Problème virus/spyware/... + log hijackthis

Bonjour,

Je viens vous voir, car j'ai un petit problème niveau virus/spyware ...
J'ai ceci lors de mes scans spybot: http://sites.estvideo.net/cartman/prob.jpg
Vous me direz, suffit de nettoyer et c bon, mais hélas ... les deux premiers reviennent à chaque fois que je redémarre ...
Je n'arrive pas à ce qu'ils ne reviennent plus ... J'ai fait, analyse anti-virus (avec NOD) > Spybot > ad-aware > CCleaner, ils reviennent tout de même ... Donc je me tourne vers vous. Merci

Voici le log Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:37:49, on 31/05/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIBVE.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\PDFCreator\PDFCreator.exe
C:\Program Files\SkillPowered\SkillPowered.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Ocean Technology\GG E-Sports Platform\Garena.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {DE11CBEE-1CAA-48E2-9467-43114048871C} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\Windows\TEMP\E_S4964.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
O4 - Global Startup: SkillPowered.lnk = C:\Program Files\SkillPowered\SkillPowered.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\CaRTmaN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 8248 bytes
Configuration: Windows Vista
Firefox 2.0.0.14

22 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    Salut,

    tu ne changes pas ton antivirus parce que 2 cookies reviennent.

    =>[/b] Télécharge ATF-Cleaner (Attribune) : http://www.atribune.org/ccount/click.php?id=1
    -- Met le sur ton bureau

    => Lance ATF-Cleaner :
    * Sous l'onglet Main, choisis : Select All
    * Clique sur le bouton Empty Selected

    * Sous l'onglet Firefox (si présent) : Clique sur select all
    -- Au message "are you sure you want to delete your firefox saved password" clique sur NON
    -- Clique sur Empty selected

    * Sous l'onglet Opéra (si présent) : Clique sur select all
    -- Au message "are you sure you want to delete your firefox saved password" clique sur NON
    -- Clique sur Empty selected

    * Quitte ATF-Cleaner ) tu installes

    Tu lances ATF Cleaner chaque fois que tu quittes Internet.

    1. Salut alors désinstalle tous tes logiciel de sécurité sauf Spybot et Ccleaner. Et installe AntiVir,Malwarebytes Anti-Malware active le pare-feu Vista.

      AntiVir: https://www.01net.com/outils/telecharger/windows/Securite/antivirus-antitrojan/fiches/tele13198.html
      Tutoriel AntiVir: https://www.malekal.com/avira-free-security-antivirus-gratuit/

      Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
      Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

      PS: TU LES INSTALLES SEULEMENT ET TU NE FAIS PAS D'ANALYSE. TU FAIS UNE MISE A JOUR A ANTIVIR ET MALWAREBYTES ANTI-MALWARE ET A SPYBOT.
      1. salut,

        Faire virer un antivirus payant .......

        Eset est tres bien et léger en plus ...
        1. "Tu lances ATF Cleaner chaque fois que tu quittes Internet. "

          Je le lance à chaque fois que je quit IE ou ff ?
          1. Hum, j'ai fais les étapes avec ATF Cleaner, maintenant j'ai les sites sur ff qui deconne :s ...
            1. Contributeur sécurité
              Salut !!

              Refais un hijackthis pour vérifier en cliquant sur "scan only".
              1. Bon,

                le problème persiste, les deux premiers (BlueStreak & DoubleClick) reviennent toujours et encore :/.

                Voici le rapport hijackthis:

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 17:40:24, on 03/06/2008
                Platform: Windows Vista SP1 (WinNT 6.00.1905)
                MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                Boot mode: Normal

                Running processes:
                C:\Windows\system32\taskeng.exe
                C:\Windows\system32\Dwm.exe
                C:\Windows\Explorer.EXE
                C:\Program Files\Windows Defender\MSASCui.exe
                C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
                C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
                C:\Windows\RtHDVCpl.exe
                C:\Program Files\ESET\ESET Smart Security\egui.exe
                C:\Windows\System32\rundll32.exe
                C:\Program Files\Windows Sidebar\sidebar.exe
                C:\Program Files\Steam\Steam.exe
                C:\Program Files\DAEMON Tools\daemon.exe
                C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
                C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                C:\Program Files\Logitech\SetPoint\SetPoint.exe
                C:\Program Files\PDFCreator\PDFCreator.exe
                C:\Program Files\SkillPowered\SkillPowered.exe
                C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
                C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
                C:\Windows\system32\wbem\unsecapp.exe
                C:\Program Files\mIRC\mirc.exe
                C:\Program Files\Ocean Technology\GG E-Sports Platform\Garena.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: (no name) - {DE11CBEE-1CAA-48E2-9467-43114048871C} - (no file)
                O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
                O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
                O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
                O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
                O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\Windows\TEMP\E_S4964.tmp" /EF "HKCU"
                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\RunOnce: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
                O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
                O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
                O4 - Global Startup: SkillPowered.lnk = C:\Program Files\SkillPowered\SkillPowered.exe
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\CaRTmaN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O13 - Gopher Prefix:
                O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
                O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
                O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
                O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
                O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
                1. =>/b Télécharge ATF-Cleaner (Attribune) : http://www.atribune.org/ccount/click.php?id=1
                  -- Met le sur ton bureau

                  => Lance ATF-Cleaner :
                  * Sous l'onglet Main, choisis : Select All
                  * Clique sur le bouton Empty Selected

                  * Sous l'onglet Firefox (si présent) : Clique sur select all
                  -- Au message "are you sure you want to delete your firefox saved password" clique sur NON
                  -- Clique sur Empty selected

                  * Sous l'onglet Opéra (si présent) : Clique sur select all
                  -- Au message "are you sure you want to delete your firefox saved password" clique sur NON
                  -- Clique sur Empty selected

                  * Quitte ATF-Cleaner ) tu installes

                  Tu lances ATF Cleaner chaque fois que tu quittes Internet.
                  1. Contributeur sécurité
                    Le spyware Doubleclic tu devrais pouvoir l éliminer avec spybot
                    1. Contributeur sécurité
                      Vas supprimer C:\Program Files\mIRC\mirc.exe , c est un malware...Et vide la corbeille
                      1. Et le spyware doublick, (ainsi que lotre) je peux le supprimer avec Spybot, mais le problème c'est que à chaque redémarrage du pc, si je fais une analyse spybot, il me retrouve ces deux trucs ....
                        1. Contributeur sécurité
                          Je sais, chez moi aussi j ai le doubleclic mais je ne m en tracasse pas, il n est pas dangereux et ne fait rien coté performance
                      2. Contributeur sécurité
                        Essais avec combofix :

                        Télécharge et enregistre le sur le bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                        =Double-clic sur Combofix
                        = Presser 1 si demandé
                        = Attendre la fermeture de l’outil ( 5 -10 mn ou plus si infection importante)
                        = Un rapport s'ouvre , l'enregistrer sur le bureau
                        =mettre le rapport dans ta réponse

                        il est aussi à C:\Combofix.txt

                        puis refais un hijackthis
                        1. Contributeur sécurité
                          Salut,

                          quitte à utiliser Combofix, autant le faire avec un mode d'emploi adapté et qui minimise les risques.

                          Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

                          - Va dans démarrer puis panneau de configuration
                          - Double Clique sur l'icône "Comptes d'utilisateurs"
                          - Clique ensuite sur désactiver et valide.

                          télécharge combofix (par sUBs) ici :

                          http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                          et enregistre le sur le Bureau.

                          déconnecte toi d'internet et ferme toutes tes applications.

                          désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                          double-clique sur combofix.exe et suis les instructions

                          à la fin, il va produire un rapport C:\ComboFix.txt

                          réactive ton parefeu, ton antivirus, la garde de ton antispyware

                          copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                          Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                          Tu as un tutoriel complet ici :

                          https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
                          1. Le rapport ComboFix:

                            ComboFix 08-06-01.6 - CaRTmaN 2008-06-03 23:03:49.4 - NTFSx86
                            Microsoft® Windows Vista™ Édition Intégrale 6.0.6001.1.1252.1.1033.18.1736 [GMT 2:00]
                            Running from: C:\Users\CaRTmaN\Desktop\ComboFix.exe
                            * Created a new restore point
                            * Resident AV is active

                            .

                            ((((((((((((((((((((((((( Files Created from 2008-05-03 to 2008-06-03 )))))))))))))))))))))))))))))))
                            .

                            2008-06-03 22:58 . 2008-06-03 23:00 <REP> d-------- C:\327882R2FWJFW
                            2008-05-31 13:30 . 2008-05-31 13:30 <REP> d-------- C:\Users\All Users\ma-config.com
                            2008-05-31 13:30 . 2008-05-31 13:30 <REP> d-------- C:\ProgramData\ma-config.com
                            2008-05-31 13:30 . 2008-05-31 13:30 <REP> d-------- C:\Program Files\ma-config.com
                            2008-05-30 17:25 . 2008-03-08 04:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
                            2008-05-30 17:25 . 2008-03-08 06:21 1,695,744 --a------ C:\Windows\System32\gameux.dll
                            2008-05-24 14:29 . 2008-05-24 14:29 <REP> d-------- C:\Program Files\Ventrilo
                            2008-05-22 03:08 . 2006-10-13 00:00 61,952 --a------ C:\Windows\System32\escwiad.dll
                            2008-05-22 03:01 . 2008-05-22 03:01 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
                            2008-05-19 08:00 . 2008-05-19 08:00 <REP> d-------- C:\Windows\Sun
                            2008-05-18 22:40 . 2008-05-20 02:39 2,048,672 --a------ C:\evcbenchdownloaded.bin
                            2008-05-18 22:38 . 2008-05-18 22:38 2,048,001 -ra------ C:\evcbenchuploaded.bin
                            2008-05-17 18:51 . 2008-05-31 01:37 69 --a------ C:\Windows\NeroDigital.ini
                            2008-05-17 04:20 . 2008-05-17 04:20 38 --a------ C:\Windows\avisplitter.INI
                            2008-05-16 18:59 . 2008-06-03 13:24 <REP> d-------- C:\Program Files\mIRC
                            2008-05-15 23:15 . 2008-05-15 23:15 <REP> d-------- C:\Windows\nvidia icons
                            2008-05-15 18:24 . 2008-05-15 18:24 <REP> d-------- C:\Program Files\Blender Foundation
                            2008-05-15 14:20 . 2008-05-15 14:20 <REP> d-------- C:\Users\CaRTmaN\AppData\Roaming\Sony
                            2008-05-15 14:20 . 2008-05-15 14:20 <REP> d-------- C:\Users\CaRTmaN\AppData\Roaming\Publish Providers
                            2008-05-15 14:20 . 2008-05-15 14:20 156 --a------ C:\Windows\Twunk001.MTX
                            2008-05-15 14:20 . 2008-05-15 14:20 2 --a------ C:\Windows\Twain001.Mtx
                            2008-05-15 14:20 . 2008-05-15 14:20 0 --a------ C:\Windows\Twunk002.MTX
                            2008-05-15 14:16 . 2008-05-15 14:16 <REP> d-------- C:\Users\All Users\Sony
                            2008-05-15 14:16 . 2008-05-15 14:16 <REP> d-------- C:\ProgramData\Sony
                            2008-05-15 14:16 . 2008-05-15 14:16 <REP> d-------- C:\Program Files\Vstplugins
                            2008-05-15 14:16 . 2008-05-15 14:16 <REP> d-------- C:\Program Files\Sony
                            2008-05-15 14:13 . 2008-05-15 14:13 <REP> d-------- C:\Program Files\Sony Setup
                            2008-05-14 21:05 . 2008-05-14 21:05 72 --a------ C:\Windows\TravianIExploreS1T3.INI
                            2008-05-14 19:56 . 2008-05-14 19:56 <REP> d-------- C:\PerfLogs
                            2008-05-14 19:33 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
                            2008-05-14 19:32 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
                            2008-05-14 18:34 . 2008-05-14 18:43 <REP> d-------- C:\Program Files\IMVU
                            2008-05-14 16:36 . 2008-05-14 17:33 <REP> d-------- C:\Windows\BDOSCAN8
                            2008-05-14 16:30 . 2008-05-14 16:30 <REP> d-------- C:\Users\CaRTmaN\AppData\Roaming\Malwarebytes
                            2008-05-14 16:30 . 2008-05-14 16:30 <REP> d-------- C:\Users\All Users\Malwarebytes
                            2008-05-14 16:30 . 2008-05-14 16:30 <REP> d-------- C:\ProgramData\Malwarebytes
                            2008-05-14 16:30 . 2008-05-14 16:30 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                            2008-05-14 16:30 . 2008-05-05 20:46 27,048 --a------ C:\Windows\System32\drivers\mbamcatchme.sys
                            2008-05-14 16:30 . 2008-05-05 20:46 15,864 --a------ C:\Windows\System32\drivers\mbam.sys
                            2008-05-14 15:44 . 2008-05-14 15:44 <REP> d-------- C:\_OTMoveIt
                            2008-05-14 14:02 . 2008-05-14 14:02 <REP> d-------- C:\Program Files\Trend Micro
                            2008-05-13 15:49 . 2008-05-13 15:49 <REP> d-------- C:\Users\CaRTmaN\AppData\Roaming\ESET
                            2008-05-13 15:48 . 2008-05-13 15:48 <REP> d-------- C:\Users\All Users\ESET
                            2008-05-13 15:48 . 2008-05-13 15:48 <REP> d-------- C:\ProgramData\ESET
                            2008-05-13 15:48 . 2008-05-13 15:48 <REP> d-------- C:\Program Files\ESET
                            2008-05-13 01:46 . 2008-05-13 02:52 121 --a------ C:\Windows\bdagent.INI
                            2008-05-13 01:40 . 2008-05-13 02:53 <REP> d-------- C:\Program Files\BitDefender
                            2008-05-13 01:38 . 2008-05-13 02:12 <REP> d-------- C:\Program Files\Common Files\BitDefender

                            .
                            (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
                            .
                            2008-06-03 21:04 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\mIRC
                            2008-06-03 20:43 --------- d-----w C:\Program Files\Steam
                            2008-06-03 18:11 --------- d-----w C:\Program Files\Warcraft III
                            2008-06-03 16:53 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\teamspeak2
                            2008-06-03 14:14 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\uTorrent
                            2008-05-31 13:27 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\FileZilla
                            2008-05-31 06:30 --------- d-----w C:\Program Files\Common Files\Steam
                            2008-05-24 12:28 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
                            2008-05-22 01:08 --------- d-----w C:\Program Files\EPSON
                            2008-05-22 01:06 --------- d-----w C:\ProgramData\EPSON
                            2008-05-18 03:00 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\GrabIt
                            2008-05-15 21:17 --------- d-----w C:\ProgramData\NVIDIA
                            2008-05-15 02:21 --------- d-----w C:\Program Files\adslTV
                            2008-05-14 18:37 --------- d-----w C:\Program Files\Teamspeak2_RC2
                            2008-05-14 18:04 174 --sha-w C:\Program Files\desktop.ini
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Sidebar
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Photo Gallery
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Mail
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Journal
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Defender
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Collaboration
                            2008-05-14 17:57 --------- d-----w C:\Program Files\Windows Calendar
                            2008-05-14 17:45 82,432 ----a-w C:\Windows\System32\axaltocm.dll
                            2008-05-14 17:45 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
                            2008-05-14 17:19 --------- d-----w C:\ProgramData\Microsoft Help
                            2008-05-13 16:08 --------- d--h--w C:\Program Files\InstallShield Installation Information
                            2008-05-13 16:07 --------- d-----w C:\Program Files\Google
                            2008-05-13 13:44 --------- d-----w C:\ProgramData\Kaspersky Lab
                            2008-05-12 23:25 --------- d-----w C:\Program Files\CCleaner
                            2008-05-03 15:26 --------- d-----w C:\Users\CaRTmaN\AppData\Roaming\codeblocks
                            2008-04-30 15:27 442,368 ----a-w C:\Windows\System32\NVUNINST.EXE
                            2008-04-28 10:32 --------- d-----w C:\Program Files\PDFCreator
                            2008-04-24 10:32 --------- d-----w C:\Program Files\VideoMach-4.0.4
                            2008-04-21 11:08 --------- d-----w C:\Program Files\Ubisoft
                            2008-04-16 17:21 319,456 ----a-w C:\Windows\DIFxAPI.dll
                            2008-04-16 17:21 --------- d-----w C:\Program Files\Realtek
                            2008-04-06 21:51 86,016 ----a-w C:\Users\CaRTmaN\IDHWTSS1.dll
                            2008-03-26 14:40 30,208 ----a-w C:\Windows\System32\RtkCoInst.dll
                            2008-03-26 11:21 5,369,856 ----a-w C:\Windows\RtHDVCpl.exe
                            2008-03-18 13:31 98,304 ----a-w C:\Windows\RTKAUDIOSERVICE.EXE
                            2008-03-17 10:40 140,800 ----a-w C:\Windows\System32\FMAPO.dll
                            2008-03-13 14:51 2,160,640 ----a-w C:\Windows\System32\RtkAPO.dll
                            2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
                            2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
                            2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
                            2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
                            2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
                            2008-03-07 17:12 697,344 ----a-w C:\Windows\System32\RtkPgExt.dll
                            2008-03-05 16:07 520,192 ----a-w C:\Windows\RtlExUpd.dll
                            2008-02-28 19:26 36,868 ----a-w C:\Users\CaRTmaN\PrtDLL.dll
                            2007-12-24 14:30 22,328 ----a-w C:\Users\CaRTmaN\AppData\Roaming\PnkBstrK.sys
                            .

                            ------- Sigcheck -------

                            .
                            ((((((((((((((((((((((((((((( snapshot@2008-05-14_15.38.57.46 )))))))))))))))))))))))))))))))))))))))))
                            .
                            - 2006-11-02 09:46:02 237,568 ----a-w C:\Windows\AppPatch\AcRedir.dll
                            + 2008-01-19 07:33:41 237,568 ----a-w C:\Windows\AppPatch\AcRedir.dll
                            - 2006-11-02 09:46:02 40,960 ----a-w C:\Windows\AppPatch\apihex86.dll
                            + 2008-01-19 07:33:43 40,960 ----a-w C:\Windows\AppPatch\apihex86.dll
                            - 2008-02-21 04:43:35 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
                            + 2008-01-19 07:34:28 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
                            - 2006-11-02 12:34:21 143,360 ----a-w C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll
                            + 2008-01-19 07:38:12 144,384 ----a-w C:\Windows\assembly\GAC_32\BDATunePIA\6.0.6000.0__31bf3856ad364e35\BDATunePIA.dll
                            - 2006-10-20 01:13:56 69,120 ----a-w C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
                            + 2008-01-05 11:26:08 69,120 ----a-w C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
                            - 2006-10-20 01:14:03 72,192 ----a-w C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
                            + 2008-01-05 11:26:17 72,192 ----a-w C:\Windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
                            - 2006-11-02 12:34:22 77,824 ----a-w C:\Windows\assembly\GAC_32\mcstoredb\6.0.6000.0__31bf3856ad364e35\mcstoredb.dll
                            + 2008-01-19 07:38:31 78,336 ----a-w C:\Windows\assembly\GAC_32\mcstoredb\6.0.6000.0__31bf3856ad364e35\mcstoredb.dll
                            - 2006-11-02 12:34:21 136,192 ----a-w C:\Windows\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe
                            + 2008-01-19 07:38:31 140,288 ----a-w C:\Windows\assembly\GAC_32\mcupdate\6.0.6000.0__31bf3856ad364e35\mcupdate.exe
                            - 2006-11-02 12:34:22 105,472 ----a-w C:\Windows\assembly\GAC_32\Mcx2Dvcs\6.0.6000.0__31bf3856ad364e35\Mcx2Dvcs.dll
                            + 2008-01-19 07:38:32 106,496 ----a-w C:\Windows\assembly\GAC_32\Mcx2Dvcs\6.0.6000.0__31bf3856ad364e35\Mcx2Dvcs.dll
                            - 2006-11-02 12:34:25 132,608 ----a-w C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.Interop\2.0.0.0__31bf3856ad364e35\Microsoft.GroupPolicy.Interop.dll
                            + 2008-01-19 07:38:33 134,144 ----a-w C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.Interop\2.0.0.0__31bf3856ad364e35\Microsoft.GroupPolicy.Interop.dll
                            - 2006-11-02 12:33:17 507,904 ----a-w C:\Windows\assembly\GAC_32\Microsoft.Ink\6.0.0.0__31bf3856ad364e35\Microsoft.Ink.dll
                            + 2008-01-19 07:38:34 507,904 ----a-w C:\Windows\assembly\GAC_32\Microsoft.Ink\6.0.0.0__31bf3856ad364e35\Microsoft.Ink.dll
                            - 2006-11-02 12:33:44 151,552 ----a-w C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
                            + 2008-01-05 11:21:39 151,552 ----a-w C:\Windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
                            - 2006-10-20 01:14:15 4,366,336 ----a-w C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
                            + 2008-01-05 11:26:32 4,444,160 ----a-w C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
                            - 2006-11-02 09:47:03 39,936 ----a-w C:\Windows\assembly\GAC_32\napcrypt\6.0.0.0__31bf3856ad364e35\NAPCRYPT.DLL
                            + 2008-01-19 07:38:44 46,080 ----a-w C:\Windows\assembly\GAC_32\napcrypt\6.0.0.0__31bf3856ad364e35\NAPCRYPT.DLL
                            - 2006-11-02 09:47:03 98,816 ----a-w C:\Windows\assembly\GAC_32\naphlpr\6.0.0.0__31bf3856ad364e35\NAPHLPR.DLL
                            + 2008-01-19 07:38:45 103,936 ----a-w C:\Windows\assembly\GAC_32\naphlpr\6.0.0.0__31bf3856ad364e35\NAPHLPR.DLL
                            - 2006-11-02 12:33:42 3,915,264 ----a-w C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
                            + 2008-01-05 11:21:53 4,174,336 ----a-w C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
                            - 2006-10-20 01:14:47 482,304 ----a-w C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
                            + 2008-01-05 11:26:54 483,840 ----a-w C:\Windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
                            - 2006-10-20 01:14:47 2,894,336 ----a-w C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
                            + 2008-01-05 11:26:54 3,036,160 ----a-w C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
                            - 2006-10-20 01:14:51 258,048 ----a-w C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
                            + 2008-01-05 11:26:55 258,048 ----a-w C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
                            - 2006-11-02 06:34:22 114,176 ----a-w C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
                            + 2008-01-19 03:22:55 113,664 ----a-w C:\Windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
                            - 2006-11-02 12:33:42 344,064 ----a-w C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
                            + 2008-01-05 11:21:55 346,624 ----a-w C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
                            - 2006-10-20 01:14:53 260,096 ----a-w C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
                            + 2008-01-05 11:26:59 261,120 ----a-w C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
                            - 2007-10-26 23:09:54 5,156,864 ----a-w C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
                            + 2008-01-05 11:26:59 5,431,296 ----a-w C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
                            - 2006-10-20 01:13:37 10,752 ----a-w C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
                            + 2008-01-05 11:25:52 10,752 ----a-w C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
                            - 2007-10-26 23:56:26 315,392 ----a-w C:\Windows\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_fr_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
                            + 2008-01-05 11:26:11 315,392 ----a-w C:\Windows\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_fr_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
                            - 2006-10-20 01:13:41 503,808 ----a-w C:\Windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
                            + 2008-01-05 11:25:59 507,904 ----a-w C:\Windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
                            - 2006-11-02 12:33:44 159,744 ----a-w C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
                            + 2008-01-05 11:21:39 159,744 ----a-w C:\Windows\assembly\GAC_MSIL\ComSvcConfig\3.0.0.0__b03f5f7f11d50a3a\ComSvcConfig.exe
                            - 2006-10-20 01:13:56 13,312 ----a-w C:\Windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
                            + 2008-01-05 11:26:08 13,312 ----a-w C:\Windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
                            - 2006-10-20 01:13:57 5,120 ----a-w C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
                            + 2008-01-05 11:26:11 5,120 ----a-w C:\Windows\assembly\GAC_MSIL\dfsvc\2.0.0.0__b03f5f7f11d50a3a\dfsvc.exe
                            - 2008-01-10 05:51:27 864,256 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
                            + 2008-01-19 07:38:16 827,392 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
                            - 2006-11-02 12:34:13 139,264 ----a-w C:\Windows\assembly\GAC_MSIL\ehepgdat\6.0.6000.0__31bf3856ad364e35\ehepgdat.dll
                            + 2008-01-19 07:38:16 139,264 ----a-w C:\Windows\assembly\GAC_MSIL\ehepgdat\6.0.6000.0__31bf3856ad364e35\ehepgdat.dll
                            - 2008-01-10 05:51:29 135,168 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
                            + 2008-01-19 07:38:17 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
                            - 2008-01-10 05:51:30 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
                            + 2006-11-02 12:34:13 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
                            - 2006-11-02 12:34:20 401,408 ----a-w C:\Windows\assembly\GAC_MSIL\ehiProxy\6.0.6000.0__31bf3856ad364e35\ehiProxy.dll
                            + 2008-01-19 07:38:18 401,408 ----a-w C:\Windows\assembly\GAC_MSIL\ehiProxy\6.0.6000.0__31bf3856ad364e35\ehiProxy.dll
                            - 2006-11-02 12:34:15 19,456 ----a-w C:\Windows\assembly\GAC_MSIL\ehiReplay\6.0.6000.0__31bf3856ad364e35\ehiReplay.dll
                            + 2008-01-19 07:38:18 19,456 ----a-w C:\Windows\assembly\GAC_MSIL\ehiReplay\6.0.6000.0__31bf3856ad364e35\ehiReplay.dll
                            - 2006-11-02 12:34:20 307,200 ----a-w C:\Windows\assembly\GAC_MSIL\ehiVidCtl\6.0.6000.0__31bf3856ad364e35\ehiVidCtl.dll
                            + 2008-01-19 07:38:19 307,200 ----a-w C:\Windows\assembly\GAC_MSIL\ehiVidCtl\6.0.6000.0__31bf3856ad364e35\ehiVidCtl.dll
                            - 2006-11-02 12:34:22 143,360 ----a-w C:\Windows\assembly\GAC_MSIL\ehiwmp\6.0.6000.0__31bf3856ad364e35\ehiwmp.dll
                            + 2008-01-19 07:38:19 143,360 ----a-w C:\Windows\assembly\GAC_MSIL\ehiwmp\6.0.6000.0__31bf3856ad364e35\ehiwmp.dll
                            - 2006-11-02 12:34:14 520,192 ----a-w C:\Windows\assembly\GAC_MSIL\ehRecObj\6.0.6000.0__31bf3856ad364e35\ehRecObj.dll
                            + 2008-01-19 07:38:19 520,192 ----a-w C:\Windows\assembly\GAC_MSIL\ehRecObj\6.0.6000.0__31bf3856ad364e35\ehRecObj.dll
                            - 2008-01-10 05:51:34 4,370,432 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
                            + 2008-01-19 07:38:21 4,046,848 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
                            - 2006-11-02 12:39:52 8,192 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.0.0.0_en_31bf3856ad364e35\EventViewer.resources.dll
                            + 2008-01-19 07:48:58 8,192 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.0.0.0_en_31bf3856ad364e35\EventViewer.resources.dll
                            - 2007-10-26 23:56:14 9,216 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.0.0.0_fr_31bf3856ad364e35\EventViewer.resources.dll
                            + 2008-01-19 07:53:44 9,216 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer.Resources\6.0.0.0_fr_31bf3856ad364e35\EventViewer.resources.dll
                            - 2006-11-02 09:46:54 364,544 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer\6.0.0.0__31bf3856ad364e35\EventViewer.dll
                            + 2008-01-19 07:38:21 364,544 ----a-w C:\Windows\assembly\GAC_MSIL\EventViewer\6.0.0.0__31bf3856ad364e35\EventViewer.dll
                            - 2006-10-20 01:14:02 8,192 ----a-w C:\Windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
                            + 2008-01-05 11:26:12 8,192 ----a-w C:\Windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
                            - 2006-10-20 01:14:02 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
                            + 2008-01-05 11:26:12 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
                            - 2006-10-20 01:14:02 5,632 ----a-w C:\Windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
                            + 2008-01-05 11:26:13 6,656 ----a-w C:\Windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
                            - 2006-11-02 12:34:14 200,704 ----a-w C:\Windows\assembly\GAC_MSIL\mcstore\6.0.6000.0__31bf3856ad364e35\mcstore.dll
                            + 2008-01-19 07:38:31 176,128 ----a-w C:\Windows\assembly\GAC_MSIL\mcstore\6.0.6000.0__31bf3856ad364e35\mcstore.dll
                            - 2007-10-26 23:55:17 53,248 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
                            + 2008-01-05 11:26:11 53,248 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
                            - 2006-10-20 01:14:03 413,696 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
                            + 2008-01-05 11:26:17 348,160 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
                            - 2006-10-20 01:14:03 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
                            + 2008-01-05 11:26:17 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
                            - 2007-10-26 23:56:33 139,264 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
                            + 2008-01-05 11:26:11 139,264 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
                            - 2006-10-20 01:14:03 647,168 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
                            + 2008-01-05 11:26:17 655,360 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
                            - 2007-10-26 23:56:22 10,240 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
                            + 2008-01-05 11:26:11 10,752 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
                            - 2006-10-20 01:14:04 73,728 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
                            + 2008-01-05 11:26:17 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
                            - 2006-11-02 12:40:17 270,336 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_en_31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.Resources.dll
                            + 2008-01-19 07:49:02 270,336 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_en_31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.Resources.dll
                            - 2007-10-26 23:57:07 282,624 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_fr_31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.Resources.dll
                            + 2008-01-19 07:53:49 282,624 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting.Resources\2.0.0.0_fr_31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.Resources.dll
                            - 2006-11-02 12:34:25 1,056,768 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting\2.0.0.0__31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.dll
                            + 2008-01-19 07:38:34 1,060,864 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.GroupPolicy.Reporting\2.0.0.0__31bf3856ad364e35\Microsoft.GroupPolicy.Reporting.dll
                            - 2007-10-26 23:56:36 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Ink.Resources\6.0.0.0_fr_31bf3856ad364e35\Microsoft.Ink.Resources.dll
                            + 2008-01-19 07:53:49 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Ink.Resources\6.0.0.0_fr_31bf3856ad364e35\Microsoft.Ink.Resources.dll
                            - 2007-10-26 23:55:55 45,056 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll
                            + 2008-01-05 11:26:11 45,056 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll
                            - 2006-10-20 01:14:04 749,568 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
                            + 2008-01-05 11:26:19 749,568 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
                            - 2007-10-26 23:55:29 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_fr_31bf3856ad364e35\Microsoft.ManagementConsole.Resources.dll
                            + 2008-01-19 07:53:50 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole.Resources\3.0.0.0_fr_31bf3856ad364e35\Microsoft.ManagementConsole.Resources.dll
                            - 2006-11-02 09:47:01 245,760 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole\3.0.0.0__31bf3856ad364e35\Microsoft.ManagementConsole.dll
                            + 2008-01-19 07:38:35 188,416 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.ManagementConsole\3.0.0.0__31bf3856ad364e35\Microsoft.ManagementConsole.dll
                            - 2008-01-10 05:51:50 1,196,032 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
                            + 2008-01-19 07:38:36 1,241,088 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
                            - 2006-11-02 12:34:21 167,936 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Sports\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Sports.dll
                            + 2008-01-19 07:38:36 167,936 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Sports\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Sports.dll
                            - 2008-01-10 05:51:51 2,342,912 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
                            + 2008-01-19 07:38:36 1,957,888 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
                            - 2008-01-10 05:51:50 217,088 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
                            + 2008-01-19 07:38:35 204,800 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
                            - 2006-11-02 12:39:46 69,632 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm.Resources\6.0.0.0_en_31bf3856ad364e35\microsoft.tpm.resources.dll
                            + 2008-01-19 07:49:03 69,632 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Tpm.Resources\6.0.0.0_en_31bf3856ad364e35\microsoft.tpm.resources.dll
                            - 2007-10-26 23:56:50 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.resources\3.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Resources.dll
                            + 2008-01-05 11:26:41 19,456 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.resources\3.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Resources.dll
                            - 2006-11-02 12:33:44 352,256 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
                            + 2008-01-05 11:21:39 397,312 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
                            - 2007-10-26 23:56:08 9,216 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
                            + 2008-01-05 11:26:17 9,216 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
                            - 2006-10-20 01:14:05 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
                            + 2008-01-05 11:26:19 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
                            - 2007-10-26 23:55:21 9,728 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
                            + 2008-01-05 11:26:17 9,728 ----a-w C:\Windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
                            - 2006-10-20 01:14:05 372,736 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
                            + 2008-01-05 11:26:23 372,736 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
                            - 2007-10-26 23:56:17 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
                            + 2008-01-05 11:26:11 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
                            - 2006-10-20 01:14:05 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
                            + 2008-01-05 11:26:23 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
                            - 2006-10-20 01:14:05 667,648 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
                            + 2008-01-05 11:26:23 671,744 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
                            - 2006-10-20 01:14:05 12,800 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                            + 2008-01-05 11:26:24 12,800 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                            - 2006-10-20 01:14:05 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
                            + 2008-01-05 11:26:23 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
                            - 2006-11-02 12:39:46 1,388,544 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_en_31bf3856ad364e35\MIGUIControls.resources.dll
                            + 2008-01-19 07:49:05 1,499,136 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_en_31bf3856ad364e35\MIGUIControls.resources.dll
                            - 2007-10-26 23:55:54 1,400,832 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_fr_31bf3856ad364e35\MIGUIControls.resources.dll
                            + 2008-01-19 07:53:52 1,515,520 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls.Resources\1.0.0.0_fr_31bf3856ad364e35\MIGUIControls.resources.dll
                            - 2006-11-02 09:47:03 3,100,672 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls\1.0.0.0__31bf3856ad364e35\MIGUIControls.dll
                            + 2008-01-19 07:38:41 3,371,008 ----a-w C:\Windows\assembly\GAC_MSIL\MiguiControls\1.0.0.0__31bf3856ad364e35\MIGUIControls.dll
                            - 2006-11-02 09:47:03 413,696 ----a-w C:\Windows\assembly\GAC_MSIL\MMCEx\3.0.0.0__31bf3856ad364e35\MMCEx.dll
                            + 2008-01-19 07:38:41 417,792 ----a-w C:\Windows\assembly\GAC_MSIL\MMCEx\3.0.0.0__31bf3856ad364e35\MMCEx.dll
                            - 2006-11-02 12:39:46 4,096 ----a-w C:\Windows\assembly\GAC_MSIL\MMCFxCommon.Resources\3.0.0.0_en_31bf3856ad364e35\MMCFxCommon.Resources.dll
                            + 2008-01-19 07:49:05 4,096 ----a-w C:\Windows\assembly\GAC_MSIL\MMCFxCommon.Resources\3.0.0.0_en_31bf3856ad364e35\MMCFxCommon.Resources.dll
                            - 2007-10-26 23:56:27 311,296 ----a-w C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.Resources.dll
                            + 2008-01-05 11:26:12 311,296 ----a-w C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.Resources.dll
                            - 2006-11-02 09:47:03 65,536 ----a-w C:\Windows\assembly\GAC_MSIL\napinit\6.0.0.0__31bf3856ad364e35\NAPINIT.DLL
                            + 2008-01-19 07:38:45 65,536 ----a-w C:\Windows\assembly\GAC_MSIL\napinit\6.0.0.0__31bf3856ad364e35\NAPINIT.DLL
                            - 2006-11-02 12:39:58 245,760 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap.resources\6.0.0.0_en_31bf3856ad364e35\napsnap.resources.dll
                            + 2008-01-19 07:49:07 245,760 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap.resources\6.0.0.0_en_31bf3856ad364e35\napsnap.resources.dll
                            - 2007-10-26 23:56:31 245,760 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap.resources\6.0.0.0_fr_31bf3856ad364e35\napsnap.resources.dll
                            + 2008-01-19 07:53:54 245,760 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap.resources\6.0.0.0_fr_31bf3856ad364e35\napsnap.resources.dll
                            - 2006-11-02 09:47:04 458,752 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap\6.0.0.0__31bf3856ad364e35\NAPSNAP.DLL
                            + 2008-01-19 07:38:45 458,752 ----a-w C:\Windows\assembly\GAC_MSIL\napsnap\6.0.0.0__31bf3856ad364e35\NAPSNAP.DLL
                            - 2006-11-02 12:33:42 593,920 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
                            + 2008-01-05 11:21:52 602,112 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
                            - 2006-11-02 12:33:41 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
                            + 2008-01-05 11:21:52 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
                            - 2006-11-02 12:33:42 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
                            + 2008-01-05 11:21:53 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
                            - 2006-11-02 12:33:42 184,320 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
                            + 2008-01-05 11:21:53 184,320 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
                            - 2006-11-02 12:33:43 126,976 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
                            + 2008-01-05 11:21:53 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
                            - 2006-11-02 12:33:42 376,832 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
                            + 2008-01-05 11:21:53 376,832 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
                            - 2006-11-02 12:33:42 151,552 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
                            + 2008-01-05 11:21:54 151,552 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
                            - 2006-11-02 12:33:43 4,972,544 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
                            + 2008-01-05 11:21:53 5,210,112 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
                            - 2006-11-02 12:33:42 897,024 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
                            + 2008-01-05 11:21:55 897,024 ----a-w C:\Windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
                            - 2006-11-02 12:33:41 528,384 ----a-w C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
                            + 2008-01-05 11:21:55 528,384 ----a-w C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
                            - 2006-11-02 12:33:44 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\ServiceModelReg\3.0.0.0__b03f5f7f11d50a3a\ServiceModelReg.exe
                            + 2008-01-05 11:21:39 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\ServiceModelReg\3.0.0.0__b03f5f7f11d50a3a\ServiceModelReg.exe
                            - 2006-11-02 12:33:44 94,208 ----a-w C:\Windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
                            + 2008-01-05 11:21:39 102,400 ----a-w C:\Windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
                            - 2006-11-02 12:33:43 122,880 ----a-w C:\Windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe
                            + 2008-01-05 11:21:39 122,880 ----a-w C:\Windows\assembly\GAC_MSIL\SMSvcHost\3.0.0.0__b03f5f7f11d50a3a\SMSvcHost.exe
                            - 2007-10-26 23:56:11 10,752 ----a-w C:\Windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_fr_b03f5f7f11d50a3a\sysglobl.resources.dll
                            + 2008-01-05 11:26:12 10,752 ----a-w C:\Windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_fr_b03f5f7f11d50a3a\sysglobl.resources.dll
                            - 2006-10-20 01:14:46 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
                            + 2008-01-05 11:26:54 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
                            - 2007-10-26 23:55:32 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll
                            + 2008-01-05 11:26:12 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll
                            - 2006-10-20 01:14:46 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
                            + 2008-01-05 11:26:54 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
                            - 2007-10-26 23:55:29 49,152 ----a-w C:\Windows\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.resources.dll
                            + 2008-01-05 11:26:12 49,152 ----a-w C:\Windows\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.resources.dll
                            - 2006-10-20 01:14:46 413,696 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
                            + 2008-01-05 11:26:54 425,984 ----a-w C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
                            - 2007-10-26 23:56:35 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.OracleClient.resources.dll
                            + 2008-01-05 11:26:12 110,592 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.OracleClient.resources.dll
                            - 2007-10-26 23:55:26 335,872 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.Resources.dll
                            + 2008-01-05 11:26:13 344,064 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.Resources.dll
                            - 2007-10-26 23:56:10 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_fr_b77a5c561934e089\system.data.sqlxml.resources.dll
                            + 2008-01-05 11:26:13 36,864 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_fr_b77a5c561934e089\system.data.sqlxml.resources.dll
                            - 2006-10-20 01:14:48 716,800 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
                            + 2008-01-05 11:26:55 741,376 ----a-w C:\Windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
                            - 2007-10-26 23:55:57 385,024 ----a-w C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
                            + 2008-01-05 11:26:14 389,120 ----a-w C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
                            - 2006-10-20 01:14:49 888,832 ----a-w C:\Windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
                            + 2008-01-05 11:26:55 933,888 ----a-w C:\Windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
                            - 2007-10-26 23:55:23 544,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Design.Resources.dll
                            + 2008-01-05 11:26:14 544,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Design.Resources.dll
                            - 2006-10-20 01:14:49 5,050,368 ----a-w C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
                            + 2008-01-05 11:26:55 5,070,848 ----a-w C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
                            - 2007-10-26 23:56:16 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
                            + 2008-01-05 11:26:14 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
                            - 2006-10-20 01:14:50 188,416 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
                            + 2008-01-05 11:26:55 188,416 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
                            - 2007-10-26 23:56:33 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll
                            + 2008-01-05 11:26:16 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll
                            - 2006-10-20 01:14:50 397,312 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
                            + 2008-01-05 11:26:55 401,408 ----a-w C:\Windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
                            - 2007-10-26 23:56:28 6,144 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll
                            + 2008-01-05 11:26:16 6,144 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll
                            - 2006-10-20 01:14:51 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
                            + 2008-01-05 11:26:55 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
                            - 2007-10-26 23:55:53 15,360 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Resources.dll
                            + 2008-01-05 11:26:16 15,360 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Resources.dll
                            - 2006-10-20 01:14:51 704,512 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
                            + 2008-01-05 11:26:55 630,784 ----a-w C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
                            - 2007-10-26 23:55:25 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll
                            + 2008-01-05 11:26:17 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll
                            - 2007-10-26 23:56:50 65,536 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Resources.dll
                            + 2008-01-05 11:26:37 65,536 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Resources.dll
                            - 2007-10-26 23:56:50 53,248 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.Selectors.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Selectors.Resources.dll
                            + 2008-01-05 11:26:39 57,344 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.Selectors.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Selectors.Resources.dll
                            - 2006-11-02 12:33:43 126,976 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
                            + 2008-01-05 11:21:38 126,976 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
                            - 2006-11-02 12:33:43 413,696 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
                            + 2008-01-05 11:21:37 430,080 ----a-w C:\Windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
                            - 2006-11-02 12:33:43 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
                            + 2008-01-05 11:21:38 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
                            - 2007-10-26 23:56:18 13,312 ----a-w C:\Windows\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Management.Resources.dll
                            + 2008-01-05 11:26:17 13,312 ----a-w C:\Windows\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Management.Resources.dll
                            - 2006-10-20 01:14:52 368,640 ----a-w C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
                            + 2008-01-05 11:26:58 372,736 ----a-w C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
                            - 2007-10-26 23:55:28 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Messaging.Resources.dll
                            + 2008-01-05 11:26:17 61,440 ----a-w C:\Windows\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Messaging.Resources.dll
                            - 2006-10-20 01:14:52 258,048 ----a-w C:\Windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
                            + 2008-01-05 11:26:58 258,048 ----a-w C:\Windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
                            - 2007-10-26 23:56:34 212,992 ----a-w C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\system.Resources.dll
                            + 2008-01-05 11:26:17 212,992 ----a-w C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\system.Resources.dll
                            - 2007-10-26 23:56:11 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_fr_b77a5c561934e089\System.Runtime.Remoting.Resources.dll
                            + 2008-01-05 11:26:17 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_fr_b77a5c561934e089\System.Runtime.Remoting.Resources.dll
                            - 2006-10-20 01:14:53 299,008 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
                            + 2008-01-05 11:26:58 299,008 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
                            - 2007-10-26 23:55:58 11,776 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
                            + 2008-01-05 11:26:17 11,776 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
                            - 2006-10-20 01:14:53 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
                            + 2008-01-05 11:26:58 131,072 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
                            - 2007-10-26 23:56:49 94,208 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_fr_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
                            + 2008-01-05 11:26:41 98,304 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_fr_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
                            - 2006-11-02 12:33:44 888,832 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
                            + 2008-01-05 11:21:38 929,792 ----a-w C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
                            - 2007-10-26 23:56:01 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Security.Resources.dll
                            + 2008-01-05 11:26:17 28,672 ----a-w C:\Windows\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Security.Resources.dll
                            - 2006-10-20 01:14:53 258,048 ----a-w C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
                            + 2008-01-05 11:26:58 258,048 ----a-w C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
                            - 2006-11-02 12:33:43 159,744 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
                            + 2008-01-05 11:21:40 159,744 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
                            - 2007-10-26 23:56:49 475,136 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_fr_b77a5c561934e089\System.ServiceModel.Resources.dll
                            + 2008-01-05 11:26:41 499,712 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_fr_b77a5c561934e089\System.ServiceModel.Resources.dll
                            - 2006-11-02 12:33:44 16,384 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
                            + 2008-01-05 11:21:40 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
                            - 2006-11-02 12:33:44 5,672,960 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
                            + 2008-01-05 11:21:38 5,971,968 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
                            - 2007-10-26 23:56:11 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
                            + 2008-01-05 11:26:17 40,960 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
                            - 2006-10-20 01:14:53 114,688 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
                            + 2008-01-05 11:26:58 114,688 ----a-w C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
                            - 2006-11-02 12:33:42 688,128 ----a-w C:\Windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
                            + 2008-01-05 11:21:55 688,128 ----a-w C:\Windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
                            - 2007-10-26 23:55:29 16,896 ----a-w C:\Windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_fr_b77a5c561934e089\System.Transactions.resources.dll
                            + 2008-01-05 11:26:17 16,896 ----a-w C:\Windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_fr_b77a5c561934e089\System.Transactions.resources.dll
                            - 2007-10-26 23:56:27 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
                            + 2008-01-05 11:26:17 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
                            - 2006-10-20 01:14:54 835,584 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
                            + 2008-01-05 11:26:59 884,736 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
                            - 2006-10-20 01:14:55 86,016 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
                            + 2008-01-05 11:26:59 90,112 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
                            - 2007-10-27 00:43:51 618,496 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll
                            + 2008-01-05 11:26:17 618,496 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll
                            - 2007-10-26 23:56:28 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
                            + 2008-01-05 11:26:17 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
                            - 2006-10-20 01:14:55 823,296 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
                            + 2008-01-05 11:27:00 839,680 ----a-w C:\Windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
                            - 2007-10-26 23:55:21 430,080 ----a-w C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.Resources.dll
                            + 2008-01-05 11:26:17 430,080 ----a-w C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.Resources.dll
                            - 2006-10-20 01:14:56 5,414,912 ----a-w C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
                            + 2008-01-05 11:27:02 5,013,504 ----a-w C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
                            - 2007-10-26 23:56:49 191,304 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Activities.resources.dll
                            + 2008-01-05 11:26:54 193,592 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Activities.resources.dll
                            - 2006-11-02 12:33:41 1,108,784 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
                            + 2008-01-05 11:22:14 1,152,040 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
                            - 2007-10-26 23:56:50 318,288 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.ComponentModel.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.ComponentModel.resources.dll
                            + 2008-01-05 11:26:54 320,576 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.ComponentModel.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.ComponentModel.resources.dll
                            - 2006-11-02 12:33:41 1,641,272 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
                            + 2008-01-05 11:22:15 1,635,376 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
                            - 2007-10-26 23:56:50 43,840 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Runtime.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Runtime.resources.dll
                            + 2008-01-05 11:26:54 46,136 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Runtime.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Runtime.resources.dll
                            - 2006-11-02 12:33:41 588,592 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
                            + 2008-01-05 11:22:15 578,592 ----a-w C:\Windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
                            - 2007-10-26 23:55:27 167,936 ----a-w C:\Windows\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_fr_b77a5c561934e089\System.xml.Resources.dll
                            + 2008-01-05 11:26:17 167,936 ----a-w C:\Windows\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_fr_b77a5c561934e089\System.xml.Resources.dll
                            - 2006-10-20 01:14:58 2,039,808 ----a-w C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
                            + 2008-01-05 11:27:03 2,068,480 ----a-w C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
                            - 2006-10-20 01:14:51 3,035,136 ----a-w C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
                            + 2008-01-05 11:26:55 3,076,096 ----a-w C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
                            - 2007-10-26 23:56:09 7,680 ----a-w C:\Windows\assembly\GAC_MSIL\TaskScheduler.Resources\6.0.0.0_fr_31bf3856ad364e35\TaskScheduler.resources.dll
                            + 2008-01-19 07:54:01 7,680 ----a-w C:\Windows\assembly\GAC_MSIL\TaskScheduler.Resources\6.0.0.0_fr_31bf3856ad364e35\TaskScheduler.resources.dll
                            - 2006-11-02 09:47:22 163,840 ----a-w C:\Windows\assembly\GAC_MSIL\TaskScheduler\6.0.0.0__31bf3856ad364e35\TaskScheduler.dll
                            + 2008-01-19 07:39:26 163,840 ----a-w C:\Windows\assembly\GAC_MSIL\TaskScheduler\6.0.0.0__31bf3856ad364e35\TaskScheduler.dll
                            - 2006-11-02 12:33:42 163,840 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
                            + 2008-01-05 11:21:56 163,840 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
                            - 2006-11-02 12:33:42 372,736 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
                            + 2008-01-05 11:22:00 372,736 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
                            - 2006-11-02 12:33:42 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
                            + 2008-01-05 11:22:00 32,768 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
                            - 2006-11-02 12:33:41 86,016 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
                            + 2008-01-05 11:22:00 86,016 ----a-w C:\Windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
                            - 2006-11-02 12:33:42 1,167,360 ----a-w C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
                            + 2008-01-05 11:22:00 1,204,224 ----a-w C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
                            - 2006-11-02 12:33:42 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
                            + 2008-01-05 11:22:01 81,920 ----a-w C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
                            - 2006-11-02 12:33:44 143,360 ----a-w C:\Windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe
                            + 2008-01-05 11:21:40 143,360 ----a-w C:\Windows\assembly\GAC_MSIL\WsatConfig\3.0.0.0__b03f5f7f11d50a3a\WsatConfig.exe
                            + 2008-05-14 18:08:03 27,136 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e2170385d6492ce6539124c5a3b361a8\Accessibility.ni.dll
                            + 2008-05-14 19:30:45 884,736 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\b3a5c81e91bf9b1e63697e53a41ac0ed\AspNetMMCExt.ni.dll
                            + 2008-05-14 19:16:24 425,984 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\7b38b32ba60b3eb9195c4e1fcc2c3b9d\BDATunePIA.ni.dll
                            + 2008-05-14 19:16:32 503,808 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a29c71731e54f91d32ccc55d5493126d\ComSvcConfig.ni.exe
                            + 2008-05-14 19:30:46 237,568 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\8b7076d09705567c6431176b693597ab\CustomMarshalers.ni.dll
                            + 2008-05-14 19:30:47 15,360 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\314a2a2c7ac434889e2478150e910adf\dfsvc.ni.exe
                            + 2008-05-14 19:30:48 249,856 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehCIR\56309ef1e57faa5e1c01a04a7e3aefc2\ehCIR.ni.dll
                            + 2008-05-14 19:17:35 2,428,928 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\bad41b8bbfff0cc616655c9d970d6704\ehepg.ni.dll
                            + 2008-05-14 19:17:42 360,448 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\507f31ea7666854edb2752be04453c54\ehepgdat.ni.dll
                            + 2008-05-14 19:30:49 44,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\56309e07387763d840ce4b163fb725e7\ehExtCOM.ni.dll
                            + 2008-05-14 19:17:43 270,336 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\836d66bf51fee3b566ac83a2546e25ea\ehExtHost.ni.exe
                            + 2008-05-14 19:18:09 24,576 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiExtCOM\9690acf6b16810061de6ed44368980a9\ehiExtCOM.ni.dll
                            + 2008-05-14 19:17:45 188,416 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\52610279dc1c7658eafbf00b8d197bf9\ehiExtens.ni.dll
                            + 2008-05-14 19:17:46 610,304 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\6c123aa14560b7dff4968bcfbcc48ba6\ehiPlay.ni.dll
                            + 2008-05-14 19:17:36 983,040 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\5f8aee18344b9910bbec6af974c074d5\ehiProxy.ni.dll
                            + 2008-05-14 19:17:46 77,824 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiReplay\[u]0/ub31398ed7a071f087b271393a522038\ehiReplay.ni.dll
                            + 2008-05-14 19:17:42 58,368 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\ca15bb63e13565d7b8b168403a0dbf37\ehiUserXp.ni.dll
                            + 2008-05-14 19:17:48 839,680 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\f14b581820693d30efb00f6c2753ff1a\ehiVidCtl.ni.dll
                            + 2008-05-14 19:17:48 376,832 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiwmp\54da10294f5f71396a622da622c8c820\ehiwmp.ni.dll
                            + 2008-05-14 19:17:51 122,880 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiWUapi\9a8dbbf00820151502bf5886759bd9ff\ehiWUapi.ni.dll
                            + 2008-05-14 19:17:51 1,949,696 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\514c1647d604af1744b72a5dba164a27\ehRecObj.ni.dll
                            + 2008-05-14 19:18:07 12,734,464 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehshell\3c51adbea5adf146e27a6fd569ac2daa\ehshell.ni.dll
                            + 2008-05-14 19:18:11 577,536 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\EventViewer\368debb045e28955b65910779050eccc\EventViewer.ni.dll
                            + 2008-05-14 19:18:10 86,016 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\loadmxf\91672362ea8e76d7800c6d3176364d0b\loadmxf.ni.exe
                            + 2008-05-14 19:17:54 737,280 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstore\a6975ff8507a40231d4f508baa9416dd\mcstore.ni.dll
                            + 2008-05-14 19:17:55 315,392 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\6aa5747fb711f9d478b1b943fddf2b61\mcstoredb.ni.dll
                            + 2008-05-14 19:30:00 274,432 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcupdate\1657cfe3c699dd1d02e582c9b90b48d2\mcupdate.ni.exe
                            + 2008-05-14 19:18:09 258,048 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Mcx2Dvcs\81d064c3c21181a4a5ec456becbbef4c\Mcx2Dvcs.ni.dll
                            + 2008-05-14 19:30:51 876,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e24c7a7e58f9b3432df623710b9c5e01\Microsoft.Build.Engine.ni.dll
                            + 2008-05-14 19:30:52 81,920 ----a-w C:\Wi
                            1. Hum c'est un long log ... le voici: http://sites.estvideo.net/cartman/ComboFix.txt
                              1. Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 23:20:45, on 03/06/2008
                                Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                                Boot mode: Normal

                                Running processes:
                                C:\Windows\system32\taskeng.exe
                                C:\Windows\system32\Dwm.exe
                                C:\Program Files\Windows Defender\MSASCui.exe
                                C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe
                                C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
                                C:\Windows\RtHDVCpl.exe
                                C:\Program Files\ESET\ESET Smart Security\egui.exe
                                C:\Windows\System32\rundll32.exe
                                C:\Program Files\Windows Sidebar\sidebar.exe
                                C:\Program Files\Steam\Steam.exe
                                C:\Program Files\DAEMON Tools\daemon.exe
                                C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDClock.exe
                                C:\Program Files\Common Files\Logitech\LCD Manager\Applets\LCDMedia.exe
                                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                C:\Program Files\Logitech\SetPoint\SetPoint.exe
                                C:\Program Files\PDFCreator\PDFCreator.exe
                                C:\Program Files\SkillPowered\SkillPowered.exe
                                C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
                                C:\Windows\system32\wbem\unsecapp.exe
                                C:\Program Files\Mozilla Firefox\firefox.exe
                                C:\Windows\system32\conime.exe
                                C:\Windows\Explorer.exe
                                C:\Windows\System32\mobsync.exe
                                C:\Program Files\Windows Media Player\wmplayer.exe
                                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O2 - BHO: (no name) - {DE11CBEE-1CAA-48E2-9467-43114048871C} - (no file)
                                O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe
                                O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
                                O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Common Files\Logitech\LCD Manager\LCDMon.exe"
                                O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE
                                O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
                                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                                O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                                O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
                                O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                                O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                                O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\Windows\TEMP\E_S4964.tmp" /EF "HKCU"
                                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
                                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
                                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
                                O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
                                O4 - Global Startup: PDFCreator.lnk = C:\Program Files\PDFCreator\PDFCreator.exe
                                O4 - Global Startup: SkillPowered.lnk = C:\Program Files\SkillPowered\SkillPowered.exe
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
                                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
                                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                                O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\CaRTmaN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
                                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O13 - Gopher Prefix:
                                O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                                O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                                O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
                                O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
                                O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
                                O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                                O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                                O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                                O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
                                O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
                                • 1
                                • 2