Ralenti et fenetre intempestives

Question

Bonjour,
suite a l'installation d'un logiciel (je pense que c'est ca) mon internet ralentit pour l'ouverture de pages et me demande sans cesse de continuer l'execution d'un script. De plus des fenetres ne cessent de s'ouvrir tel que des sites au départ d'adresses IP (ex : http://88.147.134....) puis maintenant des sites pornographiques ou autres... je voudrais savoir comment réparer ce probleme  merci

Utilisateur anonyme · Answer

Salut fais ceci:

*Télécharge HijackThis: http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
*Puis fais "Install" puis "I accept" puis tu cliques sur "Do a system scan and save a logfile".
*L'analyse se fait un bloc-note s'ouvrira tu fais copier/coller dans le forum.

sg7 · Answer

bon je suis entrain de le faire mais c'est trés long (toujours 0%) tu ne connaitrais pas une autre procédure (combofix, navilog tout ca ?) comme tu veux mais on ira peut etre plus vite ... en attendant le scan est en cours. Merci beaucoup en tout cas

sg7 · Answer

1% effectué depuis 14h40 et aucun virus repéré pour l'instant  ... ca va pa vite du tout , seulement 200000 fichiers analysés jusque là ... sur que le test avast est indispensable ??? parce que la ...tu ne l'auras pas avant 1 semaine au moins !

jorginho67 · Answer

Salut !

MBAM.... Il y a du vundo la dessous 

ps) Vundofix n'est plus disponible en téléchargement.

@+

jorginho67 · Answer

Re.

On sait que c'est du vundo, pourquoi faire un scan Avast ?

Renommer HJT et passer MBAM...

C'est perdre du temps ;-)

Faire un scan en fin de désinfection ok, mais là, je ne vois pas la nécéssité...

@+

sg7 · Answer

finalement j'ai fait entierement le test avast donc :

1 virus trouvé :
C:\Program Files\Navilog1\Backupnavi\sgjpbht.exe
logiciel malveillant : Win32:Cloaker (cryp)

Durée du scan : 06:07:08
Nombre de fichiers infectés : 28
Taille totale des fichiers scannés : 93,8 GB

Je fais quoi maintenant ?

jorginho67 · Answer

post # 11

afideg · Answer

Hey,
Laisse tomber Joe.
D'un bourricot on ne fera jamais un cheval de course [Aranjuez notre ami pour l'éternité]

Al.

sg7 · Answer

ok bon j'ai fini le test mbam donc le rapport : 


Malwarebytes' Anti-Malware 1.18
Version de la base de données: 876

09:40:32 22/06/2008
mbam-log-6-22-2008 (09-40-27).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 220131
Temps écoulé: 5 hour(s), 7 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 11
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\byXPGVoP.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\vtUopNdd.dll (Trojan.vundo) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b7f288bc-a974-41f8-b635-9a593c1d366e} (Trojan.Vundo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b7f288bc-a974-41f8-b635-9a593c1d366e} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\affltid (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a6f5090f-d9ec-4263-9d7d-2968c5179291} (Trojan.vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a6f5090f-d9ec-4263-9d7d-2968c5179291} (Trojan.vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vtuopndd (Trojan.vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\84cba0a2 (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BM87f8933e (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Host Process (Worm.IRCBot) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{a6f5090f-d9ec-4263-9d7d-2968c5179291} (Trojan.vundo) -> No action taken.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\byxpgvop -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\byxpgvop

PS : Les fenetres itempestives sont de plus en plus fréquentes et le programme explorer.exe redémarre de temps en temps (tout le bureau disparaît et les icones reviennent quelques secondes aprés)

jorginho67 · Answer

No action taken. 

On esaye Vundofix

Télécharge VundoFix.exe (par Atribune) sur ton Bureau.

* Double-clique VundoFix.exe afin de le lancer.
* Clique sur le bouton Scan for Vundo.
* Lorsque le scan est complété, clique sur le bouton Remove Vundo.
* Une invite te demandera si tu veux supprimer les fichiers, clique sur YES
* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
  Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique sur OK
* Démarre ton PC à nouveau.
* Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

@+

jorginho67 · Answer

ps) Vundofix n'est plus disponible en téléchargement. 

Ca y est, vundofix  a repris du service...

sg7 · Answer

voila donc : rien a signaler pour vundofix ... qui ne m'a meme pas proposer d'effacer les fichiers ni de redémarrer l'ordinateur :

No infected files were found.


Beginning removal...


Puis Hijack This :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:37:14, on 22/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\hpzipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows NT\Accessoires\WORDPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: {00670c5d-0cab-7bd8-ecc4-4d54ed2b5f47} - {74f5b2de-45d4-4cce-8db7-bac0d5c07600} - C:\WINDOWS\system32\vighwuko.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8C153A0A-7198-462E-979C-D4B28F496220} - C:\WINDOWS\system32\byXPGVoP.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A6F5090F-D9EC-4263-9D7D-2968C5179291} - C:\WINDOWS\system32\vtUopNdd.dll
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [84cba0a2] rundll32.exe "C:\WINDOWS\system32\sphtjvic.dll",b
O4 - HKLM\..\Run: [BM87f8933e] Rundll32.exe "C:\WINDOWS\system32\eihoyvqw.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - https://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - Winlogon Notify: vtUopNdd - C:\WINDOWS\SYSTEM32\vtUopNdd.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

sg7 · Answer

c'est fait

jorginho67 · Answer

Télécharge  OTMoveIt2.exe (de Old_Timer)  sur ton Bureau.
Double-clique sur OTMoveIt.exe pour le lancer.
Copie la liste qui se trouve en citation ci-dessous ( en gras )  
et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move (sous la barre bleu clair) .

C:\WINDOWS\SYSTEM32\vtUopNdd.dll 
C:\WINDOWS\system32\byXPGVoP.dll 
C:\WINDOWS\system32\vighwuko.dll 

clique sur MoveIt! pour lancer la suppression.
Le résultat apparaitra dans le cadre "Results".
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

sg7 · Answer

rapport : 

DllUnregisterServer procedure not found in C:\WINDOWS\SYSTEM32\vtUopNdd.dll
C:\WINDOWS\SYSTEM32\vtUopNdd.dll NOT unregistered.
File move failed. C:\WINDOWS\SYSTEM32\vtUopNdd.dll scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\byXPGVoP.dll
C:\WINDOWS\system32\byXPGVoP.dll NOT unregistered.
C:\WINDOWS\system32\byXPGVoP.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\vighwuko.dll
C:\WINDOWS\system32\vighwuko.dll NOT unregistered.
C:\WINDOWS\system32\vighwuko.dll moved successfully.
 
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06222008_124518

Files moved on Reboot...
DllUnregisterServer procedure not found in C:\WINDOWS\SYSTEM32\vtUopNdd.dll
C:\WINDOWS\SYSTEM32\vtUopNdd.dll NOT unregistered.
File move failed. C:\WINDOWS\SYSTEM32\vtUopNdd.dll scheduled to be moved on reboot.

jorginho67 · Answer

Redémarre le pc stp

Reposte moi un nouvel HJT ensuite

sg7 · Answer

ok 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:09:39, on 22/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\WINDOWS\system32\hpzipm12.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\HPBPRO.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: {67a08e3f-3d72-f4fb-c6e4-0d176e1d05a6} - {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} - C:\WINDOWS\system32\ynyrsvyc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8C153A0A-7198-462E-979C-D4B28F496220} - C:\WINDOWS\system32\byXPGVoP.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A0F7C258-5033-4FEC-B25B-70DFE462BAD2} - C:\WINDOWS\system32\geBuTkhg.dll
O2 - BHO: (no name) - {A6F5090F-D9EC-4263-9D7D-2968C5179291} - C:\WINDOWS\system32\vtUopNdd.dll
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [84cba0a2] rundll32.exe "C:\WINDOWS\system32\qikdwayw.dll",b
O4 - HKLM\..\Run: [BM87f8933e] Rundll32.exe "C:\WINDOWS\system32\xrygjmyp.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - https://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - Winlogon Notify: vtUopNdd - C:\WINDOWS\SYSTEM32\vtUopNdd.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

jorginho67 · Answer

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.

Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
comment demarrer en mode sans echec en images
Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
Choisis ton compte.

Déroule la liste des instructions ci-dessous :

* Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
* Appuie sur Y pour commencer le processus de nettoyage.
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
* Appuie sur une touche pour redémarrer le PC.
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
* Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

Tuto d'instalation et de mise en oeuvre


@+

afideg · Answer

Salut à tous,

J'aimerais voir ce rapport SVP

Télécharge System Repair Engineer - SREng (par Smallfrogs) sur ton Bureau :
http://www.kztechs.com/eng/download.html    (Edit: MàJ du canned 20/12/2007)
Et clic comme indiqué ici https://www.hiboox.com 
Extrais tout son contenu sur ton Bureau
(clic-droit sur le fichier .zip >> "Extraire tout...")
Du dossier sreng2 qui se trouve maintenant sur ton Bureau, double-clique sur SREngPS.exe afin de lancer l'outil
Clique sur Smart Scan
Ensuite, clique sur le bouton [Scan]. L'analyse durera quelques instants.
Lorsque complété, clique sur le bouton [Save Reports]
Sauvegarde le rapport sur ton Bureau
Copie/colle le contenu du fichier SREnglLOG.log dans ta prochaine réponse, s'il te plait

Je voudrais y retrouver cette ligne O20 - Winlogon Notify: vtUopNdd - C:\WINDOWS\SYSTEM32\vtUopNdd.dll . 
Merci
Al

jorginho67 · Answer

Salut Al' ;-)

La forme ?

J'ai remarqué qu'a chaque passage, une nouvelle " valeur " ( je ne sais pas le terme technique ) se crée avec deux CLSIDs dans cette 02 
O2 - BHO: {67a08e3f-3d72-f4fb-c6e4-0d176e1d05a6} - {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} - C:\WINDOWS\system32\ynyrsvyc.dll 

Je pense que ceci en est la cause
O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min 

http://www.castlecops.com/s17031-pgs_exe.html <== voir ici, d'ou ma demande de SDFix...

Bien sur, je te fais confiance ;-))

Donc SG7, fais ce que demande Afideg stp, avant SDFix

@+

afideg · Answer

Salut Joe,

Oui, je l'avais repérée --> O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min 

Je profite de l'occasion pour voir ce qu'en donnera SREng.
Je pencherais plutôt pour un foutu service nocif.
C'est uniquement ce qui justifie ma demande (en toute quiétude, sachant les helpers sur l'affaire)   ;)
Merci

Al.

jorginho67 · Answer

Ok...


Je profite de l'occasion pour voir ce qu'en donnera SREng. 

J'en profiterais également ;-p

@+

sg7 · Answer

j'ai déja posté le rapport SDfix ... je fais le SReng ensuite ???

jorginho67 · Answer

Mouais....

Trojan Files Found:

C:\WINDOWS\system32\vtUopNdd.dll - Deleted


Je crois que c'est trop tard pour SReng

On attends l'avis d'Afideg

sg7 · Answer

ok merci j'attends ...         (les fenêtres intempestives sont toujours la)    ...

afideg · Answer

Zut alors lance toutefois SReng
On verra bien
Merci

sg7 · Answer

voila le rapport SReng : [CODE] 2008-06-22,14:46:33 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Publisher] <"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation] [N/A] [TOSHIBA] <"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart> [(Verified)Patchou] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [TOSHIBA Corporation] [TOSHIBA Corporation] [Hewlett-Packard] [TOSHIBA] [N/A] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [Hewlett-Packard] [TOSHIBA Corporation] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [Hewlett-Packard] [N/A] [(Verified)Microsoft Windows Publisher] [Sonic Solutions] [Agere Systems] <"C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"> [Sun Microsystems, Inc.] [NVIDIA Corporation] [] [NVIDIA Corporation] [(Verified)ALWIL Software] <"C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] <"C:\Program Files\QuickTime\QTTask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\iTunes\iTunesHelper.exe"> [(Verified)Apple Inc.] <84cba0a2> [] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{56F9679E-7826-4C84-81F3-532071A8BCC5}> [Microsoft Corporation] <{A6F5090F-D9EC-4263-9D7D-2968C5179291}><> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\KB910393] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{407408d4-94ed-4d86-ab69-a7f649d112ee}] <%SystemRoot%\System32 undll32.exe setupapi,InstallHinfSection QuickLaunchShortcut 640 %systemroot%\inf\mcdftreg.inf> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless> [Intel Corporation] <; "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"> [Intel Corporation] ================================== Startup Folders [Microsoft Office] C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [Microsoft Corporation]> [Windows Desktop Search] C:\PROGRA~1\WI459E~1\WINDOW~3.EXE [Microsoft Corporation]> [Lancement rapide de Microsoft Office OneNote 2003] C:\PROGRA~1\MICROS~2\OFFICE11\ONENOTEM.EXE [Microsoft Corporation]> ================================== Services [Ad-Aware 2007 Service / aawservice][Running/Auto Start] <"C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe"> [Adobe LM Service / Adobe LM Service][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe"> [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [avast! iAVS4 Control Service / aswUpdSv][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"> [Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled] [avast! Antivirus / avast! Antivirus][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\ashServ.exe"> [avast! Mail Scanner / avast! Mail Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service> [avast! Web Scanner / avast! Web Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service> [ConfigFree Service / CFSvcs][Stopped/Disabled] [Intel(R) PROSet/Wireless Event Log / EvtEng][Stopped/Disabled] [Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start] [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"> [Windows CardSpace / idsvc][Stopped/Manual Start] <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"> [Service de l'iPod / iPod Service][Running/Manual Start] <"C:\Program Files\iPod\bin\iPodService.exe"> [Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled] <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] [Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start] [Intel(R) PROSet/Wireless Registry Service / RegSrvc][Stopped/Disabled] [Intel(R) PROSet/Wireless Service / S24EventMonitor][Stopped/Disabled] [TOSHIBA Application Service / TAPPSRV][Running/Auto Start] <"C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe"> [Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start] <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"> [X10 Device Network Service / x10nets][Running/Auto Start] ================================== Drivers [AEGIS Protocol (IEEE 802.1x) v3.5.3.0 / AegisP][Running/Auto Start] [TOSHIBA V92 Software Modem / AgereSoftModem][Running/Manual Start] [Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start] [ASPI32 / ASPI32][Running/Auto Start] [aswFsBlk / aswFsBlk][Running/Auto Start] [ati2mtag / ati2mtag][Stopped/Manual Start] [catchme / catchme][Running/Manual Start] <\??\C:\DOCUME~1\SOLAL\LOCALS~1\Temp\catchme.sys> [DLABOIOM / DLABOIOM][Running/Auto Start] [DLACDBHM / DLACDBHM][Running/System Start] [DLADResN / DLADResN][Running/Auto Start] [DLAIFS_M / DLAIFS_M][Running/Auto Start] [DLAOPIOM / DLAOPIOM][Running/Auto Start] [DLAPoolM / DLAPoolM][Running/Auto Start] [DLARTL_N / DLARTL_N][Running/System Start] [DLAUDFAM / DLAUDFAM][Running/Auto Start] [DLAUDF_M / DLAUDF_M][Running/Auto Start] [DRVMCDB / DRVMCDB][Running/Boot Start] <\SystemRoot\System32\Drivers\DRVMCDB.SYS> [DRVNDDM / DRVNDDM][Running/Auto Start] [Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start] [GEARAspiWDM / GEARAspiWDM][Running/Manual Start] [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] [ialm / ialm][Stopped/Manual Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [IVI ASPI Shell / Iviaspi][Running/Manual Start] [Motorola USB CDC ACM Driver / motmodem][Stopped/Manual Start] [TOSHIBA Network Device Usermode I/O Protocol / Netdevio][Running/Auto Start] [Pilote de carte réseau Intel(R) PRO/Wireless 3945ABG pour Windows XP 32 bits / NETw3x32][Running/Manual Start] [nv / nv][Running/Manual Start] [PCANDIS5 NDIS Protocol Driver / PCANDIS5][Stopped/Manual Start] <\??\C:\WINDOWS\system32\PCANDIS5.SYS> [VSO Software pcouffin / pcouffin][Running/Manual Start] [Padus ASPI Shell / Pfc][Running/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [WLAN Transport / s24trans][Running/Auto Start] [Secdrv / Secdrv][Running/Auto Start] [Sony Digital Imaging Video2 / sonypvs1][Stopped/Manual Start] [Pilote de filtrage Sony USB (SONYPVU1) / SONYPVU1][Stopped/Manual Start] [Synaptics TouchPad Driver / SynTP][Running/Manual Start] [tifm21 / tifm21][Running/Manual Start] [Bluetooth ACPI from TOSHIBA / tosrfec][Stopped/Manual Start] [Toshiba Mobile PC Service / TVALD][Running/Manual Start] [TOSHIBA Virtual Sound with SRS technologies / Tvs][Running/Manual Start] [Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [X10 Hid Device / X10Hid][Running/Manual Start] ================================== Browser Add-ons [] {3CD3737B-34B5-4B79-BE4A-104E250C5346} [] {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [] {8C153A0A-7198-462E-979C-D4B28F496220} [Programme d'aide de l'Assistant de connexion Windows Live] {9030D464-4C02-4ABF-8ECC-5164760863C6} [Java Plug-in] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [&Rechercher] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A> [Facebook Photo Uploader 5] {0CCA191D-13A6-4E29-B746-314DEE697D83} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [Facebook Photo Uploader 4 Control] {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} [System Requirements Lab Class] {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} [NVIDIA Smart Scan] {74DBCB52-F298-4110-951D-AD2FF67BC8AB} [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [MessengerStatsClient Class] {C3F79A2B-B9B4-4A66-B012-3EE46475B072} [Java Plug-in] {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [Java Plug-in 1.5.0_06] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QuickTime Object] {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [Facebook Photo Uploader 5] {0CCA191D-13A6-4E29-B746-314DEE697D83} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [InformationCardSigninHelper Class] {19916E01-B44E-4E31-94A4-4696DF46157B} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [HtmlDlgSafeHelper Class] {3050F819-98B5-11CF-BB82-00AA00BDCE0B} [IETag Factory] {38481807-CA0E-42D2-BF39-B33AF135CC4D} [] {3CD3737B-34B5-4B79-BE4A-104E250C5346} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} [Windows Desktop Search Combo Control] {4E430174-1673-4FF3-BF28-A3B37F6573E7} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} [Facebook Photo Uploader 4 Control] {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [System Requirements Lab Class] {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} [] {6A50D1E6-71D0-4E6C-BF4F-27D3F3E80A76} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [VeohClientVersion3 Class] {73E7989D-3114-40E4-98E5-7E428A9C97F3} [NVIDIA Smart Scan] {74DBCB52-F298-4110-951D-AD2FF67BC8AB} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [XML HTTP 4.0] {88D969C5-F192-11D4-A65F-0040963251E5} [XML HTTP 5.0] {88D969EA-F192-11D4-A65F-0040963251E5} [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [] {8C153A0A-7198-462E-979C-D4B28F496220} [SopCore Control] {8FEFF364-6A5F-4966-A917-A3AC28411659} [Programme d'aide de l'Assistant de connexion Windows Live] {9030D464-4C02-4ABF-8ECC-5164760863C6} [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} [MozillaPluginNapCtrl Class] {B390236C-6817-401E-B72B-A3AD32E46BCF} [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Adobe PDF Reader] {CA8A9780-280D-11CF-A24D-444553540000} [Java Plug-in] {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Veoh Browser Plug-in] {D0943516-5076-4020-A3B5-AEFAF26AB263} [Contrôle de l'Assistant de connexion Windows Live] {D2517915-48CE-4286-970F-921E881B8C5C} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [iTunesDetector Class] {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} [QuickTimeCheck Class] {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} [E&xporter vers Microsoft Excel] ================================== Running Processes [PID: 764 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 828 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 864 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4131] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 908 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [PID: 920 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 1132 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1224 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1368 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 1596 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1732 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 1996 / SYSTEM][C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe] [Lavasoft, 7,0,2,6] [C:\Program Files\Lavasoft\Ad-Aware 2007\CEAPI.dll] [Lavasoft, 7,0,2,6] [C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive85u.dll] [PKWARE, Inc., 8.4.1045.0] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\Lavasoft\Ad-Aware 2007\Update.dll] [, 7, 0, 2, 6] [PID: 152 / SYSTEM][C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 516 / SOLAL][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\PROGRA~1\WINDOW~3\wmpband.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\iTunes\iTunesMiniPlayer.dll] [Apple Inc., 7.6.2.9] [C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll] [Apple Inc., 7.6.2.1] [C:\Program Files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll] [Apple Inc., 7.6.2.9] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\WinSCP\DragExt.dll] [Martin Prikryl, 1.1.6.79] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\TPwrCfg.DLL] [TOSHIBA Corporation, 1, 0, 8, 0] [C:\WINDOWS\system32\TPwrReg.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\TPSTrace.DLL] [TOSHIBA Corporation, 1, 0, 3, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ] [C:\WINDOWS\system32\ynyrsvyc.dll] [N/A, ] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll] [Malwarebytes, 1, 0, 0, 0] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Alwil Software\Avast4\ashShell.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\CmdLineExt.dll] [Sony DADC Austria AG., 1,1,222,0] [PID: 560 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashServ.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswInteg.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswIdle.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ahResMes.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResNS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResOut.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ahResP2P.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResStd.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResWS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashSSqlt.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 1812 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\CNYMLM01.DLL] [CANON INC., 1.0.0.1] [C:\WINDOWS\system32\HPBMMON.DLL] [Hewlett-Packard, 10.00.16] [C:\WINDOWS\system32\hpdomon.dll] [Hewlett-Packard, 03.42.00] [C:\WINDOWS\system32\HPBHealr.dll] [N/A, ] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\HPPRN05.DLL] [Hewlett-Packard Corporation, 60.05.72.21] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll] [Microsoft Corporation, 6.0.6000.16438 (winmain(wmbla).070123-1305)] [C:\WINDOWS\system32\hpbmmjno.dll] [Hewlett-Packard, 00.01.00] [C:\WINDOWS\system32\hppadt40.dll] [HP, 10, 1, 0, 2] [C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 2] [PID: 1332 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 1656 / SYSTEM][C:\WINDOWS\eHome\ehRecvr.exe] [Microsoft Corporation, 5.1.2715.3011 (xpsp(wmbla).061009-1511)] [C:\WINDOWS\eHome\ehTrace.dll] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\system32\sbe.dll] [, ] [C:\WINDOWS\system32\msdmo.dll] [, ] [PID: 564 / SYSTEM][C:\WINDOWS\eHome\ehSched.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 340 / SYSTEM][C:\WINDOWS\system32 vsvc32.exe] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32 vapi.dll] [NVIDIA Corporation, 6.14.11.6375] [PID: 632 / SYSTEM][C:\WINDOWS\system32\hpzipm12.exe] [HP, 10, 1, 1, 2] [PID: 172 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1320 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hpgwiamd.dll] [Hewlett-Packard, 3.2.2.807] [PID: 1348 / SYSTEM][C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe] [TOSHIBA Corp., 1, 0, 0, 14M] [PID: 1128 / SYSTEM][C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe] [X10, 1, 0, 0, 1] [C:\PROGRA~1\COMMON~1\X10\Common\x10net.DLL] [X10 Wireless Technology, Inc., 3, 0, 0, 199] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [PID: 1960 / SERVICE LOCAL][C:\WINDOWS\ehome\mcrdsvc.exe] [Microsoft Corporation, 4.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\eHome\ehTrace.dll] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 2452 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Lang.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Alwil Software\Avast4\French\langmai.dll] [ALWIL Software, 4, 8, 1195, 0] [PID: 2612 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashWebSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashWsFtr.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\AhResWs.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 2828 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2856 / SYSTEM][C:\WINDOWS\system32\dllhost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3032 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3548 / SOLAL][C:\Program Files\TOSHIBA\Tvs\TvsTray.exe] [TOSHIBA Corporation, 1, 0, 0, 7] [C:\Program Files\TOSHIBA\Tvs\TvsCtrl.dll] [TOSHIBA Corporation, 2, 0, 0, 3] [C:\Program Files\TOSHIBA\Tvs\TvsRes.dll] [TOSHIBA Corporation, 2, 0, 0, 3] [PID: 1308 / SOLAL][C:\WINDOWS\system32\TPSMain.exe] [TOSHIBA Corporation, 1, 0, 15, 0] [C:\WINDOWS\system32\TPSMainCtl.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\CpuPerf.dll] [TOSHIBA Corporation, 1, 0, 1, 0] [C:\WINDOWS\system32\TPSTrace.DLL] [TOSHIBA Corporation, 1, 0, 3, 0] [C:\WINDOWS\system32\TPwrReg.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\TPeculiarity.dll] [TOSHIBA Corporation, 1, 0, 2, 5] [PID: 1540 / SOLAL][C:\Program Files\Toshiba\Toshiba Applet hotkey.exe] [TOSHIBA, 1.00.0027] [C:\WINDOWS\system32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9782] [C:\WINDOWS\system32\dllvga.dll] [ , 1, 0, 0, 7] [C:\WINDOWS\system32\TCMSVR.dll] [TOSHIBA Corp., 1, 0, 0, 14M] [C:\Program Files\Toshiba\Toshiba Applet\TouchPad_OnOff.dll] [, 1, 0, 0, 3] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [PID: 1808 / SOLAL][C:\WINDOWS\system32\TPSBattM.exe] [TOSHIBA Corporation, 1, 0, 2, 0] [C:\WINDOWS\system32\TPwrCfg.DLL] [TOSHIBA Corporation, 1, 0, 8, 0] [C:\WINDOWS\system32\TPwrReg.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\TPSTrace.DLL] [TOSHIBA Corporation, 1, 0, 3, 0] [PID: 1716 / SOLAL][C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe] [TOSHIBA Corporation, 3.21.02] [C:\WINDOWS\system32\TCtrlCommon.dll] [TOSHIBA Corporation, 3.21.01] [C:\Program Files\TOSHIBA\Commandes TOSHIBA\TBtnCommon.dll] [TOSHIBA Corporation, 3.21.00] [C:\WINDOWS\system32\TCtrlIO.DLL] [, 1, 0, 1, 9] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3828 / SOLAL][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3532 / SOLAL][C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hotspot\jvm.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hpi.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\verify.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\java.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\zip.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin et.dll] [N/A, ] [C:\WINDOWS\system32\jst.dll] [N/A, ] [C:\WINDOWS\system32\d4channel.dll] [Hewlett-Packard, 02.07.90] [C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 2] [PID: 2080 / SOLAL][C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe] [Hewlett-Packard, 04 .00 .02] [C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\hpptui0.dll] [Hewlett-Packard, 01.00.61] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2168 / SOLAL][C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe] [TOSHIBA Corporation, 2, 0, 0, 23] [PID: 2248 / SOLAL][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.0.6.4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2280 / SOLAL][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe] [Hewlett-Packard, 1, 0, 0, 24] [PID: 3040 / SOLAL][C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe] [TOSHIBA CORPORATION, 6, 0, 1, 2] [C:\Program Files\TOSHIBA\ConfigFree\CFWAN.dll] [TOSHIBA CORPORATION, 1, 0, 0, 12] [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll] [TOSHIBA CORPORATION, 6, 0, 0, 9] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll] [TOSHIBA CORPORATION, 6, 0, 0, 4] [C:\Program Files\TOSHIBA\ConfigFree\NDSNLS.dll] [TOSHIBA CORPORATION, 4, 0, 2, 1006] [C:\Program Files\TOSHIBA\ConfigFree\CFUPNP.dll] [TOSHIBA CORPORATION, 1, 0, 0, 5] [C:\Program Files\TOSHIBA\ConfigFree\CFP2API.dll] [TOSHIBA CORPORATION, 5, 0, 0, 1] [C:\Program Files\TOSHIBA\ConfigFree\OpenProp.dll] [TOSHIBA CORPORATION, 5, 0, 0, 1] [C:\Program Files\TOSHIBA\ConfigFree\NDSParts.dll] [TOSHIBA CORPORATION, 6, 0, 0, 18] [C:\Program Files\TOSHIBA\ConfigFree\QCDPJ.dll] [Toshiba, 6, 0, 0, 6] [C:\Program Files\TOSHIBA\ConfigFree\VENAPI.dll] [TOSHIBA, 6, 0, 0, 5] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2588 / SOLAL][C:\WINDOWS\ehome\ehtray.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1692 / SOLAL][C:\WINDOWS\System32\DLA\DLACTRLW.EXE] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\system32\DLAAPI_W.DLL] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\System32\DLA\DLACResW.dll] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\system32\VxBlock.dll] [Sonic Solutions, 1.00.74a] [PID: 2768 / SOLAL][C:\WINDOWS\AGRSMMSG.exe] [Agere Systems, 2.1.63 2.1.63 12/12/2005 14:50:01] [PID: 2956 / SOLAL][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.60.5] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 2884 / SOLAL][C:\WINDOWS\eHome\ehmsas.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 3152 / SOLAL][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32 vapi.dll] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32\NVRSFR.DLL] [NVIDIA Corporation, 6.14.11.6375] [PID: 3216 / SOLAL][C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\French\Lang.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruimai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashUInt.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\XT1922.dll] [Codejock Software, 1, 9, 4, 0] [c:\program files\alwil software\avast4\ahruimes.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruins.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruiout.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MAPI32.dll] [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)] [c:\program files\alwil software\avast4\ahruip2p.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruistd.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruiws.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 712 / SOLAL][C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe] [RealNetworks, Inc., 0.1.1.45] [PID: 3136 / SOLAL][C:\Program Files\iTunes\iTunesHelper.exe] [Apple Inc., 7.6.2.9] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.DLL] [Apple Inc., 7.6.2.1] [C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL] [Apple Inc., 7.6.2.9] [C:\Program Files\QuickTime\QTSystem\QuickTime.qts] [Apple Inc., 7.4.5] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll] [Apple Inc., 7, 6, 120, 1] [PID: 3380 / SOLAL][C:\WINDOWS\system32 undll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 3460 / SOLAL][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [PID: 3492 / SOLAL][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3576 / SOLAL][C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\MSIMG32.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Windows Live\Messenger\MSNCore.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\Program Files\Windows Live\Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1] [C:\Program Files\Windows Live\Messenger\ContactsUX.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Messenger Plus! Live\Detoured.dll] [N/A, ] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\msgsres.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Windows Live\Messenger\lcapi.dll] [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\Program Files\Windows Live\Messenger\lcres.dll] [Microsoft Corp., 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)] [C:\Program Files\Windows Live\Messenger\RTMPLTFM.dll] [Microsoft Corporation, 3.0.5774.0 built by: media_msn80] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Windows Live\Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\lmcdata.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\contact.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\Windows Live\Messenger\dfsr.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\libsndfile.dll] [N/A, ] [C:\Program Files\Messenger Plus! Live\lame_enc.dll] [N/A, ] [C:\Program Files\Windows Live\Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)] [C:\Program Files\Windows Live\Messenger\abssm.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\usnsvcps.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\mfplat.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [PID: 3388 / SOLAL][C:\Program Files\TOSHIBA\TOSCDSPD oscdspd.exe] [TOSHIBA, 1, 0, 6, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3784 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe] [Apple Inc., 7.6.2.9] [C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.DLL] [Apple Inc., 7.6.2.1] [C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL] [Apple Inc., 7.6.2.9] [PID: 128 / SOLAL][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\IEFRAME.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\IEUI.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)] [C:\WINDOWS\system32\xmllite.dll] [Microsoft Corporation, 1.00.1018.0] [C:\Program Files\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609] [C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)] [C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ] [C:\WINDOWS\system32\ynyrsvyc.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.60.5] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.200.520.1] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\ieapfltr.dll] [Microsoft Corporation, 7.0.6000.16461] [C:\WINDOWS\system32\msfeeds.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [PID: 588 / SOLAL][C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [PID: 1624 / SYSTEM][C:\Program Files\Windows Live\Messenger\usnsvc.exe] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\usnsvcps.dll] [Microsoft Corporation, 8.5.1302.1018] [PID: 2892 / SOLAL][C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe] [Sun Microsystems, Inc., 5.0.60.5] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3328 / SOLAL][C:\Documents and Settings\SOLAL\Bureau\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporatio

afideg · Answer

Tout ça est inattendu,

A) SDFix n'est pas intervenu sur O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min ?

B) Je ne retrouve pas la O20 - Winlogon Notify: vtUopNdd - C:\WINDOWS\SYSTEM32\vtUopNdd.dll .

Il faudrait fixer ces lignes + les O2 et relancer HJT
Supprimer VirusGarde en C:\Program Files, et dans "Ajout/suppr de programmes".

C)- Ce que je trouve dans SREng:

Registry

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<VirusGarde><C:\Program Files\VirusGarde\pgs.exe /min> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<84cba0a2><rundll32.exe "C:\WINDOWS\system32\qikdwayw.dll",b> []
<BM87f8933e><Rundll32.exe "C:\WINDOWS\system32\xrygjmyp.dll",s> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{A6F5090F-D9EC-4263-9D7D-2968C5179291}><> [N/A] ==> à vérifier
( tal>O2 - BHO: (no name) - {A6F5090F-D9EC-4263-9D7D-2968C5179291} - C:\WINDOWS\system32\fcCvSIXP.dll </ital> ) ?

Browser Add-ons

à supprimer
{6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} <C:\WINDOWS\system32\ynyrsvyc.dll, N/A>
{8C153A0A-7198-462E-979C-D4B28F496220} <C:\WINDOWS\system32\byXPGVoP.dll, N/A>
{3CD3737B-34B5-4B79-BE4A-104E250C5346} <C:\WINDOWS\system32\geBuTkhg.dll, N/A>

à vérifier
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>

Running Processes

à supprimer
[C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ]
[C:\WINDOWS\system32\qikdwayw.dll] [N/A, ]
[C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ]
[C:\WINDOWS\system32\ynyrsvyc.dll] [N/A, ]
[C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ]

à vérifier
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\WINDOWS\system32\HPBHealr.dll] [N/A, ]
[C:\WINDOWS\system32\sbe.dll] [, ]
[C:\WINDOWS\system32\msdmo.dll] [, ]

Je retoune au jardin
Al.

sg7 · Answer

je n'ai pas vraiment compris ce que je dois faire 

mais je n'ai pas de Virus Garde ni dans Program Files ni dans l'Ajout/Suppr des Programmes

sg7 · Answer

nouveau rapport Hijack This : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:44:56, on 22/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\hpzipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {3CD3737B-34B5-4B79-BE4A-104E250C5346} - C:\WINDOWS\system32\geBuTkhg.dll
O2 - BHO: {67a08e3f-3d72-f4fb-c6e4-0d176e1d05a6} - {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} - C:\WINDOWS\system32\ynyrsvyc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {8C153A0A-7198-462E-979C-D4B28F496220} - C:\WINDOWS\system32\byXPGVoP.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [84cba0a2] rundll32.exe "C:\WINDOWS\system32\qikdwayw.dll",b
O4 - HKLM\..\Run: [BM87f8933e] Rundll32.exe "C:\WINDOWS\system32\xrygjmyp.dll",s
O4 - HKLM\..\Run: [IntelWireless] ; "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [IntelZeroConfig] ; "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [VirusGarde] C:\Program Files\VirusGarde\pgs.exe /min
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - https://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

sg7 · Answer

alors qu'est ce que je peux faire ? j'ai cherché virus garde ... j'ai pas trouvé ...

afideg · Answer

Re, A)- Les 2 BHO à fixer et auxquelles je faisais allusion sont ces deux-là: O2 - BHO: (no name) - {3CD3737B-34B5-4B79-BE4A-104E250C5346} - C:\WINDOWS\system32\geBuTkhg.dll O2 - BHO: {67a08e3f-3d72-f4fb-c6e4-0d176e1d05a6} - {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} - C:\WINDOWS\system32\ynyrsvyc.dll B)- B)- Il faudra faire analyser ces fichiers ( en gras ) chez VirusTotal, comme ceci: C:\Program Files\WI1F86~1\MESSEN~1\MSGSC8~1.DLL C:\WINDOWS\system32\HPBHealr.dll C:\WINDOWS\system32\sbe.dll 1°- Assure toi d'avoir accès aux dossiers/fichiers cachés : Soit en faisant : Ouvrir un dossier, n'importe lequel. Aller dans "Outils" >"Options des dossiers" > "Affichage" Soit en faisant « Démarrer »/ »PanneauConfiguration/OptionsDossiers /onglet « Affichage » et là : cocher la case devant les lignes: - afficher les fichiers et dossier cachés - afficher contenu dossier système décocher la case devant les lignes: - masquer les extensions des fichiers dont le type est connu - masquer les fichiers protégés du système d'exploitation Tu vas recevoir un message qui te dit que cela peut endommager le système, n'en tiens pas compte. Puis cliquer APPLIQUER à TOUS les Dossiers > [OK] Si tu n'es pas à l'aise dans la navigation des dossiers, je t'invite à suivre ce tutorial : < http://www.malekal.com/rechercher_fichiers.php > 2°- Ensuite vas là :< https://www.virustotal.com/gui/ > < http://www.virustotal.com/en/indexf.html > •- sur la page qui s'affiche tu cliques sur "parcourir" •- ensuite sur la nouvelle page qui s'affiche, tu suis le chemin des fichiers en gras ci-après dans la liste ( que Virustotal va analyser un par un, à ta demande; puisque tu devras recommencer la procédure "parcourir", fichier par fichier ) ) •- c'est-à-dire : C:\Program Files\WI1F86~1\MESSEN~1\MSGSC8~1.DLL C:\WINDOWS\system32\HPBHealr.dll C:\WINDOWS\system32\sbe.dll •- quand tu as trouvé le premier fichier MSGSC8~1.DLLMSGSC8~1.DLLse retrouve alors ainsi dans la fenêtre de Virustotal, pour l'analyse •- là, tu cliques sur "send file" = « Envoyer » ( de la page de Virustotal ) •- et tu attends le résultat (il faut parfois patienter) · vous aurez dans l'encadré: Situation actuelle: terminé, cliquer sur Formaté · Une nouvelle fenêtre de votre navigateur apparaîtra... · Dans la nouvelle fenêtre, cliquer sur cette image : < http://img215.imageshack.us/img215/6039/virustotalpourcopierip3.jpg > · Faire un clic droit sur la page, choisir => Sélectionner tout, puis encore clic droit => Copier... Enfin , clic droit => Coller le(s) résultat(s) dans le WordPad ou Bloc-Notes. DONC, tu refais la manipulation fichier par fichier dont tu colles le rapport à chaque fois, à la suite dans WordPad. · · Pour ta prochaine réponse sur le forum, tu reprends WordPad ou Bloc-Notes (qui contient le résultat d’analyse des fichiers litigieux analysés), tu appuies sur (CTRL+A), puis (CTRL+C) et en réponse sur CCM tu termines par (CTRL+V) pour coller les analyses sur le forum. Tutoriel ici http://bibou0007.com/tutos-f45/tutorial-sur-virustotal-t190.htm Merci pour ta collaboration

sg7 · Answer

Merci c'est gentil de m'aider : 1er fichier : Fichier MSGSC8_1.DLL reçu le 2008.06.22 17:47:23 (CET)Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.22.0 2008.06.22 - AntiVir 7.8.0.59 2008.06.21 - Authentium 5.1.0.4 2008.06.21 - Avast 4.8.1195.0 2008.06.21 - AVG 7.5.0.516 2008.06.22 - BitDefender 7.2 2008.06.22 - CAT-QuickHeal 9.50 2008.06.20 - ClamAV 0.93.1 2008.06.22 - DrWeb 4.44.0.09170 2008.06.22 - eSafe 7.0.15.0 2008.06.22 - eTrust-Vet 31.6.5892 2008.06.21 - Ewido 4.0 2008.06.22 - F-Prot 4.4.4.56 2008.06.21 - F-Secure 7.60.13501.0 2008.06.20 - Fortinet 3.14.0.0 2008.06.22 - GData 2.0.7306.1023 2008.06.22 - Ikarus T3.1.1.26.0 2008.06.22 - Kaspersky 7.0.0.125 2008.06.22 - McAfee 5322 2008.06.20 - Microsoft 1.3604 2008.06.22 - NOD32v2 3207 2008.06.22 - Norman 5.80.02 2008.06.20 - Panda 9.0.0.4 2008.06.22 - Prevx1 V2 2008.06.22 - Rising 20.49.62.00 2008.06.22 - Sophos 4.30.0 2008.06.22 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.22 - TheHacker 6.2.92.358 2008.06.21 - TrendMicro 8.700.0.1004 2008.06.20 - VBA32 3.12.6.7 2008.06.21 - VirusBuster 4.3.26:9 2008.06.12 - Webwasher-Gateway 6.6.2 2008.06.22 - Information additionnelle File size: 241176 bytes MD5...: 3e3c1114dec2a402922ec9c64c25a4ab SHA1..: b3388fd0c0a612ca8e7e6d327351fb38785cac62 SHA256: 57cddd41ecac760ea8206287391af38b392aeda8d6cc540c84c8a35fe98dbc9d SHA512: e59be25e4d4465a3e9c84a69fe26b894c9154796accde981d3886d150baa4e95
88ad9aee565240fe29182bcc17373178f8b2313ad811dba7d04464a1161a70bc PEiD..: - PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x59027939
timedatestamp.....: 0x4717a332 (Thu Oct 18 18:17:22 2007)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2bc4a 0x2be00 5.88 4b63da56308924e8ef513655f6e167e3
.orpc 0x2d000 0xeda 0x1000 5.19 c7ae01380808d603f49d27f82dec26d4
.data 0x2e000 0x5e88 0x5800 4.36 d70e6576d2dc493cb646ee23c0a256dc
.rsrc 0x34000 0x540 0x600 3.77 3d8099ac44fe433193c59cee518fa1b6
.reloc 0x35000 0x5964 0x5a00 6.02 50185ad122c3478507e5d0c67550c6ef

( 8 imports )
> MSVCR80.dll: __type_info_dtor_internal_method@type_info@@QAEXXZ, __clean_type_info_names_internal, _onexit, _lock, __dllonexit, _unlock, _except_handler4_common, _terminate@@YAXXZ, __CppXcptFilter, _adjust_fdiv, _amsg_exit, _initterm_e, _initterm, _decode_pointer, _encoded_null, _malloc_crt, _encode_pointer, _callnewh, __3@YAXPAX@Z, _wcsnicoll, calloc, wcschr, _wcsicmp, memmove_s, memset, _recalloc, _purecall, __CxxFrameHandler3, wcsncpy_s, memcpy_s, free, malloc, _CxxThrowException, ___V@YAXPAX@Z, memcpy, _wcsnicmp, _crt_debugger_hook
> KERNEL32.dll: Sleep, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, CreateEventA, GetModuleFileNameA, CloseHandle, lstrlenW, GetLastError, InterlockedIncrement, InterlockedDecrement, GetModuleFileNameW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, FreeLibrary, MultiByteToWideChar, LoadLibraryExW, GetModuleHandleW, WideCharToMultiByte, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, InterlockedCompareExchange, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, lstrlenA, lstrcmpiW
> USER32.dll: CharNextA, CharLowerA, SetForegroundWindow, SendMessageW, FindWindowW, AllowSetForegroundWindow, CharNextW, UnregisterClassA
> ADVAPI32.dll: RegDeleteKeyW, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegDeleteValueW, RegCloseKey, CryptReleaseContext, CryptDestroyHash, CryptCreateHash, CryptAcquireContextW, CryptHashData, CryptGetHashParam, RegCreateKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW
> ole32.dll: CoTaskMemRealloc, CoTaskMemAlloc, HWND_UserMarshal, HWND_UserUnmarshal, HWND_UserFree, CoCreateInstance, CoTaskMemFree, CLSIDFromString, HWND_UserSize
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> SHLWAPI.dll: UrlGetPartW
> RPCRT4.dll: IUnknown_AddRef_Proxy, NdrStubForwardingFunction, NdrStubCall2, NdrClientCall2, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, CStdStubBuffer_Disconnect, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, NdrDllGetClassObject, NdrDllCanUnloadNow, NdrCStdStubBuffer_Release, NdrCStdStubBuffer2_Release, CStdStubBuffer_DebugServerRelease, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_CountRefs, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_Invoke

( 2 exports )
DllCanUnloadNow, DllGetClassObject
2e fichier : Fichier HPBHEALR.DLL reçu le 2008.06.18 19:45:15 (CET)Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.19.0 2008.06.18 - AntiVir 7.8.0.55 2008.06.18 - Authentium 5.1.0.4 2008.06.18 - Avast 4.8.1195.0 2008.06.17 - AVG 7.5.0.516 2008.06.18 - BitDefender 7.2 2008.06.18 - CAT-QuickHeal 9.50 2008.06.18 - ClamAV 0.93.1 2008.06.18 - DrWeb 4.44.0.09170 2008.06.18 - eSafe 7.0.15.0 2008.06.18 - eTrust-Vet 31.6.5884 2008.06.18 - Ewido 4.0 2008.06.18 - F-Prot 4.4.4.56 2008.06.18 - F-Secure 6.70.13260.0 2008.06.18 - Fortinet 3.14.0.0 2008.06.18 - GData 2.0.7306.1023 2008.06.18 - Ikarus T3.1.1.26.0 2008.06.18 - Kaspersky 7.0.0.125 2008.06.18 - McAfee 5320 2008.06.18 - Microsoft 1.3604 2008.06.18 - NOD32v2 3198 2008.06.18 - Norman 5.80.02 2008.06.17 - Panda 9.0.0.4 2008.06.18 - Prevx1 V2 2008.06.18 - Rising 20.49.22.00 2008.06.18 - Sophos 4.30.0 2008.06.18 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.18 - TheHacker 6.2.92.354 2008.06.18 - TrendMicro 8.700.0.1004 2008.06.18 - VBA32 3.12.6.7 2008.06.18 - VirusBuster 4.3.26:9 2008.06.12 - Webwasher-Gateway 6.6.2 2008.06.18 - Information additionnelle Tamano archivo: 94274 bytes MD5...: c51a3d62b0f81897eb0cef4e47392cb8 SHA1..: e8ac7cf2a7bab604a7dc931ba232c235bea8fa62 SHA256: 5e8e171db675416bcd6612fcdb895351a50819cfa612f3c2e79321ccf16899ab SHA512: bc99ab603bcb442aff1601b6f2665b41ab68a54ac851931009ef69a80695f97c
432a7d149d1ea0b16681e5f6e6df8207e51ac50caa47d03f399cad21575b825f PEiD..: Armadillo v1.xx - v2.xx PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x67201a87
timedatestamp.....: 0x3b66da07 (Tue Jul 31 16:17:11 2001)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x11c30 0x12000 0.71 8d809493ca7e307d6284666c14aa71ff
.rdata 0x13000 0x3ec 0x1000 0.62 62077eaeed15c0c1679bec63eb396c39
.data 0x14000 0x4a0 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.idata 0x15000 0x552 0x1000 1.39 45f7f79e901d0fa421a8bb2b5f36dbc5
.reloc 0x16000 0x222 0x1000 0.56 18ec79ac7ea85f939b81f39502f789b0

( 3 imports )
> ADVAPI32.dll: RegSetValueExA, RegNotifyChangeKeyValue, RegQueryValueExA, RegQueryValueExW, RegCloseKey, RegSetValueExW, RegOpenKeyExA, RegOpenKeyExW
> MSVCRT.dll: _mbsdup, _onexit, __dllonexit, _initterm, wcslen, malloc, free, _adjust_fdiv
> KERNEL32.dll: SetEvent, ExitThread, MultiByteToWideChar, GetVersionExA, WideCharToMultiByte, CreateMutexA, CloseHandle, GetLastError, CreateEventA, WaitForMultipleObjects, CreateThread

( 3 exports )
InitializeMonitor, InitializeMonitorEx, InitializePrintMonitor
Fichier 3 : Fichier sbe.dll reçu le 2008.06.22 17:55:47 (CET)Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.22.0 2008.06.22 - AntiVir 7.8.0.59 2008.06.21 - Authentium 5.1.0.4 2008.06.21 - Avast 4.8.1195.0 2008.06.21 - AVG 7.5.0.516 2008.06.22 - BitDefender 7.2 2008.06.22 - CAT-QuickHeal 9.50 2008.06.20 - ClamAV 0.93.1 2008.06.22 - DrWeb 4.44.0.09170 2008.06.22 - eSafe 7.0.15.0 2008.06.22 - eTrust-Vet 31.6.5892 2008.06.21 - Ewido 4.0 2008.06.22 - F-Prot 4.4.4.56 2008.06.21 - F-Secure 7.60.13501.0 2008.06.20 - Fortinet 3.14.0.0 2008.06.22 - GData 2.0.7306.1023 2008.06.22 - Ikarus T3.1.1.26.0 2008.06.22 - Kaspersky 7.0.0.125 2008.06.22 - McAfee 5322 2008.06.20 - Microsoft 1.3604 2008.06.22 - NOD32v2 3207 2008.06.22 - Norman 5.80.02 2008.06.20 - Panda 9.0.0.4 2008.06.22 - Prevx1 V2 2008.06.22 - Rising 20.49.62.00 2008.06.22 - Sophos 4.30.0 2008.06.22 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.22 - TheHacker 6.2.92.358 2008.06.21 - TrendMicro 8.700.0.1004 2008.06.20 - VBA32 3.12.6.7 2008.06.21 - VirusBuster 4.3.26:9 2008.06.12 - Webwasher-Gateway 6.6.2 2008.06.22 - Information additionnelle File size: 291840 bytes MD5...: d786ded851b6d0ec24245b753cf2bda2 SHA1..: 726724dec621172a5518ee549a27d5d9f9f3717c SHA256: f30e6e2467378e395e75b990cebc196348f1c3355a8f8c350a3590b91d119668 SHA512: d956f1bc8c8531df2ae36fd6417c03af4049a31e8663f3e2275c90ca89879c29
0a8ed0ae6129944592480d3f3f1397e978489991e3dd74727d35b3eb7214e51d PEiD..: - PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1ff114fe
timedatestamp.....: 0x452ad74e (Mon Oct 09 23:12:14 2006)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x40c3a 0x40e00 6.49 a89596186c00bfc2aebaa3dd81ec53c1
.orpc 0x42000 0xe3 0x200 3.21 2dad70f160275e9dc6ee31ce993224a3
.data 0x43000 0x2150 0x1e00 5.40 7a21f7b004fe913d9a9136aaffe6052d
.rsrc 0x46000 0x438 0x600 2.61 d6d6ac923a36e1d492c7264039c22e46
.reloc 0x47000 0x3a58 0x3c00 5.92 5e42b593c86ecc05c0b3fa32fee2593d

( 7 imports )
> msvcrt.dll: _wcsicmp, wcslen, _vsnwprintf, wcsrchr, _except_handler3, wcsncpy, _initterm, malloc, _adjust_fdiv, __3@YAXPAX@Z, wcscpy, wcscat, __2@YAPAXI@Z, free, _ftol, memmove, _snwprintf
> KERNEL32.dll: GetLastError, GetModuleFileNameA, GetVersionExW, DisableThreadLibraryCalls, GetModuleFileNameW, GetModuleHandleW, GetProcAddress, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, lstrcmpW, lstrcpynW, CloseHandle, CreateEventW, SetEvent, ResetEvent, WaitForSingleObject, ReleaseSemaphore, GetSystemInfo, VirtualFree, DuplicateHandle, CreateSemaphoreW, VirtualAlloc, lstrcpyW, lstrcmpiW, InterlockedExchange, SetThreadPriority, CreateThread, GetFileAttributesW, DeleteFileW, lstrlenA, QueryPerformanceFrequency, LocalFree, CreateDirectoryW, GetTempPathW, SetFileAttributesW, LocalAlloc, SetLastError, lstrcmpiA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, CreateFileW, SetFilePointerEx, SetEndOfFile, ReadFile, WriteFile, GetProcessHeap, HeapFree, HeapReAlloc, HeapAlloc, IsBadReadPtr, TryEnterCriticalSection, Sleep, GetFullPathNameW, CreateHardLinkW, FindClose, FindFirstFileW, OpenEventW, GetFileInformationByHandle, ReleaseMutex, RemoveDirectoryW, CreateMutexW, IsBadWritePtr, RaiseException, FlushViewOfFile, GetTempFileNameW, OpenMutexW, UnregisterWaitEx, RegisterWaitForSingleObject, CreateIoCompletionPort, GetQueuedCompletionStatus, MultiByteToWideChar, lstrlenW, LoadLibraryW, InterlockedDecrement, FreeLibrary, InterlockedIncrement, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, LoadLibraryA, QueueUserWorkItem, OpenFileMappingW
> USER32.dll: wsprintfW
> ADVAPI32.dll: CopySid, RegCreateKeyW, AllocateAndInitializeSid, FreeSid, AddAccessAllowedAceEx, EqualSid, GetAclInformation, InitializeAcl, GetAce, AddAce, RegSetValueW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, RegDeleteKeyW, GetLengthSid, IsValidSid, SetNamedSecurityInfoW, GetNamedSecurityInfoW, RegCreateKeyExW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, RegQueryValueExW
> ole32.dll: CoUninitialize, CoFreeUnusedLibraries, CoCreateInstance, CoInitialize, CoTaskMemAlloc, CoTaskMemFree, StringFromGUID2
> RPCRT4.dll: NdrDllCanUnloadNow, NdrDllGetClassObject, NdrCStdStubBuffer_Release, NdrCStdStubBuffer2_Release, NdrDllRegisterProxy, NdrDllUnregisterProxy, UuidCreate, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, NdrStubForwardingFunction, NdrStubCall2
> WINMM.dll: timeBeginPeriod, timeGetTime, timeGetDevCaps

( 5 exports )
DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer, GetProxyDllInfo
Voila !

afideg · Answer

OK, Merci. Lance ce fichier encore chez VirusTotal C:\WINDOWS\system32\byXPGVoP.dll Merci A)- Faire une sauvegarde du registre Cliquer sur "Démarrer" > "Exécuter" > copier/coller : regedit /e Sav.reg , puis clic sur [Ok] Le fichier de sauvegarde se trouve ici C:\Documents and Settings\Le nom de ta session\Sav.reg Avant d'avancer, vérifie si la sauvegarde se trouve bien comme indiqué ci-avant. Si NON, stoppe et rapporte-le nous. Merci B)- Télécharge IceSword sur ton Bureau (durée ± 5 minutes), du lien suivant : http://202.38.64.10/%7Ejfpan/download/IceSword120_en.zip 1) Double-clique sur le fichier du bureau IceSword120_en.zip pour obtenir cette page http://img503.imageshack.us/img503/7100/screenshot322an1.png ; puis, comme sur l'image, au menu "Fichier" choisir "Extraire tout". On obtient une nouvelle page IceSword120_en http://img260.imageshack.us/img260/7798/screenshot323yv2.png ; là, comme sur l'image, clic-droit sur le dossier dézippé IceSword120_en , puis "Explorer" pour obtenir le contenu sur une nouvelle page . 2) Clic-droit sur l'icône épée > Créer un raccourci IceSword.exe et le déplacer sur le bureau > puis double-clic dessus pour lancer l'outil. Clic ensuite sur [Exécuter] 3) Agrandir la fenêtre de l'outil en plein écran. 4) Regarde bien cette capture écran http://img223.imageshack.us/img223/4756/screenshot324nb2.png . Dans le menu de gauche, vers le haut, appuie sur la touche [Functions] pour les développer; tu peux t'aider du curseur vertical pour faciliter la lecture de son total contenu. - Note: Tu peux agrandir le volet de gauche (en déplaçant la ligne de séparation verticale), afin de mieux visualiser son contenu (juste le nécessaire; sinon ce sera au détriment de la lecture de la plage de droite). 5) Au bas de ce menu gauche, cliquer sur le bouton radio [File] - Il faut naviguer (clic sur les + devant les répertoires ad hoc) dans l'arborescence (volet de gauche) jusqu'à atteindre le dossier contenant les fichiers infectés à supprimer. (même principe que VirusTotal) C:\WINDOWS\system32\geBuTkhg.dll C:\WINDOWS\system32\qikdwayw.dll C:\WINDOWS\system32\xrygjmyp.dll C:\WINDOWS\system32\ynyrsvyc.dll 6) Pour supprimer ces sous-clés (en gras) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ {6a50d1e6-71d0-4e6c-bf4f-27d3f3e80a76} {8C153A0A-7198-462E-979C-D4B28F496220} {3CD3737B-34B5-4B79-BE4A-104E250C5346} dans le menu de gauche, appuie sur la touche [BHO] (sers-toi éventuellement du curseur); laisse afficher toutes les BHO dans la plage de droite; ensuite retrouve les trois sous-clés que tu supprimes (Fais un clic-droit sur les lignes et choisis Delete.) 7) Termine par celles-ci (en gras) [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] ==> à droite, supprimer VirusGarde [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <84cba0a2> ==> à droite, supprimer 84cba0a2 ==> à droite, supprimer BM87f8933e , comme ceci: au bas du menu des fonctions, appuie sur la touche [Registry]; tu vois s'afficher l'arborescence de la base de registres dans laquelle il faut naviguer Relance SREng suivi de HijackThis, SVP Merci Al. EDIT Cit. « ... suite à l'installation d'un logiciel (je pense que c'est ca) mon internet ralentit » Quel logiciel ??

sg7 · Answer

Virus total : 0 bytes size received / Se ha recibido un archivo vacio rapport SReng : [CODE] 2008-06-22,18:58:23 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Publisher] <"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation] [TOSHIBA] <"C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart> [(Verified)Patchou] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [TOSHIBA Corporation] [TOSHIBA Corporation] [Hewlett-Packard] [TOSHIBA] [N/A] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [Hewlett-Packard] [TOSHIBA Corporation] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [Hewlett-Packard] [N/A] [(Verified)Microsoft Windows Publisher] [Sonic Solutions] [Agere Systems] <"C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"> [Sun Microsystems, Inc.] [NVIDIA Corporation] [] [NVIDIA Corporation] [(Verified)ALWIL Software] <"C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] <"C:\Program Files\QuickTime\QTTask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\iTunes\iTunesHelper.exe"> [(Verified)Apple Inc.] <; "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless> [Intel Corporation] <; "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"> [Intel Corporation] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{56F9679E-7826-4C84-81F3-532071A8BCC5}> [Microsoft Corporation] <{A6F5090F-D9EC-4263-9D7D-2968C5179291}><> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\KB910393] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{407408d4-94ed-4d86-ab69-a7f649d112ee}] <%SystemRoot%\System32 undll32.exe setupapi,InstallHinfSection QuickLaunchShortcut 640 %systemroot%\inf\mcdftreg.inf> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Corporation] ================================== Startup Folders [Microsoft Office] C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [Microsoft Corporation]> [Windows Desktop Search] C:\PROGRA~1\WI459E~1\WINDOW~3.EXE [Microsoft Corporation]> [Lancement rapide de Microsoft Office OneNote 2003] C:\PROGRA~1\MICROS~2\OFFICE11\ONENOTEM.EXE [Microsoft Corporation]> ================================== Services [Adobe LM Service / Adobe LM Service][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe"> [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [avast! iAVS4 Control Service / aswUpdSv][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"> [Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled] [avast! Antivirus / avast! Antivirus][Running/Auto Start] <"C:\Program Files\Alwil Software\Avast4\ashServ.exe"> [avast! Mail Scanner / avast! Mail Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service> [avast! Web Scanner / avast! Web Scanner][Running/Manual Start] <"C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service> [ConfigFree Service / CFSvcs][Stopped/Disabled] [Intel(R) PROSet/Wireless Event Log / EvtEng][Stopped/Disabled] [Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start] [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe"> [Windows CardSpace / idsvc][Stopped/Manual Start] <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"> [Service de l'iPod / iPod Service][Running/Manual Start] <"C:\Program Files\iPod\bin\iPodService.exe"> [Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled] <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] [Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start] [Intel(R) PROSet/Wireless Registry Service / RegSrvc][Stopped/Disabled] [Intel(R) PROSet/Wireless Service / S24EventMonitor][Stopped/Disabled] [TOSHIBA Application Service / TAPPSRV][Running/Auto Start] <"C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe"> [Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start] <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"> [X10 Device Network Service / x10nets][Running/Auto Start] ================================== Drivers [AEGIS Protocol (IEEE 802.1x) v3.5.3.0 / AegisP][Running/Auto Start] [TOSHIBA V92 Software Modem / AgereSoftModem][Running/Manual Start] [Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start] [ASPI32 / ASPI32][Running/Auto Start] [aswFsBlk / aswFsBlk][Running/Auto Start] [ati2mtag / ati2mtag][Stopped/Manual Start] [catchme / catchme][Running/Manual Start] <\??\C:\DOCUME~1\SOLAL\LOCALS~1\Temp\catchme.sys> [DLABOIOM / DLABOIOM][Running/Auto Start] [DLACDBHM / DLACDBHM][Running/System Start] [DLADResN / DLADResN][Running/Auto Start] [DLAIFS_M / DLAIFS_M][Running/Auto Start] [DLAOPIOM / DLAOPIOM][Running/Auto Start] [DLAPoolM / DLAPoolM][Running/Auto Start] [DLARTL_N / DLARTL_N][Running/System Start] [DLAUDFAM / DLAUDFAM][Running/Auto Start] [DLAUDF_M / DLAUDF_M][Running/Auto Start] [DRVMCDB / DRVMCDB][Running/Boot Start] <\SystemRoot\System32\Drivers\DRVMCDB.SYS> [DRVNDDM / DRVNDDM][Running/Auto Start] [Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start] [GEARAspiWDM / GEARAspiWDM][Running/Manual Start] [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] [ialm / ialm][Stopped/Manual Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [IVI ASPI Shell / Iviaspi][Running/Manual Start] [Motorola USB CDC ACM Driver / motmodem][Stopped/Manual Start] [TOSHIBA Network Device Usermode I/O Protocol / Netdevio][Running/Auto Start] [Pilote de carte réseau Intel(R) PRO/Wireless 3945ABG pour Windows XP 32 bits / NETw3x32][Running/Manual Start] [nv / nv][Running/Manual Start] [PCANDIS5 NDIS Protocol Driver / PCANDIS5][Stopped/Manual Start] <\??\C:\WINDOWS\system32\PCANDIS5.SYS> [VSO Software pcouffin / pcouffin][Stopped/Manual Start] [Padus ASPI Shell / Pfc][Running/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [WLAN Transport / s24trans][Running/Auto Start] [Secdrv / Secdrv][Running/Auto Start] [Sony Digital Imaging Video2 / sonypvs1][Stopped/Manual Start] [Pilote de filtrage Sony USB (SONYPVU1) / SONYPVU1][Stopped/Manual Start] [Synaptics TouchPad Driver / SynTP][Running/Manual Start] [tifm21 / tifm21][Running/Manual Start] [Bluetooth ACPI from TOSHIBA / tosrfec][Stopped/Manual Start] [Toshiba Mobile PC Service / TVALD][Running/Manual Start] [TOSHIBA Virtual Sound with SRS technologies / Tvs][Running/Manual Start] [Apple Mobile USB Driver / USBAAPL][Stopped/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [X10 Hid Device / X10Hid][Running/Manual Start] ================================== Browser Add-ons [] {3CD3737B-34B5-4B79-BE4A-104E250C5346} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Programme d'aide de l'Assistant de connexion Windows Live] {9030D464-4C02-4ABF-8ECC-5164760863C6} [Java Plug-in] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [&Rechercher] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A> [Facebook Photo Uploader 5] {0CCA191D-13A6-4E29-B746-314DEE697D83} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [Facebook Photo Uploader 4 Control] {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} [System Requirements Lab Class] {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} [NVIDIA Smart Scan] {74DBCB52-F298-4110-951D-AD2FF67BC8AB} [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [MessengerStatsClient Class] {C3F79A2B-B9B4-4A66-B012-3EE46475B072} [Java Plug-in] {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [Java Plug-in 1.5.0_06] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QuickTime Object] {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [Facebook Photo Uploader 5] {0CCA191D-13A6-4E29-B746-314DEE697D83} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [InformationCardSigninHelper Class] {19916E01-B44E-4E31-94A4-4696DF46157B} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [HtmlDlgSafeHelper Class] {3050F819-98B5-11CF-BB82-00AA00BDCE0B} [IETag Factory] {38481807-CA0E-42D2-BF39-B33AF135CC4D} [] {3CD3737B-34B5-4B79-BE4A-104E250C5346} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} [Windows Desktop Search Combo Control] {4E430174-1673-4FF3-BF28-A3B37F6573E7} [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} [Facebook Photo Uploader 4 Control] {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [System Requirements Lab Class] {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} [] {6A50D1E6-71D0-4E6C-BF4F-27D3F3E80A76} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [VeohClientVersion3 Class] {73E7989D-3114-40E4-98E5-7E428A9C97F3} [NVIDIA Smart Scan] {74DBCB52-F298-4110-951D-AD2FF67BC8AB} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [XML HTTP 4.0] {88D969C5-F192-11D4-A65F-0040963251E5} [XML HTTP 5.0] {88D969EA-F192-11D4-A65F-0040963251E5} [Java Plug-in] {8AD9C840-044E-11D1-B3E9-00805F499D93} [] {8C153A0A-7198-462E-979C-D4B28F496220} [SopCore Control] {8FEFF364-6A5F-4966-A917-A3AC28411659} [Programme d'aide de l'Assistant de connexion Windows Live] {9030D464-4C02-4ABF-8ECC-5164760863C6} [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} [MozillaPluginNapCtrl Class] {B390236C-6817-401E-B72B-A3AD32E46BCF} [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Adobe PDF Reader] {CA8A9780-280D-11CF-A24D-444553540000} [Java Plug-in] {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Veoh Browser Plug-in] {D0943516-5076-4020-A3B5-AEFAF26AB263} [Contrôle de l'Assistant de connexion Windows Live] {D2517915-48CE-4286-970F-921E881B8C5C} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [iTunesDetector Class] {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} [QuickTimeCheck Class] {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} [E&xporter vers Microsoft Excel] ================================== Running Processes [PID: 764 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 828 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 864 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4131] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 908 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [PID: 920 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 1132 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1224 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1368 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 1596 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1732 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 152 / SYSTEM][C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 560 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashServ.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswInteg.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswIdle.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ahResMes.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResNS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResOut.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ahResP2P.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResStd.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResWS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashSSqlt.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 1812 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\CNYMLM01.DLL] [CANON INC., 1.0.0.1] [C:\WINDOWS\system32\HPBMMON.DLL] [Hewlett-Packard, 10.00.16] [C:\WINDOWS\system32\hpdomon.dll] [Hewlett-Packard, 03.42.00] [C:\WINDOWS\system32\HPBHealr.dll] [N/A, ] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\HPPRN05.DLL] [Hewlett-Packard Corporation, 60.05.72.21] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll] [Microsoft Corporation, 6.0.6000.16438 (winmain(wmbla).070123-1305)] [C:\WINDOWS\system32\hpbmmjno.dll] [Hewlett-Packard, 00.01.00] [C:\WINDOWS\system32\hppadt40.dll] [HP, 10, 1, 0, 2] [C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 2] [PID: 1332 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 1656 / SYSTEM][C:\WINDOWS\eHome\ehRecvr.exe] [Microsoft Corporation, 5.1.2715.3011 (xpsp(wmbla).061009-1511)] [C:\WINDOWS\eHome\ehTrace.dll] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\system32\sbe.dll] [, ] [C:\WINDOWS\system32\msdmo.dll] [, ] [PID: 564 / SYSTEM][C:\WINDOWS\eHome\ehSched.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 340 / SYSTEM][C:\WINDOWS\system32 vsvc32.exe] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32 vapi.dll] [NVIDIA Corporation, 6.14.11.6375] [PID: 632 / SYSTEM][C:\WINDOWS\system32\hpzipm12.exe] [HP, 10, 1, 1, 2] [PID: 172 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1320 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hpgwiamd.dll] [Hewlett-Packard, 3.2.2.807] [PID: 1348 / SYSTEM][C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe] [TOSHIBA Corp., 1, 0, 0, 14M] [PID: 1128 / SYSTEM][C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe] [X10, 1, 0, 0, 1] [C:\PROGRA~1\COMMON~1\X10\Common\x10net.DLL] [X10 Wireless Technology, Inc., 3, 0, 0, 199] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [PID: 1960 / SERVICE LOCAL][C:\WINDOWS\ehome\mcrdsvc.exe] [Microsoft Corporation, 4.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\eHome\ehTrace.dll] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 2452 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\AhResMai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Lang.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Alwil Software\Avast4\French\langmai.dll] [ALWIL Software, 4, 8, 1195, 0] [PID: 2612 / SYSTEM][C:\Program Files\Alwil Software\Avast4\ashWebSv.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\aswEngin.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\aswScan.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\ashWsFtr.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\AhResWs.dll] [ALWIL Software, 4, 8, 1201, 0] [PID: 2828 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2856 / SYSTEM][C:\WINDOWS\system32\dllhost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3032 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3548 / SOLAL][C:\Program Files\TOSHIBA\Tvs\TvsTray.exe] [TOSHIBA Corporation, 1, 0, 0, 7] [C:\Program Files\TOSHIBA\Tvs\TvsCtrl.dll] [TOSHIBA Corporation, 2, 0, 0, 3] [C:\Program Files\TOSHIBA\Tvs\TvsRes.dll] [TOSHIBA Corporation, 2, 0, 0, 3] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 1308 / SOLAL][C:\WINDOWS\system32\TPSMain.exe] [TOSHIBA Corporation, 1, 0, 15, 0] [C:\WINDOWS\system32\TPSMainCtl.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\CpuPerf.dll] [TOSHIBA Corporation, 1, 0, 1, 0] [C:\WINDOWS\system32\TPSTrace.DLL] [TOSHIBA Corporation, 1, 0, 3, 0] [C:\WINDOWS\system32\TPwrReg.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\TPeculiarity.dll] [TOSHIBA Corporation, 1, 0, 2, 5] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 1540 / SOLAL][C:\Program Files\Toshiba\Toshiba Applet hotkey.exe] [TOSHIBA, 1.00.0027] [C:\WINDOWS\system32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9782] [C:\WINDOWS\system32\dllvga.dll] [ , 1, 0, 0, 7] [C:\WINDOWS\system32\TCMSVR.dll] [TOSHIBA Corp., 1, 0, 0, 14M] [C:\Program Files\Toshiba\Toshiba Applet\TouchPad_OnOff.dll] [, 1, 0, 0, 3] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 1808 / SOLAL][C:\WINDOWS\system32\TPSBattM.exe] [TOSHIBA Corporation, 1, 0, 2, 0] [C:\WINDOWS\system32\TPwrCfg.DLL] [TOSHIBA Corporation, 1, 0, 8, 0] [C:\WINDOWS\system32\TPwrReg.dll] [TOSHIBA Corporation, 1, 0, 4, 0] [C:\WINDOWS\system32\TPSTrace.DLL] [TOSHIBA Corporation, 1, 0, 3, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 1716 / SOLAL][C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe] [TOSHIBA Corporation, 3.21.02] [C:\WINDOWS\system32\TCtrlCommon.dll] [TOSHIBA Corporation, 3.21.01] [C:\Program Files\TOSHIBA\Commandes TOSHIBA\TBtnCommon.dll] [TOSHIBA Corporation, 3.21.00] [C:\WINDOWS\system32\TCtrlIO.DLL] [, 1, 0, 1, 9] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3828 / SOLAL][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 8.2.13.2 02Mar06] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3532 / SOLAL][C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hotspot\jvm.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hpi.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\verify.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\java.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\zip.dll] [N/A, ] [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin et.dll] [N/A, ] [C:\WINDOWS\system32\jst.dll] [N/A, ] [C:\WINDOWS\system32\d4channel.dll] [Hewlett-Packard, 02.07.90] [C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 2] [PID: 2080 / SOLAL][C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe] [Hewlett-Packard, 04 .00 .02] [C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\hpptui0.dll] [Hewlett-Packard, 01.00.61] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2168 / SOLAL][C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe] [TOSHIBA Corporation, 2, 0, 0, 23] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2248 / SOLAL][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.0.6.4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2280 / SOLAL][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe] [Hewlett-Packard, 1, 0, 0, 24] [PID: 3040 / SOLAL][C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe] [TOSHIBA CORPORATION, 6, 0, 1, 2] [C:\Program Files\TOSHIBA\ConfigFree\CFWAN.dll] [TOSHIBA CORPORATION, 1, 0, 0, 12] [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll] [TOSHIBA CORPORATION, 6, 0, 0, 9] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll] [TOSHIBA CORPORATION, 6, 0, 0, 4] [C:\Program Files\TOSHIBA\ConfigFree\NDSNLS.dll] [TOSHIBA CORPORATION, 4, 0, 2, 1006] [C:\Program Files\TOSHIBA\ConfigFree\CFUPNP.dll] [TOSHIBA CORPORATION, 1, 0, 0, 5] [C:\Program Files\TOSHIBA\ConfigFree\CFP2API.dll] [TOSHIBA CORPORATION, 5, 0, 0, 1] [C:\Program Files\TOSHIBA\ConfigFree\OpenProp.dll] [TOSHIBA CORPORATION, 5, 0, 0, 1] [C:\Program Files\TOSHIBA\ConfigFree\NDSParts.dll] [TOSHIBA CORPORATION, 6, 0, 0, 18] [C:\Program Files\TOSHIBA\ConfigFree\QCDPJ.dll] [Toshiba, 6, 0, 0, 6] [C:\Program Files\TOSHIBA\ConfigFree\VENAPI.dll] [TOSHIBA, 6, 0, 0, 5] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2588 / SOLAL][C:\WINDOWS\ehome\ehtray.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1692 / SOLAL][C:\WINDOWS\System32\DLA\DLACTRLW.EXE] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\system32\DLAAPI_W.DLL] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\System32\DLA\DLACResW.dll] [Sonic Solutions, 5.20.09a] [C:\WINDOWS\system32\VxBlock.dll] [Sonic Solutions, 1.00.74a] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2768 / SOLAL][C:\WINDOWS\AGRSMMSG.exe] [Agere Systems, 2.1.63 2.1.63 12/12/2005 14:50:01] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 2956 / SOLAL][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.60.5] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [PID: 2884 / SOLAL][C:\WINDOWS\eHome\ehmsas.exe] [Microsoft Corporation, 5.1.2710.2732 (xpsp(wmbla).050805-1245)] [PID: 3152 / SOLAL][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32 vapi.dll] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32\NVRSFR.DLL] [NVIDIA Corporation, 6.14.11.6375] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3216 / SOLAL][C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnOS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\PROGRA~1\ALWILS~1\Avast4\ashBase.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnB.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswCmnS.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashTask.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\aswAux.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\Aavm4h.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\Program Files\Alwil Software\Avast4\French\Base.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\Program Files\Alwil Software\Avast4\French\Lang.dll] [ALWIL Software, 4, 8, 1195, 0] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\PROGRA~1\ALWILS~1\Avast4\AavmRpch.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruimai.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\ashUInt.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\PROGRA~1\ALWILS~1\Avast4\XT1922.dll] [Codejock Software, 1, 9, 4, 0] [c:\program files\alwil software\avast4\ahruimes.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruins.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruiout.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\MAPI32.dll] [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)] [c:\program files\alwil software\avast4\ahruip2p.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruistd.dll] [ALWIL Software, 4, 8, 1201, 0] [c:\program files\alwil software\avast4\ahruiws.dll] [ALWIL Software, 4, 8, 1201, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 712 / SOLAL][C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe] [RealNetworks, Inc., 0.1.1.45] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3136 / SOLAL][C:\Program Files\iTunes\iTunesHelper.exe] [Apple Inc., 7.6.2.9] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.DLL] [Apple Inc., 7.6.2.1] [C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL] [Apple Inc., 7.6.2.9] [C:\Program Files\QuickTime\QTSystem\QuickTime.qts] [Apple Inc., 7.4.5] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll] [Apple Inc., 7, 6, 120, 1] [PID: 3380 / SOLAL][C:\WINDOWS\system32 undll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3460 / SOLAL][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [PID: 3492 / SOLAL][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3576 / SOLAL][C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\MSIMG32.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Windows Live\Messenger\MSNCore.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\Program Files\Windows Live\Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1] [C:\Program Files\Windows Live\Messenger\ContactsUX.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Messenger Plus! Live\Detoured.dll] [N/A, ] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\msgsres.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll] [Patchou, 4, 50, 0, 312] [C:\Program Files\Windows Live\Messenger\lcapi.dll] [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\Program Files\Windows Live\Messenger\lcres.dll] [Microsoft Corp., 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)] [C:\Program Files\Windows Live\Messenger\RTMPLTFM.dll] [Microsoft Corporation, 3.0.5774.0 built by: media_msn80] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Windows Live\Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\lmcdata.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\contact.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\Program Files\Windows Live\Messenger\dfsr.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Messenger Plus! Live\libsndfile.dll] [N/A, ] [C:\Program Files\Messenger Plus! Live\lame_enc.dll] [N/A, ] [C:\Program Files\Windows Live\Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)] [C:\Program Files\Windows Live\Messenger\abssm.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\usnsvcps.dll] [Microsoft Corporation, 8.5.1302.1018] [C:\WINDOWS\system32\mfplat.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [PID: 3388 / SOLAL][C:\Program Files\TOSHIBA\TOSCDSPD oscdspd.exe] [TOSHIBA, 1, 0, 6, 0] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3784 / SYSTEM][C:\Program Files\iPod\bin\iPodService.exe] [Apple Inc., 7.6.2.9] [C:\Program Files\iPod\bin\iPodService.Resources\fr.lproj\iPodServiceLocalized.DLL] [Apple Inc., 7.6.2.1] [C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL] [Apple Inc., 7.6.2.9] [PID: 588 / SOLAL][C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [PID: 1624 / SYSTEM][C:\Program Files\Windows Live\Messenger\usnsvc.exe] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Windows Live\Messenger\usnsvcps.dll] [Microsoft Corporation, 8.5.1302.1018] [PID: 2892 / SOLAL][C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe] [Sun Microsystems, Inc., 5.0.60.5] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [PID: 3484 / SOLAL][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\IEFRAME.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\WINDOWS\system32\IEUI.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)] [C:\WINDOWS\system32\xmllite.dll] [Microsoft Corporation, 1.00.1018.0] [C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)] [C:\WINDOWS\system32\geBuTkhg.dll] [N/A, ] [C:\WINDOWS\system32\ynyrsvyc.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.60.5] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.200.520.1] [C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1] [C:\WINDOWS\system32\ieapfltr.dll] [Microsoft Corporation, 7.0.6000.16461] [C:\WINDOWS\system32\msfeeds.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [C:\Program Files\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609] [C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL] [Microsoft Corporation, 8.5.1302.1018] [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [PID: 1080 / SOLAL][C:\WINDOWS\explorer.exe] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16674 (vista_gdr.080415-1732)] [C:\WINDOWS\system32\qikdwayw.dll] [N/A, ] [C:\WINDOWS\system32\xrygjmyp.dll] [N/A, ] [C:\PROGRA~1\WINDOW~3\wmpband.dll] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\iTunes\iTunesMiniPlayer.dll] [Apple Inc., 7.6.2.9] [C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll] [Apple Inc., 7.6.2.1] [C:\Program Files\iTunes\i

afideg · Answer

Re, Réponse laconique ! As-tu trouvé tous les éléments que je demandais ? Après actions dans IceSword, as-tu redémarrer le PC ? Quel est ce logiciel que tu soupçonnes ? As-tu fixer les deux lignes O2 dans HJT ? Nouveau log HJT ? Faire supprimer les crackes téléchargés par l’internaute 4°- Supprime éventuellement toute ancienne version de ComboFix de ton PC. Télécharge ComboFix.exe (par sUBs) sur ton Bureau: Clic-droit sur ce lien < http://download.bleepingcomputer.com/sUBs/ComboFix.exe > Puis choisis "Enregistrer sous .." ==> vers le 'bureau"  Attention : renomme-le sous le nom « TRISTAN.EXE » (très important).  < http://img212.imageshack.us/img212/3087/screenshot327qh5.png > Tu le nommes à ce moment-là, et non pas après l'avoir enregistré ; ce serait trop tard. Puis clic sur [Enregistrer] ==> Déconnecte ton PC d'Internet et referme les fenêtres de tous les programmes en cours. ==> Désactive provisoirement (et seulement le temps de l'utilisation de ComboFix), la protection en temps réel de ton Antivirus et de ton Antispywares, (activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil). - Double clique sur l'icône de ComboFix.exe (TRISTAN.EXE) du bureau, [Exécuter] et suis les invites. - Réponds oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. Laisse se dérouler le scan. /!\ Pendant la durée de cette étape, ne te sers pas du pc et n'ouvre aucun programme. Soit patient (même si tu penses que le PC est arrêté) ; les temps « d'arrêt apparent » sont parfois de plusieurs minutes (il y a ± 40 étapes d’analyse)./i\ - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisse-le faire. - Un rapport s'ouvrira ensuite dans le bloc-notes sur le bureau. Attention : Il est très probable que l'outil bloque à la fenêtre Find3M ; si c'est le cas, appuie simultanément sur les touches CTRL + ALT + DEL (Sup.), clique sur l'un des deux CF#####.exe (où ##### sont des chiffres aléatoires) et le rapport sera généré ! •- ==> Réactive la protection en temps réel de ton Antivirus et de ton Antispywares, avant de te reconnecter à Internet. Note: ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) Tu copies et colles ce rapport sur le forum Merci Al.

afideg · Answer

(suite) Pourrais-tu également localiser ces fichiers avec OAD, s'il te plaît: C:\WINDOWS\system32\qikdwayw.dll C:\WINDOWS\system32\xrygjmyp.dll C:\WINDOWS\system32\geBuTkhg.dll C:\WINDOWS\system32\ynyrsvyc.dll C:\WINDOWS\system32\byXPGVoP.dll Comme ceci: Télécharger OAD (Outil d'Aide au Diagnostic) < http://sosvirus.changelog.fr/OAD.exe > •- Enregistre-le sur ton bureau •- Lancer « OAD.exe » en faisant un double-clic sur le fichier < http://sosvirus.changelog.fr/OAD/1.bmp > , puis « Exécuter »  une page bleue s’affiche. •- Saisir la valeur recherchée ( = nom de fichier à rechercher ) : taper (ou faire un copier/coller de) : valeur à rechercher avec l’extension du fichier , soit qikdwayw.dll puis [Enter]  une nouvelle page bleue s’affiche. - Type de recherche : taper 6 (sélectionner l'option 6) puis valide [entrée] < http://sosvirus.changelog.fr/OAD/4.bmp > •- OAD va maintenant rechercher le fichier qikdwayw.dll. Laisse-le travailler jusqu'à ce qu'il en ait terminé. Suivant la taille des disques durs, cette recherche peut prendre plusieurs minutes. Patienter. •- Le rapport de recherche s'affichera automatiquement dès qu'il en aura terminé. •- Faire un copier/coller de ce rapport dans ton prochain post. Recommence avec les 4 autres fichiers demandés là-haut. Merci •-Note: Certains Antivirus (comme Panda) peuvent émettre une alerte lors de "téléchargement / utilisation". Manuel d’aide ici https://forum.pcastuces.com/default.asp Patience, ça diminue. Quel est ce logiciel que tu soupçonnes ? Bonne nuit Al.

afideg · Answer

Bonjour,

Peux-tu avancer avec ceci,  S'il te plaît.


A)- Fixer ces trois lignes avec HJT
O2 - BHO: (no name) - {3CD3737B-34B5-4B79-BE4A-104E250C5346} - C:\WINDOWS\system32\geBuTkhg.dll
O4 - HKLM\..\Run: [BM87f8933e] Rundll32.exe "C:\WINDOWS\system32\xrygjmyp.dll",s 
O4 - HKLM\..\Run: [84cba0a2] rundll32.exe "C:\WINDOWS\system32\qikdwayw.dll",b
Aide en images pour fixer ligne avec HJT 
http://dcangeldark.blogspot.com/2008/02/hijackthis-202-corriger-des-lignes.html 


B)- Exécuter ComboFix (post # 45) 


C)- Exécuter recherche sur fichiers avec OAD (post # 46)


D)- Faire analyser ces deux fichiers chez VirusTotal:
C:\WINDOWS\system32\jst.dll
C:\WINDOWS\system32\msdmo.dll
Tu connais maintenant la procédure (# 41).   ;)


E) Quel est ton pare-feu ?
Utilises-tu des Disques amovibles (USB) ?


Merci
Al

sg7 · Answer

ok je vais faire tout ca, seul probleme combofix n'a pas l"air de fonctionner. Je l'ai ouvert il y a déjà 10 minutes : la fenetre est bleue avec seulement le tiret qui clignote ( _ ) et un seul point dans la barre de titre. Je ne sais pas si c'est normal ou si il y a un problème... ? sinon je fais le reste de suite 
merci beaucoup de ton aide !

sg7 · Answer

ok bon j'ai fixé les lignes voila le rapport HJT : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:30:22, on 23/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\hpzipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {14c9b100-91a9-513b-1094-e75a5ff2b9ee} - {ee9b2ff5-a57e-4901-b315-9a19001b9c41} - C:\WINDOWS\system32\ibwkmphr.dll
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet	hotkey.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IntelWireless] ; "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [IntelZeroConfig] ; "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [84cba0a2] rundll32.exe "C:\WINDOWS\system32\qikdwayw.dll",b
O4 - HKLM\..\Run: [BM87f8933e] Rundll32.exe "C:\WINDOWS\system32\wbxxoifk.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - https://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

afideg · Answer

Re,

Essaie le lancer ComboFix en Mode sans Echec.

Sinon, passe outre de ComboFix
C'est invraisemblable ce fonctionnement de ComboFix (nous n'avons que des soucis avec).

Merci
Al.

sg7 · Answer

(suite) Maintenant, le rapport ComboFix : ComboFix 08-06-20.4 - SOLAL 2008-06-23 18:01:24.4 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.525 [GMT 2:00] Endroit: C:\Documents and Settings\SOLAL\Bureau\TRISTAN.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\BM87f8933e.xml C:\WINDOWS\cookies.ini C:\WINDOWS\pskt.ini C:\WINDOWS\system32\civjthps.ini C:\WINDOWS\system32\cwnclfiy.ini C:\WINDOWS\system32\geBuTkhg.dll C:\WINDOWS\system32\ghkTuBeg.ini C:\WINDOWS\system32\ghkTuBeg.ini2 C:\WINDOWS\system32\kbleeqlu.ini C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\MSINET.oca C:\WINDOWS\system32\PoVGPXyb.ini C:\WINDOWS\system32\PoVGPXyb.ini2 C:\WINDOWS\system32\wyawdkiq.ini C:\WINDOWS\system32\ygsgxicr.ini . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-23 to 2008-06-23 )))))))))))))))))))))))))))))))))))) . 2008-06-23 17:57 . 2008-06-23 17:57 105,984 --a------ C:\WINDOWS\system32\ibwkmphr.dll 2008-06-23 17:57 . 2008-06-23 17:57 91,136 --a------ C:\WINDOWS\system32\wbxxoifk.dll 2008-06-22 18:35 . 2008-06-22 18:35 127,426,316 --a------ C:\Documents and Settings\SOLAL\Sav.reg 2008-06-22 13:35 . 2008-06-22 13:36 d-------- C:\WINDOWS\ERUNT 2008-06-22 12:55 . 2008-06-22 12:55 80,384 --a------ C:\WINDOWS\system32\qikdwayw.dll 2008-06-22 12:53 . 2008-06-22 12:53 99,328 --a------ C:\WINDOWS\system32\ynyrsvyc.dll 2008-06-22 12:53 . 2008-06-22 12:53 90,624 --a------ C:\WINDOWS\system32\xrygjmyp.dll 2008-06-22 12:45 . 2008-06-22 12:45 d-------- C:\_OTMoveIt 2008-06-22 10:55 . 2008-06-22 10:55 90,624 --a------ C:\WINDOWS\system32\eihoyvqw.dll 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\SOLAL\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-19 17:48 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-22 01:00 . 2008-06-19 17:47 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-21 13:52 . 2008-06-21 13:52 d-------- C:\Documents and Settings\SOLAL\Application Data\dvdcss 2008-06-21 13:52 . 2008-06-21 13:52 99,328 --a------ C:\WINDOWS\system32\pljksmas.dll 2008-06-21 13:46 . 2008-05-06 08:01 16,512 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Program Files\Vstplugins 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Documents and Settings\All Users\Application Data\Sony 2008-06-19 18:47 . 2008-06-19 18:48 d-------- C:\Program Files\Sony 2008-06-14 17:26 . 2008-06-18 19:44 d-------- C:\Program Files\FairUse Wizard 2 2008-06-14 17:15 . 2008-06-22 15:42 d-------- C:\Documents and Settings\SOLAL\Application Data\Vso 2008-06-14 17:15 . 2008-06-22 15:42 87,608 --a------ C:\Documents and Settings\SOLAL\Application Data\inst.exe 2008-06-14 17:15 . 2008-06-14 17:15 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys 2008-06-14 17:15 . 2008-06-22 15:42 47,360 --a------ C:\Documents and Settings\SOLAL\Application Data\pcouffin.sys 2008-06-14 16:51 . 2008-06-14 16:53 d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink 2008-06-11 14:50 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 14:50 . 2008-06-14 19:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 00:17 . 2008-06-10 00:17 2,359,350 --a------ C:\WINDOWS\BricoPack Wallpaper.bmp 2008-06-10 00:17 . 2008-06-10 00:17 55,538 --a------ C:\WINDOWS\BricoPackUninst.cmd 2008-06-10 00:15 . 2008-06-10 00:17 6,114 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd 2008-05-31 19:06 . 2008-05-31 19:10 d-------- C:\WINDOWS\system32\XPSViewer 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\Reference Assemblies 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\MSBuild 2008-05-31 19:05 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-31 19:04 . 2008-05-31 19:04 d-------- C:\Program Files\MSXML 6.0 2008-05-24 15:53 . 2008-06-10 00:54 d-------- C:\Documents and Settings\All Users\Application Data\RapidSolution . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-22 18:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Azureus 2008-06-22 18:18 --------- d-----w C:\Program Files\ImTOO 2008-06-22 13:41 --------- d-----w C:\Program Files\Navilog1 2008-06-22 13:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-21 10:14 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-19 16:55 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-06-19 16:52 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Sony 2008-06-19 15:42 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-06-09 22:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-06-01 11:49 --------- d-----w C:\Program Files\VirtualDJ 2008-05-18 16:41 --------- d-----w C:\Program Files\iTunes Art Importer 2008-05-18 14:59 --------- d-----w C:\Program Files\InterVideo 2008-05-17 15:36 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\vlc 2008-05-17 15:35 --------- d-----w C:\Program Files\DMV 2008-05-17 10:45 --------- d-----w C:\Program Files\Guitar Pro 5 2008-05-09 22:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Kazaa Lite 2008-05-08 20:33 94,568 ----a-w C:\Documents and Settings\SOLAL\Application Data\GDIPFONTCACHEV1.DAT 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers mcast.sys 2008-05-02 22:35 --------- d-----w C:\Program Files\Movies2iPhone 2008-04-30 23:11 --------- d-----w C:\Program Files\Project64 1.6 2008-02-07 12:38 157 ----a-w C:\Documents and Settings\SOLAL\PFE_settings.dat . ((((((((((((((((((((((((((((( snapshot@2007-11-07_ 1.01.55.87 ))))))))))))))))))))))))))))))))))))))))) . + 2008-02-26 11:49:32 297,984 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\updspapi.dll + 2007-07-06 09:52:38 72,960 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys + 2007-07-06 13:09:51 138,240 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqad.dll + 2007-07-06 13:09:51 47,104 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqdscli.dll + 2007-07-06 13:09:51 16,896 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqise.dll + 2007-07-06 13:09:51 660,992 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqqm.dll + 2007-07-06 13:09:51 177,152 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqrt.dll + 2007-07-06 13:09:51 95,744 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqsec.dll + 2007-07-06 13:09:51 48,640 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll + 2007-07-06 13:09:51 527,360 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqutil.dll + 2005-10-12 23:15:25 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll + 2005-10-12 23:15:26 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe + 2005-10-12 23:15:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\spcustom.dll + 2005-10-12 23:15:28 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\update.exe + 2005-10-12 23:15:45 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\updspapi.dll + 2007-10-30 16:53:32 360,832 ----a-w C:\WINDOWS\$hf_mig$\KB941644\SP2QFE cpip.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\updspapi.dll + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll + 2007-10-10 23:22:14 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll + 2007-10-10 23:22:14 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll + 2007-10-10 23:22:14 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll + 2007-10-10 23:22:14 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll + 2007-10-10 08:16:47 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe + 2007-10-10 23:22:14 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll + 2007-10-10 23:22:14 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll + 2007-10-10 05:47:20 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat + 2007-10-10 23:22:14 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll + 2007-10-10 23:22:15 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll + 2007-10-10 23:22:16 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll + 2007-10-10 23:22:16 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll + 2007-10-10 23:22:16 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll + 2007-10-10 08:16:47 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe + 2007-10-10 08:16:56 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe + 2007-10-10 23:22:16 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll + 2007-10-10 23:22:16 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll + 2007-10-10 23:22:16 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll + 2007-10-30 23:40:57 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll + 2007-10-10 23:22:18 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll + 2007-10-10 23:22:18 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll + 2007-10-10 23:22:18 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll + 2007-10-10 23:22:18 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll + 2007-10-10 23:22:18 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\url.dll + 2007-10-10 23:22:19 1,162,240 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll + 2007-10-10 23:22:19 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll + 2007-10-10 23:22:19 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\updspapi.dll + 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE zchange.exe + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll + 2007-12-04 18:30:15 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll + 2007-11-07 09:50:06 733,696 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll + 2007-12-07 01:42:15 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll + 2007-12-19 22:20:28 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll + 2007-12-07 01:42:15 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll + 2007-12-07 01:42:15 133,120 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll + 2007-12-07 01:42:15 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll + 2007-12-06 08:34:28 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe + 2007-12-07 01:42:15 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll + 2007-12-07 01:42:16 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll + 2007-12-06 05:00:02 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat + 2007-12-07 01:42:16 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll + 2007-12-07 01:42:16 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll + 2007-12-07 01:42:19 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll + 2007-12-07 01:42:19 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll + 2007-12-07 01:42:19 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll + 2007-12-06 08:34:29 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe + 2007-12-06 08:34:45 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe + 2007-12-07 01:42:20 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll + 2007-12-07 01:42:20 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll + 2007-12-07 01:42:20 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll + 2007-12-07 01:42:21 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll + 2007-12-07 01:42:21 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll + 2007-12-07 01:42:21 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll + 2007-12-07 01:42:21 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll + 2007-12-07 01:42:21 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll + 2008-01-11 05:54:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll + 2007-12-07 01:42:21 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\url.dll + 2007-12-07 01:42:22 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll + 2007-12-07 01:42:22 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll + 2007-12-07 01:42:22 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\updspapi.dll + 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll + 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\url.dll + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\updspapi.dll + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll + 2004-08-10 12:00:00 72,960 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqac.sys + 2004-08-10 12:00:00 138,240 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqad.dll + 2004-08-10 12:00:00 47,104 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqdscli.dll + 2004-08-10 12:00:00 16,896 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqise.dll + 2004-08-10 12:00:00 660,992 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqqm.dll + 2004-08-10 12:00:00 177,152 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqrt.dll + 2004-08-10 12:00:00 95,744 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqsec.dll + 2004-08-10 12:00:00 48,640 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqupgrd.dll + 2004-08-10 12:00:00 527,360 -c----w C:\WINDOWS\$NtUninstallKB937894$\mqutil.dll + 2005-10-12 23:15:26 216,800 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe + 2005-10-12 23:15:45 394,976 -c----w C:\WINDOWS\$NtUninstallKB937894$\spuninst\updspapi.dll + 2005-08-30 04:16:04 1,293,824 -c----w C:\WINDOWS\$NtUninstallKB941568$\quartz.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll + 2005-06-28 09:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe + 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll + 2006-10-18 20:47:18 222,208 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll + 2006-04-20 11:51:50 359,808 -c----w C:\WINDOWS\$NtUninstallKB941644$ cpip.sys + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll + 2007-03-08 15:33:58 1,843,712 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll + 2007-07-18 12:42:22 60,416 -c----w C:\WINDOWS\$NtUninstallKB942763$ zchange.exe + 2007-05-17 11:29:50 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll + 2006-12-19 21:49:47 8,509,952 -c----w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll + 2007-06-18 22:24:36 369,152 -c----w C:\WINDOWS\$NtUninstallKB943460$\xpsp3res.dll + 2006-08-17 12:29:49 728,576 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll + 2007-03-01 18:28:47 163,644 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll + 2006-06-26 17:41:32 148,480 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll + 2004-08-10 12:00:00 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll + 2004-08-10 12:00:00 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll + 2007-06-19 13:32:25 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll + 2004-08-10 12:00:00 561,179 -c----w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll + 2004-08-10 12:00:00 512,029 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll + 2004-08-10 12:00:00 319,517 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll + 2004-08-10 12:00:00 1,507,356 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll + 2004-08-10 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll + 2004-08-10 12:00:00 184,351 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll + 2004-08-10 12:00:00 53,279 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll + 2004-08-10 12:00:00 241,693 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll + 2004-08-10 12:00:00 213,023 -c----w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll + 2004-08-10 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll + 2004-08-10 12:00:00 421,919 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll + 2004-08-10 12:00:00 315,423 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll + 2004-08-10 12:00:00 552,989 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll + 2004-08-10 12:00:00 258,077 -c----w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll + 2004-08-10 12:00:00 831,519 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll + 2004-08-10 12:00:00 614,429 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll + 2004-08-10 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll + 2006-11-02 06:22:52 51,680 -c----w C:\WINDOWS\$NtUninstallWdf01005$\spuninst\Kmdfcustom.dll + 2006-10-08 20:51:14 221,488 -c----w C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe + 2006-10-08 20:51:14 379,184 -c----w C:\WINDOWS\$NtUninstallWdf01005$\spuninst\updspapi.dll - 2007-10-26 17:48:22 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2008-02-04 17:07:31 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll - 2007-10-26 17:48:23 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2008-02-04 17:07:32 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll - 2007-10-26 17:48:23 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2008-02-04 17:07:33 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll - 2007-10-26 17:48:08 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:22 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:10 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:24 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:11 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:25 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:12 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:25 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:14 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:26 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:15 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:27 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:16 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:28 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:17 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:29 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:18 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:30 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:24 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2008-02-04 17:07:33 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll - 2007-10-26 17:48:25 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2008-02-04 17:07:34 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll - 2007-10-26 17:48:26 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2008-02-04 17:07:35 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll - 2007-10-26 17:48:27 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2008-02-04 17:07:35 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll - 2007-10-26 17:48:28 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2008-02-04 17:07:36 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll - 2007-10-26 17:48:21 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2008-02-04 17:07:31 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll - 2007-07-27 21:12:26 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-04-12 23:25:53 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2007-07-27 21:12:40 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-04-12 23:26:01 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-05-31 17:06:23 151,552 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2007-07-27 21:12:41 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-04-12 23:25:30 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-05-31 17:06:35 4,174,336 ----a-w C:\WINDOWS\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2007-07-27 21:12:42 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-04-12 23:26:04 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2007-07-27 21:12:36 2,902,016 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2008-04-12 23:25:42 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2007-07-27 21:12:17 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-04-12 23:26:08 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2007-07-27 21:12:17 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-04-12 23:26:08 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-05-31 17:06:33 346,624 ----a-w C:\WINDOWS\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2007-07-27 21:12:50 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2008-04-12 23:26:03 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2007-07-27 21:12:30 5,156,864 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2008-04-12 23:25:39 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2007-07-27 21:12:25 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-04-12 23:25:50 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-05-31 17:09:39 315,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_fr_b03f5f7f11d50a3a\aspnetmmcext.resources.dll - 2007-07-27 21:12:16 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-04-12 23:25:40 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll - 2007-07-27 21:12:19 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2008-04-12 23:25:53 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2007-07-27 21:12:38 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2008-04-12 23:25:57 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2007-07-27 21:12:39 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2008-04-12 23:25:58 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2007-07-27 21:12:39 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-04-12 23:25:59 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2008-05-31 17:10:24 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5.resources\3.5.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.resources.dll + 2008-05-31 17:08:09 106,496 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll + 2008-05-31 17:09:51 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll + 2008-05-31 17:10:25 69,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\3.5.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll - 2007-07-27 21:12:21 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2008-04-12 23:26:09 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll + 2008-05-31 17:08:11 737,280 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll - 2007-07-27 21:12:22 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-04-12 23:26:10 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-05-31 17:08:12 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2008-05-31 17:09:52 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll + 2008-05-31 17:10:25 155,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5.resources\3.5.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.resources.dll + 2008-05-31 17:08:12 794,624 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll - 2007-07-27 21:12:23 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2008-04-12 23:26:11 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll + 2008-05-31 17:09:52 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll + 2008-05-31 17:10:25 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5.resources\3.5.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.resources.dll + 2008-05-31 17:08:13 94,208 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll - 2007-07-27 21:12:24 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2008-04-12 23:26:12 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2008-05-31 17:09:41 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll - 2007-07-27 21:12:20 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-04-12 23:26:00 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2008-05-31 17:10:11 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.Dtc.resources\3.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.Resources.dll + 2008-05-31 17:10:10 19,456 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge.resources\3.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Resources.dll + 2008-05-31 17:06:23 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2008-05-31 17:10:00 9,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll - 2007-07-27 21:12:53 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-04-12 23:25:58 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2008-05-31 17:10:00 9,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll - 2007-07-27 21:12:52 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2008-04-12 23:25:56 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2008-05-31 17:09:59 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll - 2007-07-27 21:12:13 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2008-04-12 23:26:05 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2007-07-27 21:12:52 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-04-12 23:25:55 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2008-05-31 17:08:10 41,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll - 2007-07-27 21:12:54 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2008-04-12 23:25:34 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2007-07-27 21:12:15 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2008-04-12 23:26:07 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2007-07-27 21:12:14 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2008-04-12 23:25:55 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2007-07-27 21:12:15 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-04-12 23:25:54 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2008-05-31 17:09:53 311,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.Resources.dll + 2008-05-31 17:10:15 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks.resources\3.0.0.0_fr_31bf3856ad364e35\PresentationBuildTasks.resources.dll + 2008-05-31 17:06:18 602,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll + 2008-05-31 17:06:36 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll + 2008-05-31 17:10:14 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_fr_31bf3856ad364e35\PresentationCore.resources.dll + 2008-05-31 17:06:30 184,320 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2008-05-31 17:06:30 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2008-05-31 17:06:29 376,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2008-05-31 17:10:15 253,952 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_fr_31bf3856ad364e35\PresentationFramework.resources.dll + 2008-05-31 17:06:29 151,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2008-05-31 17:06:28 5,210,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2008-05-31 17:10:15 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationUI.resources\3.0.0.0_fr_31bf3856ad364e35\PresentationUI.resources.dll + 2008-05-31 17:06:27 897,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2008-05-31 17:10:14 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ReachFramework.resources\3.0.0.0_fr_31bf3856ad364e35\ReachFramework.resources.dll + 2008-05-31 17:06:34 528,384 ----a-w C:\WINDOWS\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2008-05-31 17:10:10 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics.resources\3.0.0.0_fr_b77a5c561934e089\SMDiagnostics.resources.dll + 2008-05-31 17:06:24 102,400 ----a-w C:\WINDOWS\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2008-05-31 17:09:58 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_fr_b03f5f7f11d50a3a\sysglobl.resources.dll - 2007-07-27 21:12:46 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2008-04-12 23:26:01 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2008-05-31 17:08:15 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2008-05-31 17:08:16 159,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll + 2008-05-31 17:09:53 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll - 2007-07-27 21:12:27 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-04-12 23:26:01 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2008-05-31 17:09:58 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.resources.dll - 2007-07-27 21:12:47 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2008-04-12 23:25:41 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2008-05-31 17:10:25 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Core.resources\3.5.0.0_fr_b77a5c561934e089\System.Core.Resources.dll + 2008-05-31 17:08:17 663,552 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll + 2008-05-31 17:10:25 5,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions.resources\3.5.0.0_fr_b77a5c561934e089\System.Data.DataSetExtensions.Resources.dll + 2008-05-31 17:08:17 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2008-05-31 17:10:24 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq.resources\3.5.0.0_fr_b77a5c561934e089\System.Data.Linq.Resources.dll + 2008-05-31 17:08:08 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll + 2008-05-31 17:09:54 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.OracleClient.resources.dll + 2008-05-31 17:09:48 344,064 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.Resources.dll + 2008-05-31 17:09:54 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_fr_b77a5c561934e089\system.data.sqlxml.resources.dll - 2007-07-27 21:12:43 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2008-04-12 23:25:43 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2008-05-31 17:09:40 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll - 2007-07-27 21:12:18 888,832 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2008-04-12 23:25:45 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2008-05-31 17:09:48 544,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Design.Resources.dll - 2007-07-27 21:12:37 5,001,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2008-04-12 23:26:12 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2008-05-31 17:10:24 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement.resources\3.5.0.0_fr_b77a5c561934e089\System.DirectoryServices.AccountManagement.resources.dll + 2008-05-31 17:08:07 282,624 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll + 2008-05-31 17:09:44 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll - 2007-07-27 21:12:28 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2008-04-12 23:26:10 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2008-05-31 17:09:43 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll - 2007-07-27 21:12:27 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-04-12 23:25:50 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2008-05-31 17:09:55 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll - 2007-07-27 21:12:29 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-04-12 23:26:06 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2008-05-31 17:09:49 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Resources.dll - 2007-07-27 21:12:48 577,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-04-12 23:25:35 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2008-05-31 17:09:42 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll + 2008-05-31 17:10:09 65,536 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Resources.dll + 2008-05-31 17:10:11 57,344 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors.resources\3.0.0.0_fr_b77a5c561934e089\System.IdentityModel.Selectors.Resources.dll + 2008-05-31 17:06:39 126,976 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2008-05-31 17:06:38 430,080 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2008-05-31 17:10:10 12,288 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log.resources\3.0.0.0_fr_b03f5f7f11d50a3a\System.IO.Log.Resources.dll + 2008-05-31 17:06:23 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2008-05-31 17:10:26 11,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation.resources\3.5.0.0_fr_b77a5c561934e089\System.Management.Instrumentation.Resources.dll + 2008-05-31 17:08:18 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2008-05-31 17:09:56 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Management.Resources.dll - 2007-07-27 21:12:44 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2008-04-12 23:26:08 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2008-05-31 17:09:50 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Messaging.Resources.dll - 2007-07-27 21:12:50 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-04-12 23:26:06 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2008-05-31 17:10:27 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Net.resources\3.5.0.0_fr_b03f5f7f11d50a3a\System.Net.Resources.dll + 2008-05-31 17:08:22 233,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll + 2008-05-31 17:10:14 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Printing.resources\3.0.0.0_fr_31bf3856ad364e35\System.Printing.resources.dll + 2008-05-31 17:09:50 212,992 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\system.Resources.dll + 2008-05-31 17:09:56 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_fr_b77a5c561934e089\System.Runtime.Remoting.Resources.dll - 2007-07-27 21:12:45 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-04-12 23:26:04 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2008-05-31 17:09:56 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll - 2007-07-27 21:12:45 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-04-12 23:26:03 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2008-05-31 17:10:10 98,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_fr_b77a5c561934e089\System.RunTime.Serialization.Resources.dll + 2008-05-31 17:06:22 929,792 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2008-05-31 17:09:42 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Security.Resources.dll - 2007-07-27 21:12:26 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2008-04-12 23:25:36 258,048 ----

sg7 · Answer

suite rapport : 

+ 2008-05-31 17:10:09	40,960	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install.resources\3.0.0.0_fr_b77a5c561934e089\System.ServiceModel.Install.Resources.dll
+ 2008-05-31 17:06:19	159,744	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2008-05-31 17:10:09	499,712	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_fr_b77a5c561934e089\System.ServiceModel.Resources.dll
+ 2008-05-31 17:06:18	32,768	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2008-05-31 17:10:23	70,712	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web.resources\3.5.0.0_fr_31bf3856ad364e35\System.ServiceModel.Web.resources.dll
+ 2008-05-31 17:08:06	496,672	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2008-05-31 17:06:20	5,971,968	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2008-05-31 17:09:44	40,960	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
- 2007-07-27 21:12:29	114,688	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-04-12 23:25:37	114,688	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-05-31 17:10:13	65,536	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Speech.resources\3.0.0.0_fr_31bf3856ad364e35\System.Speech.resources.dll
+ 2008-05-31 17:06:18	688,128	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2008-05-31 17:09:57	16,896	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_fr_b77a5c561934e089\System.Transactions.resources.dll
+ 2008-05-31 17:10:26	49,152	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design.resources\3.5.0.0_fr_31bf3856ad364e35\System.Web.Extensions.Design.Resources.dll
+ 2008-05-31 17:08:23	327,680	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2008-05-31 17:10:26	651,264	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions.resources\3.5.0.0_fr_31bf3856ad364e35\System.Web.Extensions.Resources.dll
+ 2008-05-31 17:08:24	1,253,376	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2008-05-31 17:09:59	81,920	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
- 2007-07-27 21:12:51	835,584	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-04-12 23:25:48	884,736	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2007-07-27 21:12:31	86,016	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-04-12 23:25:49	90,112	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-05-31 17:09:45	618,496	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll
+ 2008-05-31 17:09:46	81,920	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
- 2007-07-27 21:12:32	823,296	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-04-12 23:25:47	839,680	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-05-31 17:09:47	430,080	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.Resources.dll
- 2007-07-27 21:12:32	5,152,768	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-04-12 23:25:52	5,013,504	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-05-31 17:08:19	10,240	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2008-05-31 17:10:13	193,592	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Activities.resources.dll
+ 2008-05-31 17:06:38	1,152,040	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2008-05-31 17:10:14	320,576	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.ComponentModel.resources.dll
+ 2008-05-31 17:06:36	1,635,376	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2008-05-31 17:10:13	46,136	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime.resources\3.0.0.0_fr_31bf3856ad364e35\System.Workflow.Runtime.resources.dll
+ 2008-05-31 17:06:37	578,592	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2008-05-31 17:10:23	111,672	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices.resources\3.5.0.0_fr_31bf3856ad364e35\System.WorkflowServices.resources.dll
+ 2008-05-31 17:08:06	517,152	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2008-05-31 17:10:27	8,192	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq.resources\3.5.0.0_fr_b77a5c561934e089\System.Xml.Linq.Resources.dll
+ 2008-05-31 17:08:20	139,264	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2008-05-31 17:09:47	167,936	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_fr_b77a5c561934e089\System.xml.Resources.dll
- 2007-07-27 21:12:34	2,027,520	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-04-12 23:25:38	2,068,480	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2007-07-27 21:12:48	2,940,928	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-04-12 23:25:46	3,076,096	----a-w	C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-05-31 17:10:13	9,728	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient.resources\3.0.0.0_fr_31bf3856ad364e35\UIAutomationClient.resources.dll
+ 2008-05-31 17:06:18	163,840	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2008-05-31 17:10:13	10,240	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders.resources\3.0.0.0_fr_31bf3856ad364e35\UIAutomationClientsideProviders.resources.dll
+ 2008-05-31 17:06:17	372,736	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2008-05-31 17:10:14	4,096	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider.resources\3.0.0.0_fr_31bf3856ad364e35\UIAutomationProvider.resources.dll
+ 2008-05-31 17:06:32	32,768	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2008-05-31 17:10:14	7,680	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes.resources\3.0.0.0_fr_31bf3856ad364e35\UIAutomationTypes.resources.dll
+ 2008-05-31 17:06:32	86,016	----a-w	C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2008-05-31 17:10:14	90,112	----a-w	C:\WINDOWS\assembly\GAC_MSIL\WindowsBase.resources\3.0.0.0_fr_31bf3856ad364e35\WindowsBase.resources.dll
+ 2008-05-31 17:06:31	1,204,224	----a-w	C:\WINDOWS\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2008-05-31 17:10:13	5,120	----a-w	C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration.resources\3.0.0.0_fr_31bf3856ad364e35\WindowsFormsIntegration.resources.dll
+ 2008-05-31 17:06:16	81,920	----a-w	C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2008-04-13 18:19:57	27,136	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
+ 2008-06-19 16:49:55	53,248	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AjaVideoProperties\65e9fdeb16eebce2554f3f9f82b1e6fd\AjaVideoProperties.ni.dll
+ 2008-04-13 18:20:01	884,736	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
+ 2008-05-31 17:41:24	503,808	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\ComSvcConfig.ni.exe
+ 2008-06-19 16:50:16	98,304	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ControlLibrary\f8541d5f91a56312c005c06a439ce079\ControlLibrary.ni.dll
+ 2008-06-19 16:50:09	1,302,528	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CoreGraphics.XmlSer#\2c9058a53e93dc5229942bbe495a570c\CoreGraphics.XmlSerializers.ni.dll
+ 2008-06-19 16:50:04	1,605,632	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CoreGraphics\a75b714d7b5ce2b91dd6861e3d5b99d2\CoreGraphics.ni.dll
+ 2008-06-19 16:49:56	139,264	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CorePrimitives\e5b8327c719e242028bdcea31107258b\CorePrimitives.ni.dll
+ 2008-06-19 16:50:14	913,408	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CoreUI.XmlSerialize#\abef9884985f234b6d7d884af60a2d08\CoreUI.XmlSerializers.ni.dll
+ 2008-06-19 16:50:11	409,600	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CoreUI\dca6a160df2fed3b6bf5be15a90de5b4\CoreUI.ni.dll
+ 2008-04-13 19:04:31	237,568	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
+ 2008-04-13 18:20:02	15,360	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
+ 2008-06-19 16:50:21	46,080	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Interop\5852b45a0c54cb91c9cd7b17d5897c25\Interop.ni.dll
+ 2008-05-31 17:41:37	237,568	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2008-05-31 17:41:42	1,892,352	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\Microsoft.Build.Engine.ni.dll
+ 2008-04-13 19:04:34	876,544	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
+ 2008-05-31 17:41:43	94,208	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\Microsoft.Build.Framework.ni.dll
+ 2008-04-13 19:04:35	81,920	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
+ 2008-05-31 17:41:48	1,966,080	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2008-04-13 19:04:42	1,695,744	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
+ 2008-04-13 19:04:43	167,936	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
+ 2008-05-31 17:41:50	196,608	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2008-05-31 17:42:35	2,441,216	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\Microsoft.JScript.ni.dll
+ 2008-05-31 17:41:28	1,232,896	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\Microsoft.Transactions.Bridge.ni.dll
+ 2008-05-31 17:41:30	401,408	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2008-04-13 19:04:48	1,740,800	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
+ 2008-05-31 17:42:36	77,824	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\Microsoft.Vsa.ni.dll
+ 2008-05-31 17:41:36	155,648	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\MSBuild.ni.exe
+ 2008-04-13 17:49:16	11,722,752	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
+ 2008-05-31 17:41:55	1,581,056	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\PresentationBuildTasks.ni.dll
+ 2008-05-31 17:41:56	40,960	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\PresentationCFFRasterizer.ni.dll
+ 2008-05-31 17:12:42	12,570,624	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\[u]0/u11f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll
+ 2008-05-31 17:11:37	48,640	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\PresentationFontCache.ni.exe
+ 2008-05-31 17:13:40	393,216	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\PresentationFramework.Aero.ni.dll
+ 2008-05-31 17:13:43	552,960	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll
+ 2008-05-31 17:13:37	15,036,416	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll
+ 2008-05-31 17:13:45	274,432	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\PresentationFramework.Royale.ni.dll
+ 2008-05-31 17:13:42	245,760	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\PresentationFramework.Classic.ni.dll
+ 2008-05-31 17:42:00	2,035,712	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll
+ 2008-05-31 17:42:07	2,416,640	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\ReachFramework.ni.dll
+ 2008-05-31 17:41:31	139,264	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\ServiceModelReg.ni.exe
+ 2008-05-31 17:41:32	299,008	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\SMDiagnostics.ni.dll
+ 2008-05-31 17:41:34	323,584	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\SMSvcHost.ni.exe
+ 2008-06-19 16:49:52	671,744	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sony.Capture\d9d01c3a5fa082bdab5860b6001d47f3\Sony.Capture.ni.dll
+ 2008-06-19 16:49:49	286,720	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sony.MediaSoftware.#\8bfd5168425170e0531c7fb9c9646306\Sony.MediaSoftware.ExternalVideoDevice.ni.dll
+ 2008-06-19 16:49:54	253,952	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sony.Vegas.NetRender\d0a4de9164273e90ce4c4f2386a76d15\Sony.Vegas.NetRender.ni.dll
+ 2008-06-19 16:49:47	970,752	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Sony.Vegas\9365f37bfb8e9df62a2c2d908a78d7f8\Sony.Vegas.ni.dll
+ 2008-05-31 17:42:11	102,400	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\System.AddIn.Contract.ni.dll
+ 2008-05-31 17:42:10	696,320	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\System.AddIn.ni.dll
+ 2008-05-31 17:42:20	163,840	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
+ 2008-04-13 19:04:51	1,011,712	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
+ 2008-05-31 17:13:53	2,347,008	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\System.Core.ni.dll
+ 2008-05-31 17:42:13	184,320	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c\System.Data.DataSetExtensions.ni.dll
+ 2008-05-31 17:14:08	2,588,672	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6\System.Data.Linq.ni.dll
+ 2008-05-31 17:42:26	2,756,608	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
+ 2008-04-13 17:50:48	7,049,216	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
+ 2008-04-13 19:04:53	1,798,144	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
+ 2008-04-13 17:51:34	10,969,088	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
+ 2008-05-31 17:42:16	937,984	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007\System.DirectoryServices.AccountManagement.ni.dll
+ 2008-04-13 19:04:55	1,224,704	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
+ 2008-04-13 19:04:57	512,000	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
+ 2008-04-13 17:51:40	229,376	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
+ 2008-04-13 17:51:37	1,667,072	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0/ue83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
+ 2008-04-13 19:04:58	659,456	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
+ 2008-04-13 19:04:58	294,912	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
+ 2008-05-31 17:40:35	241,664	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6\System.IdentityModel.Selectors.ni.dll
+ 2008-05-31 17:40:33	1,118,208	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3\System.IdentityModel.ni.dll
+ 2008-05-31 17:40:36	417,792	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e\System.IO.Log.ni.dll
+ 2008-05-31 17:42:19	356,352	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management.I#\[u]0/uc0688825a79e72951210318eef63c82\System.Management.Instrumentation.ni.dll
+ 2008-05-31 17:42:30	1,064,960	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6\System.Management.ni.dll
+ 2008-05-31 17:42:38	729,088	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960\System.Net.ni.dll
+ 2008-05-31 17:42:41	1,134,592	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910\System.Printing.ni.dll
+ 2008-05-31 17:42:28	339,968	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2008-05-31 17:40:40	2,445,312	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23\System.Runtime.Serialization.ni.dll
+ 2008-04-13 19:05:00	733,184	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
+ 2008-05-31 17:42:48	1,556,480	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75\System.ServiceModel.Web.ni.dll
+ 2008-05-31 17:41:19	18,071,552	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba\System.ServiceModel.ni.dll
+ 2008-04-13 19:05:01	233,472	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
+ 2008-05-31 17:42:53	2,039,808	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5\System.Speech.ni.dll
+ 2008-04-13 19:05:02	679,936	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
+ 2008-05-31 17:43:02	880,640	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc\System.Web.Extensions.Design.ni.dll
+ 2008-05-31 17:42:59	2,416,640	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440\System.Web.Extensions.ni.dll
+ 2008-04-13 19:05:22	2,342,912	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
+ 2008-04-13 19:05:23	237,568	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
+ 2008-04-13 19:05:26	1,986,560	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
+ 2008-04-13 19:05:19	12,509,184	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
+ 2008-04-13 17:52:12	13,193,216	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
+ 2008-05-31 17:43:05	77,824	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a\System.Windows.Presentation.ni.dll
+ 2008-05-31 17:43:12	3,084,288	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562\System.Workflow.Activities.ni.dll
+ 2008-05-31 17:43:23	4,579,328	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0\System.Workflow.ComponentModel.ni.dll
+ 2008-05-31 17:43:28	2,088,960	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378\System.Workflow.Runtime.ni.dll
+ 2008-05-31 17:43:33	1,531,904	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657\System.WorkflowServices.ni.dll

sg7 · Answer

suite 2 du rapport : 

+ 2008-05-31 17:43:35	458,752	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\[u]0/ue1c79174260c4e2bf159a2cc1d77338\System.Xml.Linq.ni.dll
+ 2008-04-13 17:52:31	5,771,264	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
+ 2008-04-13 17:50:10	8,265,728	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
+ 2008-05-31 17:43:37	483,328	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806\UIAutomationClient.ni.dll
+ 2008-05-31 17:43:40	1,118,208	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99\UIAutomationClientsideProviders.ni.dll
+ 2008-05-31 17:43:41	50,688	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519\UIAutomationProvider.ni.dll
+ 2008-05-31 17:43:42	196,608	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122\UIAutomationTypes.ni.dll
+ 2008-06-19 16:50:19	1,441,792	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WidgetLibrary\a17c87d19b5a17b736564a338278e620\WidgetLibrary.ni.dll
+ 2008-05-31 17:11:59	3,395,584	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\[u]0/u703021437c2ec71213a6b701771be86\WindowsBase.ni.dll
+ 2008-05-31 17:43:43	270,336	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9\WindowsFormsIntegration.ni.dll
+ 2008-05-31 17:41:35	380,928	----a-w	C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872\WsatConfig.ni.exe
+ 2008-06-23 16:11:25	2,048	--s-a-w	C:\WINDOWS\bootstat.dat
+ 2004-08-10 12:00:00	352,256	----a-w	C:\WINDOWS\BricoPacks\SysFiles\10_cmdial32.dll
+ 2004-08-10 12:00:00	67,072	----a-w	C:\WINDOWS\BricoPacks\SysFiles\11_console.dll
+ 2004-08-10 12:00:00	165,888	----a-w	C:\WINDOWS\BricoPacks\SysFiles\12_credui.dll
+ 2007-06-13 13:22:28	1,037,312	----a-w	C:\WINDOWS\BricoPacks\SysFiles\14_explorer.exe
+ 2004-08-10 12:00:00	386,560	----a-w	C:\WINDOWS\BricoPacks\SysFiles\15_fontext.dll
+ 2004-08-10 12:00:00	768,512	----a-w	C:\WINDOWS\BricoPacks\SysFiles\17_helpctr.exe
+ 2004-08-10 12:00:00	146,944	----a-w	C:\WINDOWS\BricoPacks\SysFiles\18_hotplug.dll
+ 2004-08-10 12:00:00	98,304	----a-w	C:\WINDOWS\BricoPacks\SysFiles\2_ahui.exe
+ 2004-08-10 12:00:00	121,856	----a-w	C:\WINDOWS\BricoPacks\SysFiles\20_inetcplc.dll
+ 2004-08-10 12:00:00	157,184	----a-w	C:\WINDOWS\BricoPacks\SysFiles\23_keymgr.dll
+ 2004-08-10 12:00:00	221,696	----a-w	C:\WINDOWS\BricoPacks\SysFiles\24_logon.scr
+ 2004-08-10 12:00:00	246,784	----a-w	C:\WINDOWS\BricoPacks\SysFiles\26_migwiz.exe
+ 2004-08-10 12:00:00	216,064	----a-w	C:\WINDOWS\BricoPacks\SysFiles\28_moricons.dll
+ 2005-01-27 00:47:46	1,006,592	----a-w	C:\WINDOWS\BricoPacks\SysFiles\29_msgina.dll
+ 2008-03-01 16:28:10	3,591,680	----a-w	C:\WINDOWS\BricoPacks\SysFiles\30_mshtml.dll
+ 2004-08-10 12:00:00	347,648	----a-w	C:\WINDOWS\BricoPacks\SysFiles\31_mspaint.exe
+ 2004-08-10 12:00:00	281,600	----a-w	C:\WINDOWS\BricoPacks\SysFiles\32_mstask.dll
+ 2004-08-10 12:00:00	655,360	----a-w	C:\WINDOWS\BricoPacks\SysFiles\33_mstscax.dll
+ 2004-08-10 12:00:00	91,648	----a-w	C:\WINDOWS\BricoPacks\SysFiles\34_mydocs.dll
+ 2006-10-04 13:32:55	55,296	----a-w	C:\WINDOWS\BricoPacks\SysFiles\35_narrator.exe
+ 2004-08-10 12:00:00	144,896	----a-w	C:\WINDOWS\BricoPacks\SysFiles\37_netid.dll
+ 2005-06-21 22:01:33	1,721,344	----a-w	C:\WINDOWS\BricoPacks\SysFiles\38_netshell.dll
+ 2004-08-10 12:00:00	251,392	----a-w	C:\WINDOWS\BricoPacks\SysFiles\39_newdev.dll
+ 2004-08-10 12:00:00	28,672	----a-w	C:\WINDOWS\BricoPacks\SysFiles\4_batmeter.dll
+ 2004-08-10 12:00:00	70,656	----a-w	C:\WINDOWS\BricoPacks\SysFiles\40_notepad.exe
+ 2004-08-10 12:00:00	70,656	----a-w	C:\WINDOWS\BricoPacks\SysFiles\41_notepad.exe
+ 2004-08-10 12:00:00	145,920	----a-w	C:\WINDOWS\BricoPacks\SysFiles\42_ntshrui.dll
+ 2008-03-01 12:58:10	102,912	----a-w	C:\WINDOWS\BricoPacks\SysFiles\44_occache.dll
+ 2004-08-10 12:00:00	578,560	----a-w	C:\WINDOWS\BricoPacks\SysFiles\46_printui.dll
+ 2004-08-10 12:00:00	685,056	----a-w	C:\WINDOWS\BricoPacks\SysFiles\47_rasdlg.dll
+ 2004-08-10 12:00:00	153,088	----a-w	C:\WINDOWS\BricoPacks\SysFiles\48_regedit.exe
+ 2004-08-10 12:00:00	572,416	----a-w	C:\WINDOWS\BricoPacks\SysFiles\49_shdoclc.dll
+ 2007-02-19 15:23:00	1,023,488	----a-w	C:\WINDOWS\BricoPacks\SysFiles\5_browseui.dll
+ 2007-02-19 15:23:02	1,498,624	----a-w	C:\WINDOWS\BricoPacks\SysFiles\50_shdocvw.dll
+ 2007-10-25 16:43:25	8,516,608	----a-w	C:\WINDOWS\BricoPacks\SysFiles\51_shell32.dll
+ 2004-08-10 12:00:00	440,320	----a-w	C:\WINDOWS\BricoPacks\SysFiles\52_shimgvw.dll
+ 2007-02-19 15:23:02	474,624	----a-w	C:\WINDOWS\BricoPacks\SysFiles\53_shlwapi.dll
+ 2004-08-10 12:00:00	133,120	----a-w	C:\WINDOWS\BricoPacks\SysFiles\54_sndrec32.exe
+ 2004-08-10 12:00:00	139,264	----a-w	C:\WINDOWS\BricoPacks\SysFiles\55_sndvol32.exe
+ 2004-08-10 12:00:00	122,368	----a-w	C:\WINDOWS\BricoPacks\SysFiles\56_stobject.dll
+ 2004-08-10 12:00:00	107,520	----a-w	C:\WINDOWS\BricoPacks\SysFiles\58_sysocmgr.exe
+ 2005-04-21 18:16:14	1,006,080	----a-w	C:\WINDOWS\BricoPacks\SysFiles\59_syssetup.dll
+ 2004-08-10 12:00:00	85,504	----a-w	C:\WINDOWS\BricoPacks\SysFiles\6_cabview.dll
+ 2004-08-10 12:00:00	143,360	----a-w	C:\WINDOWS\BricoPacks\SysFiles\60_taskmgr.exe
+ 2005-11-23 05:40:35	391,168	----a-w	C:\WINDOWS\BricoPacks\SysFiles\62_themeui.dll
+ 2008-03-01 12:58:10	105,984	----a-w	C:\WINDOWS\BricoPacks\SysFiles\64_url.dll
+ 2008-03-01 12:58:10	1,159,680	----a-w	C:\WINDOWS\BricoPacks\SysFiles\65_urlmon.dll
+ 2008-03-01 12:58:11	233,472	----a-w	C:\WINDOWS\BricoPacks\SysFiles\66_webcheck.dll
+ 2004-08-10 12:00:00	438,784	----a-w	C:\WINDOWS\BricoPacks\SysFiles\67_wiaacmgr.exe
+ 2004-08-10 12:00:00	594,432	----a-w	C:\WINDOWS\BricoPacks\SysFiles\68_wiashext.dll
+ 2008-03-01 12:58:11	826,368	----a-w	C:\WINDOWS\BricoPacks\SysFiles\69_wininet.dll
+ 2004-08-10 12:00:00	115,200	----a-w	C:\WINDOWS\BricoPacks\SysFiles\7_calc.exe
+ 2004-08-10 12:00:00	773,632	----a-w	C:\WINDOWS\BricoPacks\SysFiles\70_WINNTBBU.DLL
+ 2007-03-17 13:44:47	293,376	----a-w	C:\WINDOWS\BricoPacks\SysFiles\71_winsrv.dll
+ 2007-07-30 17:19:16	53,080	----a-w	C:\WINDOWS\BricoPacks\SysFiles\73_wuauclt.exe
+ 2005-05-26 03:16:30	175,896	----a-w	C:\WINDOWS\BricoPacks\SysFiles\74_wuauclt1.exe
+ 2004-08-10 12:00:00	2,986,496	----a-w	C:\WINDOWS\BricoPacks\SysFiles\76_xpsp2res.dll
+ 2004-08-10 12:00:00	340,480	----a-w	C:\WINDOWS\BricoPacks\SysFiles\77_zipfldr.dll
+ 2004-08-10 12:00:00	515,584	----a-w	C:\WINDOWS\BricoPacks\SysFiles\78_logonui.exe
+ 2004-08-10 12:00:00	65,536	----a-w	C:\WINDOWS\BricoPacks\SysFiles\8_cleanmgr.exe
+ 2004-08-10 12:00:00	60,416	----a-w	C:\WINDOWS\BricoPacks\SysFiles\80_msimn.exe
+ 2004-08-10 12:00:00	2,534,400	----a-w	C:\WINDOWS\BricoPacks\SysFiles\81_msoeres.dll
+ 2004-08-10 12:00:00	3,555,328	----a-w	C:\WINDOWS\BricoPacks\SysFiles\82_moviemk.exe
+ 2004-08-10 12:00:00	400,896	----a-w	C:\WINDOWS\BricoPacks\SysFiles\9_cmd.exe
+ 2004-08-10 12:00:00	219,648	----a-w	C:\WINDOWS\BricoPacks\SysFiles\Ux_uxtheme.dll
+ 2007-03-29 10:07:12	206,384	----a-w	C:\WINDOWS\Downloaded Program Files\sysreqlab2.dll
+ 2008-06-14 17:59:52	272,768	------w	C:\WINDOWS\Driver Cache\i386\bthport.sys
+ 2005-10-20 18:02:28	163,328	----a-w	C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
- 2007-03-13 09:57:10	163,328	----a-w	C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2005-10-20 18:02:28	163,328	----a-w	C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2008-06-01 17:12:42	163,328	----a-w	C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
+ 2008-06-22 11:44:37	15,605,760	----a-w	C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000001\NTUSER.DAT
+ 2008-06-22 11:44:38	507,904	----a-w	C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
+ 2008-06-01 17:12:42	163,328	----a-w	C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
+ 2008-06-22 11:36:05	15,605,760	----a-w	C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\NTUSER.DAT
+ 2008-06-22 11:36:05	507,904	----a-w	C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
+ 2000-08-31 06:00:00	89,504	----a-w	C:\WINDOWS\fdsv.exe
+ 2000-08-31 06:00:00	80,412	----a-w	C:\WINDOWS\grep.exe
+ 2007-08-20 09:59:29	124,928	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
+ 2007-08-20 09:59:29	214,528	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
+ 2007-08-20 09:59:29	132,608	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
+ 2007-08-20 09:59:29	63,488	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
+ 2007-08-17 10:22:11	63,488	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
+ 2007-08-20 09:59:29	153,088	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
+ 2007-08-20 09:59:29	230,400	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
+ 2007-08-17 07:34:25	161,792	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
+ 2007-08-20 09:59:29	383,488	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
+ 2007-08-20 09:59:29	384,512	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
+ 2007-08-20 09:59:29	6,058,496	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
+ 2007-08-20 09:59:29	44,544	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
+ 2007-08-20 09:59:30	267,776	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
+ 2007-08-17 10:22:11	13,824	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
+ 2007-08-17 10:22:32	625,152	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
+ 2007-08-20 09:59:30	27,648	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
+ 2007-08-20 09:59:30	459,264	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
+ 2007-08-20 09:59:30	52,224	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
+ 2007-08-20 09:59:30	3,584,512	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
+ 2007-08-20 09:59:30	477,696	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
+ 2007-08-20 09:59:30	193,024	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
+ 2007-08-20 09:59:30	671,232	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
+ 2007-08-20 09:59:31	102,400	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
+ 2007-03-06 01:34:38	216,800	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48	394,976	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
+ 2007-08-20 09:59:31	105,984	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
+ 2007-08-20 09:59:31	1,152,000	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
+ 2007-08-20 09:59:31	232,960	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
+ 2007-08-20 09:59:31	824,832	-c----w	C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
+ 2007-10-10 23:49:42	124,928	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll
+ 2006-10-17 09:58:06	346,624	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll
+ 2007-10-10 23:49:42	214,528	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll
+ 2007-10-10 23:49:42	132,608	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll
+ 2007-10-10 23:49:42	63,488	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll
+ 2007-10-10 11:00:41	70,656	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
+ 2007-10-10 23:49:42	153,088	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll
+ 2007-10-10 23:49:42	230,400	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll
+ 2007-10-10 05:46:55	161,792	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll
+ 2007-10-10 23:49:42	383,488	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll
+ 2007-10-10 23:49:42	384,512	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll
+ 2007-10-10 23:49:43	6,065,664	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll
+ 2007-10-10 23:49:43	44,544	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll
+ 2007-10-10 23:49:43	267,776	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll
+ 2007-10-10 10:59:40	13,824	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
+ 2007-10-10 11:00:59	625,152	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
+ 2007-10-10 23:49:44	27,648	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll
+ 2007-10-10 23:49:44	459,264	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll
+ 2007-10-10 23:49:44	52,224	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll
+ 2007-10-30 23:23:48	3,590,656	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll
+ 2007-10-10 23:49:44	478,208	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll
+ 2007-10-10 23:49:44	193,024	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll
+ 2007-10-10 23:49:45	671,232	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll
+ 2007-10-10 23:49:45	102,400	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll
+ 2006-10-17 09:58:08	44,544	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll
+ 2007-03-06 01:34:38	216,800	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48	394,976	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll
+ 2007-10-10 23:49:45	105,984	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\url.dll
+ 2007-10-10 23:49:45	1,159,680	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll
+ 2007-10-10 23:49:45	232,960	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll
+ 2007-10-10 23:49:45	824,832	-c----w	C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
+ 2007-12-07 02:08:32	124,928	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
+ 2007-12-19 22:53:23	347,136	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
+ 2007-12-07 02:08:32	214,528	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
+ 2007-12-07 02:08:32	133,120	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
+ 2007-12-07 02:08:32	63,488	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
+ 2007-12-06 11:02:31	70,656	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
+ 2007-12-07 02:08:32	153,088	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
+ 2007-12-07 02:08:32	230,400	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
+ 2007-12-06 04:59:51	161,792	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
+ 2007-12-07 02:08:32	383,488	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
+ 2007-12-07 02:08:32	384,512	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
+ 2007-12-07 02:08:33	6,066,176	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
+ 2007-12-07 02:08:33	44,544	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
+ 2007-12-07 02:08:33	267,776	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
+ 2007-12-06 11:00:58	13,824	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
+ 2007-12-06 11:03:16	625,664	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
+ 2007-12-07 02:08:33	27,648	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
+ 2007-12-07 02:08:33	459,264	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
+ 2007-12-07 02:08:33	52,224	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
+ 2007-12-08 05:08:36	3,592,192	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
+ 2007-12-07 02:08:34	478,208	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
+ 2007-12-07 02:08:34	193,024	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
+ 2007-12-07 02:08:34	671,232	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
+ 2007-12-07 02:08:34	102,912	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
+ 2008-01-11 05:36:55	44,544	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
+ 2007-03-06 01:34:38	216,800	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48	394,976	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
+ 2007-12-07 02:08:34	105,984	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
+ 2007-12-07 02:08:34	1,159,680	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
+ 2007-12-07 02:08:34	233,472	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
+ 2007-12-07 02:08:34	824,832	-c----w	C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
+ 2008-03-01 12:58:06	124,928	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
+ 2008-03-01 12:58:06	347,136	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
+ 2008-03-01 12:58:06	214,528	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
+ 2008-03-01 12:58:06	133,120	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
+ 2008-03-01 12:58:06	63,488	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
+ 2008-02-29 08:56:41	70,656	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
+ 2008-03-01 12:58:06	153,088	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
+ 2008-03-01 12:58:06	230,400	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
+ 2008-02-15 05:44:25	161,792	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
+ 2008-03-01 12:58:07	383,488	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
+ 2008-03-01 12:58:07	384,512	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
+ 2008-03-01 12:58:08	6,066,176	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
+ 2008-03-01 12:58:08	44,544	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
+ 2008-03-01 12:58:08	267,776	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
+ 2008-02-22 10:00:51	13,824	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
+ 2008-02-29 08:57:05	625,664	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
+ 2008-03-01 12:58:08	27,648	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
+ 2008-03-01 12:58:08	459,264	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
+ 2008-03-01 12:58:08	52,224	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
+ 2008-03-01 16:28:10	3,591,680	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
+ 2008-03-01 12:58:09	478,208	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
+ 2008-03-01 12:58:10	193,024	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
+ 2008-03-01 12:58:10	671,232	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
+ 2008-03-01 12:58:10	102,912	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
+ 2008-03-01 12:58:10	44,544	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
+ 2007-03-06 01:34:38	216,800	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48	394,976	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
+ 2008-03-01 12:58:10	105,984	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
+ 2008-03-01 12:58:10	1,159,680	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
+ 2008-03-01 12:58:11	233,472	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
+ 2008-03-01 12:58:11	826,368	-c----w	C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
+ 2007-09-14 04:06:22	18,261,320	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0/u06DFDF283378374095DCFA4AC80CD63\1.0.0\pes2008.exe
+ 2007-09-01 04:56:50	709,960	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0/u06DFDF283378374095DCFA4AC80CD63\1.0.0\settings.exe
+ 2008-02-04 20:27:24	31,720	----a-r	C:\WINDOWS\Installer\{2FDFD600-7338-4738-90D5-FC4ACA08DC36}\ARPPRODUCTICON.exe
+ 2008-04-03 18:33:11	102,400	----a-r	C:\WINDOWS\Installer\{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}\iTunesIco.exe
+ 2008-03-15 21:27:24	34,494	----a-r	C:\WINDOWS\Installer\{5AEDCB07-25E3-4136-BE1E-BB2A2944355D}\controlPanelIcon.exe
+ 2008-03-15 21:27:25	10,134	----a-r	C:\WINDOWS\Installer\{5AEDCB07-25E3-4136-BE1E-BB2A2944355D}\SystemFolder_msiexec.exe
+ 2007-02-28 13:22:41	2,560	----a-r	C:\WINDOWS\Installer\{9111040C-6000-11D3-8CFE-0050048383C9}\cagicon.exe
+ 2007-02-28 13:25:33	2,560	----a-r	C:\WINDOWS\Installer\{9119040C-6000-11D3-8CFE-0050048383C9}\cagicon.exe
- 2007-08-15 23:32:53	57,344	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\joticon.exe
+ 2008-03-11 23:35:03	57,344	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\joticon.exe
- 2007-08-15 23:32:53	135,168	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2008-03-11 23:35:03	135,168	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-08-15 23:32:53	4,096	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2008-03-11 23:35:03	4,096	----a-r	C:\WINDOWS\Installer\{91A1040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-09-26 13:19:21	29,926	----a-r	C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-03-09 01:19:30	29,926	----a-r	C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-01-14 22:52:43	65,536	----a-r	C:\WINDOWS\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\ARPPRODUCTICON.exe
+ 2008-01-14 22:52:43	65,536	----a-r	C:\WINDOWS\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\NewShortcut1_E7EA5FE4C88949B68E0A63A8572E53B9.exe
+ 2008-01-14 22:52:43	65,536	----a-r	C:\WINDOWS\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\NewShortcut2_E7EA5FE4C88949B68E0A63A8572E53B9.exe
+ 2008-01-14 22:52:43	2,862	----a-r	C:\WINDOWS\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\UninstallStartMenuSh_C1D76D7AF3BB47EAA7465B1E2FFC1DF2.exe
+ 2008-04-03 18:44:48	307,200	----a-r	C:\WINDOWS\Installer\{F0E8F94D-6E68-4B35-92DF-3AA6DC6A6768}\SafariIco.exe
+ 2007-12-02 12:36:34	737,280	----a-w	C:\WINDOWS\iun6002.exe
+ 2008-05-17 15:34:47	472,576	----a-w	C:\WINDOWS\MaxTV\uninstall_maxtv.exe
- 2005-09-23 05:28:52	72,704	----a-w	C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2007-10-23 23:47:38	82,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
- 2005-09-23 05:28:52	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2007-10-23 23:47:38	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
- 2005-09-23 05:28:56	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2007-10-23 23:47:40	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
- 2005-09-23 05:28:58	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2007-10-23 23:47:42	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2005-09-23 05:28:56	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
+ 2007-10-23 23:47:40	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
- 2005-09-23 05:28:52	86,528	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2007-10-23 23:47:38	97,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2005-09-23 05:28:36	18,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2007-10-23 23:47:26	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2005-09-23 05:28:42	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2007-10-23 23:47:30	145,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2005-09-23 05:28:44	4,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2007-10-23 23:47:32	13,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2005-09-23 05:29:04	183,808	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2007-10-23 23:47:48	193,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
- 2005-09-23 05:28:28	208,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2007-10-23 23:47:20	218,112	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2007-10-26 01:11:10	24,064	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\alinkui.dll
+ 2007-10-26 01:11:12	161,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\cscompui.dll
+ 2007-10-26 01:11:12	5,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\CvtResUI.dll
+ 2007-10-26 01:11:16	216,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\vbc7ui.dll
+ 2007-10-26 01:11:08	245,760	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\Vsavb7rtUI.dll
- 2005-09-23 05:28:56	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2007-10-23 23:47:40	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2005-09-23 05:28:58	138,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2007-10-23 23:47:42	147,968	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
- 2005-09-23 05:28:36	87,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2007-10-23 23:47:26	99,320	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2007-04-13 01:21:18	58,712	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2007-10-23 23:47:42	59,392	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- 2005-09-23 05:28:32	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2007-10-23 23:47:22	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2007-04-13 01:20:52	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2007-10-23 23:47:22	22,024	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2007-04-13 01:20:52	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2007-10-23 23:47:22	17,928	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2007-04-13 01:20:52	23,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2007-10-23 23:47:22	33,288	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
- 2007-04-13 01:20:50	75,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2007-10-23 23:47:22	84,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2005-09-23 05:28:32	13,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-10-23 23:47:22	24,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2007-04-13 01:20:52	32,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2007-10-23 23:47:22	32,776	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2005-09-23 05:28:32	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-10-23 23:47:22	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-04-13 01:20:52	33,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-10-23 23:47:22	33,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2007-04-13 01:20:52	32,600	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-10-23 23:47:22	33,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2007-04-13 01:20:52	507,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2007-10-23 23:47:22	507,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 05:28:56	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-10-23 23:47:40	106,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2007-04-13 01:21:16	88,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2007-10-23 23:47:40	101,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2005-09-23 05:28:42	76,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2007-10-23 23:47:30	80,376	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2005-09-23 05:28:42	1,144,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2007-10-23 23:47:30	1,162,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2005-09-23 05:28:42	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2007-10-23 23:47:30	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 05:28:58	17,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2007-10-23 23:47:42	27,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 05:28:56	68,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2007-10-23 23:47:40	69,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2005-09-23 05:28:44	31,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2007-10-23 23:47:30	35,320	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2005-09-23 05:28:38	52,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-10-23 23:47:28	66,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2007-04-13 01:20:58	5,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2007-10-23 23:47:28	5,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2005-09-23 05:29:12	547,840	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2007-10-23 23:47:54	572,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 05:28:56	788,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-23 23:47:40	798,224	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-26 01:11:08	8,704	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_compiler.resources.dll
+ 2007-10-26 01:11:08	91,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_rc.dll
+ 2007-10-26 01:11:08	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regbrowsers.resources.dll
+ 2007-10-26 01:11:08	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regsql.resources.dll
+ 2007-10-26 01:11:08	315,392	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnetmmcext.resources.dll
+ 2007-10-26 01:11:14	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\caspol.resources.dll
+ 2007-10-26 01:11:14	4,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\InstallUtil.resources.dll
+ 2007-10-26 01:11:12	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\JSC.Resources.dll
+ 2007-10-26 01:11:14	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Engine.resources.dll
+ 2007-10-26 01:11:14	139,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Tasks.resources.dll
+ 2007-10-26 01:11:14	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Utilities.Resources.dll
+ 2007-10-26 01:11:12	45,056	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.JScript.Resources.dll
+ 2007-10-26 01:11:16	61,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.VisualBasic.resources.dll
+ 2007-10-26 01:11:14	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\MSBuild.resources.dll
+ 2007-10-26 01:11:14	311,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorlib.Resources.dll
+ 2007-10-26 01:11:14	406,528	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorrc.dll
+ 2007-10-26 01:11:14	11,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Regasm.resources.dll
+ 2007-10-26 01:11:14	87,040	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\ShFusRes.dll
+ 2007-10-26 01:11:14	10,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\sysglobl.resources.dll
+ 2007-10-26 01:11:14	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.Install.Resources.dll
+ 2007-10-26 01:11:14	49,152	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.resources.dll
+ 2007-10-26 01:11:14	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.OracleClient.resources.dll
+ 2007-10-26 01:11:14	344,064	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.Resources.dll
+ 2007-10-26 01:11:14	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.data.sqlxml.resources.dll
+ 2007-10-26 01:11:10	389,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Deployment.resources.dll
+ 2007-10-26 01:11:14	544,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Design.Resources.dll
+ 2007-10-26 01:11:14	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Protocols.resources.dll
+ 2007-10-26 01:11:14	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Resources.dll
+ 2007-10-26 01:11:14	6,144	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Design.Resources.dll
+ 2007-10-26 01:11:14	15,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Resources.dll
+ 2007-10-26 01:11:14	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.EnterpriseServices.Resources.dll
+ 2007-10-26 01:11:14	13,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Management.Resources.dll
+ 2007-10-26 01:11:14	61,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Messaging.Resources.dll
+ 2007-10-26 01:11:14	212,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.Resources.dll
+ 2007-10-26 01:11:14	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Remoting.Resources.dll
+ 2007-10-26 01:11:14	11,776	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Serialization.Formatters.Soap.Resources.dll
+ 2007-10-26 01:11:14	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Security.Resources.dll
+ 2007-10-26 01:11:14	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.ServiceProcess.Resources.dll
+ 2007-10-26 01:11:14	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Transactions.resources.dll
+ 2007-10-26 01:11:14	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Mobile.resources.dll
+ 2007-10-26 01:11:14	618,496	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Resources.dll
+ 2007-10-26 01:11:14	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Services.Resources.dll
+ 2007-10-26 01:11:14	430,080	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Windows.Forms.Resources.dll
+ 2007-10-26 01:11:14	167,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.xml.Resources.dll
- 2005-09-23 05:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-23 23:47:36	18,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-26 01:11:18	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.Data.resources.dll
+ 2007-10-26 01:11:18	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.resources.dll
- 2007-04-13 01:21:16	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2007-10-23 23:47:40	9,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 05:28:56	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2007-10-23 23:47:40	8,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 05:28:56	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2007-10-23 23:47:40	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2005-09-23 05:28:56	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-10-23 23:47:40	6,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2007-04-13 01:21:16	228,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-10-23 23:47:40	230,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2007-04-13 01:21:16	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2007-10-23 23:47:40	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 05:28:56	55,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2007-10-23 23:47:40	65,032	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 05:28:56	72,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2007-10-23 23:47:40	72,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 05:28:48	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2007-10-23 23:47:34	40,960	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2007-04-13 01:21:10	413,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2007-10-23 23:47:36	348,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2005-09-23 05:28:48	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-10-23 23:47:36	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2007-04-13 01:21:10	647,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2007-10-23 23:47:36	655,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2005-09-23 05:28:48	73,728	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-10-23 23:47:36	77,824	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2007-04-13 01:21:08	749,568	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2007-10-23 23:47:34	749,568	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2005-09-23 05:29:10	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-10-23 23:47:52	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 05:29:10	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2007-10-23 23:47:52	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 05:29:08	667,648	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2007-10-23 23:47:50	671,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 05:28:30	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2007-10-23 23:47:20	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 05:29:10	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2007-10-23 23:47:52	5,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-23 05:28:30	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2007-10-23 23:47:20	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 05:28:30	12,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-10-23 23:47:20	12,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 05:28:30	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-10-23 23:47:20	7,168	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-04-13 01:20:52	87,040	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2007-10-23 23:47:22	97,792	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 05:28:48	69,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-10-23 23:47:36	69,632	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2007-04-13 01:21:18	802,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2007-10-23 23:47:40	822,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2005-09-23 05:28:56	73,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2007-10-23 23:47:40	83,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 05:28:56	288,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-10-23 23:47:40	308,224	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2007-04-13 01:21:16	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-10-23 23:47:40	47,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2007-04-13 01:21:16	326,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2007-10-23 23:47:40	348,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2005-09-23 05:28:56	81,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-10-23 23:47:40	94,208	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2007-04-13 01:21:16	4,308,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-10-23 23:47:40	4,444,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2007-04-13 01:21:16	102,912	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2007-10-23 23:47:40	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2005-09-23 05:29:00	330,752	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2007-10-23 23:47:44	340,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2005-09-23 05:28:56	67,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2007-10-23 23:47:40	77,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2005-09-23 05:28:50	9,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-10-23 23:47:36	18,944	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2007-04-13 01:21:18	227,328	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-10-23 23:47:40	242,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2007-04-13 01:21:18	68,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2007-10-23 23:47:40	70,144	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2005-09-23 05:28:56	10,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-10-23 23:47:40	19,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2007-04-13 01:21:12	5,634,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2007-10-23 23:47:36	5,814,784	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2005-09-23 05:29:00	22,528	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
+ 2007-10-23 23:47:44	31,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
+ 2007-10-26 01:11:14	23,040	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u40C\mscorsecr.dll
- 2007-04-13 01:21:16	99,152	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-10-23 23:47:40	101,880	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2007-04-13 01:21:18	15,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2007-10-23 23:47:40	24,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2005-09-23 05:28:56	78,336	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-10-23 23:47:40	89,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2007-04-13 01:21:12	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2007-10-23 23:47:36	144,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2005-09-23 05:28:56	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2007-10-23 23:47:40	53,248	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 05:28:56	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2007-10-23 23:47:40	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 05:29:02	59,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2007-10-23 23:47:46	61,952	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 05:28:58	7,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2007-10-23 23:47:42	16,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2005-09-23 05:28:56	107,520	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2007-10-23 23:47:40	119,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2005-09-23 05:29:00	85,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-10-23 23:47:44	95,232	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2007-04-13 01:21:18	382,464	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-10-23 23:47:40	392,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2007-04-13 01:21:18	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-10-23 23:47:40	110,592	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2007-04-13 01:21:18	413,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2007-10-23 23:47:42	425,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 05:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-10-23 23:47:40	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2007-04-13 01:21:16	2,902,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-10-23 23:47:40	3,036,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2007-04-13 01:21:18	482,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-10-23 23:47:40	483,840	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2007-04-13 01:21:18	716,800	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-10-23 23:47:40	741,376	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2007-04-13 01:20:58	888,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-10-23 23:47:28	933,888	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2007-04-13 01:21:16	5,001,216	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2007-10-23 23:47:40	5,070,848	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2005-09-23 05:28:56	397,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-10-23 23:47:40	401,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2007-04-13 01:21:18	188,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-10-23 23:47:40	188,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2007-04-13 01:21:16	2,940,928	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2007-10-23 23:47:40	3,076,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2005-09-23 05:28:56	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-10-23 23:47:40	81,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2007-04-13 01:21:16	577,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-10-23 23:47:40	630,784	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2007-04-13 01:21:16	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-10-23 23:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll

sg7 · Answer

suite 3 du rapport : 

- 2007-04-13 01:21:18	47,616	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-10-23 23:47:40	57,392	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2007-04-13 01:21:18	114,176	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-10-23 23:47:40	113,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2007-04-13 01:21:16	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2007-10-23 23:47:40	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2005-09-23 05:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-10-23 23:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-04-13 01:21:16	299,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2007-10-23 23:47:40	299,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 05:28:56	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-10-23 23:47:40	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-23 05:28:56	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2007-10-23 23:47:40	258,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 05:28:56	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-10-23 23:47:40	114,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2007-04-13 01:21:18	260,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-10-23 23:47:40	261,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2007-04-13 01:21:16	5,156,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2007-10-23 23:47:40	5,431,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2005-09-23 05:28:56	835,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2007-10-23 23:47:40	884,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 05:28:56	86,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2007-10-23 23:47:40	90,112	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2005-09-23 05:28:56	823,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-10-23 23:47:40	839,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2007-04-13 01:21:16	5,152,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-10-23 23:47:40	5,013,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2007-04-13 01:21:16	2,027,520	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2007-10-23 23:47:40	2,068,480	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2005-09-23 05:28:56	71,680	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-10-23 23:47:40	81,400	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2007-04-13 01:21:28	1,166,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-10-23 23:47:48	1,172,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2007-04-13 01:20:50	1,330,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-10-23 23:47:20	1,344,000	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2007-04-13 01:20:52	406,016	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2007-10-23 23:47:22	434,688	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2005-09-23 05:28:56	28,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-23 23:47:40	37,896	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-11 07:55:14	159,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2007-10-15 12:11:32	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\fr\ComSvcConfig.resources.dll
+ 2007-10-15 12:11:32	864,256	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\fr\infocard.resources.dll
+ 2007-10-15 12:11:32	24,576	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\fr\ServiceModelReg.resources.dll
+ 2007-10-15 12:11:32	11,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\fr\SMSvcHost.resources.dll
+ 2007-10-15 12:11:32	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\fr\WsatConfig.resources.dll
+ 2007-10-11 07:55:10	864,256	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2007-10-11 07:55:12	397,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2007-10-11 07:55:12	151,552	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2007-10-11 07:55:14	2,560	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2007-10-11 07:55:14	61,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2007-10-11 07:55:14	11,264	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2007-10-11 07:55:14	102,400	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMDiagnostics.dll
+ 2007-10-11 07:55:14	122,880	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2007-10-11 07:55:14	929,792	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2007-10-11 07:55:14	5,971,968	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2007-10-11 07:55:14	159,744	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2007-10-11 07:55:14	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2007-10-11 07:55:14	143,360	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2007-10-06 01:18:12	16,936	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2006-10-20 22:01:08	372,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\fr\PresentationUI.resources.dll
+ 2007-08-05 20:30:12	797,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2007-08-05 20:30:14	4,874,240	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2006-10-20 14:09:04	2,641,408	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsData000c.dll
+ 2007-08-05 20:30:14	2,628,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2006-10-20 12:03:42	6,237,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons000c.dll
+ 2007-10-09 11:03:00	76,312	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2007-10-09 10:58:12	32,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2007-10-09 10:58:12	36,864	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2007-10-09 11:03:08	121,368	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2007-10-09 10:58:14	897,024	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2007-10-09 10:58:20	14,848	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
+ 2007-11-07 17:02:38	168,448	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2007-11-07 17:02:38	233,976	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-01-16 23:34:10	198,144	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\1036\cscompui.dll
+ 2008-01-16 23:34:10	275,448	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\1036\vbc7ui.dll
+ 2007-11-07 17:02:38	41,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2007-11-07 17:02:38	41,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2007-11-07 17:02:38	28,672	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2007-11-07 17:02:38	1,545,720	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-01-16 23:34:10	155,648	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\fr\Microsoft.Build.Tasks.v3.5.resources.dll
+ 2008-01-16 23:34:10	46,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\fr\MSBuild.resources.exe
+ 2008-01-16 23:28:20	28,306	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\baseline.dat
+ 2008-01-16 21:43:50	97,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\DeleteTemp.exe
+ 2008-01-16 21:43:50	276,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\dlmgr.dll
+ 2008-01-16 21:43:50	1,059,328	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\gencomp.dll
+ 2008-01-16 21:43:50	177,152	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\HtmlLite.dll
+ 2008-01-16 23:34:08	183,296	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\RebootStub.exe
+ 2008-01-16 21:43:50	269,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
+ 2008-01-16 21:47:24	131,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setupres.dll
+ 2008-01-16 21:43:50	1,361,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\SITSetup.dll
+ 2008-01-16 21:43:50	1,045,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\vs_setup.dll
+ 2008-01-16 21:43:50	627,712	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\vs70uimgr.dll
+ 2008-01-16 21:43:50	411,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\vsbasereqs.dll
+ 2008-01-16 21:43:50	687,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\vsscenario.dll
+ 2008-01-16 21:47:26	112,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\WapRes.dll
+ 2008-01-16 21:43:50	982,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\WapUI.dll
+ 2007-11-07 17:00:02	210,834	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\baseline.dat
+ 2007-11-07 14:26:34	97,280	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\DeleteTemp.exe
+ 2007-11-07 14:26:34	276,472	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\dlmgr.dll
+ 2007-11-07 14:26:34	1,059,328	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\gencomp.dll
+ 2007-11-07 14:26:34	177,152	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\HtmlLite.dll
+ 2007-11-07 14:26:34	269,304	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
+ 2007-11-07 14:26:34	112,128	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1025.dll
+ 2007-11-07 14:26:34	84,992	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1028.dll
+ 2007-11-07 14:26:34	124,416	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1029.dll
+ 2007-11-07 14:26:34	125,440	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1030.dll
+ 2007-11-07 14:26:34	129,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1031.dll
+ 2007-11-07 14:26:34	136,192	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1032.dll
+ 2007-11-07 14:26:34	120,832	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1035.dll
+ 2007-11-07 14:26:34	132,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1036.dll
+ 2007-11-07 14:26:34	110,080	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1037.dll
+ 2007-11-07 14:26:34	131,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1038.dll
+ 2007-11-07 14:26:34	127,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1040.dll
+ 2007-11-07 14:26:34	96,768	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1041.dll
+ 2007-11-07 14:26:34	93,696	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1042.dll
+ 2007-11-07 14:26:34	127,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1043.dll
+ 2007-11-07 14:26:34	120,320	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1044.dll
+ 2007-11-07 14:26:34	126,976	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1045.dll
+ 2007-11-07 14:26:34	121,856	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1046.dll
+ 2007-11-07 14:26:34	122,368	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1049.dll
+ 2007-11-07 14:26:34	120,320	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1053.dll
+ 2007-11-07 14:26:34	119,808	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.1055.dll
+ 2007-11-07 14:26:34	83,456	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.2052.dll
+ 2007-11-07 14:26:34	130,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.2070.dll
+ 2007-11-07 14:26:34	130,560	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.3082.dll
+ 2007-11-07 14:26:34	109,568	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setupres.dll
+ 2007-11-07 14:26:34	1,361,920	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\SITSetup.dll
+ 2007-11-07 14:26:34	1,045,504	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\vs_setup.dll
+ 2007-11-07 14:26:34	627,712	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\vs70uimgr.dll
+ 2007-11-07 14:26:34	411,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\vsbasereqs.dll
+ 2007-11-07 14:26:34	687,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\vsscenario.dll
+ 2007-11-07 14:26:34	102,904	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1025.dll
+ 2007-11-07 14:26:34	90,104	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1028.dll
+ 2007-11-07 14:26:34	108,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1029.dll
+ 2007-11-07 14:26:34	108,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1030.dll
+ 2007-11-07 14:26:34	111,608	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1031.dll
+ 2007-11-07 14:26:34	113,656	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1032.dll
+ 2007-11-07 14:26:34	106,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1035.dll
+ 2007-11-07 14:26:34	112,120	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1036.dll
+ 2007-11-07 14:26:34	101,368	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1037.dll
+ 2007-11-07 14:26:34	111,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1038.dll
+ 2007-11-07 14:26:34	110,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1040.dll
+ 2007-11-07 14:26:34	95,736	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1041.dll
+ 2007-11-07 14:26:34	92,664	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1042.dll
+ 2007-11-07 14:26:34	108,536	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1043.dll
+ 2007-11-07 14:26:34	106,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1044.dll
+ 2007-11-07 14:26:34	109,048	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1045.dll
+ 2007-11-07 14:26:34	107,512	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1046.dll
+ 2007-11-07 14:26:34	107,000	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1049.dll
+ 2007-11-07 14:26:34	105,976	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1053.dll
+ 2007-11-07 14:26:34	106,488	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.1055.dll
+ 2007-11-07 14:26:34	89,080	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.2052.dll
+ 2007-11-07 14:26:34	110,072	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.2070.dll
+ 2007-11-07 14:26:34	111,096	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.3082.dll
+ 2007-11-07 14:26:34	107,512	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapRes.dll
+ 2007-11-07 14:26:34	982,008	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\WapUI.dll
+ 2007-11-07 17:02:38	794,624	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2007-11-07 17:02:38	41,984	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2007-11-07 17:02:38	91,136	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2007-11-07 17:02:38	1,710,584	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2007-10-19 00:58:38	182,288	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2007-11-07 17:02:38	71,160	----a-w	C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
- 2007-06-16 23:11:58	51,200	----a-w	C:\WINDOWS\NirCmd.exe
+ 2000-08-31 06:00:00	28,672	----a-w	C:\WINDOWS\Nircmd.exe
+ 2007-04-20 17:16:00	1,117,184	----a-w	C:\WINDOWS\Resources\Themes\Inspirat2\Shell\AeroBlack\Shellstyle.dll
+ 2007-04-20 17:16:00	1,117,184	----a-w	C:\WINDOWS\Resources\Themes\Inspirat2\Shell\AeroBlue\Shellstyle.dll
+ 2007-04-21 09:07:00	894,464	----a-w	C:\WINDOWS\Resources\Themes\Inspirat2\Shell\ClassicXP\Shellstyle.dll
+ 2007-04-20 17:16:00	1,117,184	----a-w	C:\WINDOWS\Resources\Themes\Inspirat2\Shell\NormalColor\Shellstyle.dll
+ 2005-08-20 09:30:00	2,085,888	----a-w	C:\WINDOWS\Resources\Themes\Vista\Shell\NormalColor\shellstyle.dll
+ 2005-08-20 11:48:00	1,201,664	----a-w	C:\WINDOWS\Resources\Themes\Vista\Shell\VISTA12\shellstyle.dll
+ 2005-08-20 09:30:00	2,085,888	----a-w	C:\WINDOWS\Resources\Themes\Vista\Shell\VISTA2\shellstyle.dll
+ 2005-08-20 11:48:00	1,201,664	----a-w	C:\WINDOWS\Resources\Themes\Vista\Shell\VISTA22\shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\Aero48\Shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\Basic32\Shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\Basic48\Shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\Black32\Shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\Black48\Shellstyle.dll
+ 2006-11-21 17:22:30	1,505,792	----a-w	C:\WINDOWS\Resources\Themes\VistaVG Ultimate\Shell\NormalColor\Shellstyle.dll
+ 2000-08-31 06:00:00	98,816	----a-w	C:\WINDOWS\sed.exe
+ 2000-08-31 06:00:00	161,792	----a-w	C:\WINDOWS\swreg.exe
+ 2000-08-31 06:00:00	136,704	----a-w	C:\WINDOWS\swsc.exe
+ 2000-08-31 06:00:00	212,480	----a-w	C:\WINDOWS\swxcacls.exe
+ 1997-02-28 02:00:02	2,486	------w	C:\WINDOWS\system\AS16POST.BIN
+ 2004-08-10 12:00:00	2,000	----a-w	C:\WINDOWS\system\KEYBOARD.DRV
+ 2004-08-10 12:00:00	73,680	----a-w	C:\WINDOWS\system\MCIAVI.DRV
+ 2004-08-10 12:00:00	25,280	----a-w	C:\WINDOWS\system\MCISEQ.DRV
+ 2004-08-10 12:00:00	28,160	----a-w	C:\WINDOWS\system\MCIWAVE.DRV
+ 2004-08-10 12:00:00	2,032	----a-w	C:\WINDOWS\system\MOUSE.DRV
+ 2004-08-10 12:00:00	1,744	----a-w	C:\WINDOWS\system\SOUND.DRV
+ 2004-08-10 12:00:00	3,360	----a-w	C:\WINDOWS\system\SYSTEM.DRV
+ 2004-08-10 12:00:00	4,096	----a-w	C:\WINDOWS\system\TIMER.DRV
+ 2004-08-10 12:00:00	2,176	----a-w	C:\WINDOWS\system\VGA.DRV
+ 2004-08-10 12:00:00	13,600	----a-w	C:\WINDOWS\system\WFWNET.DRV
+ 1999-10-22 16:58:36	4,030	------w	C:\WINDOWS\system\WINASPI.DLL
+ 2004-08-10 12:00:00	146,944	----a-w	C:\WINDOWS\system\WINSPOOL.DRV
- 2007-08-20 09:59:29	124,928	----a-w	C:\WINDOWS\system32\advpack.dll
+ 2008-04-23 04:16:39	124,928	----a-w	C:\WINDOWS\system32\advpack.dll
- 2007-07-27 22:07:21	783,224	----a-w	C:\WINDOWS\system32\aswBoot.exe
+ 2008-05-15 23:24:43	1,152,888	----a-w	C:\WINDOWS\system32\aswBoot.exe
- 2006-03-22 06:12:24	258,048	----a-w	C:\WINDOWS\system32\ati2cqag.dll
+ 2004-08-03 23:54:22	229,376	----a-w	C:\WINDOWS\system32\ati2cqag.dll
- 2006-03-22 06:56:44	257,536	----a-w	C:\WINDOWS\system32\ati2dvag.dll
+ 2004-08-03 23:54:22	201,728	----a-w	C:\WINDOWS\system32\ati2dvag.dll
- 2006-03-22 06:40:12	2,662,688	----a-w	C:\WINDOWS\system32\ati3duag.dll
+ 2004-08-03 23:54:22	1,888,992	----a-w	C:\WINDOWS\system32\ati3duag.dll
- 2006-03-22 06:33:42	1,130,752	----a-w	C:\WINDOWS\system32\ativvaxx.dll
+ 2004-08-03 23:54:22	516,768	----a-w	C:\WINDOWS\system32\ativvaxx.dll
- 2007-07-27 21:57:49	95,608	----a-w	C:\WINDOWS\system32\AVASTSS.scr
+ 2008-05-15 23:12:36	95,608	----a-w	C:\WINDOWS\system32\AVASTSS.scr
+ 2007-05-17 16:30:48	318,976	----a-w	C:\WINDOWS\system32\avisynth.dll
+ 2006-09-28 18:52:18	655,360	----a-w	C:\WINDOWS\system32\CDDBControl.dll
+ 2006-09-28 19:52:18	98,304	----a-w	C:\WINDOWS\system32\CddbLangDE.dll
+ 2006-09-28 19:52:18	98,304	----a-w	C:\WINDOWS\system32\CddbLangES.dll
+ 2006-09-28 19:52:18	98,304	----a-w	C:\WINDOWS\system32\CddbLangFR.dll
+ 2006-09-28 19:52:18	102,400	----a-w	C:\WINDOWS\system32\CddbLangIT.dll
+ 2006-09-28 19:52:18	77,824	----a-w	C:\WINDOWS\system32\CddbLangJA.dll
+ 2006-09-28 19:52:18	98,304	----a-w	C:\WINDOWS\system32\CddbLangNL.dll
+ 2006-09-28 18:52:18	765,952	----a-w	C:\WINDOWS\system32\CDDBUI.dll
- 2007-10-18 14:02:37	107,888	----a-w	C:\WINDOWS\system32\CmdLineExt.dll
+ 2007-12-08 15:19:35	107,888	----a-w	C:\WINDOWS\system32\CmdLineExt.dll
+ 2004-08-10 12:00:00	10,544	----a-w	C:\WINDOWS\system32\comm.drv
- 2007-02-27 16:11:16	16,384	----a-w	C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-03-14 19:32:20	16,384	----a-w	C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2007-02-27 16:07:57	262,144	---ha-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
+ 2008-02-06 16:39:19	262,144	---ha-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
- 2007-02-27 16:11:16	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2008-03-14 19:32:20	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2007-02-27 16:11:16	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-14 19:32:20	32,768	----a-w	C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2004-08-10 12:00:00	1,788	----a-w	C:\WINDOWS\system32\Dcache.bin
+ 2004-02-22 09:11:08	719,872	----a-w	C:\WINDOWS\system32\devil.dll
- 2005-09-23 05:28:38	83,456	----a-w	C:\WINDOWS\system32\dfshim.dll
+ 2007-10-23 23:47:28	96,760	----a-w	C:\WINDOWS\system32\dfshim.dll
+ 2005-10-06 03:20:00	2,496	----a-w	C:\WINDOWS\system32\DLA\DLADResN.SYS
- 2007-08-20 09:59:29	124,928	-c----w	C:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-04-23 04:16:39	124,928	-c----w	C:\WINDOWS\system32\dllcache\advpack.dll
+ 2004-08-03 23:54:22	229,376	-c--a-w	C:\WINDOWS\system32\dllcache\ati2cqag.dll
+ 2004-08-03 23:54:22	201,728	-c--a-w	C:\WINDOWS\system32\dllcache\ati2dvag.dll
+ 2004-08-03 23:54:22	1,888,992	-c--a-w	C:\WINDOWS\system32\dllcache\ati3duag.dll
+ 2004-08-03 23:54:22	516,768	-c--a-w	C:\WINDOWS\system32\dllcache\ativvaxx.dll
+ 2004-08-10 12:00:00	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\atrace.dll
- 2007-02-19 15:23:00	1,023,488	-c--a-w	C:\WINDOWS\system32\dllcache\browseui.dll
+ 2007-02-19 15:23:00	1,021,440	-c--a-w	C:\WINDOWS\system32\dllcache\browseui.dll
+ 2004-08-03 22:10:18	17,024	-c--a-w	C:\WINDOWS\system32\dllcache\ccdecode.sys
+ 2008-03-25 04:50:25	554,008	-c----w	C:\WINDOWS\system32\dllcache\dao360.dll
- 2006-06-26 17:41:32	148,480	-c--a-w	C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-02-20 05:35:05	148,992	-c--a-w	C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-02-20 05:35:05	45,568	-c----w	C:\WINDOWS\system32\dllcache\dnsrslvr.dll
- 2006-10-17 09:58:06	346,624	-c--a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-04-23 04:16:39	347,136	-c--a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2007-08-20 09:59:29	214,528	-c--a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-04-23 04:16:39	214,528	-c--a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2007-06-13 13:22:28	1,037,312	-c----w	C:\WINDOWS\system32\dllcache\explorer.exe
+ 2007-06-13 13:22:28	979,456	-c--a-w	C:\WINDOWS\system32\dllcache\explorer.exe
- 2007-08-20 09:59:29	132,608	-c--a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-04-23 04:16:39	133,120	-c--a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2007-03-22 18:24:58	28,160	-c----w	C:\WINDOWS\system32\dllcache\FilterPipelinePrintProc.dll
- 2007-06-19 13:32:25	282,112	-c----w	C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:51:00	282,624	-c----w	C:\WINDOWS\system32\dllcache\gdi32.dll
- 2007-08-20 09:59:29	63,488	-c----w	C:\WINDOWS\system32\dllcache\icardie.dll
+ 2008-04-23 04:16:39	63,488	-c----w	C:\WINDOWS\system32\dllcache\icardie.dll
- 2007-08-17 10:22:11	63,488	-c----w	C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-04-22 07:41:08	70,656	-c----w	C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2007-08-20 09:59:29	153,088	-c----w	C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-04-23 04:16:39	153,088	-c----w	C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2007-08-20 09:59:29	230,400	-c----w	C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-04-23 04:16:39	230,400	-c----w	C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2007-08-17 07:34:25	161,792	-c----w	C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-04-20 05:07:51	161,792	-c----w	C:\WINDOWS\system32\dllcache\ieakui.dll
- 2007-08-20 09:59:29	383,488	-c----w	C:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2008-04-23 04:16:39	383,488	-c----w	C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2007-08-20 09:59:29	384,512	-c----w	C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-04-23 04:16:39	384,512	-c----w	C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2007-08-20 09:59:29	6,058,496	-c----w	C:\WINDOWS\system32\dllcache\ieframe.dll
+ 2008-04-23 04:16:39	6,066,176	-c----w	C:\WINDOWS\system32\dllcache\ieframe.dll
- 2007-08-20 09:59:29	44,544	-c----w	C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-04-23 04:16:39	44,544	-c----w	C:\WINDOWS\system32\dllcache\iernonce.dll
- 2007-08-20 09:59:30	267,776	-c----w	C:\WINDOWS\system32\dllcache\iertutil.dll
+ 2008-04-23 04:16:39	267,776	-c----w	C:\WINDOWS\system32\dllcache\iertutil.dll
- 2007-08-17 10:22:11	13,824	-c----w	C:\WINDOWS\system32\dllcache\ieudinit.exe
+ 2008-04-22 07:39:58	13,824	-c----w	C:\WINDOWS\system32\dllcache\ieudinit.exe
- 2007-08-17 10:22:32	625,152	-c----w	C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-04-22 07:41:30	625,664	-c----w	C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2004-08-03 23:54:30	47,616	-c--a-w	C:\WINDOWS\system32\dllcache\iyuv_32.dll
- 2007-08-20 09:59:30	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-04-23 04:16:40	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2004-08-03 22:15:22	140,928	-c--a-w	C:\WINDOWS\system32\dllcache\ks.sys
- 2006-08-17 12:29:49	728,576	-c--a-w	C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:28:31	728,576	-c--a-w	C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2006-10-04 13:32:58	73,216	-c----w	C:\WINDOWS\system32\dllcache\magnify.exe
+ 2007-07-06 10:05:47	72,960	-c----w	C:\WINDOWS\system32\dllcache\mqac.sys
+ 2007-07-06 12:50:47	138,240	-c----w	C:\WINDOWS\system32\dllcache\mqad.dll
+ 2007-07-06 12:50:47	47,104	-c----w	C:\WINDOWS\system32\dllcache\mqdscli.dll
+ 2007-07-06 12:50:47	16,896	-c----w	C:\WINDOWS\system32\dllcache\mqise.dll
+ 2007-07-06 12:50:47	660,992	-c----w	C:\WINDOWS\system32\dllcache\mqqm.dll
+ 2007-07-06 12:50:47	177,152	-c----w	C:\WINDOWS\system32\dllcache\mqrt.dll
+ 2007-07-06 12:50:47	95,744	-c----w	C:\WINDOWS\system32\dllcache\mqsec.dll
+ 2007-07-06 12:50:47	48,640	-c----w	C:\WINDOWS\system32\dllcache\mqupgrd.dll
+ 2007-07-06 12:50:47	527,360	-c----w	C:\WINDOWS\system32\dllcache\mqutil.dll
+ 2007-12-18 09:51:35	179,584	-c----w	C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2008-02-26 12:00:31	294,912	-c----w	C:\WINDOWS\system32\dllcache\msctf.dll
+ 2008-03-25 04:50:28	518,944	-c----w	C:\WINDOWS\system32\dllcache\msexch40.dll
+ 2008-03-25 04:50:30	326,432	-c----w	C:\WINDOWS\system32\dllcache\msexcl40.dll
- 2007-08-20 09:59:30	459,264	-c----w	C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2008-04-23 04:16:40	459,264	-c----w	C:\WINDOWS\system32\dllcache\msfeeds.dll
- 2007-08-20 09:59:30	52,224	-c----w	C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2008-04-23 04:16:40	52,224	-c----w	C:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2007-08-20 09:59:30	3,584,512	-c--a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-04-23 20:16:42	3,591,680	-c--a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-08-20 09:59:30	477,696	-c--a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-04-23 04:16:40	478,208	-c--a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-03-25 04:50:34	1,516,568	-c----w	C:\WINDOWS\system32\dllcache\msjet40.dll
+ 2008-03-25 04:50:40	355,112	-c----w	C:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2008-03-25 04:51:08	194,144	-c----w	C:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-03-25 04:50:42	60,192	-c----w	C:\WINDOWS\system32\dllcache\msjter40.dll
+ 2008-03-25 04:50:42	248,608	-c----w	C:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-03-25 04:50:44	219,936	-c----w	C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-03-25 04:50:45	355,104	-c----w	C:\WINDOWS\system32\dllcache\mspbde40.dll
- 2007-08-20 09:59:30	193,024	-c--a-w	C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-04-23 04:16:40	193,024	-c--a-w	C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-03-25 04:50:47	432,928	-c----w	C:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2008-03-25 04:50:49	322,336	-c----w	C:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2008-03-25 04:50:52	559,904	-c----w	C:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2004-08-03 21:58:40	5,504	-c--a-w	C:\WINDOWS\system32\dllcache\mstee.sys
+ 2008-03-25 04:50:55	264,992	-c----w	C:\WINDOWS\system32\dllcache\mstext40.dll
- 2007-08-20 09:59:30	671,232	-c--a-w	C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-04-23 04:16:40	671,232	-c--a-w	C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-03-25 04:50:57	838,432	-c----w	C:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-03-25 04:51:09	621,344	-c----w	C:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-03-25 04:50:58	355,104	-c----w	C:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2004-08-03 23:54:36	17,408	-c--a-w	C:\WINDOWS\system32\dllcache\msyuv.dll
+ 2004-08-03 22:10:30	85,376	-c--a-w	C:\WINDOWS\system32\dllcache
abtsfec.sys
+ 2006-10-04 13:32:55	56,832	-c--a-w	C:\WINDOWS\system32\dllcache
arrator.exe
+ 2004-08-03 22:10:14	10,880	-c--a-w	C:\WINDOWS\system32\dllcache
disip.sys
- 2007-08-20 09:59:31	102,400	-c----w	C:\WINDOWS\system32\dllcache\occache.dll
+ 2008-04-23 04:16:40	102,912	-c--a-w	C:\WINDOWS\system32\dllcache\occache.dll
- 2007-05-17 11:29:50	549,376	-c----w	C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:41:36	550,912	-c----w	C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2006-10-04 13:32:58	216,576	-c----w	C:\WINDOWS\system32\dllcache\osk.exe
- 2006-10-17 09:58:08	44,544	-c--a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-04-23 04:16:40	44,544	-c--a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2007-03-22 18:25:42	677,376	-c----w	C:\WINDOWS\system32\dllcache\PrintFilterPipelineSvc.exe
+ 2008-05-07 04:55:47	1,294,336	-c----w	C:\WINDOWS\system32\dllcache\quartz.dll
- 2006-07-13 08:48:58	202,240	-c--a-w	C:\WINDOWS\system32\dllcachemcast.sys
+ 2008-05-08 12:28:49	202,752	-c--a-w	C:\WINDOWS\system32\dllcachemcast.sys
- 2007-02-19 15:23:02	1,498,624	-c--a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2007-02-19 15:23:02	1,777,664	-c--a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2006-12-19 21:49:47	8,509,952	-c--a-w	C:\WINDOWS\system32\dllcache\shell32.dll
+ 2007-10-25 16:43:25	12,930,560	-c--a-w	C:\WINDOWS\system32\dllcache\shell32.dll
- 2007-02-19 15:23:02	474,624	-c--a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2007-02-19 15:23:02	499,200	-c--a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2004-08-03 22:10:18	11,136	-c--a-w	C:\WINDOWS\system32\dllcache\slip.sys
+ 2004-08-03 22:10:14	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\streamip.sys
+ 2007-10-30 17:20:55	360,064	-c----w	C:\WINDOWS\system32\dllcache	cpip.sys
+ 2001-08-23 16:47:20	8,192	-c--a-w	C:\WINDOWS\system32\dllcache	sbyuv.dll
+ 2006-10-04 13:38:06	36,864	-c----w	C:\WINDOWS\system32\dllcache\umandlg.dll
- 2007-08-20 09:59:31	105,984	-c----w	C:\WINDOWS\system32\dllcache\url.dll
+ 2008-04-23 04:16:40	105,984	-c--a-w	C:\WINDOWS\system32\dllcache\url.dll
- 2007-08-20 09:59:31	1,152,000	-c--a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-04-23 04:16:40	1,159,680	-c--a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2004-08-03 22:07:56	59,264	-c--a-w	C:\WINDOWS\system32\dllcache\usbaudio.sys
+ 2006-10-04 13:32:57	50,176	-c----w	C:\WINDOWS\system32\dllcache\utilman.exe
+ 2004-08-03 23:54:44	54,784	-c--a-w	C:\WINDOWS\system32\dllcache\vfwwdm32.dll
- 2007-08-20 09:59:31	232,960	-c----w	C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-04-23 04:16:40	233,472	-c--a-w	C:\WINDOWS\system32\dllcache\webcheck.dll
- 2007-03-08 15:33:58	1,843,712	-c----w	C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-03-20 08:09:22	1,845,376	-c----w	C:\WINDOWS\system32\dllcache\win32k.sys
- 2007-08-20 09:59:31	824,832	-c--a-w	C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-04-23 04:16:40	826,368	-c--a-w	C:\WINDOWS\system32\dllcache\wininet.dll
- 2007-03-17 13:44:47	293,376	-c----w	C:\WINDOWS\system32\dllcache\winsrv.dll
+ 2007-03-17 13:44:47	294,400	-c--a-w	C:\WINDOWS\system32\dllcache\winsrv.dll
+ 2007-10-25 08:28:30	222,720	-c----w	C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2004-08-03 22:10:22	19,328	-c--a-w	C:\WINDOWS\system32\dllcache\wstcodec.sys
- 2007-07-30 17:19:16	53,080	-c--a-w	C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2007-07-30 17:19:16	68,440	-c--a-w	C:\WINDOWS\system32\dllcache\wuauclt.exe
- 2005-05-26 03:16:30	175,896	-c--a-w	C:\WINDOWS\system32\dllcache\wuauclt1.exe
+ 2005-05-26 03:16:30	295,704	-c--a-w	C:\WINDOWS\system32\dllcache\wuauclt1.exe
+ 2007-03-23 04:07:54	583,504	-c----w	C:\WINDOWS\system32\dllcache\XPSSHHDR.dll
+ 2007-03-23 04:07:56	1,683,280	-c----w	C:\WINDOWS\system32\dllcache\XpsSvcs.dll
- 2006-06-26 17:41:32	148,480	----a-w	C:\WINDOWS\system32\dnsapi.dll
+ 2008-02-20 05:35:05	148,992	----a-w	C:\WINDOWS\system32\dnsapi.dll
- 2004-08-10 12:00:00	45,568	----a-w	C:\WINDOWS\system32\dnsrslvr.dll
+ 2008-02-20 05:35:05	45,568	----a-w	C:\WINDOWS\system32\dnsrslvr.dll
- 2007-07-27 21:58:36	26,624	----a-w	C:\WINDOWS\system32\drivers\aavmker4.sys
+ 2008-05-15 23:13:26	26,944	----a-w	C:\WINDOWS\system32\drivers\aavmker4.sys
+ 2008-05-15 23:16:06	20,560	----a-w	C:\WINDOWS\system32\drivers\aswFsBlk.sys
- 2007-07-27 22:02:49	92,848	----a-w	C:\WINDOWS\system32\drivers\aswmon.sys
+ 2008-01-17 15:34:01	93,264	----a-w	C:\WINDOWS\system32\drivers\aswmon.sys
- 2007-07-27 22:02:34	94,416	----a-w	C:\WINDOWS\system32\drivers\aswmon2.sys
+ 2008-05-15 23:18:33	94,416	----a-w	C:\WINDOWS\system32\drivers\aswmon2.sys
- 2007-07-27 22:00:39	23,152	----a-w	C:\WINDOWS\system32\drivers\aswRdr.sys
+ 2008-05-15 23:15:29	23,152	----a-w	C:\WINDOWS\system32\drivers\aswRdr.sys
+ 2008-05-15 23:20:32	78,416	----a-w	C:\WINDOWS\system32\drivers\aswSP.sys
- 2007-07-27 21:59:57	42,912	----a-w	C:\WINDOWS\system32\drivers\aswTdi.sys
+ 2008-05-15 23:14:11	42,912	----a-w	C:\WINDOWS\system32\drivers\aswTdi.sys
+ 2004-08-03 22:10:18	17,024	----a-w	C:\WINDOWS\system32\drivers\CCDECODE.sys
+ 2007-01-30 05:03:34	2,432	----a-w	C:\WINDOWS\system32\drivers\cdr4_xp.sys
+ 2007-01-30 05:03:34	2,560	----a-w	C:\WINDOWS\system32\drivers\cdralw2k.sys
+ 2004-08-03 21:07:58	2,944	----a-w	C:\WINDOWS\system32\drivers\drmkaud.sys
- 2006-09-19 14:44:04	15,664	----a-w	C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
+ 2008-01-29 10:01:28	16,168	----a-w	C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
- 2004-08-03 21:15:22	140,928	----a-w	C:\WINDOWS\system32\drivers\ks.sys
+ 2004-08-03 22:15:22	140,928	----a-w	C:\WINDOWS\system32\drivers\ks.sys
+ 2000-03-29 16:11:20	8,096	------w	C:\WINDOWS\system32\drivers\MASPINT.SYS
+ 2007-04-02 21:13:46	21,632	----a-w	C:\WINDOWS\system32\drivers\motmodem.sys
- 2004-08-10 12:00:00	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys
+ 2007-07-06 10:05:47	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys
- 2004-08-10 12:00:00	181,248	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35	179,584	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2004-08-03 21:58:40	5,504	----a-w	C:\WINDOWS\system32\drivers\MSTEE.sys
+ 2004-08-03 22:10:30	85,376	----a-w	C:\WINDOWS\system32\drivers\NABTSFEC.sys
+ 2004-08-03 22:10:14	10,880	----a-w	C:\WINDOWS\system32\drivers\NdisIP.sys
+ 2004-08-10 12:00:00	2,944	----a-w	C:\WINDOWS\system32\drivers
ull.sys
- 2006-05-01 20:04:00	3,643,296	----a-w	C:\WINDOWS\system32\drivers
v4_mini.sys
+ 2007-10-04 16:14:00	6,854,464	----a-w	C:\WINDOWS\system32\drivers
v4_mini.sys
- 2007-03-01 18:28:47	163,644	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys
+ 2007-11-13 10:25:54	20,480	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys
+ 2004-08-03 22:10:18	11,136	----a-w	C:\WINDOWS\system32\drivers\SLIP.sys
+ 2001-11-05 08:23:14	6,097	----a-w	C:\WINDOWS\system32\drivers\sonyhcb.sys
+ 2001-11-05 08:23:20	38,739	----a-w	C:\WINDOWS\system32\drivers\sonyhcc.sys
+ 2001-07-03 19:39:00	3,654	----a-w	C:\WINDOWS\system32\drivers\Sonyhcp.dll
+ 2001-11-05 08:23:52	299,923	----a-w	C:\WINDOWS\system32\drivers\sonyhcs.sys
+ 2002-10-15 21:41:06	102,220	----a-w	C:\WINDOWS\system32\drivers\sonypvs1.sys
+ 2004-08-03 22:10:14	15,360	----a-w	C:\WINDOWS\system32\drivers\StreamIP.sys
- 2006-04-20 11:51:50	359,808	----a-w	C:\WINDOWS\system32\drivers	cpip.sys
+ 2007-10-30 17:20:55	360,064	----a-w	C:\WINDOWS\system32\drivers	cpip.sys
- 2005-09-09 13:47:10	9,344	----a-w	C:\WINDOWS\system32\drivers	osrfec.sys
+ 2004-05-17 14:18:26	8,573	----a-w	C:\WINDOWS\system32\drivers\TOSRFEC.SYS
+ 2007-10-31 13:09:14	30,464	----a-w	C:\WINDOWS\system32\drivers\usbaapl.sys
+ 2004-08-03 22:07:56	59,264	----a-w	C:\WINDOWS\system32\drivers\USBAUDIO.sys
+ 2006-11-02 06:22:54	492,000	------w	C:\WINDOWS\system32\drivers\wdf01000.sys
+ 2006-11-02 06:22:52	32,224	------w	C:\WINDOWS\system32\drivers\wdfldr.sys
+ 2004-08-03 22:10:22	19,328	----a-w	C:\WINDOWS\system32\drivers\WSTCODEC.SYS

sg7 · Answer

suite 4 du rapport : 

+ 2007-04-02 21:13:46	17,920	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motccgp_AAA6EBF99A29B32284FBE77DCBA5A978B418DB78\motccgp.sys
+ 2007-01-23 19:03:44	7,680	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motccgp_AAA6EBF99A29B32284FBE77DCBA5A978B418DB78\motccgpfl.sys
+ 2006-12-06 17:33:54	6,400	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motccgp_AAA6EBF99A29B32284FBE77DCBA5A978B418DB78\motswch.sys
+ 2006-11-13 14:45:54	1,419,232	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motccgp_AAA6EBF99A29B32284FBE77DCBA5A978B418DB78\wdfcoinstaller01005.dll
+ 2007-04-02 21:13:46	21,632	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motmodem_032E8111520766BD9EDB0974011BC85D4BFEF872\motmodem.sys
+ 2006-11-13 14:45:54	1,419,232	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motmodem_032E8111520766BD9EDB0974011BC85D4BFEF872\wdfcoinstaller01005.dll
+ 2006-07-28 07:10:08	6,144	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motodrv_A52528875D728E964C8846E6EE59057B28F55E3E\mot_ci.dll
+ 2006-12-14 10:27:18	40,832	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motodrv_A52528875D728E964C8846E6EE59057B28F55E3E\motodrv.sys
+ 2007-01-23 21:36:20	6,016	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motousbnet_ABB6512ACA55A7A4E2FA3DE425ED10A6DA3518DB\motfilt.sys
+ 2007-01-23 21:36:28	22,016	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motousbnet_ABB6512ACA55A7A4E2FA3DE425ED10A6DA3518DB\Motousbnet.sys
+ 2006-12-06 17:33:54	6,400	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motousbnet_ABB6512ACA55A7A4E2FA3DE425ED10A6DA3518DB\motswch.sys
+ 2006-11-13 14:45:54	1,419,232	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motousbnet_ABB6512ACA55A7A4E2FA3DE425ED10A6DA3518DB\wdfcoinstaller01005.dll
+ 2007-04-02 21:13:46	21,632	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motport_C2507623DD349B7DF9F3CD18A7DCF51CAD96A420\motport.sys
+ 2006-11-13 14:45:54	1,419,232	-c--a-w	C:\WINDOWS\system32\DRVSTORE\motport_C2507623DD349B7DF9F3CD18A7DCF51CAD96A420\wdfcoinstaller01005.dll
+ 2007-10-31 13:09:14	30,464	-c--a-w	C:\WINDOWS\system32\DRVSTORE\usbaapl_4351B7DAFF62FD33510D77DFAE3CF8CC82517571\usbaapl.sys
- 2006-10-17 09:58:06	346,624	----a-w	C:\WINDOWS\system32\dxtmsft.dll
+ 2008-04-23 04:16:39	347,136	----a-w	C:\WINDOWS\system32\dxtmsft.dll
- 2007-08-20 09:59:29	214,528	----a-w	C:\WINDOWS\system32\dxtrans.dll
+ 2008-04-23 04:16:39	214,528	----a-w	C:\WINDOWS\system32\dxtrans.dll
+ 2007-10-09 11:03:00	73,752	----a-w	C:\WINDOWS\system32\dxva2.dll
+ 2007-10-09 11:03:12	493,080	----a-w	C:\WINDOWS\system32\evr.dll
- 2007-08-20 09:59:29	132,608	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2008-04-23 04:16:39	133,120	----a-w	C:\WINDOWS\system32\extmgr.dll
- 2007-11-05 10:08:04	317,152	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-06-20 15:03:35	344,216	----a-w	C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-06-19 13:32:25	282,112	----a-w	C:\WINDOWS\system32\gdi32.dll
+ 2008-02-20 06:51:00	282,624	----a-w	C:\WINDOWS\system32\gdi32.dll
- 2006-10-03 18:47:52	109,360	----a-w	C:\WINDOWS\system32\GEARAspi.dll
+ 2008-01-29 10:02:30	107,368	----a-w	C:\WINDOWS\system32\GEARAspi.dll
+ 2007-10-11 07:55:10	579,584	----a-w	C:\WINDOWS\system32\icardagt.exe
- 2007-08-20 09:59:29	63,488	----a-w	C:\WINDOWS\system32\icardie.dll
+ 2008-04-23 04:16:39	63,488	----a-w	C:\WINDOWS\system32\icardie.dll
+ 2007-10-11 07:55:10	11,776	----a-w	C:\WINDOWS\system32\icardres.dll
- 2007-08-17 10:22:11	63,488	----a-w	C:\WINDOWS\system32\ie4uinit.exe
+ 2008-04-22 07:41:08	70,656	----a-w	C:\WINDOWS\system32\ie4uinit.exe
- 2007-08-20 09:59:29	153,088	----a-w	C:\WINDOWS\system32\ieakeng.dll
+ 2008-04-23 04:16:39	153,088	----a-w	C:\WINDOWS\system32\ieakeng.dll
- 2007-08-20 09:59:29	230,400	----a-w	C:\WINDOWS\system32\ieaksie.dll
+ 2008-04-23 04:16:39	230,400	----a-w	C:\WINDOWS\system32\ieaksie.dll
- 2007-08-17 07:34:25	161,792	----a-w	C:\WINDOWS\system32\ieakui.dll
+ 2008-04-20 05:07:51	161,792	----a-w	C:\WINDOWS\system32\ieakui.dll
- 2007-08-20 09:59:29	383,488	----a-w	C:\WINDOWS\system32\ieapfltr.dll
+ 2008-04-23 04:16:39	383,488	----a-w	C:\WINDOWS\system32\ieapfltr.dll
- 2007-08-20 09:59:29	384,512	----a-w	C:\WINDOWS\system32\iedkcs32.dll
+ 2008-04-23 04:16:39	384,512	----a-w	C:\WINDOWS\system32\iedkcs32.dll
- 2007-08-20 09:59:29	6,058,496	----a-w	C:\WINDOWS\system32\ieframe.dll
+ 2008-04-23 04:16:39	6,066,176	----a-w	C:\WINDOWS\system32\ieframe.dll
- 2007-08-20 09:59:29	44,544	----a-w	C:\WINDOWS\system32\iernonce.dll
+ 2008-04-23 04:16:39	44,544	----a-w	C:\WINDOWS\system32\iernonce.dll
- 2007-08-20 09:59:30	267,776	----a-w	C:\WINDOWS\system32\iertutil.dll
+ 2008-04-23 04:16:39	267,776	----a-w	C:\WINDOWS\system32\iertutil.dll
- 2007-08-17 10:22:11	13,824	----a-w	C:\WINDOWS\system32\ieudinit.exe
+ 2008-04-22 07:39:58	13,824	----a-w	C:\WINDOWS\system32\ieudinit.exe
+ 2007-10-11 07:55:10	88,576	----a-w	C:\WINDOWS\system32\infocardapi.dll
- 2004-08-10 12:00:00	47,616	----a-w	C:\WINDOWS\system32\iyuv_32.dll
+ 2004-08-03 23:54:30	47,616	----a-w	C:\WINDOWS\system32\iyuv_32.dll
- 2007-08-20 09:59:30	27,648	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2008-04-23 04:16:40	27,648	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2004-08-10 12:00:00	2,000	----a-w	C:\WINDOWS\system32\keyboard.drv
- 2006-05-01 20:04:00	425,984	----a-w	C:\WINDOWS\system32\keystone.exe
+ 2007-10-04 16:14:00	425,984	----a-w	C:\WINDOWS\system32\keystone.exe
+ 2004-08-10 12:00:00	224,448	----a-w	C:\WINDOWS\system32\lanman.drv
+ 2001-03-23 16:22:10	314,880	----a-w	C:\WINDOWS\system32\LFCMP12n.DLL
+ 2001-03-23 16:15:48	78,336	----a-w	C:\WINDOWS\system32\LFFAX12n.DLL
+ 2001-03-23 16:17:32	43,008	----a-w	C:\WINDOWS\system32\lfgif12n.dll
+ 2001-03-23 16:18:30	121,856	----a-w	C:\WINDOWS\system32\lfmpg12n.dll
+ 2001-03-23 16:19:22	155,648	----a-w	C:\WINDOWS\system32\LFTIF12n.DLL
- 2007-01-30 05:03:26	1,044,480	----a-w	C:\WINDOWS\system32\libdivx.dll
+ 2007-11-29 22:30:16	1,044,480	----a-w	C:\WINDOWS\system32\libdivx.dll
- 2006-08-17 12:29:49	728,576	----a-w	C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:28:31	728,576	----a-w	C:\WINDOWS\system32\lsasrv.dll
+ 2001-03-23 16:13:20	278,528	----a-w	C:\WINDOWS\system32\LTDIS12n.DLL
+ 2001-03-20 11:54:40	227,840	----a-w	C:\WINDOWS\system32\LTEFX12n.DLL
+ 2001-03-23 16:13:36	122,368	----a-w	C:\WINDOWS\system32\LTFIL12n.DLL
+ 2001-03-23 16:14:12	166,400	----a-w	C:\WINDOWS\system32\LTIMG12n.DLL
+ 2001-03-23 16:13:14	406,528	----a-w	C:\WINDOWS\system32\LTKRN12n.DLL
+ 2001-03-20 11:55:00	41,472	----a-w	C:\WINDOWS\system32\LTTWN12n.DLL
+ 2004-08-10 12:00:00	2,560	----a-w	C:\WINDOWS\system32\lz32.dll
+ 2007-11-21 00:04:14	218,496	----a-r	C:\WINDOWS\system32\Macromed\Flash\FlashUtil9e.exe
+ 2007-11-20 15:52:00	2,884,992	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
+ 2007-11-20 15:52:00	218,496	----a-w	C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-03-17 21:44:00	74,649	----a-w	C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
- 2004-08-10 12:00:00	73,216	----a-w	C:\WINDOWS\system32\magnify.exe
+ 2006-10-04 13:32:58	73,216	----a-w	C:\WINDOWS\system32\magnify.exe
+ 2004-08-10 12:00:00	73,680	----a-w	C:\WINDOWS\system32\mciavi.drv
+ 2004-08-10 12:00:00	25,280	----a-w	C:\WINDOWS\system32\mciseq.drv
+ 2004-08-10 12:00:00	28,160	----a-w	C:\WINDOWS\system32\mciwave.drv
+ 2007-10-09 11:03:14	1,986,072	----a-w	C:\WINDOWS\system32\milcore.dll
+ 2006-07-28 07:10:08	6,144	----a-w	C:\WINDOWS\system32\mot_ci.dll
+ 2004-08-10 12:00:00	2,032	----a-w	C:\WINDOWS\system32\mouse.drv
- 2004-08-10 12:00:00	138,240	----a-w	C:\WINDOWS\system32\mqad.dll
+ 2007-07-06 12:50:47	138,240	----a-w	C:\WINDOWS\system32\mqad.dll
- 2004-08-10 12:00:00	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll
+ 2007-07-06 12:50:47	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll
- 2004-08-10 12:00:00	16,896	----a-w	C:\WINDOWS\system32\mqise.dll
+ 2007-07-06 12:50:47	16,896	----a-w	C:\WINDOWS\system32\mqise.dll
- 2004-08-10 12:00:00	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll
+ 2007-07-06 12:50:47	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll
- 2004-08-10 12:00:00	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll
+ 2007-07-06 12:50:47	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll
- 2004-08-10 12:00:00	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll
+ 2007-07-06 12:50:47	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll
- 2004-08-10 12:00:00	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll
+ 2007-07-06 12:50:47	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll
- 2004-08-10 12:00:00	527,360	----a-w	C:\WINDOWS\system32\mqutil.dll
+ 2007-07-06 12:50:47	527,360	----a-w	C:\WINDOWS\system32\mqutil.dll
+ 2004-08-10 12:00:00	20,992	----a-w	C:\WINDOWS\system32\msacm32.drv
- 2007-04-13 01:21:14	271,360	----a-w	C:\WINDOWS\system32\mscoree.dll
+ 2007-10-23 23:47:38	282,112	----a-w	C:\WINDOWS\system32\mscoree.dll
- 2005-09-23 05:28:52	150,016	----a-w	C:\WINDOWS\system32\mscorier.dll
+ 2007-10-23 23:47:38	158,720	----a-w	C:\WINDOWS\system32\mscorier.dll
- 2005-09-23 05:28:52	74,240	----a-w	C:\WINDOWS\system32\mscories.dll
+ 2007-10-23 23:47:38	84,480	----a-w	C:\WINDOWS\system32\mscories.dll
- 2004-08-10 12:00:00	294,400	----a-w	C:\WINDOWS\system32\MSCTF.dll
+ 2008-02-26 12:00:31	294,912	----a-w	C:\WINDOWS\system32\msctf.dll
- 2004-08-10 12:00:00	512,029	----a-w	C:\WINDOWS\system32\msexch40.dll
+ 2008-03-25 04:50:28	518,944	----a-w	C:\WINDOWS\system32\msexch40.dll
- 2004-08-10 12:00:00	319,517	----a-w	C:\WINDOWS\system32\msexcl40.dll
+ 2008-03-25 04:50:30	326,432	----a-w	C:\WINDOWS\system32\msexcl40.dll
- 2007-08-20 09:59:30	459,264	----a-w	C:\WINDOWS\system32\msfeeds.dll
+ 2008-04-23 04:16:40	459,264	----a-w	C:\WINDOWS\system32\msfeeds.dll
- 2007-08-20 09:59:30	52,224	----a-w	C:\WINDOWS\system32\msfeedsbs.dll
+ 2008-04-23 04:16:40	52,224	----a-w	C:\WINDOWS\system32\msfeedsbs.dll
+ 2004-08-10 12:00:00	188,416	----a-w	C:\WINDOWS\system32\msh261.drv
+ 2004-08-03 23:55:04	294,912	----a-w	C:\WINDOWS\system32\msh263.drv
- 2007-08-20 09:59:30	3,584,512	----a-w	C:\WINDOWS\system32\mshtml.dll
+ 2008-04-23 20:16:42	3,591,680	----a-w	C:\WINDOWS\system32\mshtml.dll
- 2007-08-20 09:59:30	477,696	----a-w	C:\WINDOWS\system32\mshtmled.dll
+ 2008-04-23 04:16:40	478,208	----a-w	C:\WINDOWS\system32\mshtmled.dll
- 2004-08-10 12:00:00	1,507,356	----a-w	C:\WINDOWS\system32\msjet40.dll
+ 2008-03-25 04:50:34	1,516,568	----a-w	C:\WINDOWS\system32\msjet40.dll
- 2004-08-10 12:00:00	358,976	----a-w	C:\WINDOWS\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40	355,112	----a-w	C:\WINDOWS\system32\msjetoledb40.dll
- 2004-08-10 12:00:00	184,351	----a-w	C:\WINDOWS\system32\msjint40.dll
+ 2008-03-25 04:51:08	194,144	----a-w	C:\WINDOWS\system32\msjint40.dll
- 2004-08-10 12:00:00	53,279	----a-w	C:\WINDOWS\system32\msjter40.dll
+ 2008-03-25 04:50:42	60,192	----a-w	C:\WINDOWS\system32\msjter40.dll
- 2004-08-10 12:00:00	241,693	----a-w	C:\WINDOWS\system32\msjtes40.dll
+ 2008-03-25 04:50:42	248,608	----a-w	C:\WINDOWS\system32\msjtes40.dll
- 2004-08-10 12:00:00	213,023	----a-w	C:\WINDOWS\system32\msltus40.dll
+ 2008-03-25 04:50:44	219,936	----a-w	C:\WINDOWS\system32\msltus40.dll
- 2004-08-10 12:00:00	348,189	----a-w	C:\WINDOWS\system32\mspbde40.dll
+ 2008-03-25 04:50:45	355,104	----a-w	C:\WINDOWS\system32\mspbde40.dll
+ 2004-08-03 21:58:40	5,376	----a-w	C:\WINDOWS\system32\MSPCLOCK.sys
- 2007-08-20 09:59:30	193,024	----a-w	C:\WINDOWS\system32\msrating.dll
+ 2008-04-23 04:16:40	193,024	----a-w	C:\WINDOWS\system32\msrating.dll
- 2004-08-10 12:00:00	421,919	----a-w	C:\WINDOWS\system32\msrd2x40.dll
+ 2008-03-25 04:50:47	432,928	----a-w	C:\WINDOWS\system32\msrd2x40.dll
- 2004-08-10 12:00:00	315,423	----a-w	C:\WINDOWS\system32\msrd3x40.dll
+ 2008-03-25 04:50:49	322,336	----a-w	C:\WINDOWS\system32\msrd3x40.dll
- 2004-08-10 12:00:00	552,989	----a-w	C:\WINDOWS\system32\msrepl40.dll
+ 2008-03-25 04:50:52	559,904	----a-w	C:\WINDOWS\system32\msrepl40.dll
- 2004-08-10 12:00:00	258,077	----a-w	C:\WINDOWS\system32\mstext40.dll
+ 2008-03-25 04:50:55	264,992	----a-w	C:\WINDOWS\system32\mstext40.dll
- 2007-08-20 09:59:30	671,232	----a-w	C:\WINDOWS\system32\mstime.dll
+ 2008-04-23 04:16:40	671,232	----a-w	C:\WINDOWS\system32\mstime.dll
- 2004-08-10 12:00:00	831,519	----a-w	C:\WINDOWS\system32\mswdat10.dll
+ 2008-03-25 04:50:57	838,432	----a-w	C:\WINDOWS\system32\mswdat10.dll
- 2004-08-10 12:00:00	614,429	----a-w	C:\WINDOWS\system32\mswstr10.dll
+ 2008-03-25 04:51:09	621,344	----a-w	C:\WINDOWS\system32\mswstr10.dll
- 2004-08-10 12:00:00	348,189	----a-w	C:\WINDOWS\system32\msxbde40.dll
+ 2008-03-25 04:50:58	355,104	----a-w	C:\WINDOWS\system32\msxbde40.dll
+ 2007-05-15 13:43:10	1,320,800	----a-w	C:\WINDOWS\system32\msxml6.dll
+ 2007-05-08 15:08:12	86,728	----a-w	C:\WINDOWS\system32\msxml6r.dll
- 2004-08-10 12:00:00	17,408	----a-w	C:\WINDOWS\system32\msyuv.dll
+ 2004-08-03 23:54:36	17,408	----a-w	C:\WINDOWS\system32\msyuv.dll
- 2006-12-22 11:02:36	6,144	----a-w	C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
+ 2007-10-23 23:47:44	15,360	----a-w	C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
+ 2007-10-26 01:11:14	6,656	----a-w	C:\WINDOWS\system32\mui\[u]0/u40C\mscorees.dll
- 2004-08-10 12:00:00	55,296	----a-w	C:\WINDOWS\system32\narrator.exe
+ 2006-10-04 13:32:55	55,296	----a-w	C:\WINDOWS\system32\narrator.exe
+ 2004-08-10 12:00:00	2,656	----a-w	C:\WINDOWS\system32\netware.drv
- 2006-05-01 20:04:00	3,960,320	----a-w	C:\WINDOWS\system32\nv4_disp.dll
+ 2007-10-04 16:14:00	5,783,424	----a-w	C:\WINDOWS\system32\nv4_disp.dll
- 2006-05-01 20:04:00	94,208	----a-w	C:\WINDOWS\system32\nvapi.dll
+ 2007-10-04 16:14:00	364,544	----a-w	C:\WINDOWS\system32\nvapi.dll
- 2006-05-01 20:04:00	442,368	----a-w	C:\WINDOWS\system32\nvappbar.exe
+ 2007-10-04 16:14:00	442,368	----a-w	C:\WINDOWS\system32\nvappbar.exe
- 2006-05-01 20:04:00	35,840	----a-w	C:\WINDOWS\system32\nvcod.dll
+ 2007-10-04 16:14:00	36,864	----a-w	C:\WINDOWS\system32\nvcod.dll
- 2006-05-01 20:04:00	35,840	----a-w	C:\WINDOWS\system32\nvcodins.dll
+ 2007-10-04 16:14:00	36,864	----a-w	C:\WINDOWS\system32\nvcodins.dll
+ 2007-10-04 16:14:00	147,456	----a-w	C:\WINDOWS\system32\nvcolor.exe
- 2006-05-01 20:04:00	7,557,120	----a-w	C:\WINDOWS\system32\nvcpl.dll
+ 2007-10-04 16:14:00	8,491,008	----a-w	C:\WINDOWS\system32\nvcpl.dll
+ 2007-10-04 16:14:00	753,664	----a-w	C:\WINDOWS\system32\nvcplui.exe
+ 2007-10-04 16:14:00	1,073,152	----a-w	C:\WINDOWS\system32\nvcpluir.dll
+ 2007-10-04 16:14:00	6,344,704	----a-w	C:\WINDOWS\system32\nvdisps.dll
+ 2007-10-04 16:14:00	5,509,120	----a-w	C:\WINDOWS\system32\nvdispsr.dll
- 2006-05-01 20:04:00	1,339,392	----a-w	C:\WINDOWS\system32\nvdspsch.exe
+ 2007-10-04 16:14:00	1,339,392	----a-w	C:\WINDOWS\system32\nvdspsch.exe
+ 2007-10-04 16:14:00	307,200	----a-w	C:\WINDOWS\system32\nvexpbar.dll
+ 2007-10-04 16:14:00	3,334,144	----a-w	C:\WINDOWS\system32\nvgames.dll
+ 2007-10-04 16:14:00	3,166,208	----a-w	C:\WINDOWS\system32\nvgamesr.dll
- 2006-05-01 20:04:00	1,466,368	----a-w	C:\WINDOWS\system32\nview.dll
+ 2007-10-04 16:14:00	1,478,656	----a-w	C:\WINDOWS\system32\nview.dll
+ 2007-10-04 16:14:00	229,376	----a-w	C:\WINDOWS\system32\nvmccs.dll
+ 2007-10-04 16:14:00	45,056	----a-w	C:\WINDOWS\system32\nvmccsrs.dll
+ 2007-10-04 16:14:00	188,416	----a-w	C:\WINDOWS\system32\nvmccss.dll
+ 2007-10-04 16:14:00	458,752	----a-w	C:\WINDOWS\system32\nvmccssr.dll
- 2006-05-01 20:04:00	86,016	----a-w	C:\WINDOWS\system32\nvmctray.dll
+ 2007-10-04 16:14:00	81,920	----a-w	C:\WINDOWS\system32\nvmctray.dll
+ 2007-10-04 16:14:00	1,150,976	----a-w	C:\WINDOWS\system32\nvmobls.dll
+ 2007-10-04 16:14:00	286,720	----a-w	C:\WINDOWS\system32\nvnt4cpl.dll
- 2006-05-01 20:04:00	5,419,008	----a-w	C:\WINDOWS\system32\nvoglnt.dll
+ 2007-10-04 16:14:00	6,750,208	----a-w	C:\WINDOWS\system32\nvoglnt.dll
- 2006-05-01 20:04:00	327,680	----a-w	C:\WINDOWS\system32\nvrsar.dll
+ 2007-10-04 16:14:00	327,680	----a-w	C:\WINDOWS\system32\nvrsar.dll
- 2006-05-01 20:04:00	245,760	----a-w	C:\WINDOWS\system32\nvrscs.dll
+ 2007-10-04 16:14:00	249,856	----a-w	C:\WINDOWS\system32\nvrscs.dll
- 2006-05-01 20:04:00	249,856	----a-w	C:\WINDOWS\system32\nvrsda.dll
+ 2007-10-04 16:14:00	253,952	----a-w	C:\WINDOWS\system32\nvrsda.dll
- 2006-05-01 20:04:00	274,432	----a-w	C:\WINDOWS\system32\nvrsde.dll
+ 2007-10-04 16:14:00	278,528	----a-w	C:\WINDOWS\system32\nvrsde.dll
- 2006-05-01 20:04:00	278,528	----a-w	C:\WINDOWS\system32\nvrsel.dll
+ 2007-10-04 16:14:00	282,624	----a-w	C:\WINDOWS\system32\nvrsel.dll
- 2006-05-01 20:04:00	245,760	----a-w	C:\WINDOWS\system32\nvrseng.dll
+ 2007-10-04 16:14:00	245,760	----a-w	C:\WINDOWS\system32\nvrseng.dll
- 2006-05-01 20:04:00	278,528	----a-w	C:\WINDOWS\system32\nvrses.dll
+ 2007-10-04 16:14:00	282,624	----a-w	C:\WINDOWS\system32\nvrses.dll
+ 2007-10-04 16:14:00	274,432	----a-w	C:\WINDOWS\system32\nvrsesm.dll
- 2006-05-01 20:04:00	245,760	----a-w	C:\WINDOWS\system32\nvrsfi.dll
+ 2007-10-04 16:14:00	249,856	----a-w	C:\WINDOWS\system32\nvrsfi.dll
- 2006-05-01 20:04:00	282,624	----a-w	C:\WINDOWS\system32\nvrsfr.dll
+ 2007-10-04 16:14:00	282,624	----a-w	C:\WINDOWS\system32\nvrsfr.dll
- 2006-05-01 20:04:00	323,584	----a-w	C:\WINDOWS\system32\nvrshe.dll
+ 2007-10-04 16:14:00	327,680	----a-w	C:\WINDOWS\system32\nvrshe.dll
- 2006-05-01 20:04:00	258,048	----a-w	C:\WINDOWS\system32\nvrshu.dll
+ 2007-10-04 16:14:00	258,048	----a-w	C:\WINDOWS\system32\nvrshu.dll
- 2006-05-01 20:04:00	278,528	----a-w	C:\WINDOWS\system32\nvrsit.dll
+ 2007-10-04 16:14:00	278,528	----a-w	C:\WINDOWS\system32\nvrsit.dll
- 2006-05-01 20:04:00	266,240	----a-w	C:\WINDOWS\system32\nvrsja.dll
+ 2007-10-04 16:14:00	266,240	----a-w	C:\WINDOWS\system32\nvrsja.dll
- 2006-05-01 20:04:00	262,144	----a-w	C:\WINDOWS\system32\nvrsko.dll
+ 2007-10-04 16:14:00	258,048	----a-w	C:\WINDOWS\system32\nvrsko.dll
- 2006-05-01 20:04:00	270,336	----a-w	C:\WINDOWS\system32\nvrsnl.dll
+ 2007-10-04 16:14:00	274,432	----a-w	C:\WINDOWS\system32\nvrsnl.dll
- 2006-05-01 20:04:00	249,856	----a-w	C:\WINDOWS\system32\nvrsno.dll
+ 2007-10-04 16:14:00	253,952	----a-w	C:\WINDOWS\system32\nvrsno.dll
- 2006-05-01 20:04:00	253,952	----a-w	C:\WINDOWS\system32\nvrspl.dll
+ 2007-10-04 16:14:00	253,952	----a-w	C:\WINDOWS\system32\nvrspl.dll
- 2006-05-01 20:04:00	270,336	----a-w	C:\WINDOWS\system32\nvrspt.dll
+ 2007-10-04 16:14:00	274,432	----a-w	C:\WINDOWS\system32\nvrspt.dll
- 2006-05-01 20:04:00	266,240	----a-w	C:\WINDOWS\system32\nvrsptb.dll
+ 2007-10-04 16:14:00	266,240	----a-w	C:\WINDOWS\system32\nvrsptb.dll
- 2006-05-01 20:04:00	266,240	----a-w	C:\WINDOWS\system32\nvrsru.dll
+ 2007-10-04 16:14:00	270,336	----a-w	C:\WINDOWS\system32\nvrsru.dll
- 2006-05-01 20:04:00	253,952	----a-w	C:\WINDOWS\system32\nvrssk.dll
+ 2007-10-04 16:14:00	258,048	----a-w	C:\WINDOWS\system32\nvrssk.dll
- 2006-05-01 20:04:00	253,952	----a-w	C:\WINDOWS\system32\nvrssl.dll
+ 2007-10-04 16:14:00	258,048	----a-w	C:\WINDOWS\system32\nvrssl.dll
- 2006-05-01 20:04:00	249,856	----a-w	C:\WINDOWS\system32\nvrssv.dll
+ 2007-10-04 16:14:00	253,952	----a-w	C:\WINDOWS\system32\nvrssv.dll
- 2006-05-01 20:04:00	253,952	----a-w	C:\WINDOWS\system32\nvrstr.dll
+ 2007-10-04 16:14:00	258,048	----a-w	C:\WINDOWS\system32\nvrstr.dll
- 2006-05-01 20:04:00	221,184	----a-w	C:\WINDOWS\system32\nvrszhc.dll

sg7 · Answer

fin (5) du rapport :

+ 2007-10-04 16:14:00	225,280	----a-w	C:\WINDOWS\system32\nvrszhc.dll
- 2006-05-01 20:04:00	122,880	----a-w	C:\WINDOWS\system32\nvrszht.dll
+ 2007-10-04 16:14:00	126,976	----a-w	C:\WINDOWS\system32\nvrszht.dll
- 2006-05-01 20:04:00	466,944	----a-w	C:\WINDOWS\system32\nvshell.dll
+ 2007-10-04 16:14:00	466,944	----a-w	C:\WINDOWS\system32\nvshell.dll
- 2006-05-01 20:04:00	143,428	----a-w	C:\WINDOWS\system32\nvsvc32.exe
+ 2007-10-04 16:14:00	155,716	----a-w	C:\WINDOWS\system32\nvsvc32.exe
- 2006-05-01 20:04:00	180,224	----a-w	C:\WINDOWS\system32\nvudisp.exe
+ 2007-10-04 16:14:00	356,352	----a-w	C:\WINDOWS\system32\nvudisp.exe
- 2007-09-17 00:10:36	356,352	----a-w	C:\WINDOWS\system32\NVUNINST.EXE
+ 2007-10-04 17:16:48	356,352	----a-w	C:\WINDOWS\system32\NVUNINST.EXE
+ 2007-10-04 16:14:00	3,551,232	----a-w	C:\WINDOWS\system32\nvvitvs.dll
+ 2007-10-04 16:14:00	3,629,056	----a-w	C:\WINDOWS\system32\nvvitvsr.dll
- 2006-05-01 20:04:00	81,920	----a-w	C:\WINDOWS\system32\nvwddi.dll
+ 2007-10-04 16:14:00	81,920	----a-w	C:\WINDOWS\system32\nvwddi.dll
- 2006-05-01 20:04:00	1,662,976	----a-w	C:\WINDOWS\system32\nvwdmcpl.dll
+ 2007-10-04 16:14:00	1,703,936	----a-w	C:\WINDOWS\system32\nvwdmcpl.dll
- 2006-05-01 20:04:00	1,019,904	----a-w	C:\WINDOWS\system32\nvwimg.dll
+ 2007-10-04 16:14:00	1,019,904	----a-w	C:\WINDOWS\system32\nvwimg.dll
- 2006-05-01 20:04:00	282,624	----a-w	C:\WINDOWS\system32\nvwrsar.dll
+ 2007-10-04 16:14:00	282,624	----a-w	C:\WINDOWS\system32\nvwrsar.dll
- 2006-05-01 20:04:00	286,720	----a-w	C:\WINDOWS\system32\nvwrscs.dll
+ 2007-10-04 16:14:00	286,720	----a-w	C:\WINDOWS\system32\nvwrscs.dll
- 2006-05-01 20:04:00	294,912	----a-w	C:\WINDOWS\system32\nvwrsda.dll
+ 2007-10-04 16:14:00	294,912	----a-w	C:\WINDOWS\system32\nvwrsda.dll
- 2006-05-01 20:04:00	311,296	----a-w	C:\WINDOWS\system32\nvwrsde.dll
+ 2007-10-04 16:14:00	311,296	----a-w	C:\WINDOWS\system32\nvwrsde.dll
- 2006-05-01 20:04:00	335,872	----a-w	C:\WINDOWS\system32\nvwrsel.dll
+ 2007-10-04 16:14:00	335,872	----a-w	C:\WINDOWS\system32\nvwrsel.dll
- 2006-05-01 20:04:00	286,720	----a-w	C:\WINDOWS\system32\nvwrseng.dll
+ 2007-10-04 16:14:00	286,720	----a-w	C:\WINDOWS\system32\nvwrseng.dll
- 2006-05-01 20:04:00	335,872	----a-w	C:\WINDOWS\system32\nvwrses.dll
+ 2007-10-04 16:14:00	335,872	----a-w	C:\WINDOWS\system32\nvwrses.dll
+ 2007-10-04 16:14:00	327,680	----a-w	C:\WINDOWS\system32\nvwrsesm.dll
- 2006-05-01 20:04:00	303,104	----a-w	C:\WINDOWS\system32\nvwrsfi.dll
+ 2007-10-04 16:14:00	303,104	----a-w	C:\WINDOWS\system32\nvwrsfi.dll
- 2006-05-01 20:04:00	327,680	----a-w	C:\WINDOWS\system32\nvwrsfr.dll
+ 2007-10-04 16:14:00	327,680	----a-w	C:\WINDOWS\system32\nvwrsfr.dll
- 2006-05-01 20:04:00	278,528	----a-w	C:\WINDOWS\system32\nvwrshe.dll
+ 2007-10-04 16:14:00	278,528	----a-w	C:\WINDOWS\system32\nvwrshe.dll
- 2006-05-01 20:04:00	315,392	----a-w	C:\WINDOWS\system32\nvwrshu.dll
+ 2007-10-04 16:14:00	315,392	----a-w	C:\WINDOWS\system32\nvwrshu.dll
- 2006-05-01 20:04:00	323,584	----a-w	C:\WINDOWS\system32\nvwrsit.dll
+ 2007-10-04 16:14:00	323,584	----a-w	C:\WINDOWS\system32\nvwrsit.dll
- 2006-05-01 20:04:00	212,992	----a-w	C:\WINDOWS\system32\nvwrsja.dll
+ 2007-10-04 16:14:00	212,992	----a-w	C:\WINDOWS\system32\nvwrsja.dll
- 2006-05-01 20:04:00	196,608	----a-w	C:\WINDOWS\system32\nvwrsko.dll
+ 2007-10-04 16:14:00	196,608	----a-w	C:\WINDOWS\system32\nvwrsko.dll
- 2006-05-01 20:04:00	319,488	----a-w	C:\WINDOWS\system32\nvwrsnl.dll
+ 2007-10-04 16:14:00	319,488	----a-w	C:\WINDOWS\system32\nvwrsnl.dll
- 2006-05-01 20:04:00	299,008	----a-w	C:\WINDOWS\system32\nvwrsno.dll
+ 2007-10-04 16:14:00	299,008	----a-w	C:\WINDOWS\system32\nvwrsno.dll
- 2006-05-01 20:04:00	294,912	----a-w	C:\WINDOWS\system32\nvwrspl.dll
+ 2007-10-04 16:14:00	294,912	----a-w	C:\WINDOWS\system32\nvwrspl.dll
- 2006-05-01 20:04:00	323,584	----a-w	C:\WINDOWS\system32\nvwrspt.dll
+ 2007-10-04 16:14:00	323,584	----a-w	C:\WINDOWS\system32\nvwrspt.dll
- 2006-05-01 20:04:00	319,488	----a-w	C:\WINDOWS\system32\nvwrsptb.dll
+ 2007-10-04 16:14:00	319,488	----a-w	C:\WINDOWS\system32\nvwrsptb.dll
- 2006-05-01 20:04:00	315,392	----a-w	C:\WINDOWS\system32\nvwrsru.dll
+ 2007-10-04 16:14:00	315,392	----a-w	C:\WINDOWS\system32\nvwrsru.dll
- 2006-05-01 20:04:00	299,008	----a-w	C:\WINDOWS\system32\nvwrssk.dll
+ 2007-10-04 16:14:00	299,008	----a-w	C:\WINDOWS\system32\nvwrssk.dll
- 2006-05-01 20:04:00	303,104	----a-w	C:\WINDOWS\system32\nvwrssl.dll
+ 2007-10-04 16:14:00	303,104	----a-w	C:\WINDOWS\system32\nvwrssl.dll
- 2006-05-01 20:04:00	294,912	----a-w	C:\WINDOWS\system32\nvwrssv.dll
+ 2007-10-04 16:14:00	294,912	----a-w	C:\WINDOWS\system32\nvwrssv.dll
- 2006-05-01 20:04:00	303,104	----a-w	C:\WINDOWS\system32\nvwrstr.dll
+ 2007-10-04 16:14:00	303,104	----a-w	C:\WINDOWS\system32\nvwrstr.dll
- 2006-05-01 20:04:00	163,840	----a-w	C:\WINDOWS\system32\nvwrszhc.dll
+ 2007-10-04 16:14:00	163,840	----a-w	C:\WINDOWS\system32\nvwrszhc.dll
- 2006-05-01 20:04:00	167,936	----a-w	C:\WINDOWS\system32\nvwrszht.dll
+ 2007-10-04 16:14:00	167,936	----a-w	C:\WINDOWS\system32\nvwrszht.dll
+ 2007-10-04 16:14:00	2,371,584	----a-w	C:\WINDOWS\system32\nvwss.dll
+ 2007-10-04 16:14:00	2,441,216	----a-w	C:\WINDOWS\system32\nvwssr.dll
- 2006-05-01 20:04:00	1,519,616	----a-w	C:\WINDOWS\system32\nwiz.exe
+ 2007-10-04 16:14:00	1,626,112	----a-w	C:\WINDOWS\system32\nwiz.exe
- 2007-08-20 09:59:31	102,400	----a-w	C:\WINDOWS\system32\occache.dll
+ 2008-04-23 04:16:40	102,912	----a-w	C:\WINDOWS\system32\occache.dll
- 2007-05-17 11:29:50	549,376	----a-w	C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:41:36	550,912	----a-w	C:\WINDOWS\system32\oleaut32.dll
- 2004-08-10 12:00:00	216,576	----a-w	C:\WINDOWS\system32\osk.exe
+ 2006-10-04 13:32:58	216,576	----a-w	C:\WINDOWS\system32\osk.exe
- 2007-10-28 08:10:18	62,678	----a-w	C:\WINDOWS\system32\perfc009.dat
+ 2008-05-31 17:07:54	71,642	----a-w	C:\WINDOWS\system32\perfc009.dat
- 2007-10-28 08:10:18	75,704	----a-w	C:\WINDOWS\system32\perfc00C.dat
+ 2008-05-31 17:07:54	85,256	----a-w	C:\WINDOWS\system32\perfc00C.dat
- 2007-10-28 08:10:18	401,398	----a-w	C:\WINDOWS\system32\perfh009.dat
+ 2008-05-31 17:07:54	441,958	----a-w	C:\WINDOWS\system32\perfh009.dat
- 2007-10-28 08:10:18	468,728	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2008-05-31 17:07:54	511,392	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2006-10-24 10:30:20	412,160	------w	C:\WINDOWS\system32\photometadatahandler.dll
+ 2003-02-27 11:22:52	176,128	----a-w	C:\WINDOWS\system32\PixologyIRISS005.dll
+ 2008-03-29 15:44:47	278,528	----a-w	C:\WINDOWS\system32\pncrt.dll
+ 2008-03-29 15:44:50	6,656	----a-w	C:\WINDOWS\system32\pndx5016.dll
+ 2008-03-29 15:44:50	5,632	----a-w	C:\WINDOWS\system32\pndx5032.dll
- 2006-10-17 09:58:08	44,544	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2008-04-23 04:16:40	44,544	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2007-10-09 11:03:04	106,520	----a-w	C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
+ 2007-10-09 11:03:08	350,744	----a-w	C:\WINDOWS\system32\PresentationHost.exe
+ 2007-10-09 11:03:02	33,304	----a-w	C:\WINDOWS\system32\PresentationHostProxy.dll
+ 2007-10-09 11:03:12	779,800	----a-w	C:\WINDOWS\system32\PresentationNative_v0300.dll
+ 2007-03-22 18:25:02	124,928	------w	C:\WINDOWS\system32\prntvpt.dll
- 2005-08-30 04:16:04	1,293,824	----a-w	C:\WINDOWS\system32\quartz.dll
+ 2008-05-07 04:55:47	1,294,336	----a-w	C:\WINDOWS\system32\quartz.dll
+ 2006-05-01 20:04:00	3,960,320	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nv4_disp.dll
+ 2006-05-01 20:04:00	3,643,296	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nv4_mini.sys
+ 2006-05-01 20:04:00	94,208	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvapi.dll
+ 2006-05-01 20:04:00	35,840	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvcod.dll
+ 2006-05-01 20:04:00	7,557,120	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvcpl.dll
+ 2006-05-01 20:04:00	86,016	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvmctray.dll
+ 2006-05-01 20:04:00	5,419,008	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvoglnt.dll
+ 2006-05-01 20:04:00	143,428	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvsvc32.exe
+ 2006-05-01 20:04:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u015\DriverFiles\nvwddi.dll
+ 2006-05-01 20:04:00	3,960,320	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nv4_disp.dll
+ 2006-05-01 20:04:00	3,643,296	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nv4_mini.sys
+ 2006-05-01 20:04:00	94,208	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvapi.dll
+ 2006-05-01 20:04:00	35,840	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvcod.dll
+ 2006-05-01 20:04:00	7,557,120	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvcpl.dll
+ 2006-05-01 20:04:00	86,016	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvmctray.dll
+ 2006-05-01 20:04:00	5,419,008	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvoglnt.dll
+ 2006-05-01 20:04:00	143,428	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvsvc32.exe
+ 2006-05-01 20:04:00	81,920	----a-w	C:\WINDOWS\system32\ReinstallBackups\[u]0/u016\DriverFiles\nvwddi.dll
+ 2006-08-24 14:15:06	150,808	----a-w	C:\WINDOWS\system32\rgb9rast_2.dll
+ 2008-03-29 15:45:01	185,944	----a-w	C:\WINDOWS\system32\rmoc3260.dll
- 2006-12-19 21:49:47	8,509,952	----a-w	C:\WINDOWS\system32\shell32.dll
+ 2007-10-25 16:43:25	8,516,608	----a-w	C:\WINDOWS\system32\shell32.dll
- 2007-08-16 14:17:18	51,568	----a-w	C:\WINDOWS\system32\sirenacm.dll
+ 2007-10-18 10:31:46	51,224	----a-w	C:\WINDOWS\system32\sirenacm.dll
+ 2001-07-03 19:33:00	53,248	----a-w	C:\WINDOWS\system32\SONYHCY.DLL
+ 2004-08-10 12:00:00	1,744	----a-w	C:\WINDOWS\system32\sound.drv
- 2006-09-25 16:58:48	14,640	----a-w	C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:19:06	18,296	------w	C:\WINDOWS\system32\spmsg.dll
+ 2007-03-22 18:24:50	762,880	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdrv.dll
+ 2007-03-22 18:24:34	131,584	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.dll
- 2003-11-04 14:01:32	263,680	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2007-03-22 18:24:06	376,832	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll
- 2003-11-04 14:01:32	204,288	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
+ 2007-03-22 19:03:54	749,568	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll
- 2003-11-04 14:01:28	620,544	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2007-03-22 19:03:58	761,344	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\unires.dll
+ 2007-03-23 04:07:56	1,683,280	----a-w	C:\WINDOWS\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2007-03-22 18:24:58	28,160	----a-w	C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
+ 2007-03-22 18:25:42	677,376	------w	C:\WINDOWS\system32\spool\prtprocs\w32x86\PrintFilterPipelineSvc.exe
+ 2007-03-22 18:54:06	35,840	----a-w	C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
+ 2007-03-22 18:53:16	746,496	----a-w	C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2007-03-22 18:59:24	2,932,224	----a-w	C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2007-03-22 18:53:16	746,496	----a-w	C:\WINDOWS\system32\spool\XPSEP\amd64\mxdwdrv.dll
+ 2007-03-22 18:59:24	2,932,224	----a-w	C:\WINDOWS\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2007-03-22 18:24:50	762,880	----a-w	C:\WINDOWS\system32\spool\XPSEP\i386\i386\mxdwdrv.dll
+ 2007-03-23 04:07:56	1,683,280	----a-w	C:\WINDOWS\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2007-03-22 18:24:50	762,880	----a-w	C:\WINDOWS\system32\spool\XPSEP\i386\mxdwdrv.dll
+ 2007-03-23 04:07:56	1,683,280	----a-w	C:\WINDOWS\system32\spool\XPSEP\i386\xpssvcs.dll
- 2006-09-25 16:58:48	23,856	----a-w	C:\WINDOWS\system32\spupdsvc.exe
+ 2006-10-16 14:10:58	23,856	----a-w	C:\WINDOWS\system32\spupdsvc.exe
- 2007-01-30 05:03:26	200,704	----a-w	C:\WINDOWS\system32\ssldivx.dll
+ 2007-11-29 22:30:16	200,704	----a-w	C:\WINDOWS\system32\ssldivx.dll
+ 2004-08-10 12:00:00	3,360	----a-w	C:\WINDOWS\system32\system.drv
+ 2004-08-10 12:00:00	4,096	----a-w	C:\WINDOWS\system32\timer.drv
+ 2004-05-26 14:52:06	49,152	----a-w	C:\WINDOWS\system32\TosBthSupport.dll
- 2004-08-10 12:00:00	8,192	----a-w	C:\WINDOWS\system32\tsbyuv.dll
+ 2001-08-23 16:47:20	8,192	----a-w	C:\WINDOWS\system32\tsbyuv.dll
+ 2007-10-09 10:58:20	16,896	----a-w	C:\WINDOWS\system32\tswpfwrp.exe
- 2007-07-18 12:42:22	60,416	----a-w	C:\WINDOWS\system32\tzchange.exe
+ 2007-11-13 11:31:11	60,416	----a-w	C:\WINDOWS\system32\tzchange.exe
+ 2007-10-09 11:03:08	161,304	----a-w	C:\WINDOWS\system32\UIAutomationCore.dll
- 2004-08-10 12:00:00	36,864	----a-w	C:\WINDOWS\system32\umandlg.dll
+ 2006-10-04 13:38:06	36,864	----a-w	C:\WINDOWS\system32\umandlg.dll
+ 2005-03-01 09:27:04	245,408	----a-w	C:\WINDOWS\system32\unicows.dll
- 2007-08-20 09:59:31	105,984	----a-w	C:\WINDOWS\system32\url.dll
+ 2008-04-23 04:16:40	105,984	----a-w	C:\WINDOWS\system32\url.dll
- 2007-08-20 09:59:31	1,152,000	----a-w	C:\WINDOWS\system32\urlmon.dll
+ 2008-04-23 04:16:40	1,159,680	----a-w	C:\WINDOWS\system32\urlmon.dll
- 2004-08-10 12:00:00	50,176	----a-w	C:\WINDOWS\system32\utilman.exe
+ 2006-10-04 13:32:57	50,176	----a-w	C:\WINDOWS\system32\utilman.exe
- 2004-08-10 12:00:00	219,648	----a-w	C:\WINDOWS\system32\uxtheme.dll
+ 2008-06-09 22:17:34	219,648	----a-w	C:\WINDOWS\system32\uxtheme.dll
+ 2004-08-03 23:54:44	54,784	----a-w	C:\WINDOWS\system32\vfwwdm32.dll
+ 2004-08-10 12:00:00	2,176	----a-w	C:\WINDOWS\system32\vga.drv
+ 2006-11-13 14:45:54	1,419,232	----a-w	C:\WINDOWS\system32\wdfcoinstaller01005.dll
+ 2004-08-03 22:55:04	23,552	----a-w	C:\WINDOWS\system32\wdmaud.drv
- 2007-08-20 09:59:31	232,960	----a-w	C:\WINDOWS\system32\webcheck.dll
+ 2008-04-23 04:16:40	233,472	----a-w	C:\WINDOWS\system32\webcheck.dll
+ 2004-08-10 12:00:00	13,600	----a-w	C:\WINDOWS\system32\wfwnet.drv
- 2007-03-08 15:33:58	1,843,712	----a-w	C:\WINDOWS\system32\win32k.sys
+ 2008-03-20 08:09:22	1,845,376	----a-w	C:\WINDOWS\system32\win32k.sys
+ 2006-10-24 10:30:06	716,288	------w	C:\WINDOWS\system32\WindowsCodecs.dll
+ 2006-10-24 10:29:50	352,256	------w	C:\WINDOWS\system32\WindowsCodecsExt.dll
- 2007-08-20 09:59:31	824,832	----a-w	C:\WINDOWS\system32\wininet.dll
+ 2008-04-23 04:16:40	826,368	----a-w	C:\WINDOWS\system32\wininet.dll
+ 2004-08-10 12:00:00	2,864	----a-w	C:\WINDOWS\system32\winsock.dll
+ 2004-08-10 12:00:00	146,944	----a-w	C:\WINDOWS\system32\winspool.drv
+ 2004-08-10 12:00:00	2,112	----a-w	C:\WINDOWS\system32\winspool.exe
- 2006-10-18 20:47:18	222,208	----a-w	C:\WINDOWS\system32\wmasf.dll
+ 2007-10-25 08:28:30	222,720	----a-w	C:\WINDOWS\system32\wmasf.dll
+ 2006-10-24 10:30:00	276,992	------w	C:\WINDOWS\system32\WMPhoto.dll
+ 2008-05-06 06:01:28	45,056	----a-w	C:\WINDOWS\system32\WNASPI32.DLL
+ 2004-08-10 12:00:00	2,736	----a-w	C:\WINDOWS\system32\wowdeb.exe
- 2007-06-18 22:24:36	369,152	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2007-10-29 15:07:16	369,152	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2007-03-23 04:07:54	583,504	------w	C:\WINDOWS\system32\XPSSHHDR.dll
+ 2007-03-23 04:07:56	1,683,280	------w	C:\WINDOWS\system32\XpsSvcs.dll
+ 2007-10-09 11:03:08	308,760	----a-w	C:\WINDOWS\system32\XPSViewer\XPSViewer.exe
+ 2006-03-03 23:13:36	120,320	----a-w	C:\WINDOWS\system32\ZlibOCX2.dll
+ 2008-06-23 16:11:41	16,384	----atw	C:\WINDOWS\Temp\Perflib_Perfdata_698.dat
+ 2000-08-31 06:00:00	49,152	----a-w	C:\WINDOWS\VFind.exe
+ 2008-04-12 23:25:57	8,192	----a-w	C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2006-10-26 12:40:34	95,744	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2007-10-23 23:47:56	479,232	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
+ 2007-10-23 23:47:56	558,080	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
+ 2007-10-23 23:47:56	635,904	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
+ 2006-10-26 12:40:36	1,093,632	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
+ 2006-10-26 12:40:36	1,079,808	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
+ 2006-10-26 12:40:36	69,632	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
+ 2006-10-26 12:40:36	57,344	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
+ 2006-10-26 12:40:36	40,960	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHS.dll
+ 2006-10-26 12:40:36	45,056	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHT.dll
+ 2006-10-26 12:40:36	65,536	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80DEU.dll
+ 2006-10-26 12:40:36	57,344	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ENU.dll
+ 2006-10-26 12:40:36	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ESP.dll
+ 2006-10-26 12:40:36	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80FRA.dll
+ 2006-10-26 12:40:36	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ITA.dll
+ 2006-10-26 12:40:36	49,152	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80JPN.dll
+ 2006-10-26 12:40:36	49,152	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80KOR.dll
+ 2005-09-22 23:35:10	65,536	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0ee63867\vcomp.dll
+ 2007-11-06 18:23:58	224,768	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2007-11-06 23:19:34	568,832	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-06 23:19:34	655,872	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
- 2007-07-27 21:12:17	258,048	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-12 23:26:08	258,048	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-07-27 21:12:17	114,176	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2008-04-12 23:26:08	113,664	----a-w	C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2000-08-31 06:00:00	68,096	----a-w	C:\WINDOWS\zip.exe
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ee9b2ff5-a57e-4901-b315-9a19001b9c41}]
2008-06-23 17:57	105984	--a------	C:\WINDOWS\system32\ibwkmphr.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
"TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 16:08 65536]
"MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2007-07-04 17:26 190024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2006-02-02 13:11 73728]
"TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe]
"TomcatStartup 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe" [2004-05-20 18:37 188416]
"THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-08-25 13:47 356352]
"TFncKy"="TFncKy.exe" []
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 01:02 761948]
"StatusClient 2.6"="C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe" [2005-04-08 18:18 151552]
"SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 09:24 118784]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-05 15:59 16206848 C:\WINDOWS\RTHDCPL.exe]
"OrderReminder"="C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe" [2007-02-28 16:20 98304]
"NDSTray.exe"="NDSTray.exe" []
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 13:34 64512]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 05:20 122940]
"AGRSMMSG"="AGRSMMSG.exe" [2005-12-13 16:50 88204 C:\WINDOWS\agrsmmsg.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 18:14 8491008]
"nwiz"="nwiz.exe" [2007-10-04 18:14 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-04 18:14 81920]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-03-29 17:44 185896]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 01:32 696320]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 01:38 802816]
"84cba0a2"="C:\WINDOWS\system32\qikdwayw.dll" [2008-06-22 12:55 80384]
"BM87f8933e"="C:\WINDOWS\system32\wbxxoifk.dll" [2008-06-23 17:57 91136]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2006-03-13 13:11 233472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"vidc.yv12"= yv12vfw.dll
"vidc.mpng"= C:\Program Files\t@b\[u]0/u.957\686\tabdec.dll
"vidc.mvjp"= C:\Program Files\t@b\[u]0/u.957\686\tabdec.dll
"vidc.444p"= C:\Program Files\t@b\[u]0/u.957\686\tabdec.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"S24EventMonitor"=2 (0x2)
"RegSrvc"=2 (0x2)
"EvtEng"=2 (0x2)
"CFSvcs"=2 (0x2)
"Ati HotKey Poller"=2 (0x2)
"Adobe LM Service"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"=
"C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe"=
"C:\Program Files\Azureus\Azureus.exe"=
"C:\Program Files\LimeWire\LimeWire.exe"=
"C:\Program Files\Mozilla Firefox\firefox.exe"=
"C:\Program Files\Zattoo\zattood.exe"=
"C:\Program Files\Zattoo\Zattoo2.exe"=
"C:\Program Files\Veoh Networks\Veoh\VeohClient.exe"=
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe"=
"C:\Program Files\SopCast\SopCast.exe"=
"C:\Program Files\SopCast\adv\SopAdver.exe"=
"C:\Program Files\SopCast\sopvod.exe"=
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"C:\Program Files\Windows Live\Messenger\livecall.exe"=
"C:\Program Files\iTunes\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 10:45]
S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2002-10-15 23:41]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{01263630-6e76-11dc-9f21-00a0d15d006f}]
\Shell\AutoRun\command - E:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fae6d7a-93a2-11dc-9f7c-0018dea7b5bb}]
\Shell\AutoRun\command - E:\start.exe
\Shell\iledefrance\command - E:\start.exe

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-06-19 18:21:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-06-20 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-23 18:15:00
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...


C:\WINDOWS\system32\wyawdkiq.ini 294 bytes

Scan termin‚ avec succŠs
Les fichiers cach‚s: 1

**************************************************************************
.
--------------------- DLLs a charg‚ sous des processus courants ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\system32\qikdwayw.dll
-> C:\WINDOWS\system32\wbxxoifk.dll
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe
C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Toshiba\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-06-23 18:24:13 - machine was rebooted [SOLAL]
ComboFix-quarantined-files.txt  2008-06-23 16:24:09

Pre-Run: 17,737,912,320 octets libres
Post-Run: 17,909,227,520 octets libres

2291	--- E O F ---	2008-06-19 22:35:19

afideg · Answer

OK
C'est très bon
On voit la fin du tunnel

Je quitte un peu le PC  (jardin)
Reviens avec le reste des applications demandées, s'il te plaît.
Al

sg7 · Answer

1ère Analyse OAD : (1/5)

 23/06/2008 ---- 18:53:19,90  

----------------------------------
§§§§§§ [qikdwayw.dll ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------


2e Analyse : (2/5)

 23/06/2008 ---- 18:56:32,98  

----------------------------------
§§§§§§ [xrygjmyp.dll] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************

c:\WINDOWS\system32\xrygjmyp.dll


*********************
     [Même date] 
*********************

[22/06/2008 ] --- REP ---> C:\Program Files\Malwarebytes' Anti-Malware  
[22/06/2008 ] ---> C:\hiberfil.sys   
[22/06/2008 ] ---> C:\VundoFix.txt   
[22/06/2008 ] ---> C:\WINDOWS\system32\clkcnt.txt   
[22/06/2008 ] ---> C:\WINDOWS\system32\drivers\mbam.sys   
[22/06/2008 ] ---> C:\WINDOWS\system32\drivers\mbamcatchme.sys   
[22/06/2008 ] ---> C:\WINDOWS\system32\eihoyvqw.dll   
[22/06/2008 ] ---> C:\WINDOWS\system32\qikdwayw.dll   
[22/06/2008 ] ---> C:\WINDOWS\system32\xrygjmyp.dll   
[22/06/2008 ] ---> C:\WINDOWS\system32\ynyrsvyc.dll   



Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------


3e analyse : (3/5)

 23/06/2008 ---- 19:00:02,50  

----------------------------------
§§§§§§ [geBuTkhg.dll ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------

sg7 · Answer

4e analyse (4/5) : 

 23/06/2008 ---- 19:05:25,95  

----------------------------------
§§§§§§ [ynyrsvyc.dll ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------


5e analyse (5/5) :

 23/06/2008 ---- 19:08:58,48  

----------------------------------
§§§§§§ [byXPGVoP.dll ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------

sg7 · Answer

ANALYSES VIRUS TOTAL 1 Fichier jst.dll reçu le 2008.06.23 13:27:33 (CET)Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.22.0 2008.06.23 - AntiVir 7.8.0.59 2008.06.23 - Authentium 5.1.0.4 2008.06.21 - Avast 4.8.1195.0 2008.06.23 - AVG 7.5.0.516 2008.06.22 - BitDefender 7.2 2008.06.23 - CAT-QuickHeal 9.50 2008.06.20 - ClamAV 0.93.1 2008.06.23 - DrWeb 4.44.0.09170 2008.06.23 - eSafe 7.0.15.0 2008.06.23 - eTrust-Vet 31.6.5897 2008.06.23 - Ewido 4.0 2008.06.23 - F-Prot 4.4.4.56 2008.06.21 - F-Secure 7.60.13501.0 2008.06.20 - Fortinet 3.14.0.0 2008.06.23 - GData 2.0.7306.1023 2008.06.23 - Ikarus T3.1.1.26.0 2008.06.23 - Kaspersky 7.0.0.125 2008.06.23 - McAfee 5322 2008.06.20 - Microsoft 1.3604 2008.06.23 - NOD32v2 3208 2008.06.23 - Norman 5.80.02 2008.06.20 - Panda 9.0.0.4 2008.06.22 - Prevx1 V2 2008.06.23 - Rising 20.50.02.00 2008.06.23 - Sophos 4.30.0 2008.06.23 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.23 - TheHacker 6.2.92.358 2008.06.21 - TrendMicro 8.700.0.1004 2008.06.23 - VBA32 3.12.6.7 2008.06.22 - VirusBuster 4.5.11.0 2008.06.23 - Webwasher-Gateway 6.6.2 2008.06.23 - Information additionnelle File size: 74752 bytes MD5...: d4b955d7aec636322e04f1c73735a0e0 SHA1..: ea669befb730528fcf8cce1e4aa2809c6f94aea1 SHA256: 2eb796fa5410cece974b2f08b6b252c50aa1a759406d5f49e66ea21ab19fd1e3 SHA512: b7522f6916d1a9b70b130f07d1acf0e72f42d7e7caf488b7f6bdf3e97e10be34
b9ffb927be2c724b945cab1a7f65e6b6a420d1f23a22c63b589f73b7870fb907 PEiD..: - PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10004400
timedatestamp.....: 0x3934c280 (Wed May 31 07:42:56 2000)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xb072 0xb200 6.44 409a3ddbe380783f5d5bfc7fcc8b103b
.rdata 0xd000 0x12a9 0x1400 4.87 9cbac424e2e73f98ace4025b3a36f209
.data 0xf000 0x552c 0x3e00 2.14 5f3638a334d841b7ba7dbe15ceeca801
.idata 0x15000 0x89a 0xa00 4.81 97f2a3b18cda1634d4f149bf7ae4b37d
.reloc 0x16000 0x1128 0x1200 5.03 01476400a16a2b41a322dab21577b863

( 2 imports )
> ADVAPI32.dll: RegQueryValueExA, CreateServiceA, OpenSCManagerA, RegCloseKey, RegSetValueExA, RegCreateKeyExA, DeleteService, ControlService, QueryServiceStatus, OpenServiceA, RegDeleteValueA, RegOpenKeyExA, CloseServiceHandle, RegDeleteKeyA, RegEnumKeyExA, RegEnumValueA
> KERNEL32.dll: FormatMessageA, GetLastError, GetEnvironmentVariableA, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LocalFree, LeaveCriticalSection, GetModuleFileNameA, HeapFree, HeapAlloc, GetCommandLineA, GetProcAddress, GetModuleHandleA, GetVersion, RtlUnwind, CloseHandle, WriteFile, ReadFile, SetFilePointer, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, CreateFileA, FindNextFileA, FindFirstFileA, FindClose, ExitProcess, TerminateProcess, GetCurrentProcess, GetCPInfo, GetACP, GetOEMCP, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, SetLastError, TlsGetValue, FreeEnvironmentStringsA, MultiByteToWideChar, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, WideCharToMultiByte, FlushFileBuffers, SetStdHandle, SetEndOfFile, InterlockedDecrement, InterlockedIncrement, LoadLibraryA, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadWritePtr, IsBadCodePtr, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetLocaleInfoW

( 15 exports )
_Java_com_jobjects_jst_win32_SCM__1createService95@12, _Java_com_jobjects_jst_win32_SCM__1createService@12, _Java_com_jobjects_jst_win32_SCM__1deleteService95@12, _Java_com_jobjects_jst_win32_SCM__1deleteService@12, _Java_com_jobjects_jst_win32_SCM__1getLastErrorDescription@8, _Java_com_jobjects_jst_win32_SCM__1getPathVariable@8, _Java_com_jobjects_jst_win32_Win32RegKey__1exists@8, _Java_com_jobjects_jst_win32_Win32RegKey__1getLastErrorDescription@8, _Java_com_jobjects_jst_win32_Win32RegKey__1getPathVariable@8, _Java_com_jobjects_jst_win32_Win32RegKey__1getString@12, _Java_com_jobjects_jst_win32_Win32RegKey__1keys@8, _Java_com_jobjects_jst_win32_Win32RegKey__1properties@8, _Java_com_jobjects_jst_win32_Win32RegKey__1putString@16, _Java_com_jobjects_jst_win32_Win32RegKey__1remove@12, _Java_com_jobjects_jst_win32_Win32RegKey__1removeKey@16
ANALYSES VIRUS TOTAL 2 Fichier msdmo.dll reçu le 2008.06.23 19:12:18 (CET)Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.22.0 2008.06.23 - AntiVir 7.8.0.59 2008.06.23 - Authentium 5.1.0.4 2008.06.21 - Avast 4.8.1195.0 2008.06.23 - AVG 7.5.0.516 2008.06.23 - BitDefender 7.2 2008.06.23 - CAT-QuickHeal 9.50 2008.06.23 - ClamAV 0.93.1 2008.06.23 - DrWeb 4.44.0.09170 2008.06.23 - eSafe 7.0.15.0 2008.06.23 - eTrust-Vet 31.6.5897 2008.06.23 - Ewido 4.0 2008.06.23 - F-Prot 4.4.4.56 2008.06.21 - F-Secure 7.60.13501.0 2008.06.20 - Fortinet 3.14.0.0 2008.06.23 - GData 2.0.7306.1023 2008.06.23 - Ikarus T3.1.1.26.0 2008.06.23 - Kaspersky 7.0.0.125 2008.06.23 - McAfee 5323 2008.06.23 - Microsoft 1.3604 2008.06.23 - NOD32v2 3210 2008.06.23 - Norman 5.80.02 2008.06.23 - Panda 9.0.0.4 2008.06.22 - Prevx1 V2 2008.06.23 - Rising 20.50.02.00 2008.06.23 - Sophos 4.30.0 2008.06.23 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.23 - TheHacker 6.2.92.358 2008.06.21 - TrendMicro 8.700.0.1004 2008.06.23 - VBA32 3.12.6.8 2008.06.23 - VirusBuster 4.5.11.0 2008.06.23 - Webwasher-Gateway 6.6.2 2008.06.23 - Information additionnelle File size: 14336 bytes MD5...: 325b766fc6c9c74a790a52a8f56c0126 SHA1..: c0f2e3cb1780c1868556ca01811496bbbce50068 SHA256: 252534c9672c4779ae7ce0d6bd509501769d55594d4d786f25f61e98e0d1a3b3 SHA512: 5a2f052c35be8c4f8c953e7e0bd59407f755a61dbfcb209e1603de2e7f6817c0
d27aa5b6f29c77d659cdaaef30e00c660972f016f8c7b7ef0cb28cc730eabb9a PEiD..: - PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x7360325b
timedatestamp.....: 0x4110964c (Wed Aug 04 07:54:52 2004)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2932 0x2a00 6.29 bfb83624ed15872adbcdc267e7aba6e0
.data 0x4000 0x30 0x200 0.20 b407829f93ff903ba0df8d44e5c0409d
.rsrc 0x5000 0x390 0x400 3.08 b96b79bd10faa89e76a5b72d73a537a5
.reloc 0x6000 0x222 0x400 3.37 9fa663c32dfefaa57ffef73b270d95c5

( 5 imports )
> msvcrt.dll: swprintf, __3@YAXPAX@Z, __2@YAPAXI@Z, malloc, _adjust_fdiv, _initterm, sscanf, wcscat, sprintf, wcslen, wcscpy, realloc, free
> ole32.dll: CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc
> ADVAPI32.dll: RegOpenKeyW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegQueryInfoKeyW, RegEnumKeyW, RegCloseKey, RegDeleteKeyW, RegSetValueW, RegQueryValueW, RegSetValueExW
> KERNEL32.dll: QueryPerformanceCounter, WideCharToMultiByte, GetTickCount, InterlockedIncrement, lstrlenW, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, DisableThreadLibraryCalls, InterlockedDecrement
> USER32.dll: wsprintfW

( 15 exports )
DMOEnum, DMOGetName, DMOGetTypes, DMOGuidToStrA, DMOGuidToStrW, DMORegister, DMOStrToGuidA, DMOStrToGuidW, DMOUnregister, MoCopyMediaType, MoCreateMediaType, MoDeleteMediaType, MoDuplicateMediaType, MoFreeMediaType, MoInitMediaType

sg7 · Answer

E)

1) Mon pare feu est celui de windows du centre de sécurité par défaut. Je n'ai rien ajouté de plus.

2) Je n'ai pas de disques amovibles connectés en permanence (Ipod de temps en temps). 2 ports USB sont utilisés pour l'imprimante et l'adaptateur Manettes PS2 

Voila j'éspère qu'on va arriver à nettoyer tout ça. Merci beaucoup 

(PS : je remarque qu'il y a toujours des fenetres intempestives mais quand même moins ... je ne sais pas si c'est un hasard ...)

afideg · Answer

(suite) Merci pour tout. 1°- Désactive les éventuelles protections résidentes comme par exemple le Tea-Timer de Spybot ou le guard de Avast 2°- Désactive ta restauration système Clic sur « Démarrer » Clic droit sur « Poste de travail », puis sur « Propriétés », Vas sur l’onglet « Restauration système » Tu y coches la case « Désactiver la restauration » Termine par [Appliquer] [OK] Note: si échec lors de la suppression qui va suivre, il faut lancer en MSE comme le montre cet exemple : < http://forum.telecharger.01net.com/forum/high-tech/SECURITE/Securite/trojan-pakes-resolu-sujet_40163_1.htm > Redémarrer le PC en mode sans échec < http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 > Choisir sa session habituelle, (pas le compte "Administrateur" ou une autre). 3°- Sélectionne (mettre en surbrillance) tout le texte en caractères gras suivant : File:: C:\WINDOWS\system32\qikdwayw.dll C:\WINDOWS\system32\xrygjmyp.dll C:\WINDOWS\system32\geBuTkhg.dll C:\WINDOWS\system32\ynyrsvyc.dll C:\WINDOWS\system32\byXPGVoP.dll C:\WINDOWS\system32\ibwkmphr.dll C:\WINDOWS\system32\wbxxoifk.dll C:\WINDOWS\system32\eihoyvqw.dll C:\WINDOWS\system32\pljksmas.dll Registry:: [-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8C153A0A-7198-462E-979C-D4B28F496220}] [-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A50D1E6-71D0-4E6C-BF4F-27D3F3E80A76}] [-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67a08e3f-3d72-f4fb-c6e4-0d176e1d05a6}] [-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CD3737B-34B5-4B79-BE4A-104E250C5346}] [-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee9b2ff5-a57e-4901-b315-9a19001b9c41}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "84cba0a2"=- "BM87f8933e"=- [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{A6F5090F-D9EC-4263-9D7D-2968C5179291}] 4°- Copie le texte sélectionné (CTRL+C) ==> en appuyant simultanément sur les touches CTRL et C. Ouvre le bloc-notes (programme>Accessoires >bloc-notes). Colle (bien dans le coin supérieur gauche) ce texte dans ce bloc-notes (CTRL+V) ==> en appuyant simultanément sur les touches CTRL et V . Sauvegarde (enregistre-le sur le bureau) sous le nom CFScript1.txt • Regarde ici (ce n’est qu’un exemple !) < http://img509.imageshack.us/img509/5984/screenshot332wc3.png > 5°- Ensuite, dépose ce fichier texte sur l'application de ComboFix (icône rouge “ComboFix.exe” (Tristan.exe) sur le bureau) en faisant un “glisser/déposer” de ce fichier “ gras>CFScript1.txt ” sur le fichier “ComboFix.exe”(Tristan.exe) comme sur la capture: < http://img.photobucket.com/albums/v666/sUBs/CFScript.gif > L'icône ComboFix.exe (Tristan.exe) change alors de "brillance" dans sa couleur. Un module s'affiche ==> clic sur "Exécuter" Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal! (CAUTION: Do not mouse-click ComboFix's window while it is running. = Ne touche à rien tant que le scan n'est pas terminé. That may cause it to stall.) 6°- Une fois le scan achevé, un rapport va s'afficher: poste son contenu sur le forum. Si le fichier n'apparaît pas, il se trouve ici > C:\ComboFix.txt 7°- Arrêter puis redémarrer le PC 8°- Ensuite réactive ta restauration système Clic droit sur « Poste de travail », puis sur « Propriétés », Vas sur l’onglet « Restauration système » Tu décoches la case « Désactiver la restauration » Termine par [Appliquer] [OK] 8°- Poste un nouveau rapport ComboFix.txt comme ceci : - Double clique sur l'icône de ComboFix.exe du bureau, [Exécuter] et suis les invites. Accepter les alertes éventuelles. Laisse se dérouler le scan. Lorsque le scan sera complété, un rapport apparaîtra sur le bureau. Tu copies et colles ce rapport sur le forum. Termine avec ce "Scan en ligne de Kaspersky" https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr sous "Internet Explorer". Branche ton Disque Externe (clé USB) éventuellement - Clique sur "Démarrer Online-Scanner" ( en bas à droite de la page) . - Clique maintenant sur "J'accepte". - Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire. - Patiente pendant l'installation des "Mises à jour". Clic sur « Paramètres d'analyse » Coche la case "Étendue" >> Ok - Choisis par la suite l'analyse du "Poste de travail" pour faire un « Scan complet ». - Sauvegarde puis colle le rapport généré en fin d'analyse. http://i204.photobucket.com/albums/bb106/Juliet702/Kas-SaveReport-1.gif http://i204.photobucket.com/albums/bb106/Juliet702/Kas-Savetxt.gif AIDE : Configurer le contrôle des ActiveX < http://www.inoculer.com/activex.php3 > Tuto ici si problème : http://www.vista-xp.fr/forum/topic109.html , ou là : https://forum.pcastuces.com/sujet.asp?f=25&s=37641 (par Morgane & nico_dodo) NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne. Merci Al.

sg7 · Answer

rapport ComboFix : ComboFix 08-06-20.4 - SOLAL 2008-06-23 23:22:29.5 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.508 [GMT 2:00] Endroit: C:\Documents and Settings\SOLAL\Bureau\TRISTAN.exe Command switches used :: C:\Documents and Settings\SOLAL\Bureau\CFScript1.txt * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] FILE :: C:\WINDOWS\system32\byXPGVoP.dll C:\WINDOWS\system32\eihoyvqw.dll C:\WINDOWS\system32\geBuTkhg.dll C:\WINDOWS\system32\ibwkmphr.dll C:\WINDOWS\system32\pljksmas.dll C:\WINDOWS\system32\qikdwayw.dll C:\WINDOWS\system32\wbxxoifk.dll C:\WINDOWS\system32\xrygjmyp.dll C:\WINDOWS\system32\ynyrsvyc.dll . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\pskt.ini C:\WINDOWS\system32\eihoyvqw.dll C:\WINDOWS\system32\ibwkmphr.dll C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\pljksmas.dll C:\WINDOWS\system32\qikdwayw.dll C:\WINDOWS\system32\wbxxoifk.dll C:\WINDOWS\system32\xrygjmyp.dll C:\WINDOWS\system32\ynyrsvyc.dll . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-23 to 2008-06-23 )))))))))))))))))))))))))))))))))))) . 2008-06-23 18:16 . 2008-06-23 23:21 474 ---hs---- C:\WINDOWS\system32\wyawdkiq.ini 2008-06-23 18:15 . 2008-06-23 18:15 0 --a------ C:\WINDOWS\BM87f8933e.xml 2008-06-22 18:35 . 2008-06-22 18:35 127,426,316 --a------ C:\Documents and Settings\SOLAL\Sav.reg 2008-06-22 13:35 . 2008-06-22 13:36 d-------- C:\WINDOWS\ERUNT 2008-06-22 12:45 . 2008-06-22 12:45 d-------- C:\_OTMoveIt 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\SOLAL\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-19 17:48 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-22 01:00 . 2008-06-19 17:47 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-21 13:52 . 2008-06-21 13:52 d-------- C:\Documents and Settings\SOLAL\Application Data\dvdcss 2008-06-21 13:46 . 2008-05-06 08:01 16,512 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Program Files\Vstplugins 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Documents and Settings\All Users\Application Data\Sony 2008-06-19 18:47 . 2008-06-19 18:48 d-------- C:\Program Files\Sony 2008-06-14 17:26 . 2008-06-18 19:44 d-------- C:\Program Files\FairUse Wizard 2 2008-06-14 17:15 . 2008-06-22 15:42 d-------- C:\Documents and Settings\SOLAL\Application Data\Vso 2008-06-14 17:15 . 2008-06-22 15:42 87,608 --a------ C:\Documents and Settings\SOLAL\Application Data\inst.exe 2008-06-14 17:15 . 2008-06-14 17:15 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys 2008-06-14 17:15 . 2008-06-22 15:42 47,360 --a------ C:\Documents and Settings\SOLAL\Application Data\pcouffin.sys 2008-06-14 16:51 . 2008-06-14 16:53 d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink 2008-06-11 14:50 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 14:50 . 2008-06-14 19:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 00:17 . 2008-06-10 00:17 2,359,350 --a------ C:\WINDOWS\BricoPack Wallpaper.bmp 2008-06-10 00:17 . 2008-06-10 00:17 55,538 --a------ C:\WINDOWS\BricoPackUninst.cmd 2008-06-10 00:15 . 2008-06-10 00:17 6,114 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd 2008-05-31 19:06 . 2008-05-31 19:10 d-------- C:\WINDOWS\system32\XPSViewer 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\Reference Assemblies 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\MSBuild 2008-05-31 19:05 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-31 19:04 . 2008-05-31 19:04 d-------- C:\Program Files\MSXML 6.0 2008-05-24 15:53 . 2008-06-10 00:54 d-------- C:\Documents and Settings\All Users\Application Data\RapidSolution . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-23 17:21 --------- d-----w C:\Program Files\ImTOO 2008-06-22 18:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Azureus 2008-06-22 13:41 --------- d-----w C:\Program Files\Navilog1 2008-06-22 13:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-21 10:14 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-19 16:55 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-06-19 16:52 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Sony 2008-06-19 15:42 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-06-09 22:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-06-01 11:49 --------- d-----w C:\Program Files\VirtualDJ 2008-05-18 16:41 --------- d-----w C:\Program Files\iTunes Art Importer 2008-05-18 14:59 --------- d-----w C:\Program Files\InterVideo 2008-05-17 15:36 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\vlc 2008-05-17 15:35 --------- d-----w C:\Program Files\DMV 2008-05-17 10:45 --------- d-----w C:\Program Files\Guitar Pro 5 2008-05-09 22:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Kazaa Lite 2008-05-08 20:33 94,568 ----a-w C:\Documents and Settings\SOLAL\Application Data\GDIPFONTCACHEV1.DAT 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-02 22:35 --------- d-----w C:\Program Files\Movies2iPhone 2008-04-30 23:11 --------- d-----w C:\Program Files\Project64 1.6 2008-02-07 12:38 157 ----a-w C:\Documents and Settings\SOLAL\PFE_settings.dat . ((((((((((((((((((((((((((((( snapshot_2008-06-23_18.23.53.56 ))))))))))))))))))))))))))))))))))))))))) . - 2008-06-23 16:11:25 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-23 21:28:43 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-23 21:28:59 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_7cc.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00 15360] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 16:08 65536] "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2007-07-04 17:26 190024] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2006-02-02 13:11 73728] "TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe] "TomcatStartup 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe" [2004-05-20 18:37 188416] "THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-08-25 13:47 356352] "TFncKy"="TFncKy.exe" [] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 01:02 761948] "StatusClient 2.6"="C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe" [2005-04-08 18:18 151552] "SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 09:24 118784] "RTHDCPL"="RTHDCPL.EXE" [2006-05-05 15:59 16206848 C:\WINDOWS\RTHDCPL.exe] "OrderReminder"="C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe" [2007-02-28 16:20 98304] "NDSTray.exe"="NDSTray.exe" [] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 13:34 64512] "DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 05:20 122940] "AGRSMMSG"="AGRSMMSG.exe" [2005-12-13 16:50 88204 C:\WINDOWS\agrsmmsg.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 18:14 8491008] "nwiz"="nwiz.exe" [2007-10-04 18:14 1626112 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-04 18:14 81920] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-03-29 17:44 185896] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048] "IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 01:32 696320] "IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 01:38 802816] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 14:00 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2006-03-13 13:11 233472] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.I420"= i420vfw.dll "vidc.yv12"= yv12vfw.dll "vidc.mpng"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll "vidc.mvjp"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll "vidc.444p"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "S24EventMonitor"=2 (0x2) "RegSrvc"=2 (0x2) "EvtEng"=2 (0x2) "CFSvcs"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "Adobe LM Service"=3 (0x3) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"= "C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe"= "C:\Program Files\Azureus\Azureus.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\Zattoo\zattood.exe"= "C:\Program Files\Zattoo\Zattoo2.exe"= "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe"= "C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe"= "C:\Program Files\SopCast\SopCast.exe"= "C:\Program Files\SopCast\adv\SopAdver.exe"= "C:\Program Files\SopCast\sopvod.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\iTunes\iTunes.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 10:45] S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2002-10-15 23:41] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{01263630-6e76-11dc-9f21-00a0d15d006f}] \Shell\AutoRun\command - E:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fae6d7a-93a2-11dc-9f7c-0018dea7b5bb}] \Shell\AutoRun\command - E:\start.exe \Shell\iledefrance\command - E:\start.exe . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2008-06-19 18:21:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-20 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-23 23:30:09 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\ehome\ehrecvr.exe C:\WINDOWS\ehome\ehSched.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Toshiba\TOSHIBA Applet\TAPPSRV.exe C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Toshiba\Commandes TOSHIBA\TFncKy.exe C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe C:\WINDOWS\system32\TPSBattM.exe C:\Program Files\Toshiba\ConfigFree\NDSTray.exe C:\WINDOWS\ehome\ehmsas.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\iPod\bin\iPodService.exe . ************************************************************************** . Temps d'accomplissement: 2008-06-23 23:41:41 - machine was rebooted ComboFix-quarantined-files.txt 2008-06-23 21:41:35 ComboFix2.txt 2008-06-23 16:24:14 Pre-Run: 21,100,228,608 octets libres Post-Run: 21,081,767,936 octets libres 225 --- E O F --- 2008-06-19 22:35:19

sg7 · Answer

8°- 2ème rapport ComboFix : ComboFix 08-06-20.4 - SOLAL 2008-06-23 23:55:06.6 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.560 [GMT 2:00] Endroit: C:\Documents and Settings\SOLAL\Bureau\TRISTAN.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-23 to 2008-06-23 )))))))))))))))))))))))))))))))))))) . 2008-06-23 18:16 . 2008-06-23 23:21 474 ---hs---- C:\WINDOWS\system32\wyawdkiq.ini 2008-06-23 18:15 . 2008-06-23 18:15 0 --a------ C:\WINDOWS\BM87f8933e.xml 2008-06-22 18:35 . 2008-06-22 18:35 127,426,316 --a------ C:\Documents and Settings\SOLAL\Sav.reg 2008-06-22 13:35 . 2008-06-22 13:36 d-------- C:\WINDOWS\ERUNT 2008-06-22 12:45 . 2008-06-22 12:45 d-------- C:\_OTMoveIt 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\SOLAL\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-22 01:00 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-06-22 01:00 . 2008-06-19 17:48 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-22 01:00 . 2008-06-19 17:47 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-21 13:52 . 2008-06-21 13:52 d-------- C:\Documents and Settings\SOLAL\Application Data\dvdcss 2008-06-21 13:46 . 2008-05-06 08:01 16,512 --a------ C:\WINDOWS\system32\drivers\ASPI32.SYS 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Program Files\Vstplugins 2008-06-19 18:48 . 2008-06-19 18:48 d-------- C:\Documents and Settings\All Users\Application Data\Sony 2008-06-19 18:47 . 2008-06-19 18:48 d-------- C:\Program Files\Sony 2008-06-14 17:26 . 2008-06-18 19:44 d-------- C:\Program Files\FairUse Wizard 2 2008-06-14 17:15 . 2008-06-22 15:42 d-------- C:\Documents and Settings\SOLAL\Application Data\Vso 2008-06-14 17:15 . 2008-06-22 15:42 87,608 --a------ C:\Documents and Settings\SOLAL\Application Data\inst.exe 2008-06-14 17:15 . 2008-06-14 17:15 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys 2008-06-14 17:15 . 2008-06-22 15:42 47,360 --a------ C:\Documents and Settings\SOLAL\Application Data\pcouffin.sys 2008-06-14 16:51 . 2008-06-14 16:53 d-------- C:\Documents and Settings\All Users\Application Data\DVD Shrink 2008-06-11 14:50 . 2008-06-14 19:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-11 14:50 . 2008-06-14 19:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 00:17 . 2008-06-10 00:17 2,359,350 --a------ C:\WINDOWS\BricoPack Wallpaper.bmp 2008-06-10 00:17 . 2008-06-10 00:17 55,538 --a------ C:\WINDOWS\BricoPackUninst.cmd 2008-06-10 00:15 . 2008-06-10 00:17 6,114 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd 2008-05-31 19:06 . 2008-05-31 19:10 d-------- C:\WINDOWS\system32\XPSViewer 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\Reference Assemblies 2008-05-31 19:06 . 2008-05-31 19:06 d-------- C:\Program Files\MSBuild 2008-05-31 19:05 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-31 19:04 . 2008-05-31 19:04 d-------- C:\Program Files\MSXML 6.0 2008-05-24 15:53 . 2008-06-10 00:54 d-------- C:\Documents and Settings\All Users\Application Data\RapidSolution . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-23 17:21 --------- d-----w C:\Program Files\ImTOO 2008-06-22 18:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Azureus 2008-06-22 13:41 --------- d-----w C:\Program Files\Navilog1 2008-06-22 13:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-06-21 10:14 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-19 16:55 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-06-19 16:52 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Sony 2008-06-19 15:42 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-06-09 22:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-06-09 22:17 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dll 2008-06-01 11:49 --------- d-----w C:\Program Files\VirtualDJ 2008-05-18 16:41 --------- d-----w C:\Program Files\iTunes Art Importer 2008-05-18 14:59 --------- d-----w C:\Program Files\InterVideo 2008-05-17 15:36 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\vlc 2008-05-17 15:35 --------- d-----w C:\Program Files\DMV 2008-05-17 10:45 --------- d-----w C:\Program Files\Guitar Pro 5 2008-05-09 22:20 --------- d-----w C:\Documents and Settings\SOLAL\Application Data\Kazaa Lite 2008-05-08 20:33 94,568 ----a-w C:\Documents and Settings\SOLAL\Application Data\GDIPFONTCACHEV1.DAT 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-07 04:55 1,294,336 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-06 06:01 45,056 ----a-w C:\WINDOWS\system32\WNASPI32.DLL 2008-05-02 22:35 --------- d-----w C:\Program Files\Movies2iPhone 2008-04-30 23:11 --------- d-----w C:\Program Files\Project64 1.6 2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll 2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll 2008-02-07 12:38 157 ----a-w C:\Documents and Settings\SOLAL\PFE_settings.dat . ((((((((((((((((((((((((((((( snapshot_2008-06-23_18.23.53.56 ))))))))))))))))))))))))))))))))))))))))) . - 2008-06-23 16:11:25 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-23 21:45:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-06-23 21:45:33 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_7c0.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 14:00 15360] "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184] "TOSCDSPD"="C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2005-04-11 16:08 65536] "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2007-07-04 17:26 190024] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2006-02-02 13:11 73728] "TPSMain"="TPSMain.exe" [2005-08-03 16:09 266240 C:\WINDOWS\system32\TPSMain.exe] "TomcatStartup 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe" [2004-05-20 18:37 188416] "THotkey"="C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2006-08-25 13:47 356352] "TFncKy"="TFncKy.exe" [] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-03 01:02 761948] "StatusClient 2.6"="C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe" [2005-04-08 18:18 151552] "SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 09:24 118784] "RTHDCPL"="RTHDCPL.EXE" [2006-05-05 15:59 16206848 C:\WINDOWS\RTHDCPL.exe] "OrderReminder"="C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe" [2007-02-28 16:20 98304] "NDSTray.exe"="NDSTray.exe" [] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 13:34 64512] "DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-10-06 05:20 122940] "AGRSMMSG"="AGRSMMSG.exe" [2005-12-13 16:50 88204 C:\WINDOWS\agrsmmsg.exe] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-10-04 18:14 8491008] "nwiz"="nwiz.exe" [2007-10-04 18:14 1626112 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-10-04 18:14 81920] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-03-29 17:44 185896] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048] "IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-08-02 01:32 696320] "IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-08-02 01:38 802816] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 14:00 15360] C:\Documents and Settings\SOLAL\Menu D‚marrer\Programmes\D‚marrage\ Lancement rapide de Microsoft Office OneNote 2003.lnk - C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE [2005-03-17 14:06:14 59080] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360] Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2006-03-26 22:44:08 257752] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2006-03-13 13:11 233472] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.I420"= i420vfw.dll "vidc.yv12"= yv12vfw.dll "vidc.mpng"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll "vidc.mvjp"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll "vidc.444p"= C:\Program Files\t@b\[u]0[/u].957\686\tabdec.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "S24EventMonitor"=2 (0x2) "RegSrvc"=2 (0x2) "EvtEng"=2 (0x2) "CFSvcs"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "Adobe LM Service"=3 (0x3) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe"= "C:\Program Files\KONAMI\Pro Evolution Soccer 2008\PES2008.exe"= "C:\Program Files\Azureus\Azureus.exe"= "C:\Program Files\LimeWire\LimeWire.exe"= "C:\Program Files\Mozilla Firefox\firefox.exe"= "C:\Program Files\Zattoo\zattood.exe"= "C:\Program Files\Zattoo\Zattoo2.exe"= "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe"= "C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe"= "C:\Program Files\SopCast\SopCast.exe"= "C:\Program Files\SopCast\adv\SopAdver.exe"= "C:\Program Files\SopCast\sopvod.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\iTunes\iTunes.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16] R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 10:45] S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2002-10-15 23:41] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{01263630-6e76-11dc-9f21-00a0d15d006f}] \Shell\AutoRun\command - E:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fae6d7a-93a2-11dc-9f7c-0018dea7b5bb}] \Shell\AutoRun\command - E:\start.exe \Shell\iledefrance\command - E:\start.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-06-19 18:21:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-06-20 15:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-23 23:59:24 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-06-24 0:03:46 ComboFix-quarantined-files.txt 2008-06-23 22:03:28 ComboFix2.txt 2008-06-23 21:41:42 ComboFix3.txt 2008-06-23 16:24:14 Pre-Run: 23,272,513,536 octets libres Post-Run: 23,253,274,624 octets libres 188 --- E O F --- 2008-06-19 22:35:19

afideg · Answer

Re,

Peux-tu rechercher ces deux fichiers manuellement et les supprimer :
C:\WINDOWS\system32\wyawdkiq.ini 
C:\WINDOWS\BM87f8933e.xml 

Merci


N'oublie pas Kaspersky

Al.

sg7 · Answer

avec OAD ??   bon sinon j'ai fait le test Kaspersky qui est bien terminé mais je n'arrive pas à obtenir le rapport. Il n'y a aucun bouton a part Stopper l'analyse. Pourtant c'est ecrit Terminé en bas.

Cible sélectionnée : Poste de travail
Source : C:\; D:\;  
 
 
Le rapport est vide.  
Note : le logiciel gratuit Kaspersky On-line Scanner n’offre pas une protection globale et ne peut empêcher les infections futures. Il ne détecte que les codes malveillants qui ont déjà pénétré dans vos disques de stockage. Nous vous conseillons vivement d’utiliser entièrement solution antivirus opérationnel afin de protéger votre ordinateur en permanence.  
 
Patientez, car ce processus peut prendre un certain temps en fonction de la cible sélectionnée. Si vous souhaitez continuer à surfer, ouvrez une seconde fenêtre.  
 
Progression de l'analyse [99%]:
                                                                                                                                 
Total de fichiers analysés : 177561 
Nombre de virus trouvés : 4 
Nombre d'objets infectés : 10 
Nombre d'objets suspects : 0 
Durée de l'analyse : 02:59:55 
 
Ah je n'avais pas vu le 99% c'est embettant je crois qu'il est bloqué. Je l'ai laissé toute la nuite et la visiblement il n'avance plus

afideg · Answer

Bonjour Non, dans ma demande précédente, par "Rechercher les deux fichiers", il faut entendre "les rechercher comme avec VirusTotal"; c'est-à-dire, via "Poste de travail" > "C:\" > "WINDOWS\" --> l'ouvrir et y rechercher BM87f8933e.xml et le supprimer; ensuite dans "WINDOWS\", ouvrir "system32\" et y rechercher "wyawdkiq.ini" pour le supprimer. Termine avec ce "Scan en ligne de Kaspersky" https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr sous "Internet Explorer". Branche ton Disque Externe (clé USB) IMPÉRATIVEMENT - Clique sur "Démarrer Online-Scanner" ( en bas à droite de la page) . - Clique maintenant sur "J'accepte". - Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire. - Patiente pendant l'installation des "Mises à jour". Clic sur « Paramètres d'analyse » Coche la case "Étendue" >> Ok - Choisis par la suite l'analyse du "Poste de travail" pour faire un « Scan complet ». - Sauvegarde puis colle le rapport généré en fin d'analyse. http://i204.photobucket.com/albums/bb106/Juliet702/Kas-SaveReport-1.gif http://i204.photobucket.com/albums/bb106/Juliet702/Kas-Savetxt.gif AIDE : Configurer le contrôle des ActiveX < http://www.inoculer.com/activex.php3 > Tuto ici si problème : http://www.vista-xp.fr/forum/topic109.html , ou là : https://forum.pcastuces.com/sujet.asp?f=25&s=37641 (par Morgane & nico_dodo) NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne. Désolé, mais je ne peux pas être plus clair. Merci J'espère que ce contretemps n'a pas "réveillé" l'infection. Al.

sg7 · Answer

ok je vais les supprimer tout de suite. 
Sinon voila le rapport Kaspersky terminé !

-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Tuesday, June 24, 2008 6:08:45 PM
 Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
 Kaspersky On-line Scanner version : 5.0.83.0
 Dernière mise à jour de la base antivirus Kaspersky : 24/06/2008
 Enregistrements dans la base antivirus Kaspersky : 881136
-------------------------------------------------------------------------------

Paramètres d'analyse:
	Analyser avec la base antivirus suivante: étendue
	Analyser les archives: vrai
	Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
	C:\
	D:\

Statistiques de l'analyse:
	Total d'objets analysés: 180037
	Nombre de virus trouvés: 6
	Nombre d'objets infectés: 14 / 0
	Nombre d'objets suspects: 0
	Durée de l'analyse: 03:00:00

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\LocalService
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\NetworkService
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Bureau\Poubelle Vide Bureau\Clean\pskill.exe	Infecté : not-a-virus:RiskTool.Win32.PsKill.k	ignoré
C:\Documents and Settings\SOLAL\Bureau\Poubelle Vide Bureau\Installateurs\clean.zip/clean/pskill.exe	Infecté : not-a-virus:RiskTool.Win32.PsKill.k	ignoré
C:\Documents and Settings\SOLAL\Bureau\Poubelle Vide Bureau\Installateurs\clean.zip	ZIP: infecté - 1	ignoré
C:\Documents and Settings\SOLAL\Cookies\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Historique\History.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Historique\History.IE5\MSHist012008062420080625\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Temp	oolbox_healer8636.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\Local Settings\Temporary Internet Files\Content.IE5\index.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL\NTUSER.DAT	L'objet est verrouillé	ignoré
C:\Documents and Settings\SOLAL
tuser.dat.LOG	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log
shield.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATA\log\selfdef.log	L'objet est verrouillé	ignoré
C:\Program Files\Alwil Software\Avast4\DATAeport\Protection résidente.txt	L'objet est verrouillé	ignoré
C:\qoobox\Quarantine\C\Documents and Settings\SOLAL\Application Data\install_fr[1].exe.vir	Infecté : not-a-virus:Downloader.Win32.WinFixer.au	ignoré
C:\qoobox\Quarantine\C\WINDOWS\system32\eihoyvqw.dll.vir	Infecté : Trojan.Win32.Monder.zf	ignoré
C:\qoobox\Quarantine\C\WINDOWS\system32\ibwkmphr.dll.vir	Infecté : Trojan.Win32.Monder.zm	ignoré
C:\qoobox\Quarantine\C\WINDOWS\system32\pljksmas.dll.vir	Infecté : Trojan.Win32.Monder.zj	ignoré
C:\qoobox\Quarantine\C\WINDOWS\system32\qikdwayw.dll.vir	Infecté : Trojan.Win32.Monder.zh	ignoré
C:\qoobox\Quarantine\C\WINDOWS\system32\xrygjmyp.dll.vir	Infecté : Trojan.Win32.Monder.zf	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\A0083853.dll	Infecté : Trojan.Win32.Monder.zf	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\A0083854.dll	Infecté : Trojan.Win32.Monder.zm	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\A0083855.dll	Infecté : Trojan.Win32.Monder.zj	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\A0083856.dll	Infecté : Trojan.Win32.Monder.zh	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\A0083858.dll	Infecté : Trojan.Win32.Monder.zf	ignoré
C:\System Volume Information\_restore{626D9BD5-11D8-49A1-B657-D272D1F6275E}\RP524\change.log	L'objet est verrouillé	ignoré
C:\WINDOWS\Debug\PASSWD.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{2EA945FA-49D3-4209-824F-19C2CE294E6D}.crmlog	L'objet est verrouillé	ignoré
C:\WINDOWS\SchedLgU.Txt	L'objet est verrouillé	ignoré
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log	L'objet est verrouillé	ignoré
C:\WINDOWS\Sti_Trace.log	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\CatRoot2\edb.log	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\CatRoot2	mp.edb	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\ACEEvent.evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\Antivirus.Evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\AppEvent.Evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\default	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\default.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\Internet.evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\Media Ce.evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SAM	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SAM.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SecEvent.Evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SECURITY	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SECURITY.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\software	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\software.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\SysEvent.Evt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\system	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\config\system.LOG	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\h323log.txt	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA	L'objet est verrouillé	ignoré
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP	L'objet est verrouillé	ignoré
C:\WINDOWS\Temp\Perflib_Perfdata_7c0.dat	L'objet est verrouillé	ignoré
C:\WINDOWS\Temp\_avast4_\Webshlock.txt	L'objet est verrouillé	ignoré
C:\WINDOWS\wiadebug.log	L'objet est verrouillé	ignoré
C:\WINDOWS\wiaservc.log	L'objet est verrouillé	ignoré
C:\WINDOWS\WindowsUpdate.log	L'objet est verrouillé	ignoré

Analyse terminée.


J'ai supprimer manuellement donc le premier fichier. Cependant le 2e est introuvable !

afideg · Answer

Bonsoir et merci Je ne vois pas que tu aies connecté ta clé USB durant l'analyse Kaspersky. Termine ce topic (qui semble résolu) comme ceci, s'il te plaît: A)- Supprimer les outils utilisés devenus inutiles, ainsi que les quarantaines éventuelles; comme ceci: •- Clique sur "Démarrer" - Clic droit sur le "Poste de Travail" > dans "Propriétés" > onglet "Restauration du système" - Cocher la case "Désactiver la restauration du système" et cliquer sur "Appliquer". •- Télécharger _OTMoveIt sur ton bureau > < http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe > •- Lance OTMoveIt.exe par double-clic [*]Clique sur CleanUp! (le programme va télécharger un fichier texte qui servira à nettoyer les programmes que l'on a téléchargés). NOTE : Normalement, ton Firewall (parefeu) devrait te demander si _OTMoveIt peut accéder à Internet. Autorise-le. [*]Une liste apparaît dans la partie gauche d' _OTMoveIt. [*]Un message apparaît pour confirmer le nettoyage. Confirme (Begin cleanup process ? ==> accepte par Yes) Ce programme supprime les outils utilisés (y compris lui-même) ainsi que les quarantaines éventuelles. La manoeuvre nécessitera un reboot (=redémarrage) initié par le programme. •- Clique sur "Démarrer" - Clic droit sur le "Poste de Travail" > dans "Propriétés" > onglet "Restauration du système" - Décocher la case "Désactiver la restauration du système" et cliquer sur "Appliquer". B)- Je constate que Avast ne te sert pas à grand-chose (sinon à t'avertir qu'il a laissé infecter ton PC !!). Alors, fais-moi plaisir; applique ceci: 1)- Télécharger ANTIVIR sur le site de l'éditeur pour avoir la dernière version qui est celle-ci pour xp: < https://www.avira.com/en/free-antivirus-windows > et qui prend en compte la case Rootkit. TUTORIELS : < https://www.astucesinternet.com/modules/news/article.php?storyid=253 > ==> enregistre-le sur ton bureau pour y accéder facilement. - ou < http://www.malekal.com/tutorial_antivir.html > - ou < https://www.malekal.com/avira-free-security-antivirus-gratuit/#mozTocId876880 > - ou < http://www.libellules.ch/tuto_antivir.php > 2)- Désinstaller AVAST: < https://www.avast.com/fr-fr/uninstall-utility > 3)- Attention, après le téléchargement, il faut se déconnecter du Net ( débrancher éventuellement le modem ) avant de lancer l'installation. - Attention : Sers-toi du tutoriel pour installer ANTIVIR, http://www.vista-xp.fr/forum/topic227.html 4)- Procédure d'utilisation: Après l'installation du programme et avant de lancer l'analyse, ... ...il faut redémarrer le PC en mode sans échec, comme ceci: < http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 > Lancer Antivir en Scan complet ( analyse avancée ) Poster le rapport SVP. L'analyse: - Lancer Antivir en Scan complet (analyse avancée) en faisant un click-droit sur l’icône d’Antivir dans la « barre des taches » en bas à droite (= Systray, à côté de l’horloge) puis clic sur « start Antivir » - Cliquer sur l’onglet « scanner » - Vérifier pour « RootKit search » et « Manuelle détection » (en développant avec la petite croix devant chacun d'eux) que tous les disques durs soient bien cochés, puis cliquer sur la loupe (en dessous de statut) - Une fenêtre va s’ouvrir « Luke Filewalker » - Le scan va démarrer. - Mettre tout ce qu'il trouve en "quarantine" Le rapport: Une fois le scan achevé, fermer les deux fenêtres d'Antivir et sauvegarder sur le bureau le rapport qui vient d'apparaître. Redémarrer en mode normal puis poster le rapport d'Antivir (qui est sur le bureau). Voici un lien pour ne plus avoir de popup intempestif pour acheter la version payante lors des mises à jour https://forum.malekal.com/viewtopic.php?p=45326#p45326 Merci à ce soir Al.

sg7 · Answer

alors premierement je n'arrive pas a télécharger Antivir sur son site et deuxiement suis je vraiment obligé de désinstaller avast qui est quand même un bon antivirus non ? 
Ca m'embette un peu...

afideg · Answer

Ho!
As-tu vu tout ce que AVAST a laissé passer ?
Lis ceci: https://forum.malekal.com/viewtopic.php?f=45&t=11659


D'autres liens de téléchargement sont dans les tutoriels (= mode d'emploi)
par exemple  https://www.avira.com/
ou là  https://www.pcastuces.com/logitheque/antivir.htm


Maintenant, c'est comme tu l'entends.
Je n'y puis plus rien.
Mais tue AVAST !

Et reviens avec une analyse finale par ANTIVIR (connecte USB)


Al.

sg7 · Answer

oui tu as raison je vais essayer antivir. Mais je comprend pas ... quelle clé USB veux tu que je connecte N

afideg · Answer

Re,

= disque amovible que je devine ici; en E:\
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7fae6d­7a-93a2-11dc-9f7c-0018dea7b5bb}] 
\Shell\AutoRun\command - E:\start.exe 
\Shell\iledefrance\command - E:\start.exe 

En aurais-tu oublié de lancer _OTMoveIt ?
C'est important de le faire AVANT Antivir !

Al.

sg7 · Answer

oui oui désolé j'avais oublié que ma clé USB était connectée ... le scan antivir est long ou pas ? (pour savoir sinon je le commence cette nuit) ?

Autre problème, la mise à jour d'Antivir au tout début ne marche pas ...
24.06.2008 21:11:03 - Critical error: Invalid system proxy.  Je n'arrive pas a le mettre à jour

afideg · Answer

Re,

Tu peux lui faire télécharger les maj d'antivir ici : 
https://www.bytesin.com/software/Download-Avira-Antivir-Virus-Definition-File-Update/ 
Installer... puis un scanne,

En aurais-tu oublié de lancer _OTMoveIt ? 
C'est important de le faire AVANT Antivir, IMPÉRATIVEMENT !

Al.

sg7 · Answer

non non je l'ai fait !! le clean Up ?? oui oui je l'ai fait. Bon voila j'ai pu le mettre à jour le Antivir
Je te remercie beaucoup pour tout ce que tu as fait. Il n'y a evidemment plus de pop up. Tout est rentré dans l'ordre.
Je vais faire le scan Antivir cette nuit et je poste ca demain matin.

PS : juste une question : quand il repère un virus je réponds :
°Move to quarantaine
°Access Deny 
°Ignore ??

afideg · Answer

Re,


Cit. « non non je l'ai fait !! le "Clean Up!" de _OTMoveIt ?? oui oui je l'ai fait. »
N'y aurait-il pas un rapport issu, s'il te plaît ?


Pour Antivir, "ma" procédure stipule ceci:
« - Une fenêtre va s’ouvrir « Luke Filewalker » 
- Le scan va démarrer. 
- Mettre tout ce qu'il trouve en "quarantine"  »
Soit "Move to quarantine" .


Al.

Ralenti et fenetre intempestives

68 réponses

Votre réponse

Discussions similaires

Newsletters