19 18:53:28	39,552	------w	C:\WINDOWS\ServicePackFiles\i386\processr.sys
+ 2004-08-19 19:09:40	27,648	------w	C:\WINDOWS\ServicePackFiles\i386\profmap.dll
+ 2004-08-19 19:10:02	109,568	------w	C:\WINDOWS\ServicePackFiles\i386\progman.exe
+ 2004-08-19 19:10:04	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\proquota.exe
+ 2004-08-19 19:09:40	237,056	------w	C:\WINDOWS\ServicePackFiles\i386\provthrd.dll
+ 2004-08-19 19:10:04	9,728	------w	C:\WINDOWS\ServicePackFiles\i386\proxycfg.exe
+ 2004-08-19 19:09:40	134,656	------w	C:\WINDOWS\ServicePackFiles\i386\ps5ui.dll
+ 2004-08-19 19:09:40	23,040	------w	C:\WINDOWS\ServicePackFiles\i386\psapi.dll
+ 2004-08-19 19:09:40	98,816	------w	C:\WINDOWS\ServicePackFiles\i386\psbase.dll
+ 2004-08-04 02:04:20	69,120	------w	C:\WINDOWS\ServicePackFiles\i386\psched.sys
+ 2004-08-19 19:09:40	464,384	------w	C:\WINDOWS\ServicePackFiles\i386\pscript5.dll
+ 2004-08-19 19:09:40	363,520	------w	C:\WINDOWS\ServicePackFiles\i386\psisdecd.dll
+ 2004-08-19 19:09:40	43,520	------w	C:\WINDOWS\ServicePackFiles\i386\pstorec.dll
+ 2004-08-19 19:09:40	34,304	------w	C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll
+ 2004-08-19 19:09:40	159,232	------w	C:\WINDOWS\ServicePackFiles\i386\ptpusd.dll
+ 2004-08-19 19:09:40	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\pwsdata.dll
+ 2004-08-19 19:09:40	237,568	------w	C:\WINDOWS\ServicePackFiles\i386\qasf.dll
+ 2004-08-19 19:09:40	192,512	------w	C:\WINDOWS\ServicePackFiles\i386\qcap.dll
+ 2004-08-19 19:09:40	279,040	------w	C:\WINDOWS\ServicePackFiles\i386\qdv.dll
+ 2004-08-19 19:09:40	386,048	------w	C:\WINDOWS\ServicePackFiles\i386\qdvd.dll
+ 2004-08-19 19:09:40	563,200	------w	C:\WINDOWS\ServicePackFiles\i386\qedit.dll
+ 2004-08-19 19:08:48	733,696	------w	C:\WINDOWS\ServicePackFiles\i386\qedwipes.dll
+ 2004-08-04 02:00:06	6,016	------w	C:\WINDOWS\ServicePackFiles\i386\qic157.sys
+ 2004-08-19 19:09:40	382,464	------w	C:\WINDOWS\ServicePackFiles\i386\qmgr.dll
+ 2004-08-19 19:09:40	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\qmgrprxy.dll
+ 2004-08-19 19:10:04	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\qprocess.exe
+ 2004-08-19 19:09:40	1,293,824	------w	C:\WINDOWS\ServicePackFiles\i386\quartz.dll
+ 2004-08-19 19:09:40	1,440,768	------w	C:\WINDOWS\ServicePackFiles\i386\query.dll
+ 2004-08-19 19:09:40	43,520	------w	C:\WINDOWS\ServicePackFiles\i386acpldlg.dll
+ 2004-08-04 02:00:52	20,736	------w	C:\WINDOWS\ServicePackFiles\i386amdisk.sys
+ 2004-08-19 19:09:40	8,192	------w	C:\WINDOWS\ServicePackFiles\i386asadhlp.dll
+ 2004-08-19 19:09:40	237,056	------w	C:\WINDOWS\ServicePackFiles\i386asapi32.dll
+ 2004-08-19 19:09:40	89,088	------w	C:\WINDOWS\ServicePackFiles\i386asauto.dll
+ 2004-08-19 19:09:40	69,632	------w	C:\WINDOWS\ServicePackFiles\i386aschap.dll
+ 2004-08-19 19:09:40	685,056	------w	C:\WINDOWS\ServicePackFiles\i386asdlg.dll
+ 2004-08-04 02:14:24	51,328	------w	C:\WINDOWS\ServicePackFiles\i386asl2tp.sys
+ 2004-08-19 19:09:40	61,440	------w	C:\WINDOWS\ServicePackFiles\i386asman.dll
+ 2004-08-19 19:09:40	174,080	------w	C:\WINDOWS\ServicePackFiles\i386asmans.dll
+ 2004-08-19 19:10:04	57,344	------w	C:\WINDOWS\ServicePackFiles\i386asphone.exe
+ 2004-08-19 19:09:40	206,336	------w	C:\WINDOWS\ServicePackFiles\i386asppp.dll
+ 2004-08-04 02:05:08	41,472	------w	C:\WINDOWS\ServicePackFiles\i386aspppoe.sys
+ 2004-08-04 02:14:28	48,384	------w	C:\WINDOWS\ServicePackFiles\i386aspptp.sys
+ 2004-08-19 19:09:40	16,896	------w	C:\WINDOWS\ServicePackFiles\i386assapi.dll
+ 2004-08-19 19:09:40	58,880	------w	C:\WINDOWS\ServicePackFiles\i386astapi.dll
+ 2004-08-19 19:09:40	113,152	------w	C:\WINDOWS\ServicePackFiles\i386astls.dll
+ 2004-08-19 19:09:40	103,424	------w	C:\WINDOWS\ServicePackFiles\i386cbdyctl.dll
+ 2004-08-19 19:10:04	35,840	------w	C:\WINDOWS\ServicePackFiles\i386cimlby.exe
+ 2004-08-19 19:10:04	23,040	------w	C:\WINDOWS\ServicePackFiles\i386cp.exe
+ 2004-08-04 02:20:08	176,512	------w	C:\WINDOWS\ServicePackFiles\i386dbss.sys
+ 2004-08-19 19:09:40	147,968	------w	C:\WINDOWS\ServicePackFiles\i386dchost.dll
+ 2004-08-19 19:10:04	62,464	------w	C:\WINDOWS\ServicePackFiles\i386dpclip.exe
+ 2004-08-19 19:10:20	92,168	------w	C:\WINDOWS\ServicePackFiles\i386dpdd.dll
+ 2004-08-04 02:01:16	196,864	------w	C:\WINDOWS\ServicePackFiles\i386dpdr.sys
+ 2004-08-19 19:09:40	19,968	------w	C:\WINDOWS\ServicePackFiles\i386dpsnd.dll
+ 2004-08-19 19:10:20	139,400	------w	C:\WINDOWS\ServicePackFiles\i386dpwd.sys
+ 2004-08-19 19:10:20	87,176	------w	C:\WINDOWS\ServicePackFiles\i386dpwsx.dll
+ 2004-08-19 19:10:04	13,824	------w	C:\WINDOWS\ServicePackFiles\i386dsaddin.exe
+ 2004-08-19 19:10:04	67,072	------w	C:\WINDOWS\ServicePackFiles\i386dshost.exe
+ 2004-08-04 01:41:40	13,776	------w	C:\WINDOWS\ServicePackFiles\i386ecagent.sys
+ 2004-08-19 18:54:52	58,496	------w	C:\WINDOWS\ServicePackFiles\i386edbook.sys
+ 2004-08-04 01:48:48	3,352	------w	C:\WINDOWS\ServicePackFiles\i386edir.exe
+ 2004-08-19 19:10:04	53,248	------w	C:\WINDOWS\ServicePackFiles\i386eg.exe

Deirheim · Answer

+ 2004-08-19 19:09:40	49,664	------w	C:\WINDOWS\ServicePackFiles\i386egapi.dll
+ 2004-07-19 21:54:16	28,672	------w	C:\WINDOWS\ServicePackFiles\i386egasm.exe
+ 2004-07-19 21:54:16	32,768	------w	C:\WINDOWS\ServicePackFiles\i386egcode.dll
+ 2004-08-19 19:10:04	153,088	------w	C:\WINDOWS\ServicePackFiles\i386egedit.exe
+ 2004-08-19 19:09:40	59,904	------w	C:\WINDOWS\ServicePackFiles\i386egsvc.dll
+ 2004-07-19 21:54:16	11,264	------w	C:\WINDOWS\ServicePackFiles\i386egsvcs.exe
+ 2004-08-19 19:10:04	12,288	------w	C:\WINDOWS\ServicePackFiles\i386egsvr32.exe
+ 2004-08-19 19:09:40	405,504	------w	C:\WINDOWS\ServicePackFiles\i386egwizc.dll
+ 2004-08-19 19:09:40	61,952	------w	C:\WINDOWS\ServicePackFiles\i386emotepg.dll
+ 2004-08-19 19:09:40	177,152	------w	C:\WINDOWS\ServicePackFiles\i386epdrvfs.dll
+ 2004-08-19 19:09:40	58,880	------w	C:\WINDOWS\ServicePackFiles\i386esutils.dll
+ 2004-08-19 19:10:04	14,848	------w	C:\WINDOWS\ServicePackFiles\i386exec.exe
+ 2004-08-04 02:10:40	59,648	------w	C:\WINDOWS\ServicePackFiles\i386fcomm.sys
+ 2004-08-19 19:09:40	124,416	------w	C:\WINDOWS\ServicePackFiles\i386iafres.dll
+ 2004-08-19 19:09:40	12,288	------w	C:\WINDOWS\ServicePackFiles\i386iafui1.dll
+ 2004-08-19 19:09:40	12,288	------w	C:\WINDOWS\ServicePackFiles\i386iafui2.dll
+ 2004-08-19 19:09:40	431,616	------w	C:\WINDOWS\ServicePackFiles\i386iched20.dll
+ 2004-08-04 02:04:32	30,080	------w	C:\WINDOWS\ServicePackFiles\i386ndismp.sys
+ 2004-08-04 02:04:32	30,080	------w	C:\WINDOWS\ServicePackFiles\i386ndismpx.sys
+ 2004-08-19 18:55:34	79,360	------w	C:\WINDOWS\ServicePackFiles\i386ocket.sys
+ 2004-08-19 19:09:40	4,096	------w	C:\WINDOWS\ServicePackFiles\i386pcref.dll
+ 2004-08-19 19:09:40	581,120	------w	C:\WINDOWS\ServicePackFiles\i386pcrt4.dll
+ 2004-08-19 19:09:40	395,776	------w	C:\WINDOWS\ServicePackFiles\i386pcss.dll
+ 2004-08-19 19:09:40	61,440	------w	C:\WINDOWS\ServicePackFiles\i386rcm.dll
+ 2004-08-04 01:31:44	152,576	------w	C:\WINDOWS\ServicePackFiles\i386saenh.dll
+ 2004-08-19 19:10:04	15,872	------w	C:\WINDOWS\ServicePackFiles\i386sh.exe
+ 2004-08-19 19:09:40	40,960	------w	C:\WINDOWS\ServicePackFiles\i386shx32.dll
+ 2004-08-19 19:09:40	18,944	------w	C:\WINDOWS\ServicePackFiles\i386smps.dll
+ 2004-08-19 19:10:04	107,520	------w	C:\WINDOWS\ServicePackFiles\i386snotify.exe
+ 2004-08-19 19:10:04	384,512	------w	C:\WINDOWS\ServicePackFiles\i386strui.exe
+ 2004-08-19 19:10:04	78,336	------w	C:\WINDOWS\ServicePackFiles\i386tcshare.exe
+ 2004-08-19 19:09:40	31,744	------w	C:\WINDOWS\ServicePackFiles\i386tipxmib.dll
+ 2004-08-04 01:31:34	20,992	------w	C:\WINDOWS\ServicePackFiles\i386tl8139.sys
+ 2004-08-19 19:09:40	44,032	------w	C:\WINDOWS\ServicePackFiles\i386tutils.dll
+ 2004-08-19 19:10:04	33,792	------w	C:\WINDOWS\ServicePackFiles\i386undll32.exe
+ 2004-08-19 19:10:04	14,336	------w	C:\WINDOWS\ServicePackFiles\i386unonce.exe
+ 2004-08-19 19:09:40	9,728	------w	C:\WINDOWS\ServicePackFiles\i386wnh.dll
+ 2004-08-19 19:09:40	397,056	------w	C:\WINDOWS\ServicePackFiles\i386\s3gnb.dll
+ 2004-08-04 01:29:52	166,912	------w	C:\WINDOWS\ServicePackFiles\i386\s3gnbm.sys
+ 2004-08-19 19:09:40	43,520	------w	C:\WINDOWS\ServicePackFiles\i386\safrcdlg.dll
+ 2004-08-19 19:09:40	29,696	------w	C:\WINDOWS\ServicePackFiles\i386\safrdm.dll
+ 2004-08-19 19:09:40	45,568	------w	C:\WINDOWS\ServicePackFiles\i386\safrslv.dll
+ 2004-08-19 19:09:40	64,000	------w	C:\WINDOWS\ServicePackFiles\i386\samlib.dll
+ 2004-08-19 19:09:40	431,104	------w	C:\WINDOWS\ServicePackFiles\i386\samsrv.dll
+ 2004-08-19 19:09:40	741,376	------w	C:\WINDOWS\ServicePackFiles\i386\sapi.dll
+ 2004-08-19 19:10:04	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\savedump.exe
+ 2004-08-19 19:09:40	270,848	------w	C:\WINDOWS\ServicePackFiles\i386\sbe.dll
+ 2004-08-19 19:09:40	159,232	------w	C:\WINDOWS\ServicePackFiles\i386\sbeio.dll
+ 2004-08-04 01:59:58	43,136	------w	C:\WINDOWS\ServicePackFiles\i386\sbp2port.sys
+ 2004-08-19 19:09:40	71,168	------w	C:\WINDOWS\ServicePackFiles\i386\scarddlg.dll
+ 2004-08-19 19:10:04	100,352	------w	C:\WINDOWS\ServicePackFiles\i386\scardsvr.exe
+ 2004-08-04 01:31:44	169,984	------w	C:\WINDOWS\ServicePackFiles\i386\sccbase.dll
+ 2004-08-19 19:09:40	171,520	------w	C:\WINDOWS\ServicePackFiles\i386\sccsccp.dll
+ 2004-08-19 19:09:40	186,368	------w	C:\WINDOWS\ServicePackFiles\i386\scecli.dll
+ 2004-08-19 19:09:40	328,704	------w	C:\WINDOWS\ServicePackFiles\i386\scesrv.dll
+ 2004-08-19 19:09:40	144,896	------w	C:\WINDOWS\ServicePackFiles\i386\schannel.dll
+ 2004-08-19 19:09:40	193,024	------w	C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll
+ 2004-08-19 19:09:40	22,016	------w	C:\WINDOWS\ServicePackFiles\i386\sclgntfy.dll
+ 2004-08-19 19:10:04	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\scrcons.exe
+ 2004-08-19 19:09:40	204,800	------w	C:\WINDOWS\ServicePackFiles\i386\script.dll
+ 2004-08-19 19:09:40	189,440	------w	C:\WINDOWS\ServicePackFiles\i386\script_a.dll
+ 2004-08-19 19:10:08	9,216	------w	C:\WINDOWS\ServicePackFiles\i386\scrnsave.scr
+ 2004-08-19 19:09:40	159,744	------w	C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
+ 2004-08-19 19:09:40	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\scrrun.dll
+ 2004-08-04 01:59:42	96,256	------w	C:\WINDOWS\ServicePackFiles\i386\scsiport.sys
+ 2004-08-19 19:10:04	130,560	------w	C:\WINDOWS\ServicePackFiles\i386\sctasks.exe
+ 2004-08-19 19:10:04	78,848	------w	C:\WINDOWS\ServicePackFiles\i386\sdbinst.exe
+ 2004-08-04 02:07:48	67,584	------w	C:\WINDOWS\ServicePackFiles\i386\sdbus.sys
+ 2004-08-19 19:09:40	29,184	------w	C:\WINDOWS\ServicePackFiles\i386\sdhcinst.dll
+ 2004-07-17 14:36:38	27,440	------w	C:\WINDOWS\ServicePackFiles\i386\secdrv.sys
+ 2004-08-19 19:10:04	19,456	------w	C:\WINDOWS\ServicePackFiles\i386\secedit.exe
+ 2004-08-19 19:09:40	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\seclogon.dll
+ 2004-08-02 17:20:40	4,569	------w	C:\WINDOWS\ServicePackFiles\i386\secupd.dat
+ 2004-08-19 19:09:40	55,808	------w	C:\WINDOWS\ServicePackFiles\i386\secur32.dll
+ 2004-08-19 19:09:40	5,632	------w	C:\WINDOWS\ServicePackFiles\i386\security.dll
+ 2004-08-19 19:09:40	29,696	------w	C:\WINDOWS\ServicePackFiles\i386\sendcmsg.dll
+ 2004-08-19 19:09:40	55,296	------w	C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
+ 2004-08-19 19:09:42	38,912	------w	C:\WINDOWS\ServicePackFiles\i386\sens.dll
+ 2004-08-19 19:09:42	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\sensapi.dll
+ 2004-08-19 19:09:42	221,696	------w	C:\WINDOWS\ServicePackFiles\i386\seo.dll
+ 2004-08-04 01:59:08	15,488	------w	C:\WINDOWS\ServicePackFiles\i386\serenum.sys
+ 2004-08-19 18:56:40	66,560	------w	C:\WINDOWS\ServicePackFiles\i386\serial.sys
+ 2004-08-19 19:09:42	56,320	------w	C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
+ 2004-08-19 19:10:04	108,544	------w	C:\WINDOWS\ServicePackFiles\i386\services.exe
+ 2004-08-19 19:10:04	142,336	------w	C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe
+ 2004-08-19 19:10:04	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\sethc.exe
+ 2004-08-04 01:12:22	102,400	------w	C:\WINDOWS\ServicePackFiles\i386\setregni.exe
+ 2004-08-19 19:10:04	23,040	------w	C:\WINDOWS\ServicePackFiles\i386\setup.exe
+ 2004-08-19 19:10:04	778,240	------w	C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
+ 2004-08-19 19:10:04	73,728	------w	C:\WINDOWS\ServicePackFiles\i386\setup50.exe
+ 2004-08-19 19:09:42	1,003,520	------w	C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
+ 2004-08-19 19:09:42	101,888	------w	C:\WINDOWS\ServicePackFiles\i386\setupqry.dll
+ 2004-08-19 19:09:42	5,120	------w	C:\WINDOWS\ServicePackFiles\i386\sfc.dll
+ 2004-08-19 19:09:42	142,336	------w	C:\WINDOWS\ServicePackFiles\i386\sfc_os.dll
+ 2004-08-19 19:09:42	1,548,288	------w	C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll
+ 2004-08-04 01:59:56	11,136	------w	C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys
+ 2004-08-04 01:59:56	10,240	------w	C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys
+ 2004-08-04 01:59:56	11,392	------w	C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys
+ 2004-08-19 19:08:52	572,416	------w	C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
+ 2004-08-19 19:09:42	1,483,776	------w	C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
+ 2004-08-19 19:09:42	8,440,320	------w	C:\WINDOWS\ServicePackFiles\i386\shell32.dll
+ 2004-08-19 19:09:42	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\shfolder.dll
+ 2004-08-19 19:09:42	68,096	------w	C:\WINDOWS\ServicePackFiles\i386\shgina.dll
+ 2004-08-19 19:09:42	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\shimeng.dll
+ 2004-08-19 19:09:42	440,320	------w	C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
+ 2004-08-19 19:09:42	474,112	------w	C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
+ 2004-08-19 19:09:42	153,088	------w	C:\WINDOWS\ServicePackFiles\i386\shmedia.dll
+ 2004-08-19 19:10:04	42,496	------w	C:\WINDOWS\ServicePackFiles\i386\shmgrate.exe
+ 2004-08-19 19:10:04	78,848	------w	C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
+ 2004-08-19 19:09:42	28,160	------w	C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
+ 2004-08-19 19:09:42	135,168	------w	C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll
+ 2004-08-19 19:09:42	20,536	------w	C:\WINDOWS\ServicePackFiles\i386\shtml.dll
+ 2004-08-19 19:10:04	16,437	------w	C:\WINDOWS\ServicePackFiles\i386\shtml.exe
+ 2004-08-19 19:10:04	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\shutdown.exe
+ 2004-08-19 19:09:42	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\sigtab.dll
+ 2004-08-19 19:10:04	71,168	------w	C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
+ 2004-08-19 19:09:42	3,901	------w	C:\WINDOWS\ServicePackFiles\i386\siint5.dll
+ 2004-08-04 02:07:44	41,088	------w	C:\WINDOWS\ServicePackFiles\i386\sisagp.sys
+ 2004-08-04 01:31:36	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\sisnic.sys
+ 2004-08-19 19:10:04	26,112	------w	C:\WINDOWS\ServicePackFiles\i386\skeys.exe
+ 2004-08-04 01:31:42	63,547	------w	C:\WINDOWS\ServicePackFiles\i386\sla30nd5.sys
+ 2004-08-19 19:09:42	25,600	------w	C:\WINDOWS\ServicePackFiles\i386\slayerxp.dll
+ 2004-08-04 01:31:44	306,176	------w	C:\WINDOWS\ServicePackFiles\i386\slbcsp.dll
+ 2004-08-19 19:09:42	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\slbiop.dll
+ 2004-08-19 19:09:42	73,832	------w	C:\WINDOWS\ServicePackFiles\i386\slcoinst.dll
+ 2004-08-19 19:09:42	286,792	------w	C:\WINDOWS\ServicePackFiles\i386\slextspk.dll
+ 2004-08-19 19:09:42	188,508	------w	C:\WINDOWS\ServicePackFiles\i386\slgen.dll
+ 2004-08-04 02:10:18	11,136	------w	C:\WINDOWS\ServicePackFiles\i386\slip.sys
+ 2004-08-04 01:41:42	129,535	------w	C:\WINDOWS\ServicePackFiles\i386\slnt7554.sys
+ 2004-08-04 01:41:44	404,990	------w	C:\WINDOWS\ServicePackFiles\i386\slntamr.sys
+ 2004-08-04 01:41:46	95,424	------w	C:\WINDOWS\ServicePackFiles\i386\slnthal.sys
+ 2004-08-19 19:10:04	32,866	------w	C:\WINDOWS\ServicePackFiles\i386\slrundll.exe
+ 2004-08-19 19:10:04	73,796	------w	C:\WINDOWS\ServicePackFiles\i386\slserv.exe
+ 2004-08-04 01:41:46	13,240	------w	C:\WINDOWS\ServicePackFiles\i386\slwdmsup.sys
+ 2004-08-04 02:07:38	6,016	------w	C:\WINDOWS\ServicePackFiles\i386\smbali.sys
+ 2004-08-04 02:07:36	16,128	------w	C:\WINDOWS\ServicePackFiles\i386\smbbatt.sys
+ 2004-08-04 02:07:36	6,912	------w	C:\WINDOWS\ServicePackFiles\i386\smbclass.sys
+ 2004-08-19 19:10:04	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\smbinst.exe
+ 2004-08-19 19:10:04	236,544	------w	C:\WINDOWS\ServicePackFiles\i386\smi2smir.exe
+ 2004-08-19 19:09:42	370,688	------w	C:\WINDOWS\ServicePackFiles\i386\smlogcfg.dll
+ 2004-08-19 19:10:04	93,184	------w	C:\WINDOWS\ServicePackFiles\i386\smlogsvc.exe
+ 2004-08-19 19:10:04	50,688	------w	C:\WINDOWS\ServicePackFiles\i386\smss.exe
+ 2004-08-19 19:09:42	189,440	------w	C:\WINDOWS\ServicePackFiles\i386\smtpadm.dll
+ 2004-08-19 19:09:42	10,752	------w	C:\WINDOWS\ServicePackFiles\i386\smtpapi.dll
+ 2004-08-19 19:09:44	2,134,528	------w	C:\WINDOWS\ServicePackFiles\i386\smtpsnap.dll
+ 2004-08-19 19:09:44	466,944	------w	C:\WINDOWS\ServicePackFiles\i386\smtpsvc.dll
+ 2004-08-19 19:10:04	133,120	------w	C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
+ 2004-08-19 19:09:44	34,816	------w	C:\WINDOWS\ServicePackFiles\i386\sniffpol.dll
+ 2004-08-19 19:10:04	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\snmp.exe
+ 2004-08-19 19:09:44	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\snmpapi.dll
+ 2004-08-19 19:09:44	259,072	------w	C:\WINDOWS\ServicePackFiles\i386\snmpcl.dll
+ 2004-08-19 19:09:44	358,400	------w	C:\WINDOWS\ServicePackFiles\i386\snmpincl.dll
+ 2004-08-19 19:09:44	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\snmpmib.dll
+ 2004-08-19 19:09:44	188,416	------w	C:\WINDOWS\ServicePackFiles\i386\snmpsmir.dll
+ 2004-08-19 19:09:44	184,320	------w	C:\WINDOWS\ServicePackFiles\i386\snmpsnap.dll
+ 2004-08-19 19:09:44	40,448	------w	C:\WINDOWS\ServicePackFiles\i386\snmpthrd.dll
+ 2004-08-19 19:10:04	8,704	------w	C:\WINDOWS\ServicePackFiles\i386\snmptrap.exe
+ 2004-08-19 19:09:44	130,048	------w	C:\WINDOWS\ServicePackFiles\i386\softkbd.dll
+ 2004-08-04 02:00:06	7,552	------w	C:\WINDOWS\ServicePackFiles\i386\sonyait.sys
+ 2004-08-04 02:09:56	25,472	------w	C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys
+ 2004-08-19 19:10:04	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\spdwnwxp.exe
+ 2004-08-19 19:08:56	62,976	------w	C:\WINDOWS\ServicePackFiles\i386\spgrmr.dll
+ 2004-08-19 19:10:04	539,136	------w	C:\WINDOWS\ServicePackFiles\i386\spider.exe
+ 2004-08-04 01:59:36	12,800	------w	C:\WINDOWS\ServicePackFiles\i386\spiisupd.exe
+ 2004-08-04 02:07:48	6,400	------w	C:\WINDOWS\ServicePackFiles\i386\splitter.sys
+ 2004-08-19 19:10:04	11,776	------w	C:\WINDOWS\ServicePackFiles\i386\spnpinst.exe
+ 2004-08-19 19:09:44	74,752	------w	C:\WINDOWS\ServicePackFiles\i386\spoolss.dll
+ 2004-08-19 19:10:04	57,856	------w	C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe
+ 2004-08-19 19:08:56	197,632	------w	C:\WINDOWS\ServicePackFiles\i386\sprs040c.dll
+ 2004-08-19 19:08:58	2,986,496	------w	C:\WINDOWS\ServicePackFiles\i386\sprt040c.dll
+ 2004-08-19 19:09:44	272,384	------w	C:\WINDOWS\ServicePackFiles\i386\sptip.dll
+ 2004-08-19 19:10:04	21,504	------w	C:\WINDOWS\ServicePackFiles\i386\spupdwxp.exe
+ 2004-08-19 19:09:46	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\sqldb20.dll
+ 2004-08-19 19:09:46	528,384	------w	C:\WINDOWS\ServicePackFiles\i386\sqloledb.dll
+ 2004-08-19 19:09:46	462,848	------w	C:\WINDOWS\ServicePackFiles\i386\sqlqp20.dll
+ 2004-08-19 19:09:46	110,592	------w	C:\WINDOWS\ServicePackFiles\i386\sqlse20.dll
+ 2004-08-19 19:09:46	442,368	------w	C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.dll
+ 2004-08-19 19:09:46	180,800	------w	C:\WINDOWS\ServicePackFiles\i386\sqlunirl.dll
+ 2004-08-19 19:09:46	217,088	------w	C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.dll
+ 2004-08-19 19:04:58	73,600	------w	C:\WINDOWS\ServicePackFiles\i386\sr.sys
+ 2004-08-19 19:09:46	58,434	------w	C:\WINDOWS\ServicePackFiles\i386\srchctls.dll
+ 2004-08-19 19:09:46	726,590	------w	C:\WINDOWS\ServicePackFiles\i386\srchui.dll
+ 2004-08-19 19:09:46	67,584	------w	C:\WINDOWS\ServicePackFiles\i386\srclient.dll
+ 2004-08-19 19:09:46	241,664	------w	C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
+ 2004-08-19 19:09:46	171,008	------w	C:\WINDOWS\ServicePackFiles\i386\srsvc.dll
+ 2004-08-04 02:14:46	336,256	------w	C:\WINDOWS\ServicePackFiles\i386\srv.sys
+ 2004-08-19 19:09:46	96,768	------w	C:\WINDOWS\ServicePackFiles\i386\srvsvc.dll
+ 2004-08-19 19:10:08	708,608	------w	C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr
+ 2004-08-19 19:10:08	19,968	------w	C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr
+ 2004-08-19 19:09:46	34,816	------w	C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll
+ 2004-08-19 19:09:46	71,680	------w	C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll
+ 2004-08-19 19:10:08	393,216	------w	C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr
+ 2004-08-19 19:09:46	45,568	------w	C:\WINDOWS\ServicePackFiles\i386\ssinc51.dll
+ 2004-08-19 19:10:08	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr
+ 2004-08-19 19:10:08	47,104	------w	C:\WINDOWS\ServicePackFiles\i386\ssmypics.scr
+ 2004-08-19 19:10:08	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr
+ 2004-08-19 19:09:46	46,592	------w	C:\WINDOWS\ServicePackFiles\i386\sspifilt.dll
+ 2004-08-19 19:10:08	610,304	------w	C:\WINDOWS\ServicePackFiles\i386\sspipes.scr
+ 2004-08-19 19:10:08	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\ssstars.scr
+ 2004-08-19 19:10:08	684,032	------w	C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr
+ 2004-08-19 19:09:46	33,280	------w	C:\WINDOWS\ServicePackFiles\i386\sstub.dll
+ 2004-08-19 19:09:46	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\staxmem.dll
+ 2004-08-19 19:09:46	86,528	------w	C:\WINDOWS\ServicePackFiles\i386\stdprov.dll
+ 2004-08-19 19:09:46	68,096	------w	C:\WINDOWS\ServicePackFiles\i386\sti.dll
+ 2004-08-19 19:09:46	138,240	------w	C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
+ 2004-08-19 19:10:04	14,848	------w	C:\WINDOWS\ServicePackFiles\i386\stimon.exe
+ 2004-08-19 19:09:46	122,368	------w	C:\WINDOWS\ServicePackFiles\i386\stobject.dll
+ 2004-08-19 19:09:46	76,800	------w	C:\WINDOWS\ServicePackFiles\i386\storprop.dll
+ 2004-08-04 02:08:04	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\stream.sys
+ 2004-08-04 02:10:14	15,360	------w	C:\WINDOWS\ServicePackFiles\i386\streamip.sys
+ 2004-08-19 19:09:46	246,302	------w	C:\WINDOWS\ServicePackFiles\i386\strmdll.dll
+ 2004-08-19 19:09:46	75,776	------w	C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll
+ 2004-08-19 19:10:04	16,449	------w	C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe
+ 2004-08-19 19:10:04	65,601	------w	C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2004-08-19 19:09:46	46,592	------w	C:\WINDOWS\ServicePackFiles\i386\svcext51.dll
+ 2004-08-19 19:10:04	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\svchost.exe
+ 2004-08-04 01:58:42	4,352	------w	C:\WINDOWS\ServicePackFiles\i386\swenum.sys
+ 2004-08-19 19:09:46	716,800	------w	C:\WINDOWS\ServicePackFiles\i386\sxs.dll
+ 2004-07-19 21:54:18	1,179,648	------w	C:\WINDOWS\ServicePackFiles\i386\sy52106.dll
+ 2004-08-19 19:09:46	57,856	------w	C:\WINDOWS\ServicePackFiles\i386\synceng.dll
+ 2004-08-19 19:09:46	197,120	------w	C:\WINDOWS\ServicePackFiles\i386\syncui.dll
+ 2004-08-04 02:15:56	60,800	------w	C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys
+ 2004-08-19 19:09:46	169,472	------w	C:\WINDOWS\ServicePackFiles\i386\sysmod.dll
+ 2004-08-19 19:09:46	155,648	------w	C:\WINDOWS\ServicePackFiles\i386\sysmod_a.dll
+ 2004-08-19 19:10:04	107,520	------w	C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
+ 2004-08-19 19:09:46	1,005,056	------w	C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
+ 2004-07-19 21:54:18	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\system.configuration.install.dll
+ 2004-07-19 21:54:18	1,179,648	------w	C:\WINDOWS\ServicePackFiles\i386\system.data.dll
+ 2004-07-19 21:54:18	1,695,744	------w	C:\WINDOWS\ServicePackFiles\i386\system.design.dll
+ 2004-07-19 21:54:18	86,016	------w	C:\WINDOWS\ServicePackFiles\i386\system.directoryservices.dll
+ 2004-07-19 21:54:18	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\system.drawing.design.dll
+ 2004-07-19 21:54:18	462,848	------w	C:\WINDOWS\ServicePackFiles\i386\system.drawing.dll
+ 2004-07-19 21:54:18	212,992	------w	C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.dll
+ 2004-08-04 01:12:34	48,640	------w	C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
+ 2004-07-19 21:54:18	352,256	------w	C:\WINDOWS\ServicePackFiles\i386\system.management.dll
+ 2004-07-19 21:54:18	241,664	------w	C:\WINDOWS\ServicePackFiles\i386\system.messaging.dll
+ 2004-07-19 21:54:20	311,296	------w	C:\WINDOWS\ServicePackFiles\i386\system.runtime.remoting.dll
+ 2004-07-19 21:54:20	131,072	------w	C:\WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
+ 2004-07-19 21:54:20	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\system.security.dll
+ 2004-07-19 21:54:20	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\system.serviceprocess.dll
+ 2004-07-19 21:54:20	1,200,128	------w	C:\WINDOWS\ServicePackFiles\i386\system.web.dll
+ 2004-07-19 21:54:20	61,440	------w	C:\WINDOWS\ServicePackFiles\i386\system.web.regularexpressions.dll
+ 2004-07-19 21:54:20	507,904	------w	C:\WINDOWS\ServicePackFiles\i386\system.web.services.dll
+ 2004-07-19 21:54:22	2,002,944	------w	C:\WINDOWS\ServicePackFiles\i386\system.windows.forms.dll
+ 2004-07-19 21:54:22	1,302,528	------w	C:\WINDOWS\ServicePackFiles\i386\system.xml.dll
+ 2004-08-19 19:09:46	210,432	------w	C:\WINDOWS\ServicePackFiles\i386	2embed.dll
+ 2004-08-19 19:09:46	34,304	------w	C:\WINDOWS\ServicePackFiles\i386	abletoc.dll
+ 2004-08-04 02:00:00	14,976	------w	C:\WINDOWS\ServicePackFiles\i386	ape.sys
+ 2004-08-19 19:09:48	860,160	------w	C:\WINDOWS\ServicePackFiles\i386	api3.dll
+ 2004-08-19 19:09:48	181,760	------w	C:\WINDOWS\ServicePackFiles\i386	api32.dll
+ 2004-08-19 19:09:48	246,272	------w	C:\WINDOWS\ServicePackFiles\i386	apisrv.dll
+ 2004-08-19 19:10:04	143,360	------w	C:\WINDOWS\ServicePackFiles\i386	askmgr.exe
+ 2004-08-04 02:14:42	359,040	------w	C:\WINDOWS\ServicePackFiles\i386	cpip.sys
+ 2004-08-04 02:07:46	223,616	------w	C:\WINDOWS\ServicePackFiles\i386	cpip6.sys
+ 2004-08-19 19:09:48	14,848	------w	C:\WINDOWS\ServicePackFiles\i386	cpmib.dll
+ 2004-08-19 19:09:48	46,592	------w	C:\WINDOWS\ServicePackFiles\i386	cpmon.dll
+ 2004-08-19 19:09:48	47,104	------w	C:\WINDOWS\ServicePackFiles\i386	cpmonui.dll
+ 2004-08-19 19:10:04	32,827	------w	C:\WINDOWS\ServicePackFiles\i386	cptest.exe
+ 2004-08-19 19:09:04	16,384	------w	C:\WINDOWS\ServicePackFiles\i386	cptsat.dll
+ 2004-08-04 02:07:50	18,560	------w	C:\WINDOWS\ServicePackFiles\i386	di.sys
+ 2004-08-19 19:10:20	12,040	------w	C:\WINDOWS\ServicePackFiles\i386	dpipe.sys
+ 2004-08-19 19:10:20	21,896	------w	C:\WINDOWS\ServicePackFiles\i386	dtcp.sys
+ 2004-08-19 19:10:04	77,824	------w	C:\WINDOWS\ServicePackFiles\i386	elnet.exe
+ 2004-08-19 19:10:18	40,840	------w	C:\WINDOWS\ServicePackFiles\i386	ermdd.sys
+ 2004-08-19 19:09:48	358,912	------w	C:\WINDOWS\ServicePackFiles\i386	ermmgr.dll
+ 2004-08-19 19:09:48	297,984	------w	C:\WINDOWS\ServicePackFiles\i386	ermsrv.dll
+ 2004-08-04 02:00:06	149,376	------w	C:\WINDOWS\ServicePackFiles\i386	ffsport.sys
+ 2004-08-19 19:09:48	391,168	------w	C:\WINDOWS\ServicePackFiles\i386	hemeui.dll
+ 2004-08-19 19:10:04	63,488	------w	C:\WINDOWS\ServicePackFiles\i386	lntadmn.exe
+ 2004-08-19 19:10:04	80,384	------w	C:\WINDOWS\ServicePackFiles\i386	lntsess.exe
+ 2004-08-19 19:10:04	75,264	------w	C:\WINDOWS\ServicePackFiles\i386	lntsvr.exe
+ 2004-08-19 19:09:48	7,168	------w	C:\WINDOWS\ServicePackFiles\i386	lntsvrp.dll
+ 2004-08-04 01:12:46	118,784	------w	C:\WINDOWS\ServicePackFiles\i386	ogac.exe
+ 2004-08-19 19:10:04	347,136	------w	C:\WINDOWS\ServicePackFiles\i386	ourstrt.exe
+ 2004-08-19 19:10:04	82,432	------w	C:\WINDOWS\ServicePackFiles\i386	p4mon.exe
+ 2004-08-19 19:10:04	260,096	------w	C:\WINDOWS\ServicePackFiles\i386	racerpt.exe
+ 2004-08-19 19:10:04	13,312	------w	C:\WINDOWS\ServicePackFiles\i386	racert.exe
+ 2004-08-19 19:09:48	153,088	------w	C:\WINDOWS\ServicePackFiles\i386	riedit.dll
+ 2004-08-19 19:09:48	90,624	------w	C:\WINDOWS\ServicePackFiles\i386	rkwks.dll
+ 2004-08-19 19:09:48	94,208	------w	C:\WINDOWS\ServicePackFiles\i386	scfgwmi.dll
+ 2004-08-19 18:52:06	44,544	------w	C:\WINDOWS\ServicePackFiles\i386	scupgrd.exe
+ 2004-08-19 19:10:20	12,168	------w	C:\WINDOWS\ServicePackFiles\i386	sddd.dll
+ 2004-08-19 19:09:48	279,040	------w	C:\WINDOWS\ServicePackFiles\i386	shoot.dll
+ 2004-08-19 19:09:48	123,904	------w	C:\WINDOWS\ServicePackFiles\i386	soc.dll
+ 2004-08-19 19:09:48	8,704	------w	C:\WINDOWS\ServicePackFiles\i386	ty.dll
+ 2004-08-19 19:09:04	39,936	------w	C:\WINDOWS\ServicePackFiles\i386	tyres.dll
+ 2004-08-19 19:09:48	16,384	------w	C:\WINDOWS\ServicePackFiles\i386	tyui.dll
+ 2004-08-04 02:03:18	12,416	------w	C:\WINDOWS\ServicePackFiles\i386	unmp.sys
+ 2004-08-19 19:09:48	50,688	------w	C:\WINDOWS\ServicePackFiles\i386	wain_32.dll
+ 2004-08-19 19:09:48	44,032	------w	C:\WINDOWS\ServicePackFiles\i386	wext.dll
+ 2004-08-19 19:09:48	101,376	------w	C:\WINDOWS\ServicePackFiles\i386	xflog.dll
+ 2004-08-04 02:07:44	44,672	------w	C:\WINDOWS\ServicePackFiles\i386\uagp35.sys
+ 2004-08-04 02:00:32	66,176	------w	C:\WINDOWS\ServicePackFiles\i386\udfs.sys
+ 2004-08-19 19:09:48	25,600	------w	C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll
+ 2004-08-19 19:09:48	104,448	------w	C:\WINDOWS\ServicePackFiles\i386\uihelper.dll
+ 2004-08-19 19:09:48	311,808	------w	C:\WINDOWS\ServicePackFiles\i386\ulib.dll
+ 2004-08-19 19:09:48	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\umandlg.dll
+ 2004-08-19 19:09:48	119,808	------w	C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll
+ 2004-08-19 19:09:48	264,704	------w	C:\WINDOWS\ServicePackFiles\i386\unidrv.dll
+ 2004-08-19 19:09:48	199,168	------w	C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll
+ 2004-08-19 19:09:48	78,848	------w	C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll
+ 2004-08-19 19:09:48	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\uniplat.dll
+ 2004-08-19 19:09:06	620,544	------w	C:\WINDOWS\ServicePackFiles\i386\unires.dll
+ 2004-08-19 19:10:04	208,896	------w	C:\WINDOWS\ServicePackFiles\i386\unregmp2.exe
+ 2004-08-19 19:09:48	316,416	------w	C:\WINDOWS\ServicePackFiles\i386\untfs.dll
+ 2004-08-04 01:58:34	209,408	------w	C:\WINDOWS\ServicePackFiles\i386\update.sys
+ 2004-08-19 19:10:04	151,040	------w	C:\WINDOWS\ServicePackFiles\i386\uploadm.exe
+ 2004-08-19 19:09:48	132,608	------w	C:\WINDOWS\ServicePackFiles\i386\upnp.dll
+ 2004-08-19 19:10:04	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe
+ 2004-08-19 19:09:48	185,344	------w	C:\WINDOWS\ServicePackFiles\i386\upnphost.dll
+ 2004-08-19 19:09:48	240,128	------w	C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
+ 2004-08-19 19:10:04	18,432	------w	C:\WINDOWS\ServicePackFiles\i386\ups.exe
+ 2004-08-19 19:09:48	37,888	------w	C:\WINDOWS\ServicePackFiles\i386\url.dll
+ 2004-08-19 19:09:48	603,136	------w	C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
+ 2004-08-19 18:58:16	32,384	------w	C:\WINDOWS\ServicePackFiles\i386\usb101et.sys
+ 2004-08-04 02:04:34	12,672	------w	C:\WINDOWS\ServicePackFiles\i386\usb8023.sys
+ 2004-08-04 02:04:34	12,672	------w	C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys
+ 2004-08-04 02:07:56	59,264	------w	C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys
+ 2004-08-04 02:08:48	31,616	------w	C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys
+ 2004-08-04 02:08:38	26,624	------w	C:\WINDOWS\ServicePackFiles\i386\usbehci.sys
+ 2004-08-04 02:08:44	57,600	------w	C:\WINDOWS\ServicePackFiles\i386\usbhub.sys
+ 2004-08-04 02:08:58	16,000	------w	C:\WINDOWS\ServicePackFiles\i386\usbintel.sys
+ 2004-08-19 19:09:48	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\usbmon.dll
+ 2004-08-04 02:08:38	17,024	------w	C:\WINDOWS\ServicePackFiles\i386\usbohci.sys
+ 2004-08-04 02:08:44	142,976	------w	C:\WINDOWS\ServicePackFiles\i386\usbport.sys
+ 2004-08-04 02:01:26	25,856	------w	C:\WINDOWS\ServicePackFiles\i386\usbprint.sys
+ 2004-08-04 01:58:46	15,104	------w	C:\WINDOWS\ServicePackFiles\i386\usbscan.sys
+ 2004-08-04 02:08:44	25,600	------w	C:\WINDOWS\ServicePackFiles\i386\usbser.sys
+ 2004-08-04 02:08:48	26,496	------w	C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
+ 2004-08-04 02:08:38	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys
+ 2004-08-19 19:09:48	77,312	------w	C:\WINDOWS\ServicePackFiles\i386\usbui.dll
+ 2004-08-04 02:10:12	78,464	------w	C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys
+ 2004-08-19 19:09:48	578,048	------w	C:\WINDOWS\ServicePackFiles\i386\user32.dll
+ 2004-08-19 19:09:48	731,136	------w	C:\WINDOWS\ServicePackFiles\i386\userenv.dll
+ 2004-08-19 19:10:04	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\userinit.exe
+ 2004-08-19 19:09:48	406,528	------w	C:\WINDOWS\ServicePackFiles\i386\usp10.dll
+ 2004-08-19 19:10:04	50,176	------w	C:\WINDOWS\ServicePackFiles\i386\utilman.exe
+ 2004-08-19 19:09:48	219,648	------w	C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll
+ 2004-08-19 19:09:48	30,749	------w	C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll
+ 2004-07-19 21:54:22	716,800	------w	C:\WINDOWS\ServicePackFiles\i386\vbc.exe
+ 2004-08-04 01:12:48	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.chs.dll
+ 2004-08-04 01:12:48	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.cht.dll
+ 2004-08-04 01:12:48	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.dll
+ 2004-08-04 01:12:48	147,456	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.es.dll
+ 2004-08-04 01:12:48	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.fr.dll
+ 2004-08-04 01:12:48	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ger.dll
+ 2004-08-04 01:12:50	147,456	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.it.dll
+ 2004-08-04 01:12:50	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ja.dll
+ 2004-08-04 01:12:50	126,976	------w	C:\WINDOWS\ServicePackFiles\i386\vbc7ui.kor.dll
+ 2004-08-19 19:09:48	417,792	------w	C:\WINDOWS\ServicePackFiles\i386\vbscript.dll
+ 2004-08-19 19:09:48	11,325	------w	C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll
+ 2004-08-19 19:09:48	26,112	------w	C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll
+ 2004-08-19 19:09:48	51,712	------w	C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll
+ 2004-08-19 19:09:48	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\version.dll
+ 2004-08-19 19:09:48	54,784	------w	C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll
+ 2004-08-04 02:07:08	20,992	------w	C:\WINDOWS\ServicePackFiles\i386\vga.sys
+ 2004-08-19 19:09:48	848,384	------w	C:\WINDOWS\ServicePackFiles\i386\vgx.dll
+ 2004-08-04 02:07:44	42,240	------w	C:\WINDOWS\ServicePackFiles\i386\viaagp.sys
+ 2004-08-04 01:59:44	5,376	------w	C:\WINDOWS\ServicePackFiles\i386\viaide.sys
+ 2004-08-04 02:07:06	79,744	------w	C:\WINDOWS\ServicePackFiles\i386\videoprt.sys
+ 2004-08-19 19:09:48	131,584	------w	C:\WINDOWS\ServicePackFiles\i386\viewprov.dll
+ 2004-08-19 18:59:14	53,376	------w	C:\WINDOWS\ServicePackFiles\i386\volsnap.sys
+ 2004-08-04 01:12:50	999,424	------w	C:\WINDOWS\ServicePackFiles\i386\vsavb7rt.dll
+ 2004-08-19 19:09:48	430,592	------w	C:\WINDOWS\ServicePackFiles\i386\vssapi.dll
+ 2004-08-19 19:10:04	295,424	------w	C:\WINDOWS\ServicePackFiles\i386\vssvc.exe
+ 2004-08-19 19:09:48	177,664	------w	C:\WINDOWS\ServicePackFiles\i386\w32time.dll
+ 2004-08-19 19:09:48	15,872	------w	C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll
+ 2004-08-19 19:09:48	366,592	------w	C:\WINDOWS\ServicePackFiles\i386\w3svc.dll
+ 2004-08-19 19:09:48	498,176	------w	C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll
+ 2004-08-19 19:10:04	46,080	------w	C:\WINDOWS\ServicePackFiles\i386\wab.exe
+ 2004-08-19 19:09:48	504,832	------w	C:\WINDOWS\ServicePackFiles\i386\wab32.dll
+ 2004-08-19 19:09:06	263,168	------w	C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
+ 2004-08-19 19:09:48	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
+ 2004-08-19 19:09:48	84,992	------w	C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
+ 2004-08-19 19:10:04	30,208	------w	C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
+ 2004-08-04 02:04:54	13,568	------w	C:\WINDOWS\ServicePackFiles\i386\wacompen.sys
+ 2004-08-04 01:29:38	12,415	------w	C:\WINDOWS\ServicePackFiles\i386\wadv01nt.sys
+ 2004-08-04 01:29:38	12,127	------w	C:\WINDOWS\ServicePackFiles\i386\wadv02nt.sys
+ 2004-08-04 01:29:38	11,775	------w	C:\WINDOWS\ServicePackFiles\i386\wadv05nt.sys
+ 2004-08-04 01:29:40	11,807	------w	C:\WINDOWS\ServicePackFiles\i386\wadv07nt.sys
+ 2004-08-04 01:29:40	11,295	------w	C:\WINDOWS\ServicePackFiles\i386\wadv08nt.sys
+ 2004-08-04 01:29:42	11,871	------w	C:\WINDOWS\ServicePackFiles\i386\wadv09nt.sys
+ 2004-08-04 01:29:42	11,935	------w	C:\WINDOWS\ServicePackFiles\i386\wadv11nt.sys
+ 2004-08-19 19:09:48	77,824	------w	C:\WINDOWS\ServicePackFiles\i386\wam51.dll
+ 2004-08-19 19:09:48	53,248	------w	C:\WINDOWS\ServicePackFiles\i386\wamreg51.dll
+ 2004-08-04 02:04:58	34,560	------w	C:\WINDOWS\ServicePackFiles\i386\wanarp.sys
+ 2004-08-04 02:07:34	17,664	------w	C:\WINDOWS\ServicePackFiles\i386\watchdog.sys
+ 2004-08-04 01:29:42	29,311	------w	C:\WINDOWS\ServicePackFiles\i386\watv01nt.sys
+ 2004-08-04 01:29:44	19,551	------w	C:\WINDOWS\ServicePackFiles\i386\watv02nt.sys
+ 2004-08-04 01:29:44	33,599	------w	C:\WINDOWS\ServicePackFiles\i386\watv04nt.sys
+ 2004-08-04 01:29:46	22,271	------w	C:\WINDOWS\ServicePackFiles\i386\watv06nt.sys
+ 2004-08-04 01:29:46	25,471	------w	C:\WINDOWS\ServicePackFiles\i386\watv10nt.sys
+ 2004-08-19 19:09:48	201,216	------w	C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
+ 2004-08-19 19:09:48	214,528	------w	C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll
+ 2004-08-19 19:09:48	71,680	------w	C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll
+ 2004-08-19 19:09:48	530,944	------w	C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll
+ 2004-08-19 19:09:48	178,176	------w	C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll
+ 2004-08-19 19:09:48	273,920	------w	C:\WINDOWS\ServicePackFiles\i386\wbemess.dll
+ 2004-08-19 19:09:48	44,544	------w	C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll
+ 2004-08-19 19:09:48	18,944	------w	C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll
+ 2004-08-19 19:09:48	43,520	------w	C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll
+ 2004-08-19 19:10:06	119,808	------w	C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe
+ 2004-08-19 19:09:48	197,120	------w	C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll
+ 2004-08-19 19:00:04	32,128	------w	C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys
+ 2004-08-04 01:29:46	23,615	------w	C:\WINDOWS\ServicePackFiles\i386\wch7xxnt.sys
+ 2004-08-19 19:09:48	49,152	------w	C:\WINDOWS\ServicePackFiles\i386\wdigest.dll
+ 2004-08-19 19:10:10	23,552	------w	C:\WINDOWS\ServicePackFiles\i386\wdmaud.drv
+ 2004-08-04 02:15:06	82,944	------w	C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys
+ 2004-08-19 19:09:48	281,600	------w	C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
+ 2004-08-19 19:09:48	67,584	------w	C:\WINDOWS\ServicePackFiles\i386\webclnt.dll
+ 2004-08-19 19:09:48	136,192	------w	C:\WINDOWS\ServicePackFiles\i386\webvw.dll
+ 2004-08-19 19:10:06	66,560	------w	C:\WINDOWS\ServicePackFiles\i386\wextract.exe
+ 2004-08-19 19:10:06	438,784	------w	C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
+ 2004-08-19 19:09:48	465,920	------w	C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
+ 2004-08-19 19:09:48	124,928	------w	C:\WINDOWS\ServicePackFiles\i386\wiadss.dll
+ 2004-08-19 19:09:48	75,776	------w	C:\WINDOWS\ServicePackFiles\i386\wiascr.dll
+ 2004-08-19 19:09:48	333,824	------w	C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll
+ 2004-08-19 19:09:48	594,432	------w	C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
+ 2004-08-19 19:09:48	111,104	------w	C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll
+ 2004-08-19 19:00:56	1,836,032	------w	C:\WINDOWS\ServicePackFiles\i386\win32k.sys
+ 2004-08-19 19:09:48	102,400	------w	C:\WINDOWS\ServicePackFiles\i386\win32spl.dll
+ 2004-08-19 19:09:08	938,496	------w	C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
+ 2004-08-19 19:10:06	288,256	------w	C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
+ 2004-08-19 19:09:48	351,232	------w	C:\WINDOWS\ServicePackFiles\i386\winhttp.dll
+ 2004-08-19 19:09:48	660,480	------w	C:\WINDOWS\ServicePackFiles\i386\wininet.dll
+ 2004-08-19 19:09:48	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\winipsec.dll
+ 2004-08-19 19:10:06	506,368	------w	C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
+ 2004-08-19 19:09:48	180,736	------w	C:\WINDOWS\ServicePackFiles\i386\winmm.dll
+ 2004-08-04 01:51:20	5,120	------w	C:\WINDOWS\ServicePackFiles\i386\winnls.dll
+ 2004-08-19 19:09:08	773,632	------w	C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
+ 2004-08-19 19:09:48	16,896	------w	C:\WINDOWS\ServicePackFiles\i386\winrnr.dll
+ 2004-08-19 19:09:48	100,352	------w	C:\WINDOWS\ServicePackFiles\i386\winscard.dll
+ 2004-08-19 19:09:48	17,408	------w	C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll
+ 2004-08-19 19:10:10	146,944	------w	C:\WINDOWS\ServicePackFiles\i386\winspool.drv
+ 2004-08-19 19:09:48	291,328	------w	C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
+ 2004-08-19 19:09:48	53,760	------w	C:\WINDOWS\ServicePackFiles\i386\winsta.dll
+ 2004-08-19 19:09:48	176,640	------w	C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
+ 2004-08-19 19:10:06	5,632	------w	C:\WINDOWS\ServicePackFiles\i386\winver.exe
+ 2004-08-19 19:09:48	132,096	------w	C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll
+ 2004-08-19 19:09:48	172,544	------w	C:\WINDOWS\ServicePackFiles\i386\wldap32.dll
+ 2004-08-04 01:31:28	154,624	------w	C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys
+ 2004-08-19 19:09:48	94,208	------w	C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll
+ 2004-08-19 19:09:48	408,064	------w	C:\WINDOWS\ServicePackFiles\i386\wmadmod.dll
+ 2004-08-19 19:09:48	670,720	------w	C:\WINDOWS\ServicePackFiles\i386\wmadmoe.dll
+ 2004-08-19 19:09:48	230,400	------w	C:\WINDOWS\ServicePackFiles\i386\wmasf.dll
+ 2004-08-19 19:09:48	27,136	------w	C:\WINDOWS\ServicePackFiles\i386\wmdmlog.dll
+ 2004-08-19 19:09:48	23,552	------w	C:\WINDOWS\ServicePackFiles\i386\wmdmps.dll
+ 2004-08-19 19:09:08	200,704	------w	C:\WINDOWS\ServicePackFiles\i386\wmerror.dll
+ 2004-08-19 19:09:08	5,632	------w	C:\WINDOWS\ServicePackFiles\i386\wmi.dll
+ 2004-08-04 02:07:42	8,832	------w	C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys
+ 2004-08-19 19:10:06	196,608	------w	C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe
+ 2004-08-19 19:09:08	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll
+ 2004-08-19 19:09:48	89,088	------w	C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll
+ 2004-08-19 19:10:06	126,464	------w	C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe
+ 2004-08-19 19:10:06	369,664	------w	C:\WINDOWS\ServicePackFiles\i386\wmic.exe
+ 2004-08-19 19:09:50	60,928	------w	C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll
+ 2004-08-19 19:09:50	140,800	------w	C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll
+ 2004-08-19 19:09:50	151,552	------w	C:\WINDOWS\ServicePackFiles\i386\wmidx.dll
+ 2004-08-19 19:09:50	156,672	------w	C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll
+ 2004-08-19 19:09:50	132,096	------w	C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll
+ 2004-08-19 19:09:50	62,464	------w	C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll
+ 2004-08-19 19:09:50	62,976	------w	C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll
+ 2004-08-19 19:09:50	144,896	------w	C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll
+ 2004-08-19 19:09:50	437,248	------w	C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll
+ 2004-08-19 19:10:06	218,112	------w	C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe
+ 2004-08-19 19:09:50	41,472	------w	C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll
+ 2004-08-19 19:09:50	145,408	------w	C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll
+ 2004-08-19 19:09:50	99,328	------w	C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll
+ 2004-08-19 19:09:50	167,936	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll
+ 2004-08-19 19:09:50	4,096	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll
+ 2004-08-19 19:09:50	7,680	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll
+ 2004-08-19 19:09:50	402,432	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll
+ 2004-08-19 19:09:50	502,272	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll
+ 2004-08-19 19:09:50	325,632	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll
+ 2004-08-19 19:09:50	4,290,048	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
+ 2004-08-19 19:09:50	6,144	------w	C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll
+ 2004-08-19 19:09:50	1,050,624	------w	C:\WINDOWS\ServicePackFiles\i386\wmnetmgr.dll
+ 2004-08-19 19:09:50	4,874,240	------w	C:\WINDOWS\ServicePackFiles\i386\wmp.dll
+ 2004-08-19 19:09:50	114,688	------w	C:\WINDOWS\ServicePackFiles\i386\wmpasf.dll
+ 2004-08-19 19:09:50	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\wmpband.dll
+ 2004-08-19 19:09:50	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\wmpcd.dll
+ 2004-08-19 19:09:50	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\wmpcore.dll
+ 2004-08-19 19:09:50	233,472	------w	C:\WINDOWS\ServicePackFiles\i386\wmpdxm.dll
+ 2004-08-19 19:10:06	73,728	------w	C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
+ 2004-08-19 19:09:12	2,985,984	------w	C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
+ 2004-08-19 19:09:50	221,184	------w	C:\WINDOWS\ServicePackFiles\i386\wmpns.dll
+ 2004-08-19 19:09:50	102,400	------w	C:\WINDOWS\ServicePackFiles\i386\wmpshell.dll
+ 2004-08-19 19:09:50	20,480	------w	C:\WINDOWS\ServicePackFiles\i386\wmpui.dll
+ 2004-08-19 19:09:50	759,296	------w	C:\WINDOWS\ServicePackFiles\i386\wmsdmod.dll
+ 2004-08-19 19:09:50	115,200	------w	C:\WINDOWS\ServicePackFiles\i386\wmsdmoe.dll
+ 2004-08-19 19:09:50	1,119,744	------w	C:\WINDOWS\ServicePackFiles\i386\wmsdmoe2.dll
+ 2004-08-19 19:09:50	484,864	------w	C:\WINDOWS\ServicePackFiles\i386\wmspdmod.dll
+ 2004-08-19 19:09:50	896,512	------w	C:\WINDOWS\ServicePackFiles\i386\wmspdmoe.dll
+ 2004-08-19 19:09:50	303,616	------w	C:\WINDOWS\ServicePackFiles\i386\wmstream.dll
+ 2004-08-19 19:10:14	2,105,344	------w	C:\WINDOWS\ServicePackFiles\i386\wmvcore.dll
+ 2004-08-19 19:09:50	809,984	------w	C:\WINDOWS\ServicePackFiles\i386\wmvdmod.dll
+ 2004-08-19 19:09:50	1,001,472	------w	C:\WINDOWS\ServicePackFiles\i386\wmvdmoe2.dll
+ 2004-08-19 19:10:06	218,112	------w	C:\WINDOWS\ServicePackFiles\i386\wordpad.exe
+ 2004-08-19 19:09:50	265,216	------w	C:\WINDOWS\ServicePackFiles\i386\wow32.dll
+ 2004-08-19 19:10:06	32,256	------w	C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
+ 2004-08-19 19:10:06	32,768	------w	C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe
+ 2004-08-19 19:09:50	82,944	------w	C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
+ 2004-08-19 19:09:50	19,968	------w	C:\WINDOWS\ServicePackFiles\i386\ws2help.dll
+ 2004-08-19 19:10:06	13,824	------w	C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe
+ 2004-08-19 19:10:06	114,688	------w	C:\WINDOWS\ServicePackFiles\i386\wscript.exe
+ 2004-08-19 19:09:50	81,408	------w	C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll
+ 2004-08-19 19:09:50	614,400	------w	C:\WINDOWS\ServicePackFiles\i386\wsecedit.dll
+ 2004-08-19 19:09:50	108,032	------w	C:\WINDOWS\ServicePackFiles\i386\wshbth.dll
+ 2004-08-19 19:09:50	28,672	------w	C:\WINDOWS\ServicePackFiles\i386\wshcon.dll
+ 2004-08-19 19:09:50	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\wshext.dll
+ 2004-08-19 19:09:50	14,336	------w	C:\WINDOWS\ServicePackFiles\i386\wship6.dll
+ 2004-08-19 19:09:50	8,192	------w	C:\WINDOWS\ServicePackFiles\i386\wshirda.dll
+ 2004-08-19 19:09:50	11,776	------w	C:\WINDOWS\ServicePackFiles\i386\wshrm.dll
+ 2004-08-19 19:09:50	19,968	------w	C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll
+ 2004-08-04 01:29:48	12,063	------w	C:\WINDOWS\ServicePackFiles\i386\wsiintxx.sys
+ 2004-08-19 19:09:50	42,496	------w	C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll
+ 2004-08-19 19:09:50	25,088	------w	C:\WINDOWS\ServicePackFiles\i386\wsock32.dll
+ 2004-08-04 02:10:22	19,328	------w	C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys
+ 2004-08-19 19:09:50	51,200	------w	C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll
+ 2004-08-19 19:09:50	18,432	------w	C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll
+ 2004-08-19 19:09:50	432,640	------w	C:\WINDOWS\ServicePackFiles\i386\wuapi.dll
+ 2004-08-19 19:10:06	112,640	------w	C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe
+ 2004-08-19 19:10:06	168,960	------w	C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
+ 2004-08-19 19:09:50	1,134,592	------w	C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll
+ 2004-08-19 19:09:50	184,320	------w	C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll
+ 2004-08-19 19:09:50	6,656	------w	C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll
+ 2004-08-19 19:09:50	114,176	------w	C:\WINDOWS\ServicePackFiles\i386\wucltui.dll
+ 2004-08-19 19:09:50	36,864	------w	C:\WINDOWS\ServicePackFiles\i386\wups.dll
+ 2004-08-19 19:09:50	120,320	------w	C:\WINDOWS\ServicePackFiles\i386\wuweb.dll
+ 2004-08-04 01:29:50	19,455	------w	C:\WINDOWS\ServicePackFiles\i386\wvchntxx.sys
+ 2004-08-19 19:09:50	378,880	------w	C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll
+ 2004-08-19 19:09:50	51,712	------w	C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll
+ 2004-08-19 19:09:50	359,936	------w	C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll
+ 2004-08-19 19:09:50	91,648	------w	C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll
+ 2004-08-19 19:10:06	30,720	------w	C:\WINDOWS\ServicePackFiles\i386\xcopy.exe
+ 2004-07-17 14:39:04	177,784	------w	C:\WINDOWS\ServicePackFiles\i386\xenroll.dll
+ 2004-08-19 19:09:50	129,536	------w	C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll
+ 2004-08-19 19:09:50	50,176	------w	C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll
+ 2004-08-19 19:09:50	11,776	------w	C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll
+ 2004-08-19 19:09:50	116,736	------w	C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll
+ 2004-08-19 19:09:50	340,480	------w	C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
+ 2004-08-19 19:10:04	32,866	------w	C:\WINDOWS\slrundll.exe
+ 2008-03-19 22:23:20	114,688	----a-w	C:\WINDOWS\system32\Adobe\Director
p32dsw.dll
+ 2008-03-19 22:36:22	202,168	----a-w	C:\WINDOWS\system32\Adobe\Director\SwDir.dll
+ 2008-03-19 22:24:02	487,424	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
+ 2008-03-19 21:46:26	1,798,144	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll
+ 2008-03-19 22:24:04	9,216	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-03-19 21:36:14	754,688	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll
+ 2008-03-19 21:36:16	1,145,896	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe
+ 2008-03-19 21:36:14	52,288	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll
+ 2008-03-19 21:42:42	892,928	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
+ 2008-03-19 22:22:34	249,856	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
+ 2008-03-19 22:25:36	442,368	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
+ 2008-03-19 22:36:06	439,736	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100429.exe
+ 2008-03-19 22:26:20	110,592	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
+ 2008-03-19 22:22:22	94,208	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-03-19 21:36:14	50,808	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 1999-06-25 13:55:30	149,504	----a-w	C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
+ 2004-08-19 19:09:20	229,376	------w	C:\WINDOWS\system32\ati2cqag.dll
+ 2004-08-19 19:09:20	377,984	------w	C:\WINDOWS\system32\ati2dvaa.dll
+ 2004-08-19 19:09:20	201,728	------w	C:\WINDOWS\system32\ati2dvag.dll
+ 2004-08-19 19:09:20	870,784	------w	C:\WINDOWS\system32\ati3d1ag.dll
+ 2004-08-19 19:09:20	1,888,992	------w	C:\WINDOWS\system32\ati3duag.dll
+ 2004-08-19 19:09:20	32,768	------w	C:\WINDOWS\system32\ativtmxx.dll
+ 2004-08-19 19:09:20	516,768	------w	C:\WINDOWS\system32\ativvaxx.dll
- 2007-12-07 01:07:03	1,024,000	----a-w	C:\WINDOWS\system32\browseui.dll
+ 2008-02-16 09:02:34	1,024,000	----a-w	C:\WINDOWS\system32\browseui.dll
- 2007-12-07 01:07:03	152,064	----a-w	C:\WINDOWS\system32\cdfview.dll
+ 2008-02-16 09:02:34	152,064	----a-w	C:\WINDOWS\system32\cdfview.dll
+ 2004-08-04 01:59:36	9,728	------w	C:\WINDOWS\system32\comsdupd.exe
- 2008-03-26 13:17:46	16,384	----a-w	C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-04-15 04:53:27	16,384	----a-w	C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-03-26 13:17:46	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2008-04-15 04:53:27	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2008-03-26 13:17:46	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-04-15 04:53:27	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2007-12-07 01:07:03	1,056,768	----a-w	C:\WINDOWS\system32\danim.dll
+ 2007-04-18 12:31:56	1,056,768	----a-w	C:\WINDOWS\system32\danim.dll
- 2005-09-23 10:28:38	83,456	----a-w	C:\WINDOWS\system32\dfshim.dll
+ 2007-10-24 04:47:28	96,760	----a-w	C:\WINDOWS\system32\dfshim.dll
- 2007-12-07 01:07:03	1,024,000	-c--a-w	C:\WINDOWS\system32\dllcache\browseui.dll
+ 2008-02-16 09:02:34	1,024,000	-c--a-w	C:\WINDOWS\system32\dllcache\browseui.dll
- 2007-12-07 01:07:03	152,064	-c--a-w	C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2008-02-16 09:02:34	152,064	-c--a-w	C:\WINDOWS\system32\dllcache\cdfview.dll
- 2004-08-04 03:31:52	97,792	-c--a-w	C:\WINDOWS\system32\dllcache\chtmbx.dll
+ 2004-08-04 01:31:52	97,792	-c--a-w	C:\WINDOWS\system32\dllcache\chtmbx.dll
- 2004-08-04 03:31:54	56,320	-c--a-w	C:\WINDOWS\system32\dllcache\chtskdic.dll
+ 2004-08-04 01:31:54	56,320	-c--a-w	C:\WINDOWS\system32\dllcache\chtskdic.dll
- 2004-08-04 03:31:54	173,568	-c--a-w	C:\WINDOWS\system32\dllcache\chtskf.dll
+ 2004-08-04 01:31:54	173,568	-c--a-w	C:\WINDOWS\system32\dllcache\chtskf.dll
- 2004-08-04 03:31:54	198,656	-c--a-w	C:\WINDOWS\system32\dllcache\cintime.dll
+ 2004-08-04 01:31:54	198,656	-c--a-w	C:\WINDOWS\system32\dllcache\cintime.dll
- 2004-08-04 03:31:56	480,256	-c--a-w	C:\WINDOWS\system32\dllcache\cintsetp.exe
+ 2004-08-04 01:31:56	480,256	-c--a-w	C:\WINDOWS\system32\dllcache\cintsetp.exe
- 2004-08-04 03:31:40	57,399	-c--a-w	C:\WINDOWS\system32\dllcache\cplexe.exe
+ 2004-08-04 01:31:40	57,399	-c--a-w	C:\WINDOWS\system32\dllcache\cplexe.exe
- 2004-08-19 21:09:22	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\custsat.dll
+ 2006-06-02 19:32:20	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\custsat.dll
- 2007-12-07 01:07:03	1,056,768	-c--a-w	C:\WINDOWS\system32\dllcache\danim.dll
+ 2007-04-18 12:31:56	1,056,768	-c--a-w	C:\WINDOWS\system32\dllcache\danim.dll
- 2006-06-26 17:41:32	148,480	-c--a-w	C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-02-20 05:35:05	148,992	-c--a-w	C:\WINDOWS\system32\dllcache\dnsapi.dll
- 2004-08-19 21:09:24	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2008-02-20 05:35:05	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\dnsrslvr.dll
- 2007-12-07 01:07:03	357,888	-c--a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-02-16 09:02:34	357,888	-c--a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2007-12-07 01:07:03	205,312	-c--a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-02-16 09:02:35	205,312	-c--a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2007-12-07 01:07:04	55,808	-c--a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-02-16 09:02:35	55,808	-c--a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
- 2007-06-19 13:32:25	282,112	-c--a-w	C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:51:00	282,624	-c--a-w	C:\WINDOWS\system32\dllcache\gdi32.dll
- 2007-12-06 13:07:07	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\iedw.exe
+ 2008-02-15 09:23:37	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\iedw.exe
- 2007-12-07 01:07:04	251,392	-c--a-w	C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2008-02-16 09:02:35	251,392	-c--a-w	C:\WINDOWS\system32\dllcache\iepeers.dll
- 2004-08-04 04:04:38	106,496	-c--a-w	C:\WINDOWS\system32\dllcache\imekrcic.dll
+ 2004-08-04 02:04:38	106,496	-c--a-w	C:\WINDOWS\system32\dllcache\imekrcic.dll
- 2004-08-04 04:04:34	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\imekrmbx.dll
+ 2004-08-04 02:04:34	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\imekrmbx.dll
- 2004-08-04 03:31:50	811,064	-c--a-w	C:\WINDOWS\system32\dllcache\imjp81k.dll
+ 2004-08-04 01:31:50	811,064	-c--a-w	C:\WINDOWS\system32\dllcache\imjp81k.dll
- 2004-08-04 03:31:52	368,696	-c--a-w	C:\WINDOWS\system32\dllcache\imjpcic.dll
+ 2004-08-04 01:31:52	368,696	-c--a-w	C:\WINDOWS\system32\dllcache\imjpcic.dll
- 2004-08-04 03:31:52	716,856	-c--a-w	C:\WINDOWS\system32\dllcache\imjpcus.dll
+ 2004-08-04 01:31:52	716,856	-c--a-w	C:\WINDOWS\system32\dllcache\imjpcus.dll
- 2004-08-04 03:31:54	81,976	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdct.dll
+ 2004-08-04 01:31:54	81,976	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdct.dll
- 2004-08-04 03:31:54	307,257	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdct.exe
+ 2004-08-04 01:31:54	307,257	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdct.exe
- 2004-08-04 03:31:56	155,705	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdsvr.exe
+ 2004-08-04 01:31:56	155,705	-c--a-w	C:\WINDOWS\system32\dllcache\imjpdsvr.exe
- 2004-08-04 03:31:58	196,665	-c--a-w	C:\WINDOWS\system32\dllcache\imjpinst.exe
+ 2004-08-04 01:31:58	196,665	-c--a-w	C:\WINDOWS\system32\dllcache\imjpinst.exe
- 2004-08-04 03:32:00	208,952	-c--a-w	C:\WINDOWS\system32\dllcache\imjpmig.exe
+ 2004-08-04 01:32:00	208,952	-c--a-w	C:\WINDOWS\system32\dllcache\imjpmig.exe
- 2004-08-04 03:32:12	233,527	-c--a-w	C:\WINDOWS\system32\dllcache\imjprw.exe
+ 2004-08-04 01:32:12	233,527	-c--a-w	C:\WINDOWS\system32\dllcache\imjprw.exe
- 2004-08-04 03:32:16	262,200	-c--a-w	C:\WINDOWS\system32\dllcache\imjputy.exe
+ 2004-08-04 01:32:16	262,200	-c--a-w	C:\WINDOWS\system32\dllcache\imjputy.exe
- 2004-08-04 03:32:16	274,489	-c--a-w	C:\WINDOWS\system32\dllcache\imjputyc.dll
+ 2004-08-04 01:32:16	274,489	-c--a-w	C:\WINDOWS\system32\dllcache\imjputyc.dll
- 2004-08-04 03:32:28	102,456	-c--a-w	C:\WINDOWS\system32\dllcache\imlang.dll
+ 2004-08-04 01:32:28	102,456	-c--a-w	C:\WINDOWS\system32\dllcache\imlang.dll
- 2004-08-04 03:31:50	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\imscinst.exe
+ 2004-08-04 01:31:50	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\imscinst.exe
- 2007-12-07 01:07:04	96,768	-c--a-w	C:\WINDOWS\system32\dllcache\inseng.dll
+ 2008-02-16 09:02:35	96,768	-c--a-w	C:\WINDOWS\system32\dllcache\inseng.dll
- 2007-11-14 07:28:02	450,560	-c--a-w	C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-12-18 14:41:58	450,560	-c--a-w	C:\WINDOWS\system32\dllcache\jscript.dll
- 2007-12-07 01:07:04	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-02-16 09:02:35	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2001-08-18 01:55:56	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd101b.dll
+ 2001-08-18 01:55:56	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd101c.dll
+ 2001-08-18 01:55:56	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\kbd103.dll
+ 2001-08-18 01:55:56	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd106.dll
+ 2001-08-23 20:47:06	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\kbdjpn.dll
+ 2001-08-23 20:47:06	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\kbdkor.dll
- 2007-12-07 14:37:06	3,080,192	-c--a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-02-16 22:32:38	3,080,704	-c--a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-12-07 01:07:04	449,024	-c--a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-02-16 09:02:36	449,024	-c--a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2007-12-07 01:07:04	146,432	-c--a-w	C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-02-16 09:02:37	146,432	-c--a-w	C:\WINDOWS\system32\dllcache\msrating.dll
- 2007-12-07 01:07:04	532,480	-c--a-w	C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-02-16 09:02:37	532,480	-c--a-w	C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-04 03:32:12	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\padrs404.dll
+ 2004-08-04 01:32:12	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\padrs404.dll
- 2004-08-04 03:31:50	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\padrs804.dll
+ 2004-08-04 01:31:50	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\padrs804.dll
- 2004-08-04 03:31:50	175,104	-c--a-w	C:\WINDOWS\system32\dllcache\pintlcsa.dll
+ 2004-08-04 01:31:50	175,104	-c--a-w	C:\WINDOWS\system32\dllcache\pintlcsa.dll
- 2004-08-04 03:31:50	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\pintlcsd.dll
+ 2004-08-04 01:31:50	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\pintlcsd.dll
- 2004-08-04 03:31:50	70,144	-c--a-w	C:\WINDOWS\system32\dllcache\pintlphr.exe
+ 2004-08-04 01:31:50	70,144	-c--a-w	C:\WINDOWS\system32\dllcache\pintlphr.exe
- 2004-08-04 03:31:50	67,584	-c--a-w	C:\WINDOWS\system32\dllcache\pmigrate.dll
+ 2004-08-04 01:31:50	67,584	-c--a-w	C:\WINDOWS\system32\dllcache\pmigrate.dll
- 2007-12-07 01:07:04	39,424	-c--a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-02-16 09:02:37	39,424	-c--a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2007-12-07 01:07:05	1,495,040	-c--a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-02-16 09:02:38	1,495,040	-c--a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2007-12-07 01:07:05	474,624	-c--a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-02-16 09:02:38	474,624	-c--a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2004-08-04 03:32:16	44,032	-c--a-w	C:\WINDOWS\system32\dllcache	intlphr.exe
+ 2004-08-04 01:32:16	44,032	-c--a-w	C:\WINDOWS\system32\dllcache	intlphr.exe
- 2004-08-04 03:32:16	455,168	-c--a-w	C:\WINDOWS\system32\dllcache	intsetp.exe
+ 2004-08-04 01:32:16	455,168	-c--a-w	C:\WINDOWS\system32\dllcache	intsetp.exe
- 2004-08-04 03:32:14	10,240	-c--a-w	C:\WINDOWS\system32\dllcache	migrate.dll
+ 2004-08-04 01:32:14	10,240	-c--a-w	C:\WINDOWS\system32\dllcache	migrate.dll
- 2004-08-04 04:04:12	76,288	-c--a-w	C:\WINDOWS\system32\dllcache\uniime.dll
+ 2004-08-04 02:04:12	76,288	-c--a-w	C:\WINDOWS\system32\dllcache\uniime.dll
- 2007-12-07 01:07:05	617,472	-c--a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-02-16 09:02:39	617,984	-c--a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
- 2004-08-19 21:09:48	417,792	-c--a-w	C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2007-12-18 14:41:59	417,792	-c--a-w	C:\WINDOWS\system32\dllcache\vbscript.dll
- 2004-08-04 03:32:36	426,041	-c--a-w	C:\WINDOWS\system32\dllcache\voicepad.dll
+ 2004-08-04 01:32:36	426,041	-c--a-w	C:\WINDOWS\system32\dllcache\voicepad.dll
- 2004-08-04 03:32:36	86,073	-c--a-w	C:\WINDOWS\system32\dllcache\voicesub.dll
+ 2004-08-04 01:32:36	86,073	-c--a-w	C:\WINDOWS\system32\dllcache\voicesub.dll
- 2004-08-19 21:09:48	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\wdigest.dll
+ 2006-03-24 04:37:52	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\wdigest.dll
- 2007-03-08 15:33:58	1,843,712	-c--a-w	C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-03-20 08:09:22	1,845,376	-c--a-w	C:\WINDOWS\system32\dllcache\win32k.sys
- 2007-12-07 01:07:05	663,552	-c--a-w	C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-02-16 09:02:39	663,552	-c--a-w	C:\WINDOWS\system32\dllcache\wininet.dll
- 2006-06-26 17:41:32	148,480	----a-w	C:\WINDOWS\system32\dnsapi.dll
+ 2008-02-20 05:35:05	148,992	----a-w	C:\WINDOWS\system32\dnsapi.dll
+ 2004-08-19 19:09:20	4,255	------w	C:\WINDOWS\system32\drivers\adv01nt5.dll
+ 2004-08-19 19:09:20	3,967	------w	C:\WINDOWS\system32\drivers\adv02nt5.dll
+ 2004-08-19 19:09:20	3,615	------w	C:\WINDOWS\system32\drivers\adv05nt5.dll
+ 2004-08-19 19:09:20	3,647	------w	C:\WINDOWS\system32\drivers\adv07nt5.dll
+ 2004-08-19 19:09:20	3,135	------w	C:\WINDOWS\system32\drivers\adv08nt5.dll
+ 2004-08-19 19:09:20	3,711	------w	C:\WINDOWS\system32\drivers\adv09nt5.dll
+ 2004-08-19 19:09:20	3,775	------w	C:\WINDOWS\system32\drivers\adv11nt5.dll
+ 2004-08-04 02:07:42	42,368	------w	C:\WINDOWS\system32\drivers\agp440.sys
+ 2004-08-04 02:07:44	44,928	------w	C:\WINDOWS\system32\drivers\agpcpq.sys
+ 2004-08-04 02:07:42	42,752	------w	C:\WINDOWS\system32\drivers\alim1541.sys
+ 2004-08-04 02:07:44	43,008	------w	C:\WINDOWS\system32\drivers\amdagp.sys
+ 2004-08-04 01:29:30	56,623	------w	C:\WINDOWS\system32\drivers\ati1btxx.sys
+ 2004-08-04 01:29:30	11,615	------w	C:\WINDOWS\system32\drivers\ati1mdxx.sys
+ 2004-08-04 01:29:30	12,047	------w	C:\WINDOWS\system32\drivers\ati1pdxx.sys
+ 2004-08-04 01:29:32	30,671	------w	C:\WINDOWS\system32\drivers\ati1raxx.sys
+ 2004-08-04 01:29:32	63,663	------w	C:\WINDOWS\system32\drivers\ati1rvxx.sys
+ 2004-08-04 01:29:32	26,367	------w	C:\WINDOWS\system32\drivers\ati1snxx.sys
+ 2004-08-04 01:29:32	21,343	------w	C:\WINDOWS\system32\drivers\ati1ttxx.sys
+ 2004-08-04 01:29:32	36,463	------w	C:\WINDOWS\system32\drivers\ati1tuxx.sys
+ 2004-08-04 01:29:32	29,455	------w	C:\WINDOWS\system32\drivers\ati1xbxx.sys
+ 2004-08-04 01:29:32	34,735	------w	C:\WINDOWS\system32\drivers\ati1xsxx.sys
+ 2004-08-19 18:53:40	327,168	------w	C:\WINDOWS\system32\drivers\ati2mtaa.sys
+ 2004-08-19 18:53:42	701,440	------w	C:\WINDOWS\system32\drivers\ati2mtag.sys
+ 2004-08-04 01:29:28	57,856	------w	C:\WINDOWS\system32\drivers\atinbtxx.sys
+ 2004-08-04 01:29:30	13,824	------w	C:\WINDOWS\system32\drivers\atinmdxx.sys
+ 2004-08-04 01:29:30	14,336	------w	C:\WINDOWS\system32\drivers\atinpdxx.sys
+ 2004-08-04 01:29:30	52,224	------w	C:\WINDOWS\system32\drivers\atinraxx.sys
+ 2004-08-04 01:29:32	104,960	------w	C:\WINDOWS\system32\drivers\atinrvxx.sys
+ 2004-08-04 01:29:32	28

Deirheim · Answer

+ 2004-08-04 01:29:32	28,672	------w	C:\WINDOWS\system32\drivers\atinsnxx.sys
+ 2004-08-04 01:29:32	13,824	------w	C:\WINDOWS\system32\drivers\atinttxx.sys
+ 2004-08-04 01:29:32	73,216	------w	C:\WINDOWS\system32\drivers\atintuxx.sys
+ 2004-08-04 01:29:32	31,744	------w	C:\WINDOWS\system32\drivers\atinxbxx.sys
+ 2004-08-04 01:29:32	63,488	------w	C:\WINDOWS\system32\drivers\atinxsxx.sys
+ 2004-08-19 19:09:22	21,183	------w	C:\WINDOWS\system32\drivers\atv01nt5.dll
+ 2004-08-19 19:09:22	11,359	------w	C:\WINDOWS\system32\drivers\atv02nt5.dll
+ 2004-08-19 19:09:22	25,471	------w	C:\WINDOWS\system32\drivers\atv04nt5.dll
+ 2004-08-19 19:09:22	14,143	------w	C:\WINDOWS\system32\drivers\atv06nt5.dll
+ 2004-08-19 19:09:22	17,279	------w	C:\WINDOWS\system32\drivers\atv10nt5.dll
+ 2004-08-04 02:10:40	38,016	------w	C:\WINDOWS\system32\drivers\bthmodem.sys
+ 2004-08-04 02:10:38	35,456	------w	C:\WINDOWS\system32\drivers\bthprint.sys
+ 2004-08-19 19:09:22	15,423	------w	C:\WINDOWS\system32\drivers\ch7xxnt5.dll
+ 2007-03-16 12:56:06	302,000	----a-w	C:\WINDOWS\system32\drivers\fwdrv.sys
+ 2004-08-04 02:07:44	46,464	------w	C:\WINDOWS\system32\drivers\gagp30kx.sys
+ 2004-08-19 18:55:52	25,856	------w	C:\WINDOWS\system32\drivers\hidbth.sys
+ 2004-08-04 02:08:20	15,104	------w	C:\WINDOWS\system32\drivers\hidir.sys
+ 2004-08-04 01:41:48	220,032	------w	C:\WINDOWS\system32\drivers\hsfbs2s2.sys
+ 2004-08-04 01:41:50	685,056	------w	C:\WINDOWS\system32\drivers\hsfcxts2.sys
+ 2004-08-04 01:41:56	1,041,536	------w	C:\WINDOWS\system32\drivers\hsfdpsp2.sys
+ 2004-08-04 02:08:34	40,832	------w	C:\WINDOWS\system32\drivers\irbus.sys
+ 2007-03-16 12:56:10	72,496	----a-w	C:\WINDOWS\system32\drivers\khips.sys
+ 2004-08-04 01:41:56	11,868	------w	C:\WINDOWS\system32\drivers\mdmxsdk.sys
+ 2004-08-04 01:41:40	126,686	------w	C:\WINDOWS\system32\drivers\mtlmnt5.sys
+ 2004-08-04 01:41:38	1,309,184	------w	C:\WINDOWS\system32\drivers\mtlstrm.sys
+ 2004-08-04 01:29:38	452,736	------w	C:\WINDOWS\system32\drivers\mtxparhm.sys
+ 2004-08-04 02:04:52	12,672	------w	C:\WINDOWS\system32\drivers\mutohpen.sys
+ 2004-08-04 01:41:40	180,360	------w	C:\WINDOWS\system32\drivers\ntmtlfax.sys
- 2004-03-16 14:58:20	136,960	----a-w	C:\WINDOWS\system32\drivers\portcls.sys
+ 2004-08-04 02:15:50	145,792	----a-w	C:\WINDOWS\system32\drivers\portcls.sys
+ 2004-08-04 01:41:40	13,776	------w	C:\WINDOWS\system32\drivers\recagent.sys
+ 2004-08-04 02:04:32	30,080	------w	C:\WINDOWS\system32\drivers\rndismpx.sys
+ 2004-08-04 01:29:52	166,912	------w	C:\WINDOWS\system32\drivers\s3gnbm.sys
+ 2004-08-19 19:09:42	3,901	------w	C:\WINDOWS\system32\drivers\siint5.dll
+ 2004-08-04 02:07:44	41,088	------w	C:\WINDOWS\system32\drivers\sisagp.sys
+ 2004-08-04 01:41:42	129,535	------w	C:\WINDOWS\system32\drivers\slnt7554.sys
+ 2004-08-04 01:41:44	404,990	------w	C:\WINDOWS\system32\drivers\slntamr.sys
+ 2004-08-04 01:41:46	95,424	------w	C:\WINDOWS\system32\drivers\slnthal.sys
+ 2004-08-04 01:41:46	13,240	------w	C:\WINDOWS\system32\drivers\slwdmsup.sys
+ 2004-08-04 02:07:38	6,016	------w	C:\WINDOWS\system32\drivers\smbali.sys
+ 2004-08-04 02:07:44	44,672	------w	C:\WINDOWS\system32\drivers\uagp35.sys
+ 2004-08-04 02:04:34	12,672	------w	C:\WINDOWS\system32\drivers\usb8023x.sys
+ 2004-08-19 19:09:48	11,325	------w	C:\WINDOWS\system32\drivers\vchnt5.dll
+ 2004-08-04 02:07:44	42,240	------w	C:\WINDOWS\system32\drivers\viaagp.sys
+ 2004-08-04 02:04:54	13,568	------w	C:\WINDOWS\system32\drivers\wacompen.sys
+ 2004-08-04 01:29:40	11,807	------w	C:\WINDOWS\system32\drivers\wadv07nt.sys
+ 2004-08-04 01:29:40	11,295	------w	C:\WINDOWS\system32\drivers\wadv08nt.sys
+ 2004-08-04 01:29:42	11,871	------w	C:\WINDOWS\system32\drivers\wadv09nt.sys
+ 2004-08-04 01:29:42	11,935	------w	C:\WINDOWS\system32\drivers\wadv11nt.sys
+ 2004-08-04 01:29:46	22,271	------w	C:\WINDOWS\system32\drivers\watv06nt.sys
+ 2004-08-04 01:29:46	25,471	------w	C:\WINDOWS\system32\drivers\watv10nt.sys
- 2007-12-07 01:07:03	357,888	----a-w	C:\WINDOWS\system32\dxtmsft.dll
+ 2008-02-16 09:02:34	357,888	----a-w	C:\WINDOWS\system32\dxtmsft.dll
- 2007-12-07 01:07:03	205,312	----a-w	C:\WINDOWS\system32\dxtrans.dll
+ 2008-02-16 09:02:35	205,312	----a-w	C:\WINDOWS\system32\dxtrans.dll
- 2007-12-07 01:07:04	55,808	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2008-02-16 09:02:35	55,808	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2004-08-19 19:09:54	20,992	------w	C:\WINDOWS\system32\faxpatch.exe
- 2008-04-02 20:18:46	458,840	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-04-15 04:53:08	460,432	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT
+ 2004-08-19 19:09:28	32,285	------w	C:\WINDOWS\system32\hsfcisp2.dll
+ 2006-06-29 11:05:44	26,112	------w	C:\WINDOWS\system32\idndl.dll
- 2007-12-07 01:07:04	251,392	----a-w	C:\WINDOWS\system32\iepeers.dll
+ 2008-02-16 09:02:35	251,392	----a-w	C:\WINDOWS\system32\iepeers.dll
+ 2004-08-04 01:31:54	198,656	----a-w	C:\WINDOWS\system32\IME\CINTLGNT\CINTIME.DLL
+ 2004-08-04 01:31:56	480,256	----a-w	C:\WINDOWS\system32\IME\CINTLGNT\CINTSETP.EXE
+ 2004-08-04 01:31:50	59,392	----a-w	C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE
+ 2004-08-04 01:31:50	70,144	----a-w	C:\WINDOWS\system32\IME\PINTLGNT\PINTLPHR.EXE
+ 2004-08-04 01:31:50	67,584	----a-w	C:\WINDOWS\system32\IME\PINTLGNT\PMIGRATE.DLL
+ 2004-08-04 01:32:16	44,032	----a-w	C:\WINDOWS\system32\IME\TINTLGNT\TINTLPHR.EXE
+ 2004-08-04 01:32:16	455,168	----a-w	C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
+ 2004-08-04 01:32:14	10,240	----a-w	C:\WINDOWS\system32\IME\TINTLGNT\TMIGRATE.DLL
+ 2004-08-04 01:31:50	811,064	----a-w	C:\WINDOWS\system32\imjp81k.dll
+ 2004-08-19 19:09:42	221,696	------w	C:\WINDOWS\system32\inetsrv\seo.dll
+ 2004-08-19 19:09:42	189,440	------w	C:\WINDOWS\system32\inetsrv\smtpadm.dll
+ 2004-08-19 19:09:44	2,134,528	------w	C:\WINDOWS\system32\inetsrv\smtpsnap.dll
- 2007-12-07 01:07:04	96,768	----a-w	C:\WINDOWS\system32\inseng.dll
+ 2008-02-16 09:02:35	96,768	----a-w	C:\WINDOWS\system32\inseng.dll
- 2007-11-14 07:28:02	450,560	------w	C:\WINDOWS\system32\jscript.dll
+ 2007-12-18 14:41:58	450,560	----a-w	C:\WINDOWS\system32\jscript.dll
- 2007-12-07 01:07:04	16,384	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2008-02-16 09:02:35	16,384	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2005-05-16 22:34:48	213,048	----a-w	C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2006-03-20 16:17:24	65,536	----a-w	C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2006-03-20 16:17:20	798,720	----a-w	C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
+ 2001-08-18 01:55:56	6,144	----a-w	C:\WINDOWS\system32\kbd101b.dll
+ 2001-08-18 01:55:56	6,144	----a-w	C:\WINDOWS\system32\kbd101c.dll
+ 2001-08-18 01:55:56	5,632	----a-w	C:\WINDOWS\system32\kbd103.dll
+ 2001-08-18 01:55:56	6,144	----a-w	C:\WINDOWS\system32\kbd106.dll
+ 2001-08-23 20:47:06	8,704	----a-w	C:\WINDOWS\system32\kbdjpn.dll
+ 2001-08-23 20:47:06	8,192	----a-w	C:\WINDOWS\system32\kbdkor.dll
+ 2008-03-25 02:32:44	218,496	----a-r	C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
- 2007-11-20 19:52:00	2,884,992	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
+ 2008-03-25 03:21:18	2,889,088	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
- 2007-11-20 19:52:00	218,496	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-25 03:21:20	218,496	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-03-30 01:18:03	74,649	----a-w	C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-04-13 17:23:00	74,649	----a-w	C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-04-13 18:12:37	70,264	----a-w	C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
+ 2004-08-19 19:09:32	86,016	------w	C:\WINDOWS\system32\mdmxsdk.dll
+ 2003-03-19 00:12:12	1,047,552	----a-w	C:\WINDOWS\system32\mfc71u.dll
- 2008-03-05 11:30:56	19,148,408	----a-w	C:\WINDOWS\system32\MRT.exe
+ 2008-04-06 05:56:20	19,836,024	----a-w	C:\WINDOWS\system32\MRT.exe
- 2005-09-23 10:28:52	270,848	----a-w	C:\WINDOWS\system32\mscoree.dll
+ 2007-10-24 04:47:38	282,112	----a-w	C:\WINDOWS\system32\mscoree.dll
- 2005-09-23 10:28:52	150,016	----a-w	C:\WINDOWS\system32\mscorier.dll
+ 2007-10-24 04:47:38	158,720	----a-w	C:\WINDOWS\system32\mscorier.dll
- 2005-09-23 10:28:52	74,240	----a-w	C:\WINDOWS\system32\mscories.dll
+ 2007-10-24 04:47:38	84,480	----a-w	C:\WINDOWS\system32\mscories.dll
- 2007-12-07 14:37:06	3,080,192	----a-w	C:\WINDOWS\system32\mshtml.dll
+ 2008-02-16 22:32:38	3,080,704	----a-w	C:\WINDOWS\system32\mshtml.dll
- 2007-12-07 01:07:04	449,024	----a-w	C:\WINDOWS\system32\mshtmled.dll
+ 2008-02-16 09:02:36	449,024	----a-w	C:\WINDOWS\system32\mshtmled.dll
- 2007-12-07 01:07:04	146,432	----a-w	C:\WINDOWS\system32\msrating.dll
+ 2008-02-16 09:02:37	146,432	----a-w	C:\WINDOWS\system32\msrating.dll
- 2007-12-07 01:07:04	532,480	----a-w	C:\WINDOWS\system32\mstime.dll
+ 2008-02-16 09:02:37	532,480	----a-w	C:\WINDOWS\system32\mstime.dll
- 2003-03-18 20:14:52	499,712	----a-w	C:\WINDOWS\system32\MSVCP71.dll
+ 2006-01-05 02:03:56	499,712	----a-w	C:\WINDOWS\system32\msvcp71.dll
- 2003-02-21 17:42:22	348,160	----a-w	C:\WINDOWS\system32\msvcr71.dll
+ 2006-01-05 02:03:56	348,160	----a-w	C:\WINDOWS\system32\msvcr71.dll
+ 2004-08-19 19:09:36	1,737,856	------w	C:\WINDOWS\system32\mtxparhd.dll
- 2005-09-23 10:29:00	6,144	----a-w	C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
+ 2007-10-24 04:47:44	15,360	----a-w	C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
+ 2006-06-28 20:59:26	24,576	------w	C:\WINDOWS\system32\nlsdl.dll
+ 2006-06-29 11:05:44	23,552	------w	C:\WINDOWS\system32\normaliz.dll
- 2008-04-03 03:57:39	41,161	----a-w	C:\WINDOWS\system32\nvModes.dat
+ 2008-04-14 23:29:31	41,161	----a-w	C:\WINDOWS\system32\nvModes.dat
- 2008-03-30 04:51:56	66,710	----a-w	C:\WINDOWS\system32\perfc009.dat
+ 2008-04-11 06:02:33	67,894	----a-w	C:\WINDOWS\system32\perfc009.dat
- 2008-03-30 04:51:56	79,466	----a-w	C:\WINDOWS\system32\perfc00C.dat
+ 2008-04-11 06:02:33	81,238	----a-w	C:\WINDOWS\system32\perfc00C.dat
- 2008-03-30 04:51:56	427,926	----a-w	C:\WINDOWS\system32\perfh009.dat
+ 2008-04-11 06:02:33	433,190	----a-w	C:\WINDOWS\system32\perfh009.dat
- 2008-03-30 04:51:56	495,306	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2008-04-11 06:02:33	501,550	----a-w	C:\WINDOWS\system32\perfh00C.dat
- 2007-12-07 01:07:04	39,424	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2008-02-16 09:02:37	39,424	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2007-06-01 14:33:10	684,032	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4c32.dll
+ 2007-06-01 14:33:42	2,772,992	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4r32.dll
+ 2007-06-21 08:43:26	2,208,512	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4x32.sys
+ 2004-08-19 19:09:40	9,728	------w	C:\WINDOWS\system32\rwnh.dll
+ 2004-08-19 19:09:40	397,056	------w	C:\WINDOWS\system32\s3gnb.dll
- 2007-12-07 01:07:05	1,495,040	----a-w	C:\WINDOWS\system32\shdocvw.dll
+ 2008-02-16 09:02:38	1,495,040	----a-w	C:\WINDOWS\system32\shdocvw.dll
- 2007-12-07 01:07:05	474,624	----a-w	C:\WINDOWS\system32\shlwapi.dll
+ 2008-02-16 09:02:38	474,624	----a-w	C:\WINDOWS\system32\shlwapi.dll
+ 2004-08-19 19:09:42	73,832	------w	C:\WINDOWS\system32\slcoinst.dll
+ 2004-08-19 19:09:42	286,792	------w	C:\WINDOWS\system32\slextspk.dll
+ 2004-08-19 19:09:42	188,508	------w	C:\WINDOWS\system32\slgen.dll
+ 2004-08-19 19:10:04	32,866	------w	C:\WINDOWS\system32\slrundll.exe
+ 2004-08-19 19:10:04	73,796	------w	C:\WINDOWS\system32\slserv.exe
+ 2004-08-19 19:09:42	10,752	------w	C:\WINDOWS\system32\smtpapi.dll
+ 2004-08-19 19:10:04	8,192	----a-w	C:\WINDOWS\system32\spdwnwxp.exe
+ 2004-08-19 19:10:04	21,504	------w	C:\WINDOWS\system32\spupdwxp.exe
+ 2004-08-04 02:04:12	76,288	----a-w	C:\WINDOWS\system32\uniime.dll
- 2007-12-07 01:07:05	617,472	----a-w	C:\WINDOWS\system32\urlmon.dll
+ 2008-02-16 09:02:39	617,984	----a-w	C:\WINDOWS\system32\urlmon.dll
- 2004-08-19 21:09:48	417,792	------w	C:\WINDOWS\system32\vbscript.dll
+ 2007-12-18 14:41:59	417,792	------w	C:\WINDOWS\system32\vbscript.dll
- 2004-08-19 21:09:48	49,152	----a-w	C:\WINDOWS\system32\wdigest.dll
+ 2006-03-24 04:37:52	49,152	----a-w	C:\WINDOWS\system32\wdigest.dll
+ 2006-07-14 15:51:51	121,856	------w	C:\WINDOWS\system32\xmllite.dll
- 2007-12-06 23:40:30	369,152	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2008-02-15 23:03:14	370,176	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2008-04-18 20:15:40	16,384	----atw	C:\WINDOWS\Temp\Perflib_Perfdata_330.dat
+ 2004-08-19 21:07:58	1,712,128	----a-w	C:\WINDOWS\WinSxS\InstallTemp\14268632\GdiPlus.dll
+ 2008-04-11 06:02:13	8,192	----a-w	C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2007-10-24 04:47:56	479,232	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
+ 2007-10-24 04:47:56	558,080	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
+ 2007-10-24 04:47:56	635,904	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
- 2004-08-19 21:07:58	1,050,624	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
+ 2004-08-19 19:07:58	1,050,624	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
- 2004-08-19 21:07:58	54,784	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
+ 2004-08-19 19:07:58	54,784	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
- 2004-08-19 21:07:58	343,040	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
+ 2004-08-19 19:07:58	343,040	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
- 2004-08-19 21:07:58	1,712,128	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
+ 2004-08-19 19:07:58	1,712,128	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
- 2004-08-19 21:07:58	852,992	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2004-08-19 19:07:58	852,992	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2004-08-19 21:07:58	994,816	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2004-08-19 19:07:58	994,816	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2004-08-19 21:07:58	137,728	----a-r	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d\rtcres.dll
+ 2004-08-19 19:07:58	137,728	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d\rtcres.dll
- 2008-03-28 02:15:41	258,048	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-11 06:02:22	258,048	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2008-03-28 02:15:41	114,176	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2008-04-11 06:02:22	113,664	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitComet"="C:\Program Files\BitLord\BitLord.exe" [2005-05-06 21:47 2224128]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 13:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-05-18 16:53 8433664]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-19 17:10 110592 C:\WINDOWS\system32\bthprops.cpl]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-09-15 16:50 815104]
"ACU"="C:\Program Files\Atheros\ACU.exe" [2007-05-03 18:42 376921]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-06-01 11:51 823296]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-06-01 11:49 974848]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 16:10 56928]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 23:55 54832]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 07:48 157592]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 06:25 6731312]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\cmw23.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\Program Files\BitLord\BitLord.exe"=
"C:\Program Files\Bonjour\mDNSResponder.exe"=
"C:\WINDOWS\system32\usmt\migwiz.exe"=
"C:\Program Files\Microsoft Games\Impossible Creatures\IC.exe"=
"C:\Softimage\XSI_6_Mod_Tool\Application\bin\XSI.exe"=
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"C:\Program Files\Windows Live\Messenger\livecall.exe"=
"C:\Program Files\Messenger\msmsgs.exe"=
"C:\Program Files\iTunes\iTunes.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"C:\WINDOWS\system32\sessmgr.exe"=
"%windir%\system32\sessmgr.exe"=
"C:\Documents and Settings\MSI\Bureau\MTGOIII_Helper.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 O2MDRDR;O2MDRDR;C:\WINDOWS\system32\DRIVERS\o2media.sys [2007-04-03 11:04]
R0 O2SDRDR;O2SDRDR;C:\WINDOWS\system32\DRIVERS\o2sd.sys [2007-04-02 17:11]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 15:31]
R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2007-03-16 09:56]
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2007-03-16 09:56]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 15:35]
R3 WSIMD;wsimd Service;C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-03-28 20:52]
S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]
S3 XDva121;XDva121;C:\WINDOWS\system32\XDva121.sys []
S3 XDva134;XDva134;C:\WINDOWS\system32\XDva134.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\Setup.exe

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-14 18:54:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-18 19:18:37
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès 
Les fichiers cachés: 0 

**************************************************************************
.
Temps d'accomplissement: 2008-04-18 19:20:08
ComboFix-quarantined-files.txt  2008-04-18 22:20:03
ComboFix2.txt  2008-04-08 18:49:28
Pre-Run: 72,487,452,672 octets libres
Post-Run: 72,469,749,760 octets libres
.
2008-04-16 04:38:35	--- E O F ---  

-----------------------------------------------------------------------------------

Je rajouterai aussi que le firewall (sunbelt kerio) plante souvent, surtout quand j'ouvre un navigateur(mozilla firefox et surtout ie), en me poppant un message "cannot connect the service" et fini par faire planter toute la connection pendant un instant.
Aussi parfois, quand j'ouvre une nouvelle page, on me demande pour télécharger, comme firefox me le demande toujours quand je clic sur un lien de téléchargement, avec un truc comprenant "octet" et "stream" ou steam" dans le nom du fichier, lequel je refuse toujours. Tout ça m'a l'air que davantage suspect, j'espère que ces infos seront utiles.

Sur ce, à bientôt!

Deirheim · Answer

J'ai pu recevoir un combo des 2 erreurs mentionné un peu plus tôt et je m'essaie a montrer la screenshot dans ce lien : http://img81.imageshack.us/img81/4959/sanstitre3jx9.png

Utilisateur anonyme · Answer

Bonjour, 
Il est long le rapport combo...

Alors pour le smitfraud :
> Démarre en mode sans échec : (image). Si problème : tuto ici
- Dans le dossier "SmitfraudFix" ouvre "Smitfraudfix.cmd" puis choisit l 'option 2 et tape "oui" pour toutes les questions.
- Enregistre le rapport puis envoie le dans ton prochain poste. 

Pour ce qui est du pare feu Kério c'est dans le configurations. Regarde le lien ci dessous :
tuto : https://kerio.probb.fr/
- Si tu as des difficultés avec les configuration de Kerio, alors installe Zone Alarme : /telecharger/telecharger-157-zonealarm, en cas de problème : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm 
- Installe le nouveau pare-feu, puis désactive le pare-feu windows.    

Ensuite,
Aussi parfois, quand j'ouvre une nouvelle page, on me demande pour télécharger, comme firefox me le demande toujours quand je clic sur un lien de téléchargement, avec un truc comprenant "octet" et "stream" ou steam" dans le nom du fichier, lequel je refuse toujours.,

Peux tu me donner le nom complet et le lien si possible ?

Comment va le PC à part le lien steam ?
Après on termine.

A+

Deirheim · Answer

Re! "Peux tu me donner le nom complet et le lien si possible ? "

Utilisateur anonyme · Answer

Salut, J'ouvre mozilla firefox et on me lance c'est ce que ca me fais parfois au lieu du chargement de la page habituelle. Depuis un moment ca a stoppé., je ne comprends pas ce que tu veux dire... Bon supprime Kério et installe Zone Alarm stp... Puis, > Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau : http://www.techsupportforum.com/sectools/Deckard/dss.exe - Choisis et pour l'emplacement. - Ferme toutes les applications en cours (même internet). C'est important car sinon le PC peut planter. - Double-clique sur dss.exe pour lancer l'outil. - S'il ne trouve pas HijackThis, clique sur Oui. - Clique sur OK à chaque fois que cela te sera demandé. - Une fois l'analyse finie un rapport s'affichera. Poste son contenu dans ta réponse stp. NB : Le rapport se trouve aussi ici : C:\Deckard\System Scanner\main.txt PS : Si tu obtiens deux rapports (main.txt + extra.txt) alors poste les deux stp. Attention : les rapports peuvent être long donc envoie chacun d'eux dans un poste différent (sinon il risque de manquer la fin). Bon courage, A+ PS : Pourquoi virus war comme titre ? Récapitule tes problèmes aussi stp.

Viruses war

32 réponses

Discussions similaires