le mode sans echec ne fonctionne pas.

Question

Bonjour, j'ai un problème avec le mode sans échec. L'écran devient noir quand j'essaye de l'exécuter. Je pense qu'il y a un virus dans la base du registre mais Antivir ne le détecte pas.

raphy00 · Answer

Salut,

Essaie Malwarebytes :

Telecharges malwares bytes anti malwares : 

Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

Si des elements on ete trouvés > click sur supprimer la selection. 

si il t´es demandé de redemarrer > click sur "yes". 

Fais un scan complet et postes le rapport.

jmd74 · Answer

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 931
Windows 5.1.2600 Service Pack 3

13:44:49 08/07/2008
mbam-log-7-8-2008 (13-44-49).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 176244
Temps écoulé: 51 minute(s), 45 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 10
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\legacy_windev-349a-6414 (Rootkit.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\Screensavers.com (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\SSSInst (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\SSSInst\bin (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\Wallpaper (Adware.Comet) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect\BASE (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect\DELETED (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect\LOG (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect\SAVED (Rogue.MalWarrior) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Screensavers.com\SSSInst\bin\SSSUninst.exe (Adware.Comet) -> Quarantined and deleted successfully.
C:\Program Files\Screensavers.com\Wallpaper\swpstart.exe (Adware.Comet) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\WinSpywareProtect\LOG\20080612170432218.log (Rogue.MalWarrior) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\svcp.csv (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winsub.xml (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\svhs.ocx (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cgbzwsamd_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cgbzwsamd_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
vs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.

raphy00 · Answer

Salut,

Maintenant tu fais ca :

Clique sur ce lien 
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe 
pour télécharger le fichier d'installation d'HijackThis. 

Enregistre HJTInstall.exe sur ton bureau. 

Double-clique sur HJTInstall.exe pour lancer le programme 

Par défaut, il s'installera là : 
C:\Program Files\Trend Micro\HijackThis 

Avant toute installation, renommes le en lalala.exe.

Accepte la license en cliquant sur le bouton "I Accept"

Ensuite clique sur "do a system scan and save a logfile" et postes le rapport.

jmd74 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:54:38, on 08/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acer\eRecovery\Monitor.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\XCSyncML.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\lalala.exe\HijackThis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.blackle.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
N3 - Netscape 7: user_pref("browser.startup.homepage", "https://www.google.fr/?gws_rd=ssl"); (C:\Documents and Settings\JEAN-MARC\Application Data\Mozilla\Profiles\default\lqbrb927.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\JEAN-MARC\Application Data\Mozilla\Profiles\default\lqbrb927.slt\prefs.js)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [XCSyncML] C:\WINDOWS\system32\XCSyncML.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Norton Save and Restore] "C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe"
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Markting] "C:\WINDOWS\system32\winhelp.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-2879198511-950748095-263635538-1008\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Yannick')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-2879198511-950748095-263635538-1008 Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'Yannick')
O4 - S-1-5-21-2879198511-950748095-263635538-1008 User Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe (User 'Yannick')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - https://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371290.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton Save and Restore - Symantec Corporation - C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

raphy00 · Answer

Re,

Toujours des problemes ?
Essaie d'etre un peu plus poli hein..On n'est pas des robots..

Merci d'avance !
Merci d'avoir repondu, voici les rapports !

Bref. Apres, tu vas la :

Va ici :

https://www.bitdefender.com/toolbox/

Fais un scan complet.
Accepte l'activex, la licence etc..

Et postes le rapport.

((   C:\windows\bdoscan8\scanres.txt  ))


(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Tutorial : http://pageperso.aol.fr/loraline60/bitdefender_scan.htm

jmd74 · Answer

BitDefender Online Scanner - Real Time Virus Report
	

 
	

 

Generated at: Tue, Jul 08, 2008 - 20:13:20

 
	

 
	

 

Scan Info
	

 
	

 

Scanned Files
	

485713

Infected Files
	

5
	

 
	

 

 
	

 
	

 

Virus Detected
	

 
	

 

Generic.Peed.Eml.931FD3EF
	

1

Dropped:Adware.BHO.WRF
	

1

Generic.Peed.Eml.A5F39A0E
	

1

Application.Generic.10084
	

1

Generic.Peed.Eml.411C219D
	

1
	

 
	

 

 
	

 
	

 

 
	

 
	

 

This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

jmd74 · Answer

Oui, excusez moi de ne pas vous avoir répondu tout à l'heure pendant le 1er scan. J'aurais du vous dire que j'avais redémarré mon pc et le mode sans échec ne marchait toujours pas. Voici ci-dessus le rapport que j'ai trouvé sur : file:///C:/WINDOWS/bdoscan8/rtvr_rep.html

raphy00 · Answer

Salut,

Essaie un de ces trucs la :

Vous pouvez commencer par réparer l'accès au mode sans échec, en téléchargeant : 
l'utilitaire suivant : https://download.bleepingcomputer.com/sUBs/SafeBootKeyRepair.exe 
Ou l'un de ces fichiers *.reg selon la version de windows : 
http://www.assistepc.com/forum/reparer-le-mode-sans-echec-de-windows-vt867.html

jmd74 · Answer

Reg export of SafeBoot key after repair:
========================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot]
"AlternateShell"="cmd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AppMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AVG Anti-Spyware Driver]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AVG Anti-Spyware Guard]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Base]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot file system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\CryptSvc]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\DcomLaunch]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmadmin]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmboot.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmio.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmload.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmserver]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\EventLog]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\HelpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Netlogon]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PCI Configuration]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PlugPlay]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PNP Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Primary disk]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\RpcSs]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SCSI Class]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sermouse.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sr.sys]
@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SRService]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\System Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vga.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\WinMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
@="Universal Serial Bus controllers"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
@="CD-ROM Drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
@="Standard floppy disk controller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
@="PCMCIA Adapters"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
@="SCSIAdapter"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
@="Floppy disk drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
@="Human Interface Devices"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AFD]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AppMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AVG Anti-Spyware Driver]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AVG Anti-Spyware Guard]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Base]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot file system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Browser]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\CryptSvc]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DcomLaunch]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Dhcp]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmadmin]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmboot.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmio.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmload.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmserver]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DnsCache]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\EventLog]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\HelpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ip6fw.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ipnat.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanServer]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanWorkstation]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LmHosts]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Messenger]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS Wrapper]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Ndisuio]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOS]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOSGroup]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBT]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetDDEGroup]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Netlogon]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetMan]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Network]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetworkProvider]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NtLmSsp]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PCI Configuration]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PlugPlay]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP_TDI]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Primary disk]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Networkdpcdd.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Networkdpdd.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Networkdpwd.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Networkdsessmgr]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\RpcSs]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SCSI Class]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sermouse.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SharedAccess]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sr.sys]
@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SRService]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Streams Drivers]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\System Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Tcpip]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\TDI]
@="Driver Group"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network	dpipe.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network	dtcp.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network	ermservice]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vga.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WinMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WZCSVC]
@="Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{36FC9E60-C465-11CF-8056-444553540000}]
@="Universal Serial Bus controllers"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
@="CD-ROM Drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
@="Standard floppy disk controller"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
@="Net"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
@="NetClient"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
@="NetService"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
@="NetTrans"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
@="PCMCIA Adapters"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
@="SCSIAdapter"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
@="Floppy disk drive"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
@="Human Interface Devices"

========================

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard

jmd74 · Answer

J'ai redémarrer et le mode sans échec ne fonctionne toujours pas. J'ai poster ce qu'il y avait dans le bloc note ci-dessus. Maintenant j'essaye ça: " Ou l'un de ces fichiers *.reg selon la version de windows :
http://www.assistepc.com/forum/reparer-le-mode-sans-echec-de-windows-vt867.html "

jmd74 · Answer

J'ai installer le programme et exécuter le mode sans échec et cela ne marche toujours pas. ( J'ai installer safeboot_sp2.reg alors que j'ai Windows XP Service pack 3.) Maintenant je fait une mise à jour sur sur Microsoft live update !

jmd74 · Answer

J'ai redémarré et le mode sans échec ne fonctionne toujours pas.

raphy00 · Answer

Re,

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice 
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver 
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard

Ca doit etre ca..
Essaie de desinstaller AVG et d'installer spybot a la place, on sait jamais puisqu'apparemment, AVG controle le mode sans echec..
Voila.
En attente de nouvelles.

jmd74 · Answer

J'ai désinstaller AVG et installer Spybot à la place. J'ai enlevé les infections comme il m'a dit. Mais en redémarrant (quant j'avais tout fini) j'ai n'ai toujours pas accés au mode sans échec.

raphy00 · Answer

Salut,

La je ne vois pas ce que ca peut etre..
Je vais demander aux autres helpeurs.

jmd74 · Answer

Ok !

E..T · Answer

Salut,
Peut être tenter une restauration avant que le problème soit survenu ?
@++

green day · Answer

Salut

 le pc est bien vérolé, tout nettoyer et après en pensera à réparer le mode sans échec, voir les fichier système, si ça se trouve, le monde sans échec reviendra de lui même à la fin du nettoyage !

 Restauration système avec tous ces bébéttes, c'est pas la solution !

Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

* Démarrer en mode sans echec 
* Double cliquer combofix.exe. 
* Appuyer sur la touche Y (Yes) pour démarrer le scan 
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp 


++

jmd74 · Answer

ComboFix 08-07-09.5 - Jean-Marc 2008-07-10 14:24:18.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1371 [GMT 2:00]
Endroit: C:\Documents and Settings\Jean-Marc\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Jean-Marc\Application Data\FunWebProducts
C:\Documents and Settings\Jean-Marc\Application Data\FunWebProducts\Data\Jean-Marc\avatar.dat
C:\WINDOWS\pack.epk
C:\WINDOWS\system32\oeminfo.ini

.
((((((((((((((((((((((((((((( Fichiers créés 2008-06-10 to 2008-07-10 ))))))))))))))))))))))))))))))))))))
.

2008-07-09 22:50 . 2008-07-09 22:50 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-07-09 22:50 . 2008-07-09 23:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-07-09 01:26 . 2008-07-09 01:26 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-07-08 18:30 . 2008-07-08 20:13 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Documents and Settings\Jean-Marc\Application Data\Malwarebytes
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-08 12:04 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-07-08 12:04 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-07-04 19:41 . 2008-07-04 19:41 <REP> d-------- C:\WINDOWS\system32\Adobe
2008-06-25 11:37 . 2008-06-25 11:37 <REP> d-------- C:\Program Files\Lavasoft
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\system32\fr
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\system32\bits
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\l2schemas
2008-06-24 23:54 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-06-24 23:50 . 2008-06-24 23:50 <REP> d-------- C:\WINDOWS\EHome
2008-06-24 21:45 . 2008-06-24 21:50 <REP> d-------- C:\Program Files\Foxit
2008-06-24 21:45 . 2008-06-24 21:50 <REP> d-------- C:\Program Files\Conduit
2008-06-24 21:44 . 2008-06-24 21:44 <REP> d-------- C:\Program Files\Foxit Software
2008-06-24 18:41 . 2008-06-24 18:41 <REP> d-------- C:\Program Files\Avira
2008-06-24 17:44 . 2008-06-24 17:44 <REP> d-------- C:\Documents and Settings\LocalService\Mes documents
2008-06-24 17:29 . 2008-06-24 18:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-06-20 19:47 . 2008-06-20 19:47 247,808 --------- C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 19:47 . 2008-06-20 19:47 147,968 --------- C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 13:51 . 2008-06-20 13:51 361,600 --------- C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 13:40 . 2008-06-20 13:40 138,496 --------- C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 13:08 . 2008-06-20 13:08 225,856 --------- C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-17 18:00 . 2008-06-17 18:00 <REP> d-------- C:\Documents and Settings\Yannick\Application Data\MSN Pictures Displayer
2008-06-17 16:48 . 2008-06-15 15:28 81,920 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-06-17 16:37 . 2008-07-09 23:24 <REP> d-------- C:\Program Files\Enigma Software Group
2008-06-12 17:04 . 2008-06-12 17:04 0 --a------ C:\Program Files\uninstall.dat
2008-06-11 14:35 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 14:35 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 14:35 . 2008-05-08 16:02 203,136 --------- C:\WINDOWS\system32\dllcache\rmcast.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-09 18:03 3,370 ----a-w C:\WINDOWS\system32\tmp.reg
2008-07-09 17:33 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-07-09 11:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-07-08 15:54 --------- d-----w C:\Program Files\Trend Micro
2008-07-08 12:59 73,232 ----a-w C:\Documents and Settings\Jean-Marc\Application Data\GDIPFONTCACHEV1.DAT
2008-07-07 12:07 244 ----a-w C:\Documents and Settings\Yannick\Application Data\wklnhst.dat
2008-06-25 09:36 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-06-24 19:36 --------- d-----w C:\Program Files\Conference
2008-06-24 14:37 --------- d-----w C:\Program Files\Symantec
2008-06-24 14:37 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-06-24 14:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-05 20:12 --------- d-----w C:\Program Files\Navilog1
2008-06-05 19:23 --------- d-----w C:\Program Files\CCleaner
2008-05-29 07:35 86,528 ----a-w C:\WINDOWS\system32\VACFix.exe
2008-05-27 23:51 --------- d-----w C:\Program Files\Alwil Software
2008-05-27 23:30 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-26 17:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-20 09:56 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-05-18 19:40 82,944 ----a-w C:\WINDOWS\system32\IEDFix.exe
2008-05-18 19:40 82,944 ----a-w C:\WINDOWS\system32\404Fix.exe
2008-05-09 10:55 90,112 ----a-w C:\WINDOWS\system32\wshext.dll
2008-05-09 10:55 90,112 ------w C:\WINDOWS\system32\dllcache\wshext.dll
2008-05-09 10:55 512,000 ------w C:\WINDOWS\system32\dllcache\jscript.dll
2008-05-09 10:55 430,080 ----a-w C:\WINDOWS\system32\vbscript.dll
2008-05-09 10:55 430,080 ------w C:\WINDOWS\system32\dllcache\vbscript.dll
2008-05-09 10:55 180,224 ----a-w C:\WINDOWS\system32\scrobj.dll
2008-05-09 10:55 180,224 ------w C:\WINDOWS\system32\dllcache\scrobj.dll
2008-05-09 10:55 172,032 ----a-w C:\WINDOWS\system32\scrrun.dll
2008-05-09 10:55 172,032 ------w C:\WINDOWS\system32\dllcache\scrrun.dll
2008-05-08 11:24 155,648 ----a-w C:\WINDOWS\system32\wscript.exe
2008-05-08 11:24 155,648 ------w C:\WINDOWS\system32\dllcache\wscript.exe
2008-05-07 09:07 135,168 ----a-w C:\WINDOWS\system32\cscript.exe
2008-05-07 09:07 135,168 ------w C:\WINDOWS\system32\dllcache\cscript.exe
2008-05-07 05:11 1,294,336 ------w C:\WINDOWS\system32\quartz.dll
2008-05-07 05:11 1,294,336 ------w C:\WINDOWS\system32\dllcache\quartz.dll
2008-04-27 18:32 98,304 ----a-w C:\WINDOWS\DUMP441d.tmp
2008-04-27 18:29 90,112 ----a-w C:\WINDOWS\DUMP448a.tmp
2008-04-27 18:27 90,112 ----a-w C:\WINDOWS\DUMP4584.tmp
2008-04-27 18:26 90,112 ----a-w C:\WINDOWS\DUMP465f.tmp
2008-04-26 06:55 98,304 ----a-w C:\WINDOWS\DUMP4527.tmp
2008-04-25 17:10 98,304 ----a-w C:\WINDOWS\DUMP44aa.tmp
2008-04-25 13:29 90,112 ----a-w C:\WINDOWS\DUMP4e9d.tmp
2008-04-25 13:15 90,112 ----a-w C:\WINDOWS\DUMP511d.tmp
2008-04-25 13:14 90,112 ----a-w C:\WINDOWS\DUMP5033.tmp
2008-04-23 20:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-04-22 07:41 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-04-22 07:41 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-04-21 17:20 90,112 ----a-w C:\WINDOWS\DUMP51b9.tmp
2008-04-21 17:18 98,304 ----a-w C:\WINDOWS\DUMP4f77.tmp
2008-04-21 17:16 98,304 ----a-w C:\WINDOWS\DUMP4edb.tmp
2008-04-21 17:14 90,112 ----a-w C:\WINDOWS\DUMP4f2a.tmp
2008-04-21 17:13 98,304 ----a-w C:\WINDOWS\DUMP4ebc.tmp
2008-04-21 17:10 98,304 ----a-w C:\WINDOWS\DUMP4f29.tmp
2008-04-21 17:08 90,112 ----a-w C:\WINDOWS\DUMP53bd.tmp
2008-04-20 05:07 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-04-19 21:29 98,304 ----a-w C:\WINDOWS\DUMP54e6.tmp
2008-04-19 21:27 65,536 ----a-w C:\WINDOWS\DUMP65de.tmp
2008-04-19 13:56 98,304 ----a-w C:\WINDOWS\DUMP58fd.tmp
2008-04-19 13:54 98,304 ----a-w C:\WINDOWS\DUMP590c.tmp
2008-04-14 02:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-14 02:37 332,800 ----a-w C:\WINDOWS\system32\netsetup.exe
2008-04-14 02:33 98,816 ----a-w C:\WINDOWS\system32\psbase.dll
2008-04-14 02:32 86,073 ----a-w C:\WINDOWS\system32\dllcache\voicesub.dll
2008-04-14 02:32 764,416 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-14 02:32 76,288 ----a-w C:\WINDOWS\system32\uniime.dll
2008-04-14 02:32 76,288 ----a-w C:\WINDOWS\system32\dllcache\uniime.dll
2008-04-14 02:32 67,584 ----a-w C:\WINDOWS\system32\dllcache\pmigrate.dll
2008-04-14 02:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 02:32 53,760 ----a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll
2008-04-14 02:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-14 02:32 426,041 ----a-w C:\WINDOWS\system32\dllcache\voicepad.dll
2008-04-14 02:32 175,104 ----a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll
2008-04-14 02:32 15,872 ----a-w C:\WINDOWS\system32\dllcache\padrs404.dll
2008-04-14 02:32 15,360 ----a-w C:\WINDOWS\system32\dllcache\padrs804.dll
2008-04-14 02:32 10,240 ----a-w C:\WINDOWS\system32\dllcache\tmigrate.dll
2008-04-14 02:07 2,147,328 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 02:07 2,025,984 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-14 02:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-14 02:04 93,184 ----a-w C:\WINDOWS\system32\msxml6r.dll
2008-04-14 02:04 93,184 ------w C:\WINDOWS\system32\dllcache\msxml6r.dll
2008-04-14 02:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-14 02:02 50,688 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-14 02:00 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-14 01:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-14 01:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-14 01:58 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.dll
2008-04-14 01:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-14 01:54 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 22:49 72,848 ----a-w C:\Documents and Settings\Yannick\Application Data\GDIPFONTCACHEV1.DAT
2008-04-13 18:44 17,664 ----a-w C:\WINDOWS\system32\watchdog.sys
2008-04-13 18:40 445,440 ----a-w C:\WINDOWS\system32\xpob2res.dll
2008-04-13 18:36 2,986,496 ----a-w C:\WINDOWS\system32\xpsp2res.dll
2008-04-13 18:35 24,064 ----a-w C:\WINDOWS\system32\pidgen.dll
2008-04-13 18:35 197,632 ----a-w C:\WINDOWS\system32\xpsp1res.dll
2008-04-13 18:31 7,424 ----a-w C:\WINDOWS\system32\kd1394.dll
2002-04-25 01:00 266,240 ----a-w C:\Program Files\internet explorer\plugins\PanoViewer.dll
1999-04-30 15:00 98,304 ----a-w C:\Program Files\internet explorer\plugins\UPjpeg.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 04:33 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 10:59 204288]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 19:15 45056]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-07-15 02:07 32768]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 06:00 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 06:00 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 06:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 06:00 455168]
"eRecoveryService"="C:\Program Files\Acer\eRecovery\Monitor.exe" [2005-06-20 10:03 352256]
"AspireService"="C:\Program Files\Acer\Acer eMode Management\AspireService.exe" [2005-06-21 16:39 110592]
"MediaSync"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe" [2005-06-21 16:28 425984]
"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 12:00 49152]
"XCSyncML"="C:\WINDOWS\system32\XCSyncML.exe" [2005-07-14 11:07 135168]
"Norton Save and Restore"="C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe" [2006-03-03 20:36 1582744]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 17:38 583048]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 18:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-06-14 09:48 14477312 C:\WINDOWS\RTHDCPL.EXE]
"AGRSMMSG"="AGRSMMSG.exe" [2004-04-13 13:49 88363 C:\WINDOWS\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 04:33 15360]

C:\Documents and Settings\Yannick\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2007-09-04 02:13:34 4579328]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Contr“leur de calendrier Ulead.lnk - C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe [2006-09-20 14:57:40 69632]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 15:39 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\NEC\\NEC Mobile Suite\\CommsService.exe"=
"<NO NAME>"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"C:\\Program Files\\RayV\\RayV\\RayV.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader
"6112:TCP"= 6112:TCP:Blizzard Downloader

R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys [2005-02-05 08:00]
R2 int15.sys;int15.sys;C:\Program Files\Acer\eRecovery\int15.sys [2005-01-13 15:46]
R2 Norton Save and Restore;Norton Save and Restore;C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe [2006-03-03 20:36]
R3 PAC207;USB PC Cam Plus;C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-02-24 13:29]
S3 archbus;NEC WMC USB_BJ1 Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\archbus.sys [2005-08-30 14:17]
S3 archmdfl;NEC WMC USB_BJ1 Modem Filter;C:\WINDOWS\system32\DRIVERS\archmdfl.sys [2005-08-30 14:17]
S3 archmdm;NEC WMC USB_BJ1 Modem Drivers;C:\WINDOWS\system32\DRIVERS\archmdm.sys [2005-08-30 14:17]
S3 archobex;NEC WMC USB_BJ1 OBEX Interface Drivers (WDM);C:\WINDOWS\system32\DRIVERS\archobex.sys [2005-08-30 14:17]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-06-12 19:09:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-07-10 09:26:44 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-10 14:28:17
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-07-10 14:29:28
ComboFix-quarantined-files.txt 2008-07-10 12:29:09

Pre-Run: 68,036,509,696 octets libres
Post-Run: 68,713,066,496 octets libres

245 --- E O F --- 2008-07-07 08:24:16

jmd74 · Answer

Attentions je ne l'ai pas fait en mode sans échec !

green day · Answer

ok, vu beaucoup de saletés ! 

Télécharge SDFix sur ton bureau 

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe 

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. 
Redémarre ton ordinateur en mode sans échec 
Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.cmd pour lancer le script. 
Appuie sur Y pour commencer le processus de nettoyage. 
Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer. 
Appuie sur une touche pour redémarrer le PC. 
Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers. 
Après le chargement du Bureau, l'outil terminera son travail et affichera Finished. 
Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau. 
Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt. 
Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis ! 


++

jmd74 · Answer

Y n'est pas proposé comme choix dans ce programme.

jmd74 · Answer

J'ai quand même essayer tu me dira ce que tu en pense.

jmd74 · Answer

[b]System Report[/b]
*************

Run on 12/07/2008 at 00:02

Microsoft Windows XP [version 5.1.2600]

Current user is an administrator

[b]Running Processes[/b]:

\SystemRoot\System32\smss.exe [688]
\??\C:\WINDOWS\system32\csrss.exe [764]
\??\C:\WINDOWS\system32\winlogon.exe [800]
C:\WINDOWS\system32\services.exe [844]
C:\WINDOWS\system32\lsass.exe [856]
C:\WINDOWS\system32\Ati2evxx.exe [1024]
C:\WINDOWS\system32\svchost.exe [1040]
C:\WINDOWS\system32\svchost.exe [1120]
C:\Program Files\Windows Defender\MsMpEng.exe [1240]
C:\WINDOWS\System32\svchost.exe [1296]
C:\WINDOWS\system32\svchost.exe [1384]
C:\WINDOWS\system32\svchost.exe [1496]
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe [1596]
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe [1724]
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [1796]
C:\WINDOWS\system32\Ati2evxx.exe [1904]
C:\WINDOWS\Explorer.EXE [1988]
C:\WINDOWS\system32\spoolsv.exe [232]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [340]
C:\WINDOWS\RTHDCPL.EXE [748]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [820]
C:\WINDOWS\AGRSMMSG.exe [1364]
C:\Program Files\Acer\Acer eMode Management\AspireService.exe [1380]
C:\Program Files\Acer\Acer eConsole\MediaSync.exe [1468]
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [1564]
C:\WINDOWS\system32\XCSyncML.exe [976]
C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe [1668]
C:\Program Files\iTunes\iTunesHelper.exe [1900]
C:\Program Files\acer\Acer eConsole\MediaServerService.exe [240]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [216]
C:\WINDOWS\system32\ctfmon.exe [280]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [484]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [516]
C:\Program Files\Acer\eRecovery\Monitor.exe [560]
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [1376]
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [1476]
C:\WINDOWS\System32\svchost.exe [1748]
C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe [572]
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2096]
C:\WINDOWS\System32\PAStiSvc.exe [2412]
C:\WINDOWS\system32\svchost.exe [2548]
C:\WINDOWS\system32\SearchIndexer.exe [2724]
C:\Program Files\Windows Media Player\WMPNetwk.exe [2860]
C:\WINDOWS\system32\fxssvc.exe [3300]
C:\Program Files\iPod\bin\iPodService.exe [160]
C:\WINDOWS\System32\alg.exe [2536]
C:\Program Files\Mozilla Firefox\firefox.exe [4036]
C:\WINDOWS\system32\SearchProtocolHost.exe [3552]
C:\WINDOWS\system32\SearchFilterHost.exe [3368]


[b]Drivers - Running[/b]:

ACPI
Afc
AFD
AliIde
Arp1394
atapi
ati2mtag
audstub
avgio
avgntflt
avipbb
Beep
Cdfs
Cdrom
Disk
eeCtrl
Fastfat
Fips
FltMgr
Ftdisk
GEARAspiWDM
Gpc
HDAudBus
hidusb
HTTP
i8042prt
Imapi
int15.sys
IntcAzAudAddService
intelppm
IpNat
IPSec
isapnp
Kbdclass
kbdhid
KSecDD
m5287
mnmdd
Mouclass
mouhid
MountMgr
MRxDAV
MRxSmb
Msfs
mssmbios
Mup
NDIS
NdisTapi
Ndisuio
NdisWan
NDProxy
NetBIOS
NetBT
NIC1394
Npfs
Ntfs
NTIDrvr
Null
ohci1394
PAC207
Parport
PartMgr
PCI
PptpMiniport
PSched
Ptilink
PxHelp20
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
redbook
serenum
Serial
sr
Srv
ssmdrv
swenum
SymSnap
sysaudio
Tcpip
TermDD
UBHelper
Update
usbccgp
usbehci
usbhub
usbohci
USBSTOR
V2IMount
VgaSave
VolSnap
Wanarp
wdmaud
WS2IFSL
yukonwxp


[b]Drivers - Stopped[/b]:

Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
AgereSoftModem
Aha154x
aic78u2
aic78xx
amsint
archbus
archmdfl
archmdm
archobex
asc
asc3350p
asc3550
AsyncMac
Atdisk
Atmarpc
cbidf2k
CCDECODE
cd20xrnt
Cdaudio
Changer
CmdIde
Cpqarray
dac960nt
dmboot
dmio
dmload
DMusic
dpti2o
drmkaud
Fdc
Flpydisk
HdAudAddService
hpn
HWIONT
i2omgmt
i2omp
ini910u
IntelIde
Ip6Fw
IpFilterDriver
IpInIp
IRENUM
kmixer
lbrtfdc
Modem
MODEMCSA
mraid35x
MSKSSRV
MSPCLOCK
MSPQM
MSTEE
NABTSFEC
NdisIP
NwlnkFlt
NwlnkFwd
ParVdm
PCIDump
PCIIde
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RDPWD
Secdrv
Sfloppy
Simbad
SLIP
Sparrow
splitter
streamip
swmidi
symc810
symc8xx
sym_hi
sym_u3
TDPIPE
TDTCP
TosIde
Udfs
ultra
usbprint
usbscan
ViaIde
WDICA
WSTCODEC
WudfPf
WudfRd


[b]Services - Running[/b]:

aawservice
Acer
ALG
AntiVirScheduler
AntiVirService
Apple
Ati
AudioSrv
BITS
Browser
ccEvtMgr
ccSetMgr
CryptSvc
DcomLaunch
Dhcp
Dnscache
ERSvc
Eventlog
EventSystem
FastUserSwitchingCompatibility
Fax
helpsvc
HidServ
HTTPFilter
iPod
lanmanserver
lanmanworkstation
LiveUpdate
LmHosts
Netman
Nla
Norton
Planificateur
PlugPlay
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
Spooler
srservice
SSDPSRV
STI
stisvc
Symantec
TapiSrv
TermService
Themes
TrkWks
upnphost
W32Time
WebClient
WinDefend
winmgmt
WMPNetworkSvc
wscsvc
WSearch
wuauserv
WZCSVC


[b]Services - Stopped[/b]:

Adobe
Alerter
AppMgmt
aspnet_state
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
CLTNetCnService
COMSysApp
dmadmin
dmserver
Dot3svc
EapHost
FontCache3.0.0.0
hkmsvc
idsvc
ImapiService
LiveUpdate
LiveUpdate
Messenger
mnmsrvc
MSDTC
MSIServer
napagent
NetDDE
NetDDEdsdm
Netlogon
NetTcpPortSharing
NSCService
NtLmSsp
NtmsSvc
RasAuto
RDSessMgr
RemoteAccess
RpcLocator
RSVP
SCardSvr
SwPrv
SysmonLog
UPS
usnjsvc
VSS
WLSetupSvc
WmdmPmSN
WmiApSrv
WudfSvc
xmlprov


[b]Files Created/Modified - 60 Days[/b]:


C:\

10 Jul 2008 21:21:04            214 A.SH.     "C:\boot.ini"
10 Jul 2008 14:29:30         17 509 A....     "C:\ComboFix.txt"
 5 Jun 2008 22:15:02             74 A....     "C:\fixnavi.txt"
 5 Jun 2008 21:12:32             21 A....     "C:\gennavi.txt"
11 Jul 2008 23:46:24  2 012 663 808 A.SH.     "C:\hiberfil.sys"
26 Jun 2008  1:44:12              6 A....     "C:\ISACER.ID"
 9 Jul 2008 10:17:36        125 692 A....     "C:\logfile"
24 Jun 2008 23:53:10        252 240 A.SHR     "C:
tldr"
11 Jul 2008 23:46:18  2 012 590 080 A.SH.     "C:\pagefile.sys"
 9 Jul 2008 20:06:16          2 381 A....     "C:apport.txt"
 9 Jul 2008  1:00:44         14 880 A....     "C:\SAFEBOOT_REPAIR.TXT"
12 May 2008  0:41:44            244 A..H.     "C:\sqmnoopt19.sqm"
12 May 2008  0:41:44            232 A..H.     "C:\sqmdata19.sqm"
16 May 2008  0:55:02            232 A..H.     "C:\sqmdata00.sqm"
16 May 2008  0:55:02            244 A..H.     "C:\sqmnoopt00.sqm"
11 Jul 2008 23:13:48          4 096 A.SH.     "C:\VSNAP.IDX"


C:\WINDOWS\

11 Jul 2008 23:47:18              0 A....     "C:\WINDOWS\0.log"
11 Jul 2008 23:46:32          2 048 A.S..     "C:\WINDOWS\bootstat.dat"
 9 Jul 2008  1:26:48          4 122 A....     "C:\WINDOWS\comsetup.log"
 9 Jul 2008 13:13:20         11 098 A....     "C:\WINDOWS\DPINST.LOG"
 9 Jul 2008  1:26:48         12 318 A....     "C:\WINDOWS\FaxSetup.log"
 9 Jul 2008  1:26:48          1 938 A....     "C:\WINDOWS\iis6.log"
 9 Jul 2008  1:26:40          1 355 A....     "C:\WINDOWS\imsins.BAK"
 9 Jul 2008  1:26:48          1 355 A....     "C:\WINDOWS\imsins.log"
 9 Jul 2008  1:26:40         14 348 A....     "C:\WINDOWS\KB951748.log"
 9 Jul 2008  1:26:48         14 855 A....     "C:\WINDOWS\KB951978.log"
 9 Jul 2008  1:26:48            618 A....     "C:\WINDOWS\msgsocm.log"
 9 Jul 2008 19:54:56          2 057 A....     "C:\WINDOWS\msnfix.txt"
11 Jul 2008 23:45:14      2 660 310 A....     "C:\WINDOWS
tbtlog.txt"
 9 Jul 2008  1:26:48          2 494 A....     "C:\WINDOWS
tdtcsetup.log"
 9 Jul 2008  1:26:48          5 912 A....     "C:\WINDOWS\ocgen.log"
 9 Jul 2008  1:26:48            684 A....     "C:\WINDOWS\ocmsn.log"
19 Jun 2008 16:22:22            385 A....     "C:\WINDOWS\ODBC.INI"
25 Jun 2008 23:37:16            345 A....     "C:\WINDOWS\OEWABLog.txt"
10 Jul 2008 21:16:02          1 409 A....     "C:\WINDOWS\QTFont.for"
11 Jul 2008 23:47:16         54 156 A..H.     "C:\WINDOWS\QTFont.qfn"
11 Jul 2008 23:41:08         32 506 A....     "C:\WINDOWS\SchedLgU.Txt"
11 Jul 2008 22:58:52            240 A....     "C:\WINDOWS\setupact.log"
 9 Jul 2008  1:26:48         79 807 A....     "C:\WINDOWS\setupapi.log"
26 Jun 2008  1:09:38              0 A....     "C:\WINDOWS\setuperr.log"
26 Jun 2008  1:11:34        799 466 A....     "C:\WINDOWS\SIGVERIF.TXT"
10 Jul 2008 14:28:16            256 A....     "C:\WINDOWS\system.ini"
 9 Jul 2008  1:26:48          4 718 A....     "C:\WINDOWS	soc.log"
25 Jun 2008 21:25:50            546 A....     "C:\WINDOWS\Ulead32.ini"
 9 Jul 2008  1:26:46          1 378 A....     "C:\WINDOWS\updspapi.log"
11 Jul 2008 23:47:18            159 A....     "C:\WINDOWS\wiadebug.log"
11 Jul 2008 23:47:18             50 A....     "C:\WINDOWS\wiaservc.log"
11 Jul 2008 22:55:36          1 293 A....     "C:\WINDOWS\win.ini"
11 Jul 2008 23:48:36      1 461 862 A....     "C:\WINDOWS\WindowsUpdate.log"
16 Jun 2008 20:04:40         12 431 .....     "C:\WINDOWS\$NtUninstallKB951376-v2$\kb951376-v2.cat"
11 Jun 2008 15:35:20         98 304 A....     "C:\WINDOWS\$NtUninstallKB950760$eg00001"
14 Jun 2008 19:59:52        272 768 .....     "C:\WINDOWS\$NtServicePackUninstall$\bthport.sys"
14 Jun 2008 19:59:52        272 768 .....     "C:\WINDOWS\$NtServicePackUninstall$\bthport.sys.000"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00003"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00004"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00006"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00007"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00008"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00009"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00016"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00017"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00018"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00019"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00020"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00021"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00022"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00023"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00024"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00025"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00026"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00027"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00028"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00029"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00030"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00031"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00032"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00033"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00034"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00035"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00036"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00037"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00038"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00039"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00040"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00041"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00042"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00043"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00044"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00045"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00046"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00047"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00048"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00049"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00050"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00051"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00052"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00053"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00054"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00055"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00056"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00057"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00058"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00059"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00060"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00061"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00062"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00063"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00064"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00065"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00066"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00067"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00068"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00069"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00070"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00071"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00072"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00073"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00074"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00075"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00076"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00077"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00078"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00079"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00080"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00081"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00082"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00083"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00084"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00085"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00086"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00087"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00088"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00089"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00090"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00091"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00092"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00093"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00094"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00095"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00096"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00097"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00098"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00099"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00100"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00101"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00102"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00103"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00104"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00105"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00106"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00107"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00108"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00109"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00110"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00111"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00112"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00113"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00114"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00115"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00116"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00117"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00118"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00119"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00120"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00121"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00122"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00123"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00124"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00125"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00126"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00127"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00128"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00129"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00130"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00131"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00132"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00150"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00151"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00152"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00153"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00154"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00155"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00156"
24 Jun 2008 23:52:04         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00160"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00161"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00162"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00163"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00164"
24 Jun 2008 23:52:04         45 056 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00165"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00166"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00167"
24 Jun 2008 23:52:04          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00168"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00169"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00170"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00171"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00172"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00173"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00174"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00175"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00176"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00177"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00178"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00179"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00180"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00181"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00182"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00183"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00184"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00185"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00186"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00187"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00188"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00189"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00190"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00191"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00192"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00193"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00194"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00195"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00196"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00197"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00198"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00199"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00200"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00201"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00202"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00203"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00204"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00205"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00206"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00207"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00208"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00209"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00210"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00211"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00212"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00213"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00214"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00215"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00216"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00217"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00218"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00219"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00220"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00221"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00222"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00223"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00224"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00225"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00226"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00227"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00228"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00229"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00230"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00231"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00232"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00233"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00234"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00235"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00236"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00237"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00238"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00239"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00240"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00241"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00242"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00243"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00244"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00245"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00250"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00251"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00252"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00253"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00254"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00255"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00256"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00257"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00258"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00259"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00260"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00261"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00262"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00263"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00264"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00265"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00266"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00267"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00268"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00269"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00270"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00271"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00272"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00273"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00274"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00275"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00276"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00277"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00278"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00279"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00280"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00281"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00282"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00283"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00284"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00285"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00286"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00287"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00288"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00289"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00290"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00291"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00292"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00293"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00294"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00295"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00296"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00297"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00298"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00299"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00300"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00301"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00302"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00303"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00304"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00305"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00306"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00307"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00308"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00309"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00310"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00311"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00312"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00313"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00318"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00319"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00320"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00321"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00322"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00323"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00324"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00325"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00326"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00327"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00328"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00329"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00334"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00335"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00336"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00337"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00338"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00339"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00340"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00341"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00342"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00343"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00344"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00345"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00346"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00347"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00348"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00349"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00350"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00351"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00352"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00353"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00354"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00355"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00356"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00357"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00358"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00359"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00360"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00361"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00362"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00363"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00364"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00365"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00366"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00367"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00368"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00369"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00370"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00371"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00372"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00373"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00374"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00375"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00376"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00377"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00389"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00390"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00391"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00392"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00393"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00394"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00395"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00396"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00397"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00398"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00399"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00400"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00401"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00402"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00407"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00408"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00409"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00410"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00411"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00412"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00413"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00414"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00415"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00416"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00417"
24 Jun 2008 23:52:06        212 992 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00501"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00502"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00503"
24 Jun 2008 23:52:06          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00504"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00505"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00507"
24 Jun 2008 23:52:08         16 384 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00508"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00516"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00520"
24 Jun 2008 23:52:08         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00521"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00522"
24 Jun 2008 23:52:08         53 248 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00523"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00524"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00540"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00541"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00542"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00543"
24 Jun 2008 23:52:08         16 384 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00575"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00576"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00577"
24 Jun 2008 23:52:08         36 864 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00578"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00644"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00645"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00671"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00672"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00673"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00674"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00675"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00676"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00677"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00678"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00679"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00680"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00681"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00682"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00683"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00684"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00685"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00686"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00687"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00688"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00689"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00690"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00691"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00692"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00693"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00694"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00695"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00696"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00697"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00698"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00699"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00700"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00701"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00702"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00703"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00704"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00705"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00706"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00707"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00708"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00709"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00710"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00711"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00712"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00713"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00714"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00715"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00716"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00720"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00721"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00722"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00723"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00724"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00725"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00726"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00727"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00728"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00729"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00730"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00731"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00732"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00733"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00734"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00735"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00736"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00737"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00738"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00739"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00740"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00741"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00742"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00743"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00744"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00745"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00746"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00747"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00748"
24 Jun 2008 23:52:08      1 040 384 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00749"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00750"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00751"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00752"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00753"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00754"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00755"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00756"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00757"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00758"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00759"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00760"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00761"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00762"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00763"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00764"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00765"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00766"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00767"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg00768&q

jmd74 · Answer

4 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00769"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00770"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00771"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00772"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00773"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00774"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00775"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00776"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00777"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00778"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00779"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00780"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00781"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00782"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00783"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00784"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00785"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00786"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00787"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00788"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00789"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00790"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00791"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00792"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00793"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00794"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00795"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00796"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00797"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00798"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00799"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00800"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00801"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00802"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00803"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00804"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00805"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00806"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00807"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00808"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00809"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00810"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00811"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00812"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00813"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00814"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00815"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00816"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00817"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00818"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00819"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00820"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00821"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00822"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00823"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00824"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00825"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00826"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00827"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00828"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00829"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00830"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00831"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00832"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00833"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00834"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00835"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00836"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00837"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00838"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00839"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00840"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00841"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00842"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00843"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00844"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00845"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00846"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00847"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00848"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00849"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00850"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00851"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00852"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00853"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00854"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00855"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00856"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00857"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00858"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00859"
24 Jun 2008 23:52:08          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00860"
24 Jun 2008 23:52:10      1 040 384 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00861"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00862"
24 Jun 2008 23:52:10        147 456 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00863"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00864"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00865"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00866"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00867"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00868"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00869"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00870"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00871"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00872"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00873"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00876"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00877"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00878"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00913"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00914"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00915"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00916"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00917"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00918"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00919"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00920"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00921"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00922"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00924"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00925"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00926"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00927"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00928"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00929"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00930"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00931"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00932"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00933"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00934"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00935"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00936"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00937"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00938"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00939"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00940"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00941"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00942"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00943"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00944"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00945"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00946"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00947"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00948"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00949"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00950"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00951"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00952"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00953"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00954"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00955"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00956"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00957"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00958"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00959"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00960"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00961"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00962"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00987"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00988"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00989"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00990"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00991"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00992"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00993"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00994"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00995"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00996"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00997"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00998"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg00999"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01000"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01001"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01079"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01080"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01081"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01109"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01110"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01111"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01113"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01159"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01160"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01161"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01162"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01163"
24 Jun 2008 23:52:10         20 480 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01164"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01166"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01167"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01168"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01186"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01187"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01188"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01189"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01190"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01191"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01192"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01193"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01194"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01195"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01196"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01197"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01199"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01200"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01201"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01202"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01203"
24 Jun 2008 23:52:10         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01204"
24 Jun 2008 23:52:10         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01232"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01233"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01234"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01235"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01236"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01237"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01238"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01239"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01240"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01241"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01242"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01243"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01244"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01245"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01246"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01247"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01248"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01249"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01250"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01251"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01252"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01253"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01254"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01255"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01256"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01257"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01258"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01259"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01260"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01261"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01262"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01263"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01264"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01265"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01266"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01267"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01268"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01269"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01270"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01271"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01272"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01273"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01274"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01275"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01276"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01277"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01278"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01279"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01280"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01281"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01282"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01283"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01284"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01285"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01286"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01287"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01288"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01289"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01290"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01291"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01292"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01293"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01294"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01295"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01296"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01297"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01298"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01299"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01300"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01301"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01302"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01303"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01304"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01305"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01306"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01307"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01308"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01309"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01310"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01311"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01312"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01313"
24 Jun 2008 23:52:10          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01314"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01315"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01316"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01317"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01318"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01319"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01320"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01321"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01322"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01323"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01324"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01325"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01326"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01327"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01328"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01329"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01330"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01331"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01332"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01333"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01334"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01335"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01336"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01337"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01338"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01339"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01340"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01341"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01342"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01343"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01344"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01345"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01346"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01347"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01348"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01349"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01350"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01351"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01352"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01353"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01354"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01355"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01356"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01357"
24 Jun 2008 23:52:12         16 384 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01358"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01359"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01360"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01361"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01362"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01363"
24 Jun 2008 23:52:12        368 640 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01364"
24 Jun 2008 23:52:12        335 872 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01365"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01366"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01367"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01368"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01369"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01371"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01372"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01373"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01374"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01375"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01379"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01380"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01381"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01382"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01383"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01384"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01385"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01386"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01387"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01388"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01389"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01390"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01391"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01392"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01393"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01394"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01395"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01396"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01397"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01398"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01400"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01401"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01402"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01403"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01404"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01405"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01406"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01407"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01408"
24 Jun 2008 23:52:12         28 672 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01409"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01410"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01411"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01412"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01426"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01427"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01428"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01429"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01431"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01432"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01433"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01434"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01435"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01436"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01437"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01438"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01439"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01440"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01441"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01442"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01443"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01896"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01901"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01902"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01903"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01905"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01906"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01907"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01908"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01910"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01911"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01912"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01913"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01915"
24 Jun 2008 23:52:12         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01916"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01917"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01918"
24 Jun 2008 23:52:12         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01919"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01921"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01922"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01933"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01934"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01935"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01936"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01937"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01938"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01939"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01940"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01941"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01950"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01951"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01952"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01953"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01954"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01955"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01956"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01957"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01958"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01959"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01960"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01961"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01962"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01963"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01964"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01965"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01966"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01967"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01968"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01969"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01970"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01971"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01972"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01973"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01974"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01975"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01976"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01977"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01978"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01979"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01980"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01981"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01982"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01983"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01984"
24 Jun 2008 23:52:12          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01985"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01986"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01987"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01988"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01989"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01990"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01991"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01992"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01993"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01994"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01995"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01998"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg01999"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02000"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02001"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02002"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02003"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02004"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02005"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02006"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02007"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02008"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02009"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02010"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02011"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02012"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02013"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02014"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02015"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02016"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02017"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02018"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02019"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02020"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02021"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02022"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02023"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02024"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02025"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02026"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02027"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02028"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02029"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02030"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02031"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02032"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02033"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02034"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02035"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02036"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02037"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02038"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02039"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02040"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02041"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02042"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02043"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02044"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02045"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02046"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02047"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02048"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02049"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02050"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02051"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02052"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02053"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02054"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02055"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02056"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02057"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02058"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02059"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02060"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02061"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02062"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02063"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02064"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02065"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02066"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02067"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02068"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02069"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02070"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02071"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02072"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02073"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02074"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02075"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02076"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02080"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02081"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02082"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02083"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02084"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02085"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02086"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02087"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02088"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02089"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02090"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02091"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02092"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02093"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02094"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02095"
24 Jun 2008 23:52:14         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02097"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02098"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02099"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02100"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02101"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02102"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02103"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02104"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02105"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02106"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02107"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02108"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02109"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02114"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02115"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02116"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02122"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02123"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02124"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02125"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02126"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02127"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02128"
24 Jun 2008 23:52:14         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02129"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02130"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02131"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$\reg02132"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall

jmd74 · Answer

24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02194"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02195"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02196"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02197"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02198"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02199"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02200"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02201"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02202"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02203"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02204"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02205"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02206"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02207"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02208"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02209"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02210"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02211"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02212"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02213"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02214"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02215"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02216"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02217"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02218"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02219"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02220"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02221"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02222"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02223"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02224"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02225"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02226"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02227"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02228"
24 Jun 2008 23:52:14          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02229"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02230"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02231"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02232"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02233"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02234"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02235"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02236"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02237"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02238"
24 Jun 2008 23:52:16         12 288 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02239"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02240"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02241"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02242"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02243"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02244"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02245"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02246"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02247"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02248"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02249"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02250"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02251"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02252"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02253"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02254"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02255"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02256"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02257"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02258"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02259"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02260"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02261"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02262"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02263"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02264"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02265"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02266"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02267"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02268"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02269"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02270"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02271"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02272"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02273"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02274"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02275"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02276"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02277"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02278"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02279"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02280"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02281"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02282"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02283"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02284"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02285"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02286"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02287"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02288"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02289"
24 Jun 2008 23:52:16         16 384 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02290"
24 Jun 2008 23:52:16         16 384 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02291"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02292"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02293"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02294"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02295"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02296"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02297"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02298"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02299"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02300"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02301"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02302"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02303"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02304"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02305"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02306"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02307"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02308"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02309"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02310"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02311"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02312"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02313"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02314"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02315"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02316"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02317"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02318"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02319"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02320"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02321"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02322"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02323"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02324"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02325"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02326"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02327"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02328"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02329"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02330"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02331"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02332"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02333"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02334"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02335"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02336"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02337"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02338"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02339"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02340"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02341"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02342"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02343"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02344"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02345"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02346"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02347"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02348"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02349"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02350"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02351"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02352"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02353"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02354"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02355"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02356"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02357"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02358"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02359"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02360"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02361"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02362"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02363"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02364"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02365"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02366"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02367"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02368"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02369"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02370"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02371"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02372"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02373"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02374"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02375"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02376"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02377"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02378"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02379"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02380"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02381"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02382"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02383"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02384"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02385"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02386"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02387"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02388"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02389"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02390"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02391"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02392"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02393"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02394"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02395"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02396"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02397"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02398"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02399"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02400"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02401"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02402"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02403"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02404"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02405"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02406"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02407"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02408"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02409"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02410"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02411"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02412"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02413"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02414"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02415"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02416"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02417"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02418"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02419"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02420"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02421"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02422"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02423"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02424"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02425"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02426"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02427"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02428"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02429"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02430"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02431"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02432"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02433"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02434"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02435"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02436"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02437"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02438"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02439"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02440"
24 Jun 2008 23:52:16          8 192 A....     "C:\WINDOWS\$NtServicePackUninstall$eg02441"
 8 Jul 2008 18:31:30         45 056 A....     "C:\WINDOWS\BDOSCAN8\avxdisk.dll"
 8 Jul 2008 18:31:32         10 240 A....     "C:\WINDOWS\BDOSCAN8\avxs.dll"
 8 Jul 2008 18:31:32         27 136 A....     "C:\WINDOWS\BDOSCAN8\avxt.dll"
 8 Jul 2008 18:31:34        181 760 A....     "C:\WINDOWS\BDOSCAN8\bdcore.dll"
 8 Jul 2008 18:30:20             87 A....     "C:\WINDOWS\BDOSCAN8\bdoscan.ini"
10 Jul 2008 21:08:06            930 A....     "C:\WINDOWS\BDOSCAN8\bdoscan.log"
10 Jul 2008 19:11:50         77 824 A....     "C:\WINDOWS\BDOSCAN8\bdupd.dll.updpnd"
 8 Jul 2008 18:31:32          1 878 A....     "C:\WINDOWS\BDOSCAN8\boot.xmd"
 8 Jul 2008 18:31:34        142 848 A....     "C:\WINDOWS\BDOSCAN8\libfn.dll"
 8 Jul 2008 18:31:32         86 016 A....     "C:\WINDOWS\BDOSCAN8\librtvr.dll"
10 Jul 2008 19:12:14         15 206 A....     "C:\WINDOWS\BDOSCAN8\plugins.htm"
 8 Jul 2008 18:31:32            254 A....     "C:\WINDOWS\BDOSCAN8tvr2.html"
 8 Jul 2008 20:13:22          5 953 A....     "C:\WINDOWS\BDOSCAN8tvr_rep.html"
 8 Jul 2008 18:31:32          4 746 A....     "C:\WINDOWS\BDOSCAN8tvr.html"
 8 Jul 2008 18:31:32          6 828 A....     "C:\WINDOWS\BDOSCAN8\scanoptions.tsi"
 8 Jul 2008 18:31:32          6 828 A....     "C:\WINDOWS\BDOSCAN8\scanoptions.tsk"
 8 Jul 2008 18:31:32            195 A....     "C:\WINDOWS\BDOSCAN8\scanres2.html"
 8 Jul 2008 18:31:32         17 067 A....     "C:\WINDOWS\BDOSCAN8\scanres.html"
10 Jul 2008 21:05:40         17 041 A....     "C:\WINDOWS\BDOSCAN8\scanrep.html"
 9 Jul 2008  1:26:28            730 A....     "C:\WINDOWS\Debug\mrt.log"
 9 Jul 2008  1:26:28            576 A....     "C:\WINDOWS\Debug\mrteng.log"
11 Jul 2008 23:46:34              0 A....     "C:\WINDOWS\Debug\PASSWD.LOG"
17 Jun 2008 15:26:06            144 A....     "C:\WINDOWS\Downloaded Program Files\swdir.inf"
24 Jun 2008 23:26:00            112 A....     "C:\WINDOWS\EHome\medctrro.cmd"
26 Jun 2008  1:32:12         28 531 A....     "C:\WINDOWS\Help\bootcons.chw"
26 Jun 2008  1:28:56         35 443 A....     "C:\WINDOWS\Help\diagboot.chw"
26 Jun 2008  1:36:40         49 136 A....     "C:\WINDOWS\Help\msinfo32.chw"
24 Jun 2008 23:58:32         49 036 A....     "C:\WINDOWS\inf\accessor.PNF"
19 Jun 2008 11:14:52            926 A....     "C:\WINDOWS\inf\branches.inf"
24 Jun 2008 23:52:26          4 256 A....     "C:\WINDOWS\inf\branches.PNF"
24 Jun 2008 23:57:40         25 828 A....     "C:\WINDOWS\inf\bth.PNF"
24 Jun 2008 23:57:40        222 468 A....     "C:\WINDOWS\inf\drvindex.PNF"
24 Jun 2008 23:58:30         17 616 A....     "C:\WINDOWS\inf\fp40ext.PNF"
24 Jun 2008 23:52:26          5 900 A....     "C:\WINDOWS\inf\GEARAspiWDM.PNF"
24 Jun 2008 23:57:44          6 876 A....     "C:\WINDOWS\inf\hdaudbus.PNF"
26 Jun 2008  1:09:36         13 144 A....     "C:\WINDOWS\inf\hidserv.PNF"
24 Jun 2008 23:58:32          4 488 A....     "C:\WINDOWS\inf\ieaccess.PNF"
24 Jun 2008 23:58:30        105 264 A....     "C:\WINDOWS\inf\ims.PNF"
24 Jun 2008 23:52:26      1 476 288 A....     "C:\WINDOWS\inf\INFCACHE.1"
26 Jun 2008  1:09:36        111 428 A....     "C:\WINDOWS\inf\input.PNF"
26 Jun 2008  1:09:28         68 452 A....     "C:\WINDOWS\inf\keyboard.PNF"
24 Jun 2008 23:58:30          2 916 A....     "C:\WINDOWS\inf\koc.PNF"
26 Jun 2008  1:09:34         92 444 A....     "C:\WINDOWS\inf\ks.PNF"
26 Jun 2008  1:09:56         44 044 A....     "C:\WINDOWS\inf\kscaptur.PNF"
26 Jun 2008  1:09:56         25 016 A....     "C:\WINDOWS\inf\ksfilter.PNF"
24 Jun 2008 23:57:40      1 010 144 A....     "C:\WINDOWS\inf\LAYOUT.PNF"
26 Jun 2008  1:09:26        191 804 A....     "C:\WINDOWS\inf\machine.PNF"
26 Jun 2008  1:09:40         49 964 A....     "C:\WINDOWS\inf\mshdc.PNF"
25 Jun 2008  0:03:36         36 268 A....     "C:\WINDOWS\inf\msoe50.PNF"
24 Jun 2008 23:58:32          3 652 A....     "C:\WINDOWS\inf
etbeac.PNF"
25 Jun 2008  0:03:20          3 704 A....     "C:\WINDOWS\inf
etfw.PNF"
24 Jun 2008 23:58:30         17 544 A....     "C:\WINDOWS\inf
etoc.PNF"
24 Jun 2008 23:58:32          4 408 A....     "C:\WINDOWS\inf\oeaccess.PNF"
24 Jun 2008 23:58:32         14 724 A....     "C:\WINDOWS\inf\p2p.PNF"
25 Jun 2008  0:05:24         43 732 A....     "C:\WINDOWS\inf\sceregvl.PNF"
24 Jun 2008 23:57:42         10 956 A....     "C:\WINDOWS\inf\sdbus.PNF"
24 Jun 2008 23:58:30          6 740 A....     "C:\WINDOWS\inf\SYSOC.PNF"
24 Jun 2008 23:58:30        132 220 A....     "C:\WINDOWS\inf	soc.PNF"
26 Jun 2008  1:09:40         51 392 A....     "C:\WINDOWS\inf\usbport.PNF"
24 Jun 2008 23:58:30         12 500 A....     "C:\WINDOWS\inf\wbemoc.PNF"
24 Jun 2008 23:58:32         16 776 A....     "C:\WINDOWS\inf\wordpad.PNF"
26 Jun 2008  0:46:00         90 112 A....     "C:\WINDOWS\Minidump\Mini062608-01.dmp"
26 Jun 2008 12:23:50         90 112 A....     "C:\WINDOWS\Minidump\Mini062608-02.dmp"
30 Jun 2008 17:14:18         90 112 A....     "C:\WINDOWS\Minidump\Mini063008-01.dmp"
30 Jun 2008 17:30:56         90 112 A....     "C:\WINDOWS\Minidump\Mini063008-02.dmp"
24 May 2008 11:10:06         54 022 A....     "C:\WINDOWS
etwork diagnostic\xpnetdiag.xml"
11 Jul 2008 22:47:32      1 048 576 A....     "C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{2704E63A-2389-4BAF-8B59-7743F88E1F1F}.crmlog"
18 May 2008 21:40:36         82 944 A....     "C:\WINDOWS\system32\404Fix.exe"
28 May 2008  1:50:08          3 072 A....     "C:\WINDOWS\system32\CONFIG.NT"
20 Jun 2008 19:47:22        147 968 A....     "C:\WINDOWS\system32\dnsapi.dll"
11 Jul 2008 23:47:46              0 .....     "C:\WINDOWS\system32\eRLog.ini"
25 Jun 2008  0:01:44        321 136 A....     "C:\WINDOWS\system32\FNTCACHE.DAT"
18 May 2008 21:40:36         82 944 A....     "C:\WINDOWS\system32\IEDFix.exe"
15 Jun 2008 15:28:44         81 920 A....     "C:\WINDOWS\system32\IEDFix.C.exe"
25 Jun 2008 18:15:46     17 972 344 A....     "C:\WINDOWS\system32\MRT.exe"
20 Jun 2008 19:47:22        247 808 A....     "C:\WINDOWS\system32\mswsock.dll"
25 Jun 2008  0:07:00         72 116 A....     "C:\WINDOWS\system32\perfc009.dat"
25 Jun 2008  0:07:00         94 810 A....     "C:\WINDOWS\system32\perfc00C.dat"
25 Jun 2008  0:07:00        443 102 A....     "C:\WINDOWS\system32\perfh009.dat"
25 Jun 2008  0:07:00        535 220 A....     "C:\WINDOWS\system32\perfh00C.dat"
25 Jun 2008  0:07:00      1 160 288 A....     "C:\WINDOWS\system32\PerfStringBackup.INI"
18 May 2008 20:08:30             64 A....     "C:\WINDOWS\system32\SNDALRT.log"
18 May 2008 20:08:30             64 A....     "C:\WINDOWS\system32\SNDCON.log"
18 May 2008 20:08:30             64 A....     "C:\WINDOWS\system32\SNDDBG.log"
18 May 2008 20:08:30            936 A....     "C:\WINDOWS\system32\SNDFW.log"
18 May 2008 20:08:30            668 A....     "C:\WINDOWS\system32\SNDIDS.log"
18 May 2008 20:08:30            370 A....     "C:\WINDOWS\system32\SNDSYS.log"
25 Jun 2008  0:03:04             90 A....     "C:\WINDOWS\system32\spupdwxp.log"
 9 Jul 2008 20:03:30          3 370 A....     "C:\WINDOWS\system32	mp.reg"
 9 Jul 2008 20:03:30              0 A....     "C:\WINDOWS\system32	mp.txt"
 5 Jun 2008 22:17:54              0 A....     "C:\WINDOWS\system32	mp.MSNFix"
29 May 2008  9:35:36         86 528 A....     "C:\WINDOWS\system32\VACFix.exe"
 5 Jun 2008 19:36:08          8 628 A..H.     "C:\WINDOWS\system32\winhelp.GID"
11 Jul 2008 23:48:20          1 158 A....     "C:\WINDOWS\system32\wpa.dbl"
10 Jul 2008 21:09:02            284 A....     "C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
11 Jul 2008 23:50:04            330 A..H.     "C:\WINDOWS\Tasks\MP Scheduled Scan.job"
11 Jul 2008 23:46:58              6 A..H.     "C:\WINDOWS\Tasks\SA.DAT"
 7 Jul 2008  6:26:38            127 A....     "C:\WINDOWS\Temp\D653F3EC.TMP"
11 Jul 2008 20:32:06              0 A....     "C:\WINDOWS\Temp\JET10D3.tmp"
10 Jul 2008 18:56:52              0 A....     "C:\WINDOWS\Temp\JET29AB.tmp"
11 Jul 2008 16:58:44              0 A....     "C:\WINDOWS\Temp\JET308.tmp"
10 Jul 2008 21:16:04              0 A....     "C:\WINDOWS\Temp\JET32D2.tmp"
10 Jul 2008 14:58:34              0 A....     "C:\WINDOWS\Temp\JET3488.tmp"
11 Jul 2008 23:47:18              0 A....     "C:\WINDOWS\Temp\JET369B.tmp"
11 Jul 2008 23:32:28              0 A....     "C:\WINDOWS\Temp\JET3A93.tmp"
11 Jul 2008 19:16:26              0 A....     "C:\WINDOWS\Temp\JET3DB0.tmp"
10 Jul 2008 23:58:14              0 A....     "C:\WINDOWS\Temp\JET4011.tmp"
10 Jul 2008 16:12:30              0 A....     "C:\WINDOWS\Temp\JET412A.tmp"
10 Jul 2008 11:24:14              0 A....     "C:\WINDOWS\Temp\JET4B6B.tmp"
11 Jul 2008 23:18:54              0 A....     "C:\WINDOWS\Temp\JET5CF0.tmp"
10 Jul 2008 17:27:40              0 A....     "C:\WINDOWS\Temp\JET857.tmp"
11 Jul 2008 22:25:28              0 A....     "C:\WINDOWS\Temp\JETA.tmp"
10 Jul 2008 16:07:02              0 A....     "C:\WINDOWS\Temp\JETCF46.tmp"
10 Jul 2008 14:38:10              0 A....     "C:\WINDOWS\Temp\JETF6E3.tmp"
11 Jul 2008 23:09:08              0 A....     "C:\WINDOWS\Temp\JETFD99.tmp"
11 Jul 2008 22:45:30          7 460 A....     "C:\WINDOWS\Temp\MpCmdRun.log"
12 Jul 2008  0:01:14        148 630 A....     "C:\WINDOWS\Temp\scs13.tmp"
10 Jul 2008 14:35:20              0 A....     "C:\WINDOWS\Temp\T30DebugLogFile.txt"
12 Jul 2008  0:01:14        524 288 A....     "C:\WINDOWS\Temp\TMP00000036DE228EA20D96042E"
11 Jul 2008 23:46:48            255 A....     "C:\WINDOWS\Temp\WGAErrLog.txt"
11 Jul 2008 23:48:28            409 A....     "C:\WINDOWS\Temp\WGANotify.settings"
28 May 2008 13:13:58         15 123 A....     "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.inf"
28 May 2008 13:13:54            370 A....     "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.txt"
24 Jun 2008 23:58:58          9 424 A....     "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.inf"
24 Jun 2008 23:58:58            409 A....     "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.txt"
24 Jun 2008 16:46:06         16 612 A....     "C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.inf"
24 Jun 2008 16:45:54            691 A....     "C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.txt"
11 Jun 2008 15:35:22         14 421 A....     "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.inf"
11 Jun 2008 15:35:20            122 A....     "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.txt"
24 Jun 2008 23:58:46          9 161 A....     "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.inf"
24 Jun 2008 23:58:44            265 A....     "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.txt"
24 Jun 2008 23:58:52          9 350 A....     "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.inf"
24 Jun 2008 23:58:50            296 A....     "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.txt"
 9 Jul 2008  1:26:40         11 192 A....     "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.inf"
 9 Jul 2008  1:26:34          1 084 A....     "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.txt"
24 Jun 2008 23:59:06          9 095 A....     "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.inf"
24 Jun 2008 23:59:04            257 A....     "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.txt"
 9 Jul 2008  1:26:48         11 875 A....     "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.inf"
 9 Jul 2008  1:26:44          1 658 A....     "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.txt"
14 May 2008 11:14:16         21 523 A....     "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.inf"
14 May 2008 11:14:06          4 366 A....     "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.txt"
11 Jun 2008 15:35:14         15 945 A....     "C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.inf"
11 Jun 2008 15:35:10            415 A....     "C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.txt"
11 Jun 2008 15:35:30         15 934 A....     "C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.inf"
11 Jun 2008 15:35:28            478 A....     "C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.txt"
11 Jun 2008 15:35:36         15 922 A....     "C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.inf"
11 Jun 2008 15:35:34            470 A....     "C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.txt"
24 Jun 2008 23:56:34          4 828 A....     "C:\WINDOWS\$NtServicePackUninstall$\spuninst\Service Packÿ3.asms"
24 Jun 2008 23:59:06      1 094 290 A....     "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.inf"
24 Jun 2008 23:52:16        432 851 A....     "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.txt"
 8 Jul 2008 18:31:34         40 748 A....     "C:\WINDOWS\BDOSCAN8\plugins\7zip.xmd"
 8 Jul 2008 18:31:34          3 892 A....     "C:\WINDOWS\BDOSCAN8\plugins\access.xmd"
 8 Jul 2008 18:31:34          8 737 A....     "C:\WINDOWS\BDOSCAN8\plugins\ace.xmd"
 8 Jul 2008 18:31:34          3 379 A....     "C:\WINDOWS\BDOSCAN8\plugins\adsntfs.xmd"
 8 Jul 2008 18:31:34         19 163 A....     "C:\WINDOWS\BDOSCAN8\plugins\alz.xmd"
 8 Jul 2008 18:31:34          3 611 A....     "C:\WINDOWS\BDOSCAN8\plugins\arc.xmd"
 8 Jul 2008 18:31:36          6 284 A....     "C:\WINDOWS\BDOSCAN8\plugins\arj.xmd"
 8 Jul 2008 18:31:36        106 095 A....     "C:\WINDOWS\BDOSCAN8\plugins\aspy_emu.cvd"
 8 Jul 2008 18:31:36          6 712 A....     "C:\WINDOWS\BDOSCAN8\plugins\bach.xmd"
 8 Jul 2008 18:31:32          1 878 A....     "C:\WINDOWS\BDOSCAN8\plugins\boot.xmd"
 8 Jul 2008 18:31:36         19 355 A....     "C:\WINDOWS\BDOSCAN8\plugins\bzip2.xmd"
 8 Jul 2008 18:31:36         14 387 A....     "C:\WINDOWS\BDOSCAN8\plugins\cab.xmd"
 8 Jul 2008 18:31:36        603 124 A....     "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.cvd"
10 Jul 2008 19:11:50          4 034 A....     "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.ivd"
10 Jul 2008 19:11:50        420 092 A....     "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.rvd"
 8 Jul 2008 18:31:38        190 284 A....     "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.xmd"
 8 Jul 2008 18:31:38        120 187 A....     "C:\WINDOWS\BDOSCAN8\plugins\ceva_dll.cvd"
 8 Jul 2008 18:31:38        130 047 A....     "C:\WINDOWS\BDOSCAN8\plugins\ceva_emu.cvd"
 8 Jul 2008 18:31:38        396 598 A....     "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.cvd"
 8 Jul 2008 18:31:38         52 346 A....     "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.ivd"
 8 Jul 2008 18:31:38         13 189 A....     "C:\WINDOWS\BDOSCAN8\plugins\chm.xmd"
10 Jul 2008 19:11:50          6 416 A....     "C:\WINDOWS\BDOSCAN8\plugins\cookie.cvd"
 8 Jul 2008 18:31:40          2 315 A....     "C:\WINDOWS\BDOSCAN8\plugins\cookie.xmd"
 8 Jul 2008 18:31:40          4 026 A....     "C:\WINDOWS\BDOSCAN8\plugins\cpio.xmd"
 8 Jul 2008 18:31:40        465 229 A....     "C:\WINDOWS\BDOSCAN8\plugins\cran.cvd"
10 Jul 2008 19:11:52          5 532 A....     "C:\WINDOWS\BDOSCAN8\plugins\cran.ivd"
 8 Jul 2008 18:31:40          6 060 A....     "C:\WINDOWS\BDOSCAN8\plugins\cran.xmd"
 8 Jul 2008 18:31:40          2 293 A....     "C:\WINDOWS\BDOSCAN8\plugins\dbx.xmd"
 8 Jul 2008 18:31:40         10 808 A....     "C:\WINDOWS\BDOSCAN8\plugins\docfile.xmd"
 8 Jul 2008 18:31:40         30 179 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.001"
 8 Jul 2008 18:31:40         31 700 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.002"
 8 Jul 2008 18:31:40         31 192 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.003"
 8 Jul 2008 18:31:40         30 313 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.004"
 8 Jul 2008 18:31:42         30 040 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.005"
 8 Jul 2008 18:31:42         30 032 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.006"
 8 Jul 2008 18:31:42         30 028 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.007"
 8 Jul 2008 18:31:42         34 763 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.008"
 8 Jul 2008 18:31:42         35 490 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.009"
 8 Jul 2008 18:31:42         30 875 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.010"
 8 Jul 2008 18:31:42         39 523 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.011"
10 Jul 2008 19:11:52         34 502 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.012"
 8 Jul 2008 18:31:42         33 547 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.013"
 8 Jul 2008 18:31:42         30 691 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.014"
 8 Jul 2008 18:31:42         31 295 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.015"
 8 Jul 2008 18:31:42         31 020 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.016"
 8 Jul 2008 18:31:44         31 131 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.017"
 8 Jul 2008 18:31:44         31 283 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.018"
 8 Jul 2008 18:31:44         30 795 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.019"
 8 Jul 2008 18:31:44         32 206 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.020"
 8 Jul 2008 18:31:44         32 031 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.021"
 8 Jul 2008 18:31:44         31 859 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.022"
 8 Jul 2008 18:31:44         30 660 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.023"
 8 Jul 2008 18:31:44         33 335 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.024"
 8 Jul 2008 18:31:46         30 172 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.025"
 8 Jul 2008 18:31:46         33 077 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.026"
 8 Jul 2008 18:31:46         40 507 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.027"
 8 Jul 2008 18:31:46         34 628 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.028"
 8 Jul 2008 18:31:46         34 091 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.029"
 8 Jul 2008 18:31:46         40 044 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.030"
 8 Jul 2008 18:31:46         32 943 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.031"
 8 Jul 2008 18:31:46         32 008 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.032"
 8 Jul 2008 18:31:46         31 194 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.033"
 8 Jul 2008 18:31:46         33 063 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.034"
 8 Jul 2008 18:31:46         31 924 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.035"
 8 Jul 2008 18:31:48         37 584 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.036"
 8 Jul 2008 18:31:48         36 402 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.037"
 8 Jul 2008 18:31:48         36 035 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.038"
 8 Jul 2008 18:31:48         32 523 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.039"
 8 Jul 2008 18:31:48         32 775 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.040"
 8 Jul 2008 18:31:48         35 949 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.041"
 8 Jul 2008 18:31:48         35 059 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.042"
 8 Jul 2008 18:31:48         35 159 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.043"
 8 Jul 2008 18:31:48         34 123 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.044"
 8 Jul 2008 18:31:48         34 542 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.045"
 8 Jul 2008 18:31:48         40 824 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.046"
 8 Jul 2008 18:31:48         31 539 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.047"
 8 Jul 2008 18:31:48         41 247 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.048"
 8 Jul 2008 18:31:50         55 276 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.049"
 8 Jul 2008 18:31:50         35 569 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.050"
 8 Jul 2008 18:31:50         46 577 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.051"
 8 Jul 2008 18:31:50         42 643 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.052"
 8 Jul 2008 18:31:50         48 541 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.053"
 8 Jul 2008 18:31:50         43 441 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.054"
 8 Jul 2008 18:31:50         50 247 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.055"
 8 Jul 2008 18:31:50         43 025 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.056"
 8 Jul 2008 18:31:50         44 877 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.057"
 8 Jul 2008 18:31:50         43 166 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.058"
 8 Jul 2008 18:31:50         39 744 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.059"
 8 Jul 2008 18:31:52         42 501 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.060"
 8 Jul 2008 18:31:52         34 130 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.061"
 8 Jul 2008 18:31:52         30 862 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.062"
 8 Jul 2008 18:31:52         30 071 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.063"
 8 Jul 2008 18:31:52         36 597 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.064"
 8 Jul 2008 18:31:52         39 445 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.065"
 8 Jul 2008 18:31:52         30 485 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.066"
 8 Jul 2008 18:31:52         31 808 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.067"
 8 Jul 2008 18:31:52         33 564 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.068"
 8 Jul 2008 18:31:52         33 773 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.069"
 8 Jul 2008 18:31:52         39 108 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.070"
 8 Jul 2008 18:31:52         39 870 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.071"
 8 Jul 2008 18:31:54         31 378 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.072"
 8 Jul 2008 18:31:54         31 563 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.073"
 8 Jul 2008 18:31:54         31 476 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.074"
 8 Jul 2008 18:31:54         34 499 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.075"
 8 Jul 2008 18:31:54         30 083 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.076"
 8 Jul 2008 18:31:54         30 592 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.077"
 8 Jul 2008 18:31:54         31 025 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.078"
 8 Jul 2008 18:31:54         33 035 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.079"
 8 Jul 2008 18:31:54         31 980 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.080"
 8 Jul 2008 18:31:54         30 521 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.081"
 8 Jul 2008 18:31:54         30 806 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.082"
 8 Jul 2008 18:31:56         30 839 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.083"
 8 Jul 2008 18:31:56         30 711 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.084"
 8 Jul 2008 18:31:56         30 434 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.085"
 8 Jul 2008 18:31:56         30 026 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.086"
 8 Jul 2008 18:31:56         30 244 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.087"
 8 Jul 2008 18:31:56         35 286 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.088"
 8 Jul 2008 18:31:58         31 954 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.089"
 8 Jul 2008 18:31:58         35 363 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.090"
 8 Jul 2008 18:31:58         30 672 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.091"
 8 Jul 2008 18:31:58         32 550 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.092"
 8 Jul 2008 18:31:58         32 070 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.093"
 8 Jul 2008 18:31:58         31 134 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.094"
 8 Jul 2008 18:31:58         32 726 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.095"
 8 Jul 2008 18:31:58         30 659 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.096"
 8 Jul 2008 18:31:58         30 885 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.097"
 8 Jul 2008 18:31:58         34 209 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.098"
 8 Jul 2008 18:31:58         31 459 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.099"
 8 Jul 2008 18:32:00         30 788 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.100"
 8 Jul 2008 18:32:00         37 825 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.101"
 8 Jul 2008 18:32:00         30 771 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.102"
 8 Jul 2008 18:32:00         30 467 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.103"
 8 Jul 2008 18:32:00         31 436 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.104"
 8 Jul 2008 18:32:00         31 207 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.105"
 8 Jul 2008 18:32:00         30 457 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.106"
 8 Jul 2008 18:32:02         30 161 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.107"
 8 Jul 2008 18:32:02         30 097 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.108"
 8 Jul 2008 18:32:02         30 746 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.109"
 8 Jul 2008 18:32:02         29 998 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.110"
10 Jul 2008 19:11:52         30 784 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.111"
10 Jul 2008 19:11:52         33 753 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.112"
 8 Jul 2008 18:32:02         30 139 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.113"
 8 Jul 2008 18:32:02         37 234 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.114"
 8 Jul 2008 18:32:02         33 529 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.115"
 8 Jul 2008 18:32:02         39 081 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.116"
 8 Jul 2008 18:32:04         36 812 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.117"
 8 Jul 2008 18:32:04         31 797 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.118"
 8 Jul 2008 18:32:04         35 471 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.119"
 8 Jul 2008 18:32:04         34 601 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.120"
 8 Jul 2008 18:32:04         35 147 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.121"
 8 Jul 2008 18:32:04         39 441 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.122"
 8 Jul 2008 18:32:04         31 609 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.123"
 8 Jul 2008 18:32:04         31 791 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.124"
 8 Jul 2008 18:32:04         38 969 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.125"
 8 Jul 2008 18:32:04         39 180 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.126"
 8 Jul 2008 18:32:06         88 579 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.127"
 8 Jul 2008 18:32:06         30 266 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.128"
 8 Jul 2008 18:32:06         34 014 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.129"
 8 Jul 2008 18:32:06         43 703 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.130"
 8 Jul 2008 18:32:06         31 188 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.131"
 8 Jul 2008 18:32:06         36 450 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.132"
 8 Jul 2008 18:32:06         38 198 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.133"
 8 Jul 2008 18:32:06         44 138 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.134"
 8 Jul 2008 18:32:06         37 235 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.135"
 8 Jul 2008 18:32:06         43 484 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.136"
 8 Jul 2008 18:32:06         40 703 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.137"
 8 Jul 2008 18:32:06         30 351 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.138"
 8 Jul 2008 18:32:08         39 803 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.139"
 8 Jul 2008 18:32:08         31 079 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.140"
 8 Jul 2008 18:32:08         31 859 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.141"
 8 Jul 2008 18:32:08         31 022 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.142"
 8 Jul 2008 18:32:08         39 544 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.143"
 8 Jul 2008 18:32:08         35 395 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.144"
10 Jul 2008 19:11:52         30 099 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.145"
10 Jul 2008 19:11:52          4 649 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.146"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.147"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.148"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.149"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.150"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.151"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.152"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.153"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.154"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.155"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.156"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.157"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.158"
 8 Jul 2008 18:32:10             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.159"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.160"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.161"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.162"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.163"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.164"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.165"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.166"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.167"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.168"
 8 Jul 2008 18:32:12             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.169"
 8 Jul 2008 18:32:20      6 500 383 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.cvd"
 8 Jul 2008 18:32:20         30 173 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i01"
 8 Jul 2008 18:32:20         34 745 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i02"
 8 Jul 2008 18:32:20         25 761 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i03"
 8 Jul 2008 18:32:20         26 845 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i04"
 8 Jul 2008 18:32:20         26 331 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i05"
 8 Jul 2008 18:32:20         31 133 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i06"
 8 Jul 2008 18:32:20         33 430 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i07"
 8 Jul 2008 18:32:22         31 219 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i08"
 8 Jul 2008 18:32:22         26 323 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i09"
 8 Jul 2008 18:32:22         34 476 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i10"
 8 Jul 2008 18:32:22         32 040 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i11"
 8 Jul 2008 18:32:22         32 454 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i12"
 8 Jul 2008 18:32:22         30 114 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i13"
 8 Jul 2008 18:32:22         29 054 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i14"
 8 Jul 2008 18:32:22         30 630 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i15"
 8 Jul 2008 18:32:22         28 160 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i16"
 8 Jul 2008 18:32:22         31 458 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i17"
 8 Jul 2008 18:32:22         27 984 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i18"
 8 Jul 2008 18:32:22         31 447 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i19"
 8 Jul 2008 18:32:24         31 289 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i20"
 8 Jul 2008 1

E..T · Answer

En passant j'en glisse une :
>>> Franchement green day respect car analyser tout ça, c'est un truc de maboule ! T'es maboule ? ;-)
Bonne continuation à vous .
Bon courage !!

jmd74 · Answer

8 Jul 2008 18:32:24         30 627 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i21"
 8 Jul 2008 18:32:24         34 776 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i22"
 8 Jul 2008 18:32:24         30 106 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i23"
 8 Jul 2008 18:32:24         30 949 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i24"
 8 Jul 2008 18:32:24         26 371 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i25"
 8 Jul 2008 18:32:24         28 079 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i26"
 8 Jul 2008 18:32:24         28 864 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i27"
 8 Jul 2008 18:32:24         32 444 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i28"
 8 Jul 2008 18:32:24         30 267 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i29"
 8 Jul 2008 18:32:24         25 865 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i30"
 8 Jul 2008 18:32:24         27 564 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i31"
 8 Jul 2008 18:32:24         29 338 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i32"
 8 Jul 2008 18:32:26         30 171 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i33"
 8 Jul 2008 18:32:26         30 101 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i34"
 8 Jul 2008 18:32:26         32 677 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i35"
 8 Jul 2008 18:32:26         33 657 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i36"
 8 Jul 2008 18:32:26         31 020 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i37"
 8 Jul 2008 18:32:26         30 698 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i38"
 8 Jul 2008 18:32:26         31 845 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i39"
 8 Jul 2008 18:32:26         30 380 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i40"
 8 Jul 2008 18:32:26         29 376 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i41"
 8 Jul 2008 18:32:26         32 940 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i42"
 8 Jul 2008 18:32:26         29 376 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i43"
 8 Jul 2008 18:32:28         30 164 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i44"
 8 Jul 2008 18:32:28         29 445 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i45"
 8 Jul 2008 18:32:28         27 433 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i46"
 8 Jul 2008 18:32:28         32 667 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i47"
 8 Jul 2008 18:32:28         31 295 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i48"
 8 Jul 2008 18:32:28         27 637 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i49"
 8 Jul 2008 18:32:28         26 649 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i50"
 8 Jul 2008 18:32:28         30 905 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i51"
 8 Jul 2008 18:32:28         28 838 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i52"
 8 Jul 2008 18:32:28         29 055 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i53"
 8 Jul 2008 18:32:30         21 693 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i54"
 8 Jul 2008 18:32:30         29 624 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i55"
 8 Jul 2008 18:32:30         26 251 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i56"
 8 Jul 2008 18:32:30         30 238 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i57"
 8 Jul 2008 18:32:30         32 989 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i58"
 8 Jul 2008 18:32:30         29 765 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i59"
 8 Jul 2008 18:32:32         29 291 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i60"
 8 Jul 2008 18:32:32         25 936 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i61"
 8 Jul 2008 18:32:32         31 044 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i62"
 8 Jul 2008 18:32:32         25 495 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i63"
 8 Jul 2008 18:32:32         26 004 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i64"
 8 Jul 2008 18:32:32         27 911 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i65"
 8 Jul 2008 18:32:32         30 242 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i66"
 8 Jul 2008 18:32:32         33 234 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i67"
 8 Jul 2008 18:32:32         34 851 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i68"
 8 Jul 2008 18:32:32         32 963 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i69"
 8 Jul 2008 18:32:34         32 489 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i70"
 8 Jul 2008 18:32:34         28 830 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i71"
 8 Jul 2008 18:32:34         32 504 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i72"
 8 Jul 2008 18:32:34         30 653 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i73"
 8 Jul 2008 18:32:34         32 067 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i74"
 8 Jul 2008 18:32:34         33 326 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i75"
 8 Jul 2008 18:32:34         33 634 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i76"
 8 Jul 2008 18:32:34         34 202 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i77"
 8 Jul 2008 18:32:34         36 009 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i78"
 8 Jul 2008 18:32:34         34 823 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i79"
 8 Jul 2008 18:32:36         31 434 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i80"
 8 Jul 2008 18:32:36         32 949 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i81"
 8 Jul 2008 18:32:36         31 546 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i82"
 8 Jul 2008 18:32:36         34 012 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i83"
 8 Jul 2008 18:32:36         30 385 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i84"
 8 Jul 2008 18:32:36         31 362 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i85"
 8 Jul 2008 18:32:36         32 926 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i86"
 8 Jul 2008 18:32:36         30 159 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i87"
 8 Jul 2008 18:32:36         33 309 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i88"
10 Jul 2008 19:11:52         32 136 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i89"
 8 Jul 2008 18:32:36         29 859 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i90"
 8 Jul 2008 18:32:38         30 116 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i91"
 8 Jul 2008 18:32:38         33 050 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i92"
 8 Jul 2008 18:32:38         30 320 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i93"
 8 Jul 2008 18:32:38         33 050 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i94"
 8 Jul 2008 18:32:38         32 285 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i95"
 8 Jul 2008 18:32:38         31 882 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i96"
 8 Jul 2008 18:32:38         34 829 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i97"
 8 Jul 2008 18:32:38         34 561 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i98"
 8 Jul 2008 18:32:38         30 741 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.i99"
 8 Jul 2008 18:32:40         32 189 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.ivd"
 8 Jul 2008 18:32:40          5 001 A....     "C:\WINDOWS\BDOSCAN8\plugins\emalware.xmd"
 8 Jul 2008 18:32:40          2 806 A....     "C:\WINDOWS\BDOSCAN8\plugins\epoc.xmd"
 8 Jul 2008 18:32:40        301 831 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.cvd"
 8 Jul 2008 18:32:42         59 094 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i01"
 8 Jul 2008 18:32:42         57 146 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i02"
 8 Jul 2008 18:32:42         51 170 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i03"
 8 Jul 2008 18:32:44         50 388 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i04"
 8 Jul 2008 18:32:44         55 527 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i05"
 8 Jul 2008 18:32:44         55 917 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i06"
 8 Jul 2008 18:32:44         49 295 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i07"
 8 Jul 2008 18:32:44         34 489 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i08"
 8 Jul 2008 18:32:44         26 830 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i09"
 8 Jul 2008 18:32:44         31 500 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i10"
 8 Jul 2008 18:32:44         31 445 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i11"
 8 Jul 2008 18:32:44         31 489 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i12"
 8 Jul 2008 18:32:46         29 093 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i13"
 8 Jul 2008 18:32:46         20 258 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i14"
10 Jul 2008 19:11:52         32 762 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i15"
 8 Jul 2008 18:32:46         22 387 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i16"
 8 Jul 2008 18:32:46         29 844 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i17"
 8 Jul 2008 18:32:46         30 079 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i18"
 8 Jul 2008 18:32:46         34 327 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i19"
 8 Jul 2008 18:32:46         32 958 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i20"
 8 Jul 2008 18:32:46         43 219 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i21"
 8 Jul 2008 18:32:46         30 780 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i22"
 8 Jul 2008 18:32:48         30 015 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i23"
 8 Jul 2008 18:32:48         30 250 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i24"
 8 Jul 2008 18:32:48         21 889 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i25"
 8 Jul 2008 18:32:48         23 752 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i26"
 8 Jul 2008 18:32:48         27 112 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i27"
 8 Jul 2008 18:32:48         31 411 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i28"
10 Jul 2008 19:11:52          4 668 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i29"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i30"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i31"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i32"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i33"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i34"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i35"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i36"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i37"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i38"
 8 Jul 2008 18:32:48             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i39"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i40"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i41"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i42"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i43"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i44"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i45"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i46"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i47"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i48"
 8 Jul 2008 18:32:50             73 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i49"
 8 Jul 2008 18:32:50         66 261 A....     "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.ivd"
 8 Jul 2008 18:32:50        141 039 A....     "C:\WINDOWS\BDOSCAN8\plugins\gvmscripts.cvd"
 8 Jul 2008 18:32:52          3 842 A....     "C:\WINDOWS\BDOSCAN8\plugins\gzip.xmd"
 8 Jul 2008 18:32:52          8 201 A....     "C:\WINDOWS\BDOSCAN8\plugins\ha.xmd"
 8 Jul 2008 18:32:52          3 534 A....     "C:\WINDOWS\BDOSCAN8\plugins\hlp.xmd"
 8 Jul 2008 18:32:52          4 669 A....     "C:\WINDOWS\BDOSCAN8\plugins\hpe.cvd"
 8 Jul 2008 18:32:52          2 537 A....     "C:\WINDOWS\BDOSCAN8\plugins\hpe.xmd"
 8 Jul 2008 18:32:52          1 726 A....     "C:\WINDOWS\BDOSCAN8\plugins\hqx.xmd"
10 Jul 2008 19:11:52         19 853 A....     "C:\WINDOWS\BDOSCAN8\plugins\html.xmd"
 8 Jul 2008 18:32:52          7 622 A....     "C:\WINDOWS\BDOSCAN8\plugins\imp.xmd"
 8 Jul 2008 18:32:52          1 173 A....     "C:\WINDOWS\BDOSCAN8\plugins\inno.xmd"
 8 Jul 2008 18:32:52         21 387 A....     "C:\WINDOWS\BDOSCAN8\plugins\instyler.xmd"
 8 Jul 2008 18:32:52         37 743 A....     "C:\WINDOWS\BDOSCAN8\plugins\iso.xmd"
 8 Jul 2008 18:32:52          3 318 A....     "C:\WINDOWS\BDOSCAN8\plugins\java.cvd"
 8 Jul 2008 18:32:54          8 501 A....     "C:\WINDOWS\BDOSCAN8\plugins\java.xmd"
10 Jul 2008 19:11:54         11 716 A....     "C:\WINDOWS\BDOSCAN8\plugins\jpeg.xmd"
 8 Jul 2008 18:32:54         11 575 A....     "C:\WINDOWS\BDOSCAN8\plugins\lha.xmd"
 8 Jul 2008 18:32:54            930 A....     "C:\WINDOWS\BDOSCAN8\plugins\lnk.xmd"
 8 Jul 2008 18:32:54          2 150 A....     "C:\WINDOWS\BDOSCAN8\plugins\mbox.xmd"
 8 Jul 2008 18:32:54            842 A....     "C:\WINDOWS\BDOSCAN8\plugins\mbx.xmd"
 8 Jul 2008 18:32:54         46 767 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx.xmd"
 8 Jul 2008 18:32:54        344 892 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.cvd"
 8 Jul 2008 18:32:54        173 258 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.ivd"
 8 Jul 2008 18:32:56         59 489 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx_w95.cvd"
 8 Jul 2008 18:32:56          9 651 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx_x95.cvd"
 8 Jul 2008 18:32:56          1 948 A....     "C:\WINDOWS\BDOSCAN8\plugins\mdx_xf.cvd"
 8 Jul 2008 18:32:56          6 996 A....     "C:\WINDOWS\BDOSCAN8\plugins\mime.xmd"
 8 Jul 2008 18:32:56          5 672 A....     "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.cvd"
 8 Jul 2008 18:32:56          6 864 A....     "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.xmd"
 8 Jul 2008 18:32:56          2 082 A....     "C:\WINDOWS\BDOSCAN8\plugins\mso.xmd"
 8 Jul 2008 18:32:56            205 A....     "C:\WINDOWS\BDOSCAN8\plugins
a.cvd"
 8 Jul 2008 18:32:56         12 596 A....     "C:\WINDOWS\BDOSCAN8\plugins
a.xmd"
 8 Jul 2008 18:32:56          6 473 A....     "C:\WINDOWS\BDOSCAN8\plugins
elf.cvd"
 8 Jul 2008 18:32:56          3 036 A....     "C:\WINDOWS\BDOSCAN8\plugins
elf.xmd"
 8 Jul 2008 18:32:56         14 390 A....     "C:\WINDOWS\BDOSCAN8\plugins
sis.xmd"
 8 Jul 2008 18:32:56          1 062 A....     "C:\WINDOWS\BDOSCAN8\plugins\objd.xmd"
 8 Jul 2008 18:32:58         14 506 A....     "C:\WINDOWS\BDOSCAN8\plugins\pdf.xmd"
 8 Jul 2008 18:32:58          5 888 A....     "C:\WINDOWS\BDOSCAN8\plugins\proc.xmd"
 8 Jul 2008 18:32:58          6 160 A....     "C:\WINDOWS\BDOSCAN8\plugins\pst.xmd"
 8 Jul 2008 18:32:58         45 516 A....     "C:\WINDOWS\BDOSCAN8\pluginsar.xmd"
 8 Jul 2008 18:32:58            203 A....     "C:\WINDOWS\BDOSCAN8\pluginsegarch.cvd"
 8 Jul 2008 18:32:58         13 782 A....     "C:\WINDOWS\BDOSCAN8\pluginsegarch.xmd"
 8 Jul 2008 18:32:58         15 292 A....     "C:\WINDOWS\BDOSCAN8\pluginsegscan.cvd"
 8 Jul 2008 18:32:58            406 A....     "C:\WINDOWS\BDOSCAN8\pluginsegscan.xmd"
 8 Jul 2008 18:32:58          1 711 A....     "C:\WINDOWS\BDOSCAN8\pluginspm.xmd"
 8 Jul 2008 18:32:58          2 515 A....     "C:\WINDOWS\BDOSCAN8\pluginstf.xmd"
 8 Jul 2008 18:32:58          1 904 A....     "C:\WINDOWS\BDOSCAN8\pluginsup.cvd"
 8 Jul 2008 18:32:58          1 891 A....     "C:\WINDOWS\BDOSCAN8\pluginsup.xmd"
 8 Jul 2008 18:33:00        342 175 A....     "C:\WINDOWS\BDOSCAN8\plugins\sdx.cvd"
10 Jul 2008 19:11:54          4 425 A....     "C:\WINDOWS\BDOSCAN8\plugins\sdx.ivd"
 8 Jul 2008 18:33:00         10 277 A....     "C:\WINDOWS\BDOSCAN8\plugins\sdx.xmd"
 8 Jul 2008 18:33:00         13 355 A....     "C:\WINDOWS\BDOSCAN8\plugins\sfx.xmd"
 8 Jul 2008 18:33:00         10 540 A....     "C:\WINDOWS\BDOSCAN8\plugins\swf.xmd"
 8 Jul 2008 18:33:00          4 439 A....     "C:\WINDOWS\BDOSCAN8\plugins	ar.xmd"
 8 Jul 2008 18:33:00          2 863 A....     "C:\WINDOWS\BDOSCAN8\plugins	d0.xmd"
 8 Jul 2008 18:33:00          1 591 A....     "C:\WINDOWS\BDOSCAN8\plugins	hebat.xmd"
 8 Jul 2008 18:33:00            846 A....     "C:\WINDOWS\BDOSCAN8\plugins	nef.xmd"
 8 Jul 2008 18:33:00          1 374 A....     "C:\WINDOWS\BDOSCAN8\plugins\uif.xmd"
 8 Jul 2008 18:33:02        196 592 A....     "C:\WINDOWS\BDOSCAN8\plugins\unpack.cvd"
 8 Jul 2008 18:33:02        152 049 A....     "C:\WINDOWS\BDOSCAN8\plugins\unpack.ivd"
 8 Jul 2008 18:33:02         45 811 A....     "C:\WINDOWS\BDOSCAN8\plugins\unpack.xmd"
10 Jul 2008 19:11:54            111 A....     "C:\WINDOWS\BDOSCAN8\plugins\update.txt"
 8 Jul 2008 18:33:02          1 988 A....     "C:\WINDOWS\BDOSCAN8\plugins\uudecode.xmd"
 8 Jul 2008 18:33:02         49 435 A....     "C:\WINDOWS\BDOSCAN8\plugins\ve.cvd"
 8 Jul 2008 18:33:02             48 A....     "C:\WINDOWS\BDOSCAN8\plugins\ve.ivd"
 8 Jul 2008 18:33:02         79 801 A....     "C:\WINDOWS\BDOSCAN8\plugins\ve.xmd"
 8 Jul 2008 18:33:02            688 A....     "C:\WINDOWS\BDOSCAN8\plugins\vedata.cvd"
 8 Jul 2008 18:33:02         13 015 A....     "C:\WINDOWS\BDOSCAN8\plugins\viza.xmd"
 8 Jul 2008 18:33:02          3 797 A....     "C:\WINDOWS\BDOSCAN8\plugins\wise.xmd"
 8 Jul 2008 18:33:02          1 559 A....     "C:\WINDOWS\BDOSCAN8\plugins\xcookies.xmd"
 8 Jul 2008 18:33:02          1 247 A....     "C:\WINDOWS\BDOSCAN8\plugins\xishield.xmd"
 8 Jul 2008 18:33:04          1 604 A....     "C:\WINDOWS\BDOSCAN8\plugins\z.xmd"
 8 Jul 2008 18:33:04         18 937 A....     "C:\WINDOWS\BDOSCAN8\plugins\zip.xmd"
 8 Jul 2008 18:33:04          3 667 A....     "C:\WINDOWS\BDOSCAN8\plugins\zoo.xmd"
24 Jun 2008 23:26:50        991 148 A....     "C:\WINDOWS\Debug\Setup\UpdSh.bak"
24 Jun 2008 23:58:36        989 732 A....     "C:\WINDOWS\Debug\Setup\UpdSh.log"
10 Jul 2008 14:23:58      3 010 560 A....     "C:\WINDOWS\erdnt\Hiv-backup\DEFAULT"
10 Jul 2008 14:24:00            673 A....     "C:\WINDOWS\erdnt\Hiv-backup\ERDNT.CON"
10 Jul 2008 14:24:00          1 548 A....     "C:\WINDOWS\erdnt\Hiv-backup\ERDNT.INF"
10 Jul 2008 14:23:58         28 672 A....     "C:\WINDOWS\erdnt\Hiv-backup\SAM"
10 Jul 2008 14:23:54         57 344 A....     "C:\WINDOWS\erdnt\Hiv-backup\SECURITY"
10 Jul 2008 14:23:58     35 487 744 A....     "C:\WINDOWS\erdnt\Hiv-backup\SOFTWARE"
10 Jul 2008 14:23:58      9 621 504 A....     "C:\WINDOWS\erdnt\Hiv-backup\SYSTEM"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00002"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00003"
11 Jun 2008 15:37:12         98 304 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00004"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00005"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00006"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00007"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00008"
11 Jun 2008 15:37:12         12 288 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00009"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00010"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00011"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00012"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00013"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00014"
11 Jun 2008 15:37:12          8 192 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00015"
11 Jun 2008 15:37:12         16 384 A....     "C:\WINDOWS\ie7updates\KB950759-IE7eg00016"
24 May 2008 10:00:20          1 396 A..H.     "C:\WINDOWS
etwork diagnostic\Sqm\NetDiag25.sqm"
24 May 2008 11:10:24          1 436 A..H.     "C:\WINDOWS
etwork diagnostic\Sqm\NetDiag26.sqm"
24 May 2008 11:10:58            388 A..H.     "C:\WINDOWS
etwork diagnostic\Sqm\NetDiag27.sqm"
24 Jun 2008 23:58:34      1 056 768 A....     "C:\WINDOWS\security\Database\Service Packÿ3.sdb"
24 Jun 2008 23:26:00            112 .....     "C:\WINDOWS\ServicePackFiles\i386\medctrro.cmd"
24 Jun 2008 23:51:00     23 892 017 .....     "C:\WINDOWS\ServicePackFiles\i386\sp3.cab"
20 Jun 2008 13:40:08        138 496 .....     "C:\WINDOWS\system32\dllcache\afd.sys"
14 Jun 2008 19:33:38        272 768 .....     "C:\WINDOWS\system32\dllcache\bthport.sys"
20 Jun 2008 19:47:22        147 968 .....     "C:\WINDOWS\system32\dllcache\dnsapi.dll"
20 Jun 2008 19:47:22        247 808 .....     "C:\WINDOWS\system32\dllcache\mswsock.dll"
20 Jun 2008 13:51:12        361 600 .....     "C:\WINDOWS\system32\dllcache	cpip.sys"
20 Jun 2008 13:08:28        225 856 .....     "C:\WINDOWS\system32\dllcache	cpip6.sys"
20 Jun 2008 13:40:08        138 496 A....     "C:\WINDOWS\system32\drivers\afd.sys"
14 Jun 2008 19:33:38        272 768 .....     "C:\WINDOWS\system32\drivers\bthport.sys"
 7 Jul 2008 17:35:30         17 144 A....     "C:\WINDOWS\system32\drivers\mbam.sys"
 7 Jul 2008 17:35:36         34 296 A....     "C:\WINDOWS\system32\drivers\mbamcatchme.sys"
20 Jun 2008 13:51:12        361 600 A....     "C:\WINDOWS\system32\drivers	cpip.sys"
20 Jun 2008 13:08:28        225 856 A....     "C:\WINDOWS\system32\drivers	cpip6.sys"
25 Jun 2008  0:02:10          3 420 A....     "C:\WINDOWS\system32\oobe\agtscrp2.js"
25 Jun 2008  0:02:10          9 825 A....     "C:\WINDOWS\system32\oobe\oobeutil.js"
25 Jun 2008  0:02:10         32 047 A....     "C:\WINDOWS\system32\oobe\updshell.htm"
 5 Jun 2008 12:36:46             78 A....     "C:\WINDOWS\system32\Restore\MachineGuid.txt"
24 Jun 2008 16:17:00      1 022 432 A....     "C:\WINDOWS\system32\Restorestrlog.dat"
10 Jul 2008 21:09:02         16 384 A.SH.     "C:\WINDOWS\Temp\Cookies\index.dat"
24 Jun 2008 23:56:32            460 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d.Manifest"
24 Jun 2008 23:56:34            500 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63.Manifest"
24 Jun 2008 23:56:32          1 237 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281.Manifest"
24 Jun 2008 23:56:34          1 822 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a.Manifest"
24 Jun 2008 23:56:32          1 883 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7.Manifest"
24 Jun 2008 23:56:32          1 187 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95.Manifest"
24 Jun 2008 23:56:34          1 862 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest"
24 Jun 2008 23:56:32            397 A....     "C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c.Manifest"
20 May 2008 11:47:24            705 A....     "C:\WINDOWS\$hf_mig$\KB950759-IE7\update\branches.inf"
20 May 2008 14:57:22         32 215 A....     "C:\WINDOWS\$hf_mig$\KB950759-IE7\update\KB950759-IE7.CAT"
20 May 2008 20:10:52          5 960 A....     "C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.ver"
20 May 2008 11:47:24            500 A....     "C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updatebr.inf"
20 May 2008 13:11:44        124 646 A....     "C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update_SP2QFE.inf"
14 Jun 2008 20:03:14        272 768 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys"
14 Jun 2008 19:33:38        272 768 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys"
14 Jun 2008 19:40:20        272 768 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys"
16 Jun 2008 19:22:28            926 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\branches.inf"
16 Jun 2008 20:04:40         12 431 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\KB951376-v2.CAT"
16 Jun 2008 22:25:34            390 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.ver"
16 Jun 2008 19:22:28            681 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\updatebr.inf"
16 Jun 2008 20:00:40         24 423 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\update_SP2QFE.inf"
16 Jun 2008 20:21:48         26 631 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\update_SP3GDR.inf"
16 Jun 2008 19:59:20         26 631 A....     "C:\WINDOWS\$hf_mig$\KB951376-v2\update\update_SP3QFE.inf"
20 Jun 2008 13:48:04        138 496 A....     "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys"
20 Jun 2008 19:44:02        147 968 A....     "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll"
20 Jun 2008 19:44:02        247 808 A....     "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll"
20 Jun 2008 13:59:02        361 600 A....     "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE	cpip.sys"
20 Jun 2008 13:16:44        225 856 A....     "C:\WINDOWS\$hf_mig$\KB951748\SP3QFE	cpip6.sys"
20 Jun 2008 19:56:50            926 A....     "C:\WINDOWS\$hf_mig$\KB951748\update\branches.inf"
21 Jun 2008 12:36:18         18 785 A....     "C:\WINDOWS\$hf_mig$\KB951748\update\KB951748.CAT"
21 Jun 2008 13:01:32          2 032 A....     "C:\WINDOWS\$hf_mig$\KB951748\update\update.ver"
18 Jun 2008 21:14:26            678 A....     "C:\WINDOWS\$hf_mig$\KB951748\update\updatebr.inf"
21 Jun 2008 12:41:20         26 889 A....     "C:\WINDOWS\$hf_mig$\KB951748\update\update_SP3QFE.inf"
19 Jun 2008 11:14:52            926 A....     "C:\WINDOWS\$hf_mig$\KB951978\update\branches.inf"
19 Jun 2008 11:25:42         15 271 A....     "C:\WINDOWS\$hf_mig$\KB951978\update\KB951978.CAT"
19 Jun 2008 11:38:48          1 472 A....     "C:\WINDOWS\$hf_mig$\KB951978\update\update.ver"
12 May 2008 15:47:42            496 A....     "C:\WINDOWS\$hf_mig$\KB951978\update\updatebr.inf"
19 Jun 2008 11:28:54         26 707 A....     "C:\WINDOWS\$hf_mig$\KB951978\update\update_SP3QFE.inf"
24 Jun 2008 23:27:30              0 A....     "C:\WINDOWS\Debug\Setup\Backup\HDAUDIO_Backup.bak"
24 Jun 2008 23:27:30              0 A....     "C:\WINDOWS\Debug\Setup\Backup\IE7_Backup.bak"
24 Jun 2008 23:27:30              4 A....     "C:\WINDOWS\Debug\Setup\Backup\INTPPM_Backup.bak"
11 Jun 2008 15:37:28         27 255 A....     "C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.inf"
11 Jun 2008 15:37:12          7 811 A....     "C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.txt"
24 Jun 2008 23:58:00     12 591 104 A....     "C:\WINDOWS\pchealth\helpctr\Database\HCdata.edb"
24 Jun 2008 23:57:34      2 476 405 A....     "C:\WINDOWS\pchealth\helpctr\Indices\merged.hhk"
24 Jun 2008 23:57:34         14 762 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_2.hhk"
24 Jun 2008 23:57:34         20 223 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_3.hhk"
24 Jun 2008 23:57:34         35 256 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_4.hhk"
24 Jun 2008 23:57:34         20 804 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_5.hhk"
24 Jun 2008 23:57:34         17 136 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_6.hhk"
24 Jun 2008 23:57:34        102 795 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_7.hhk"
24 Jun 2008 23:57:34        192 336 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_8.hhk"
24 Jun 2008 23:57:34          5 851 A....     "C:\WINDOWS\pchealth\helpctr\Indices\scoped_9.hhk"
24 Jun 2008 23:57:40        822 717 A....     "C:\WINDOWS\pchealth\helpctr\Logs\hcupdate.log"
24 Jun 2008 23:57:40         76 507 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat"
24 Jun 2008 23:57:40              4 A....     "C:\WINDOWS\pchealth\helpctr\PackageStore\CRC_Disk"
24 Jun 2008 23:57:20        325 668 ..SHR     "C:\WINDOWS\pchealth\helpctr\PackageStore\package_6.cab"
24 Jun 2008 23:57:40          2 704 A....     "C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin"
17 Jun 2008 15:17:02            330 A....     "C:\WINDOWS\system32\Adobe\Director\M5drvr32.exe"
17 Jun 2008 15:17:02            330 A....     "C:\WINDOWS\system32\Adobe\Director\M5if32.dll"
17 Jun 2008 16:12:42        114 688 A....     "C:\WINDOWS\system32\Adobe\Director
p32dsw.dll"
17 Jun 2008 16:23:02        202 168 A....     "C:\WINDOWS\system32\Adobe\Director\swdir.dll"
17 Jun 2008 16:23:18         62 904 A....     "C:\WINDOWS\system32\Adobe\Director\SwDnld.exe"
17 Jun 2008 16:13:22        487 424 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll"
17 Jun 2008 15:36:00      1 798 144 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll"
17 Jun 2008 16:13:26          9 216 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll"
17 Jun 2008 15:25:58        697 344 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll"
17 Jun 2008 15:26:00      1 145 896 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe"
17 Jun 2008 15:25:58         52 288 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll"
17 Jun 2008 15:32:18        892 928 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll"
 4 Jul 2008 19:41:58        143 089 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Install.log"
17 Jun 2008 16:11:56        253 952 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll"
17 Jun 2008 16:15:00        446 464 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll"
17 Jun 2008 15:17:16          9 622 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr"
17 Jun 2008 16:22:46        439 736 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100458.exe"
17 Jun 2008 16:15:44        114 688 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe"
17 Jun 2008 15:23:20         15 412 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\SwLogo.bmp"
17 Jun 2008 16:11:44         94 208 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll"
17 Jun 2008 15:25:58         50 808 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL"
 9 Jul 2008 13:09:48              8 A....     "C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp"
20 May 2008 14:57:22         32 215 ..S..     "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB950759-IE7.cat"
16 Jun 2008 20:04:40         12 431 ..S..     "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951376-v2.cat"
21 Jun 2008 12:36:18         18 785 ..S..     "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951748.cat"
19 Jun 2008 11:25:42         15 271 ..S..     "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951978.cat"
 9 Jul 2008  1:26:48              8 A....     "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp"
 9 Jul 2008 23:58:56        251 659 ....R     "C:\WINDOWS\system32\drivers\etc\hosts"
 9 Jul 2008 20:03:26            790 A....     "C:\WINDOWS\system32\drivers\etc\hosts.20080709-230133.backup"
 9 Jul 2008 23:01:34        251 659 A...R     "C:\WINDOWS\system32\drivers\etc\hosts.20080709-230230.backup"
 9 Jul 2008 23:02:32        251 659 A...R     "C:\WINDOWS\system32\drivers\etc\hosts.20080709-235854.backup"
 4 Jul 2008 19:44:54         17 092 A....     "C:\WINDOWS\system32\Macromed\Flash\install.log"
25 Jun 2008 20:07:22         70 264 A....     "C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe"
 4 Jul 2008 19:44:54         74 649 A....     "C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe"
10 Jul 2008 21:11:10         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2008-07-11-22-47-32-0453-00"
 3 Jul 2008 19:33:28         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2008-07-10-19-00-33-0125-00"
15 Jun 2008 20:17:16         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2008-06-19-19-01-53-0468-00"
11 Jul 2008 23:07:42         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log"
19 Jun 2008 19:05:00         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2008-07-03-19-00-15-0796-00"
29 May 2008 19:43:48         24 576 A....     "C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log.2008-06-15-19-00-32-0953-00"
25 Jun 2008  0:02:10          5 723 A....     "C:\WINDOWS\system32\oobe\setup\autoupdt.htm"
25 Jun 2008  0:02:10         15 646 A....     "C:\WINDOWS\system32\oobe\setup\au_plcy.htm"
24 Jun 2008 23:57:10         15 792 A....     "C:\WINDOWS\system32\wbem\AutoRecover\1F7F8870694CCE6E3C0E87035760AE4F.mof"
24 Jun 2008 23:57:14      2 775 948 A....     "C:\WINDOWS\system32\wbem\AutoRecover\26C097A9392F8C541AD42E89B7909073.mof"
24 Jun 2008 23:56:58          1 394 A....     "C:\WINDOWS\system32\wbem\AutoRecover\7F417E1A6D819A9B2FEB55DA6858EA0A.mof"
24 Jun 2008 23:56:58          8 102 A....     "C:\WINDOWS\system32\wbem\AutoRecover\903E49C444C46FEF5F2C3A189C9CEF71.mof"
24 Jun 2008 23:57:16          2 566 A....     "C:\WINDOWS\system32\wbem\AutoRecover\9AD3182A2F39A3E091E15109132EC6CC.mof"
24 Jun 2008 23:57:10         99 856 A....     "C:\WINDOWS\system32\wbem\AutoRecover\C6300BFE37ADE6B52EC023F66124985F.mof"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini"
10 Jul 2008 21:09:02         32 768 A.SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\index.dat"
10 Jul 2008 21:09:04            145 A....     "C:\WINDOWS\Temp\History\History.IE5\desktop.ini"
10 Jul 2008 21:09:02         16 384 A.SH.     "C:\WINDOWS\Temp\History\History.IE5\index.dat"
24 Jun 2008 23:56:34            621 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy"
24 Jun 2008 23:56:34            623 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\7.0.2600.5512.Policy"
24 Jun 2008 23:56:32            641 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd\5.2.2.3.Policy"
24 Jun 2008 23:56:32            605 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\1.0.2600.5512.Policy"
24 Jun 2008 23:56:32            641 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f\5.2.2.3.Policy"
24 Jun 2008 23:56:34            644 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_x-ww_527a1c68\6.0.9792.0.Policy"
24 Jun 2008 23:56:32            625 A....     "C:\WINDOWS\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510\5.1.2600.2000.Policy"
10 Jul 2008 14:23:58        241 664 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT"
10 Jul 2008 14:23:58          8 192 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat"
10 Jul 2008 14:23:58        237 568 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000003
tuser.dat"
10 Jul 2008 14:23:58          8 192 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat"
10 Jul 2008 14:23:58      5 767 168 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000005
tuser.dat"
10 Jul 2008 14:23:58        147 456 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat"
10 Jul 2008 14:24:00      8 007 680 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000007
tuser.dat"
10 Jul 2008 14:24:00        208 896 A....     "C:\WINDOWS\erdnt\Hiv-backup\Users\00000008\UsrClass.dat"
24 Jun 2008 23:57:36             62 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000000.query"
24 Jun 2008 23:57:36            752 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000001.query"
24 Jun 2008 23:57:36            752 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000002.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000004.query"
24 Jun 2008 23:57:36            340 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000100.query"
24 Jun 2008 23:57:36            506 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000101.query"
24 Jun 2008 23:57:36          3 992 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000102.query"
24 Jun 2008 23:57:36          3 494 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000103.query"
24 Jun 2008 23:57:38            282 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000200.query"
24 Jun 2008 23:57:38          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000201.query"
24 Jun 2008 23:57:38          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000202.query"
24 Jun 2008 23:57:38            446 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000204.query"
24 Jun 2008 23:57:36          1 878 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000006.query"
24 Jun 2008 23:57:38          2 444 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000205.query"
24 Jun 2008 23:57:36          6 232 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000106.query"
24 Jun 2008 23:57:38          2 444 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000206.query"
24 Jun 2008 23:57:36            348 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000104.query"
24 Jun 2008 23:57:36          1 878 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000005.query"
24 Jun 2008 23:57:36          6 232 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000107.query"
24 Jun 2008 23:57:36          2 950 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000086.query"
24 Jun 2008 23:57:38            598 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000186.query"
24 Jun 2008 23:57:38            598 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000185.query"
24 Jun 2008 23:57:36            314 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000084.query"
24 Jun 2008 23:57:40          2 542 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000283.query"
24 Jun 2008 23:57:38            252 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000184.query"
24 Jun 2008 23:57:36          2 950 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000085.query"
24 Jun 2008 23:57:36          8 980 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000082.query"
24 Jun 2008 23:57:38            546 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000182.query"
24 Jun 2008 23:57:36          8 980 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000083.query"
24 Jun 2008 23:57:40          2 542 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000282.query"
24 Jun 2008 23:57:38            546 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000181.query"
24 Jun 2008 23:57:36            222 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000080.query"
24 Jun 2008 23:57:38            282 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000180.query"
24 Jun 2008 23:57:40            208 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000280.query"
24 Jun 2008 23:57:36          2 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000016.query"
24 Jun 2008 23:57:36          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000116.query"
24 Jun 2008 23:57:36          2 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000017.query"
24 Jun 2008 23:57:38          3 142 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000216.query"
24 Jun 2008 23:57:36          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000115.query"
24 Jun 2008 23:57:36            326 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000014.query"
24 Jun 2008 23:57:38          2 154 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000213.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000114.query"
24 Jun 2008 23:57:38            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000214.query"
24 Jun 2008 23:57:36            340 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000012.query"
24 Jun 2008 23:57:36            942 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000112.query"
24 Jun 2008 23:57:36            340 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000013.query"
24 Jun 2008 23:57:38          2 154 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000212.query"
24 Jun 2008 23:57:36            942 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000111.query"
24 Jun 2008 23:57:36            238 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000010.query"
24 Jun 2008 23:57:36            452 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000110.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000210.query"
24 Jun 2008 23:57:36            778 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000096.query"
24 Jun 2008 23:57:38          9 952 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000196.query"
24 Jun 2008 23:57:36            300 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000094.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000194.query"
24 Jun 2008 23:57:36            778 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000095.query"
24 Jun 2008 23:57:38          2 390 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000193.query"
24 Jun 2008 23:57:36          2 784 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000092.query"
24 Jun 2008 23:57:38          2 390 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000192.query"
24 Jun 2008 23:57:36          2 784 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000093.query"
24 Jun 2008 23:57:36            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000090.query"
24 Jun 2008 23:57:38            188 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000190.query"
24 Jun 2008 23:57:38          9 952 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000197.query"
24 Jun 2008 23:57:36          2 934 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a6.query"
24 Jun 2008 23:57:38          2 744 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a7.query"
24 Jun 2008 23:57:36          2 934 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a7.query"
24 Jun 2008 23:57:38            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a4.query"
24 Jun 2008 23:57:36            298 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a4.query"
24 Jun 2008 23:57:38          2 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a2.query"
24 Jun 2008 23:57:36          1 994 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a2.query"
24 Jun 2008 23:57:38          2 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a3.query"
24 Jun 2008 23:57:36          1 994 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a3.query"
24 Jun 2008 23:57:38            262 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a0.query"
24 Jun 2008 23:57:36            296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a0.query"
24 Jun 2008 23:57:38          2 744 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a6.query"
24 Jun 2008 23:57:36          1 690 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000026.query"
24 Jun 2008 23:57:36          4 098 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000126.query"
24 Jun 2008 23:57:38            664 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000226.query"
24 Jun 2008 23:57:36            446 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000024.query"
24 Jun 2008 23:57:38          3 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000223.query"
24 Jun 2008 23:57:36            246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000124.query"
24 Jun 2008 23:57:36          1 690 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000025.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000224.query"
24 Jun 2008 23:57:36            794 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000022.query"
24 Jun 2008 23:57:36          1 086 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000122.query"
24 Jun 2008 23:57:36            794 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000023.query"
24 Jun 2008 23:57:38          3 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000222.query"
24 Jun 2008 23:57:36          1 086 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000121.query"
24 Jun 2008 23:57:36            292 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000020.query"
24 Jun 2008 23:57:36            338 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000120.query"
24 Jun 2008 23:57:38            162 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000220.query"
24 Jun 2008 23:57:36          4 098 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000127.query"
24 Jun 2008 23:57:36          3 718 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b6.query"
24 Jun 2008 23:57:38          4 500 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b7.query"
24 Jun 2008 23:57:38            274 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b4.query"
24 Jun 2008 23:57:36            534 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b4.query"
24 Jun 2008 23:57:36          3 718 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b5.query"
24 Jun 2008 23:57:38          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b2.query"
24 Jun 2008 23:57:36          1 062 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b2.query"
24 Jun 2008 23:57:38          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b3.query"
24 Jun 2008 23:57:38            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b0.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b0.query"
24 Jun 2008 23:57:36          1 062 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b1.query"
24 Jun 2008 23:57:38          4 500 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b6.query"
24 Jun 2008 23:57:36          1 040 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000036.query"
24 Jun 2008 23:57:36            842 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000136.query"
24 Jun 2008 23:57:38          2 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000236.query"
24 Jun 2008 23:57:36            556 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000034.query"
24 Jun 2008 23:57:36            306 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000134.query"
24 Jun 2008 23:57:36          1 040 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000035.query"
24 Jun 2008 23:57:38            156 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000234.query"
24 Jun 2008 23:57:36          3 310 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000133.query"
24 Jun 2008 23:57:36            598 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000032.query"
24 Jun 2008 23:57:38            972 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000231.query"
24 Jun 2008 23:57:36          3 310 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000132.query"
24 Jun 2008 23:57:38            972 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000232.query"
24 Jun 2008 23:57:36            402 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000030.query"
24 Jun 2008 23:57:36            238 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000130.query"
24 Jun 2008 23:57:36            598 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000031.query"
24 Jun 2008 23:57:38            184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000230.query"
24 Jun 2008 23:57:36            842 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000137.query"
24 Jun 2008 23:57:36          3 764 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c6.query"
24 Jun 2008 23:57:38          2 502 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c7.query"
24 Jun 2008 23:57:36          3 764 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c7.query"
24 Jun 2008 23:57:38            204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c4.query"
24 Jun 2008 23:57:36            222 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c4.query"
24 Jun 2008 23:57:38          6 252 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c2.query"
24 Jun 2008 23:57:36          1 962 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c2.query"
24 Jun 2008 23:57:38          6 252 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c3.query"
24 Jun 2008 23:57:36          1 962 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c3.query"
24 Jun 2008 23:57:38            326 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c0.query"
24 Jun 2008 23:57:36            190 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c0.query"
24 Jun 2008 23:57:38          2 502 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c6.query"
24 Jun 2008 23:57:36          3 724 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000046.query"
24 Jun 2008 23:57:36          5 640 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000146.query"
24 Jun 2008 23:57:36          3 724 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000047.query"
24 Jun 2008 23:57:38          5 064 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000246.query"
24 Jun 2008 23:57:36            220 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000044.query"
24 Jun 2008 23:57:38          1 018 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000243.query"
24 Jun 2008 23:57:36            294 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000144.query"
24 Jun 2008 23:57:38            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000244.query"
24 Jun 2008 23:57:36          6 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000143.query"
24 Jun 2008 23:57:36          3 750 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000042.query"
24 Jun 2008 23:57:36          6 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000142.query"
24 Jun 2008 23:57:36          3 750 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000043.query"
24 Jun 2008 23:57:38          1 018 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000242.query"
24 Jun 2008 23:57:36            208 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000040.query"
24 Jun 2008 23:57:36            348 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000140.query"
24 Jun 2008 23:57:38            220 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000240.query"
24 Jun 2008 23:57:36          5 640 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000147.query"
24 Jun 2008 23:57:36          3 256 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d6.query"
24 Jun 2008 23:57:36          3 256 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d7.query"
24 Jun 2008 23:57:38            230 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d4.query"
24 Jun 2008 23:57:36            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d4.query"
24 Jun 2008 23:57:38          3 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d2.query"
24 Jun 2008 23:57:36          4 052 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d2.query"
24 Jun 2008 23:57:38          3 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d3.query"
24 Jun 2008 23:57:36          4 052 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d3.query"
24 Jun 2008 23:57:38            160 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d0.query"
24 Jun 2008 23:57:36            204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d0.query"
24 Jun 2008 23:57:36          3 032 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000056.query"
24 Jun 2008 23:57:38            976 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000255.query"
24 Jun 2008 23:57:36          5 350 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000156.query"
24 Jun 2008 23:57:36          3 032 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000057.query"
24 Jun 2008 23:57:38            976 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000256.query"
24 Jun 2008 23:57:36            246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000054.query"
24 Jun 2008 23:57:36            340 A....

jmd74 · Answer

24 Jun 2008 23:57:36            340 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000154.query"
24 Jun 2008 23:57:38            196 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000254.query"
24 Jun 2008 23:57:36          3 626 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000153.query"
24 Jun 2008 23:57:36          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000052.query"
24 Jun 2008 23:57:38            322 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000251.query"
24 Jun 2008 23:57:36          3 626 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000152.query"
24 Jun 2008 23:57:38            322 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000252.query"
24 Jun 2008 23:57:36            566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000050.query"
24 Jun 2008 23:57:36            274 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000150.query"
24 Jun 2008 23:57:36          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000051.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000250.query"
24 Jun 2008 23:57:36          5 350 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000157.query"
24 Jun 2008 23:57:36          1 312 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e6.query"
24 Jun 2008 23:57:38            174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e4.query"
24 Jun 2008 23:57:36            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e4.query"
24 Jun 2008 23:57:38          1 670 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e5.query"
24 Jun 2008 23:57:36          1 312 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e5.query"
24 Jun 2008 23:57:38          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e2.query"
24 Jun 2008 23:57:36          4 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e2.query"
24 Jun 2008 23:57:36          3 876 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e3.query"
24 Jun 2008 23:57:38            244 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e0.query"
24 Jun 2008 23:57:36            236 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e0.query"
24 Jun 2008 23:57:38          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e1.query"
24 Jun 2008 23:57:36            378 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e1.query"
24 Jun 2008 23:57:38          1 670 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e6.query"
24 Jun 2008 23:57:36          1 806 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000066.query"
24 Jun 2008 23:57:36          3 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000166.query"
24 Jun 2008 23:57:36          1 806 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000067.query"
24 Jun 2008 23:57:38          1 458 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000266.query"
24 Jun 2008 23:57:36            230 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000064.query"
24 Jun 2008 23:57:36            168 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000164.query"
24 Jun 2008 23:57:38            350 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000264.query"
24 Jun 2008 23:57:36          3 960 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000163.query"
24 Jun 2008 23:57:36          2 276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000062.query"
24 Jun 2008 23:57:38          2 044 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000261.query"
24 Jun 2008 23:57:36          3 960 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000162.query"
24 Jun 2008 23:57:36          2 276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000063.query"
24 Jun 2008 23:57:38          2 044 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000262.query"
24 Jun 2008 23:57:36            182 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000060.query"
24 Jun 2008 23:57:36            196 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000160.query"
24 Jun 2008 23:57:38            364 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000260.query"
24 Jun 2008 23:57:36          3 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000167.query"
24 Jun 2008 23:57:36          2 360 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f6.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f4.query"
24 Jun 2008 23:57:36            536 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f4.query"
24 Jun 2008 23:57:38          1 884 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f5.query"
24 Jun 2008 23:57:36          2 360 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f5.query"
24 Jun 2008 23:57:38          4 378 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f2.query"
24 Jun 2008 23:57:36          3 200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f2.query"
24 Jun 2008 23:57:38          4 032 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f3.query"
24 Jun 2008 23:57:36          3 200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f3.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f0.query"
24 Jun 2008 23:57:36            276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f0.query"
24 Jun 2008 23:57:38            354 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f1.query"
24 Jun 2008 23:57:38          1 884 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f6.query"
24 Jun 2008 23:57:36          2 528 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000076.query"
24 Jun 2008 23:57:40            614 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000275.query"
24 Jun 2008 23:57:36          3 526 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000176.query"
24 Jun 2008 23:57:40          1 628 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000276.query"
24 Jun 2008 23:57:36            438 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000074.query"
24 Jun 2008 23:57:40          1 180 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000273.query"
24 Jun 2008 23:57:36            234 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000174.query"
24 Jun 2008 23:57:36          2 528 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000075.query"
24 Jun 2008 23:57:40            222 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000274.query"
24 Jun 2008 23:57:36          3 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000173.query"
24 Jun 2008 23:57:36          1 974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000072.query"
24 Jun 2008 23:57:36          3 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000172.query"
24 Jun 2008 23:57:40          1 180 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000272.query"
24 Jun 2008 23:57:36            544 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000070.query"
24 Jun 2008 23:57:36            156 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000170.query"
24 Jun 2008 23:57:36          1 974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000071.query"
24 Jun 2008 23:57:40            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000270.query"
24 Jun 2008 23:57:38          3 526 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000177.query"
24 Jun 2008 23:57:38          1 592 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000209.query"
24 Jun 2008 23:57:36            532 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000008.query"
24 Jun 2008 23:57:36            266 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000108.query"
24 Jun 2008 23:57:36          1 634 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000009.query"
24 Jun 2008 23:57:38            146 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000208.query"
24 Jun 2008 23:57:36            284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000088.query"
24 Jun 2008 23:57:38            210 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000188.query"
24 Jun 2008 23:57:36            990 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000119.query"
24 Jun 2008 23:57:36            248 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000018.query"
24 Jun 2008 23:57:38          3 142 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000217.query"
24 Jun 2008 23:57:36            518 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000118.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000218.query"
24 Jun 2008 23:57:38          2 672 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000199.query"
24 Jun 2008 23:57:36            198 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000098.query"
24 Jun 2008 23:57:38            364 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000198.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a8.query"
24 Jun 2008 23:57:36            212 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a8.query"
24 Jun 2008 23:57:38            562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000229.query"
24 Jun 2008 23:57:36            488 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000028.query"
24 Jun 2008 23:57:38            664 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000227.query"
24 Jun 2008 23:57:36            152 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000128.query"
24 Jun 2008 23:57:36          1 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000029.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000228.query"
24 Jun 2008 23:57:38            292 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b8.query"
24 Jun 2008 23:57:36            182 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b8.query"
24 Jun 2008 23:57:36            358 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000038.query"
24 Jun 2008 23:57:38          2 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000237.query"
24 Jun 2008 23:57:36            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000138.query"
24 Jun 2008 23:57:36          1 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000039.query"
24 Jun 2008 23:57:38            184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000238.query"
24 Jun 2008 23:57:38            564 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c8.query"
24 Jun 2008 23:57:36            276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c8.query"
24 Jun 2008 23:57:36            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000048.query"
24 Jun 2008 23:57:38          5 064 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000247.query"
24 Jun 2008 23:57:36            218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000148.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000248.query"
24 Jun 2008 23:57:38            102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d8.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d8.query"
24 Jun 2008 23:57:36          2 964 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000159.query"
24 Jun 2008 23:57:36            280 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000058.query"
24 Jun 2008 23:57:36            388 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000158.query"
24 Jun 2008 23:57:38            134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000258.query"
24 Jun 2008 23:57:38            172 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e8.query"
24 Jun 2008 23:57:36            284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e8.query"
24 Jun 2008 23:57:38          2 330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e9.query"
24 Jun 2008 23:57:36            212 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000068.query"
24 Jun 2008 23:57:38          1 458 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000267.query"
24 Jun 2008 23:57:36            124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000168.query"
24 Jun 2008 23:57:38            402 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000268.query"
24 Jun 2008 23:57:38            206 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f8.query"
24 Jun 2008 23:57:36            328 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f8.query"
24 Jun 2008 23:57:38          3 184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f9.query"
24 Jun 2008 23:57:36            426 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000078.query"
24 Jun 2008 23:57:40          1 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000277.query"
24 Jun 2008 23:57:38            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000178.query"
24 Jun 2008 23:57:36          2 540 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000079.query"
24 Jun 2008 23:57:40            230 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000278.query"
24 Jun 2008 23:57:36          4 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000f.query"
24 Jun 2008 23:57:38          1 780 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020e.query"
24 Jun 2008 23:57:38          1 780 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020f.query"
24 Jun 2008 23:57:38            210 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020c.query"
24 Jun 2008 23:57:36          4 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000e.query"
24 Jun 2008 23:57:36            356 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010c.query"
24 Jun 2008 23:57:38          1 592 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020a.query"
24 Jun 2008 23:57:36          1 480 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010b.query"
24 Jun 2008 23:57:36            186 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000c.query"
24 Jun 2008 23:57:36          1 480 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010a.query"
24 Jun 2008 23:57:36          1 634 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000a.query"
24 Jun 2008 23:57:38          4 848 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018f.query"
24 Jun 2008 23:57:38          4 848 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018e.query"
24 Jun 2008 23:57:36          1 926 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008d.query"
24 Jun 2008 23:57:36          1 926 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008e.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018c.query"
24 Jun 2008 23:57:36          4 296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008b.query"
24 Jun 2008 23:57:38          1 452 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018b.query"
24 Jun 2008 23:57:36            570 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008c.query"
24 Jun 2008 23:57:38          1 452 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018a.query"
24 Jun 2008 23:57:36          4 296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008a.query"
24 Jun 2008 23:57:38          2 218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021e.query"
24 Jun 2008 23:57:36          2 078 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011e.query"
24 Jun 2008 23:57:36          1 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001d.query"
24 Jun 2008 23:57:38            244 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021c.query"
24 Jun 2008 23:57:36          2 078 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011d.query"
24 Jun 2008 23:57:36          1 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001e.query"
24 Jun 2008 23:57:38          2 218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021d.query"
24 Jun 2008 23:57:36            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011c.query"
24 Jun 2008 23:57:36          3 470 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001b.query"
24 Jun 2008 23:57:38          3 586 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021a.query"
24 Jun 2008 23:57:36            384 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001c.query"
24 Jun 2008 23:57:38          3 586 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021b.query"
24 Jun 2008 23:57:36            990 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011a.query"
24 Jun 2008 23:57:36          3 470 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001a.query"
24 Jun 2008 23:57:36          2 864 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009f.query"
24 Jun 2008 23:57:38          7 042 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019f.query"
24 Jun 2008 23:57:38          7 042 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019e.query"
24 Jun 2008 23:57:36          2 864 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009e.query"
24 Jun 2008 23:57:38            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019c.query"
24 Jun 2008 23:57:36          2 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009b.query"
24 Jun 2008 23:57:36            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009c.query"
24 Jun 2008 23:57:38          2 672 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019a.query"
24 Jun 2008 23:57:36          2 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009a.query"
24 Jun 2008 23:57:36          2 140 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000af.query"
24 Jun 2008 23:57:38          4 026 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ae.query"
24 Jun 2008 23:57:36          2 140 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ae.query"
24 Jun 2008 23:57:38          1 050 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ab.query"
24 Jun 2008 23:57:36          2 100 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ab.query"
24 Jun 2008 23:57:38            242 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ac.query"
24 Jun 2008 23:57:36            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ac.query"
24 Jun 2008 23:57:38          1 050 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001aa.query"
24 Jun 2008 23:57:36          2 100 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000aa.query"
24 Jun 2008 23:57:38          4 026 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001af.query"
24 Jun 2008 23:57:38          3 514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022e.query"
24 Jun 2008 23:57:38          3 514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022f.query"
24 Jun 2008 23:57:36          2 662 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012e.query"
24 Jun 2008 23:57:36            530 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002d.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022c.query"
24 Jun 2008 23:57:36          2 662 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012d.query"
24 Jun 2008 23:57:36            530 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002e.query"
24 Jun 2008 23:57:36            444 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012c.query"
24 Jun 2008 23:57:38            562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022a.query"
24 Jun 2008 23:57:36            296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012b.query"
24 Jun 2008 23:57:36            268 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002c.query"
24 Jun 2008 23:57:36            296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012a.query"
24 Jun 2008 23:57:36          1 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002a.query"
24 Jun 2008 23:57:36          1 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bf.query"
24 Jun 2008 23:57:38          3 394 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001be.query"
24 Jun 2008 23:57:36          1 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000be.query"
24 Jun 2008 23:57:38          4 688 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bb.query"
24 Jun 2008 23:57:36          4 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bb.query"
24 Jun 2008 23:57:38            242 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bc.query"
24 Jun 2008 23:57:36            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bc.query"
24 Jun 2008 23:57:38          4 688 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ba.query"
24 Jun 2008 23:57:36          4 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ba.query"
24 Jun 2008 23:57:38          3 394 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bf.query"
24 Jun 2008 23:57:38            904 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023e.query"
24 Jun 2008 23:57:36          4 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013f.query"
24 Jun 2008 23:57:38            904 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023f.query"
24 Jun 2008 23:57:36          4 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013e.query"
24 Jun 2008 23:57:36          1 492 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003d.query"
24 Jun 2008 23:57:38            156 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023c.query"
24 Jun 2008 23:57:36          1 492 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003e.query"
24 Jun 2008 23:57:36            232 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013c.query"
24 Jun 2008 23:57:38          4 014 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023a.query"
24 Jun 2008 23:57:36          3 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013b.query"
24 Jun 2008 23:57:36            324 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003c.query"
24 Jun 2008 23:57:38          4 014 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023b.query"
24 Jun 2008 23:57:36          3 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013a.query"
24 Jun 2008 23:57:36          1 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003a.query"
24 Jun 2008 23:57:36          8 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cf.query"
24 Jun 2008 23:57:38            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001cd.query"
24 Jun 2008 23:57:38            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ce.query"
24 Jun 2008 23:57:36          8 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ce.query"
24 Jun 2008 23:57:36          3 130 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cb.query"
24 Jun 2008 23:57:38             84 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001cc.query"
24 Jun 2008 23:57:36            254 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cc.query"
24 Jun 2008 23:57:36          3 130 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ca.query"
24 Jun 2008 23:57:36          4 924 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004f.query"
24 Jun 2008 23:57:38            974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024e.query"
24 Jun 2008 23:57:36          2 656 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014f.query"
24 Jun 2008 23:57:36          2 656 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014e.query"
24 Jun 2008 23:57:38            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024c.query"
24 Jun 2008 23:57:36          4 924 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004e.query"
24 Jun 2008 23:57:38            974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024d.query"
24 Jun 2008 23:57:36            226 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014c.query"
24 Jun 2008 23:57:36          2 474 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004b.query"
24 Jun 2008 23:57:38          2 858 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024a.query"
24 Jun 2008 23:57:36          6 124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014b.query"
24 Jun 2008 23:57:36            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004c.query"
24 Jun 2008 23:57:38          2 858 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024b.query"
24 Jun 2008 23:57:36          6 124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014a.query"
24 Jun 2008 23:57:36          2 474 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004a.query"
24 Jun 2008 23:57:38          2 102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001dd.query"
24 Jun 2008 23:57:36            514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000dd.query"
24 Jun 2008 23:57:38          2 102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001de.query"
24 Jun 2008 23:57:36            514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000de.query"
24 Jun 2008 23:57:38          1 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001db.query"
24 Jun 2008 23:57:36          1 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000db.query"
24 Jun 2008 23:57:38             84 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001dc.query"
24 Jun 2008 23:57:36            368 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000dc.query"
24 Jun 2008 23:57:38          1 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001da.query"
24 Jun 2008 23:57:36          1 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000da.query"
24 Jun 2008 23:57:36          5 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005f.query"
24 Jun 2008 23:57:38          5 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025e.query"
24 Jun 2008 23:57:36          5 038 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015f.query"
24 Jun 2008 23:57:38          5 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025f.query"
24 Jun 2008 23:57:36          5 038 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015e.query"
24 Jun 2008 23:57:38            146 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025c.query"
24 Jun 2008 23:57:36          5 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005e.query"
24 Jun 2008 23:57:36            252 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015c.query"
24 Jun 2008 23:57:36          2 810 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005b.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025a.query"
24 Jun 2008 23:57:36            410 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005c.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025b.query"
24 Jun 2008 23:57:36          2 964 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015a.query"
24 Jun 2008 23:57:36          2 810 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005a.query"
24 Jun 2008 23:57:36          6 204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ef.query"
24 Jun 2008 23:57:38          2 284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ee.query"
24 Jun 2008 23:57:36          6 204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ee.query"
24 Jun 2008 23:57:36          3 834 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000eb.query"
24 Jun 2008 23:57:38            208 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ec.query"
24 Jun 2008 23:57:36            266 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ec.query"
24 Jun 2008 23:57:38          2 330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ea.query"
24 Jun 2008 23:57:36          3 834 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ea.query"
24 Jun 2008 23:57:38          2 284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ef.query"
24 Jun 2008 23:57:40          1 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026e.query"
24 Jun 2008 23:57:36          1 702 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016f.query"
24 Jun 2008 23:57:40          1 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026f.query"
24 Jun 2008 23:57:36          1 878 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016e.query"
24 Jun 2008 23:57:36          1 106 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006d.query"
24 Jun 2008 23:57:40            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026c.query"
24 Jun 2008 23:57:36            184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016d.query"
24 Jun 2008 23:57:36          1 106 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006e.query"
24 Jun 2008 23:57:36            134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016c.query"
24 Jun 2008 23:57:36          1 742 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006b.query"
24 Jun 2008 23:57:38          1 996 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026a.query"
24 Jun 2008 23:57:36          1 762 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016b.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006c.query"
24 Jun 2008 23:57:38          1 996 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026b.query"
24 Jun 2008 23:57:36          1 762 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016a.query"
24 Jun 2008 23:57:36          1 742 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006a.query"
24 Jun 2008 23:57:36          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ff.query"
24 Jun 2008 23:57:38          5 838 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fe.query"
24 Jun 2008 23:57:36          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fe.query"
24 Jun 2008 23:57:36          4 566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fb.query"
24 Jun 2008 23:57:38            218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fc.query"
24 Jun 2008 23:57:36            318 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fc.query"
24 Jun 2008 23:57:38          3 184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fa.query"
24 Jun 2008 23:57:36          4 566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fa.query"
24 Jun 2008 23:57:38          5 838 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ff.query"
24 Jun 2008 23:57:36          6 448 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007f.query"
24 Jun 2008 23:57:40          3 162 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027e.query"
24 Jun 2008 23:57:38          2 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017f.query"
24 Jun 2008 23:57:40          3 162 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027f.query"
24 Jun 2008 23:57:38          2 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017e.query"
24 Jun 2008 23:57:40            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027c.query"
24 Jun 2008 23:57:36          6 448 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007e.query"
24 Jun 2008 23:57:38            204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017c.query"
24 Jun 2008 23:57:40          3 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027a.query"
24 Jun 2008 23:57:38          3 912 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017b.query"
24 Jun 2008 23:57:36            330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007c.query"
24 Jun 2008 23:57:40          3 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027b.query"
24 Jun 2008 23:57:38          3 912 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017a.query"
24 Jun 2008 23:57:36          2 540 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007a.query"
24 Jun 2008 23:57:22         78 370 A....     "C:\WINDOWS\pchealth\helpctr\System\CompatCtr\CompatMode.htm"
24 Jun 2008 23:57:20          1 206 A....     "C:\WINDOWS\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js"
24 Jun 2008 23:57:22         19 128 A....     "C:\WINDOWS\pchealth\helpctr\System\errors\connection.htm"
26 Jun 2008  1:25:54         77 971 A....     "C:\WINDOWS\pchealth\helpctr\System\News\1036_Personal_0_gss3_small_banner.gif"
24 Jun 2008 23:57:20         19 779 A....     "C:\WINDOWS\pchealth\helpctr\System\panels\AdvSearch.htm"
24 Jun 2008 23:57:22            550 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml"
24 Jun 2008 23:57:22            676 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml"
24 Jun 2008 23:57:22            599 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml"
24 Jun 2008 23:57:22            581 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAURA.xml"
24 Jun 2008 23:57:22          3 159 A....     "C:\WINDOWS\pchealth\helpctr\System\scripts\Common.js"
24 Jun 2008 23:57:22         32 141 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\commonFunc.js"
24 Jun 2008 23:57:22         25 135 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm"
24 Jun 2008 23:57:20         27 910 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysComponentInfo.js"
24 Jun 2008 23:57:22         16 182 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysinfosum.htm"
24 Jun 2008 23:57:22          7 926 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm"
24 Jun 2008 23:57:20         14 129 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\wmi_data.js"
17 Jun 2008 15:17:14          2 669 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\autodownload.txt"
17 Jun 2008 16:12:46         12 800 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\CBrowser.x32"
17 Jun 2008 16:07:54         32 256 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\INetURL.x32"
17 Jun 2008 15:51:32        167 936 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Multiusr.x32"
17 Jun 2008 16:08:04         41 984 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Netfile.x32"
17 Jun 2008 16:08:10         36 352 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Netlingo.x32"
17 Jun 2008 16:11:24         49 152 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Speech.x32"
10 Jul 2008 21:09:08         30 147 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4457.French[1].dist"
10 Jul 2008 21:09:08         22 761 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4608.French[1].dist"
10 Jul 2008 21:09:08         33 617 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4834.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\desktop.ini"
10 Jul 2008 21:09:06         48 206 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\index-windows-1[1].sucatalog"
10 Jul 2008 21:09:08          3 782 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-3452.French[1].dist"
10 Jul 2008 21:09:08          6 079 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4249.French[1].dist"
10 Jul 2008 21:09:08          6 964 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4513.French[1].dist"
10 Jul 2008 21:09:08         40 164 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4802.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\desktop.ini"
10 Jul 2008 21:09:06          6 346 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4200.French[1].dist"
10 Jul 2008 21:09:08          6 855 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4512.French[1].dist"
10 Jul 2008 21:09:08         18 471 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4609.English[1].dist"
10 Jul 2008 21:09:08         32 404 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4835.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\desktop.ini"
10 Jul 2008 21:09:08         21 758 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4339.French[1].dist"
10 Jul 2008 21:09:08          6 579 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4514.French[1].dist"
10 Jul 2008 21:09:08         39 557 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4804.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\desktop.ini"
24 Jun 2008 23:57:20         37 736 A....     "C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Search.htm"
24 Jun 2008 23:57:22          5 269 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Common\common.js"
24 Jun 2008 23:57:22         16 302 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistancecstatus.htm"
25 Jun 2008  0:02:42         58 096 A....     "C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.BUD"
24 Jun 2008 23:57:22         46 353 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm"
24 Jun 2008 23:57:22         11 185 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js"
24 Jun 2008 23:57:22         11 251 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm"
24 Jun 2008 23:57:22          2 500 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\ClientctoolScreen1.htm"
24 Jun 2008 23:57:22            690 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif"
24 Jun 2008 23:57:22         15 832 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js"
24 Jun 2008 23:57:22         30 911 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm"
24 Jun 2008 23:57:22          3 293 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm"
24 Jun 2008 23:57:22         21 215 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm"
24 Jun 2008 23:57:22          5 203 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js"
24 Jun 2008 23:57:22         14 676 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm"
24 Jun 2008 23:57:22          5 269 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js"
24 Jun 2008 23:57:22          5 691 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm"
24 Jun 2008 23:57:22          3 151 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm"
24 Jun 2008 23:57:22          3 623 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm"
24 Jun 2008 23:57:22          8 188 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Emailcscreen7.htm"
24 Jun 2008 23:57:22         30 864 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Emailcscreen6.htm"
24 Jun 2008 23:57:22          3 311 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm"


C:\Program Files\

12 Jun 2008 17:04:38              0 A....     "C:\Program Files\uninstall.dat"
28 May 2008 16:40:18      1 197 296 A....     "C:\Program Files\CCleaner\CCleaner.exe"
28 May 2008 21:37:56         24 064 A....     "C:\Program Files\CCleaner\lang-1036.dll"
 5 Jun 2008 21:23:02        114 326 A....     "C:\Program Files\CCleaner\uninst.exe"
 7 Jul 2008 17:35:30         77 432 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll"
 7 Jul 2008 17:35:30      1 175 160 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"
 7 Jul 2008 17:35:32         36 472 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll"
 7 Jul 2008 17:35:32        122 488 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe"
 7 Jul 2008 17:35:32        380 536 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamtrayctrl.exe"
 7 Jul 2008 17:35:34         44 664 A....     "C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll"
 8 Jul 2008 12:04:24          7 684 A....     "C:\Program Files\Malwarebytes' Anti-Malware\unins000.dat"
 8 Jul 2008 12:02:16        688 760 A....     "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
 7 Jul 2008 17:35:34         57 464 A....     "C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll"
29 May 2008 23:13:28         17 408 A....     "C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll"
29 May 2008 23:13:28        185 856 A....     "C:\Program Files\Mozilla Firefox\crashreporter.exe"
29 May 2008 23:13:28        307 712 A....     "C:\Program Files\Mozilla Firefox\firefox.exe"
29 May 2008 16:24:14        233 472 A....     "C:\Program Files\Mozilla Firefox\freebl3.dll"
29 May 2008 23:13:28        695 808 A....     "C:\Program Files\Mozilla Firefox\js3250.dll"
29 May 2008 23:13:30        710 144 A....     "C:\Program Files\Mozilla Firefox\mozcrt19.dll"
29 May 2008 23:13:30        198 144 A....     "C:\Program Files\Mozilla Firefox
spr4.dll"
29 May 2008 23:13:30        697 856 A....     "C:\Program Files\Mozilla Firefox
ss3.dll"
29 May 2008 23:13:30        304 640 A....     "C:\Program Files\Mozilla Firefox
ssckbi.dll"
29 May 2008 23:13:30        103 936 A....     "C:\Program Files\Mozilla Firefox
ssdbm3.dll"
29 May 2008 23:13:30         87 552 A....     "C:\Program Files\Mozilla Firefox
ssutil3.dll"
29 May 2008 23:13:30         20 480 A....     "C:\Program Files\Mozilla Firefox\plc4.dll"
29 May 2008 23:13:30         17 408 A....     "C:\Program Files\Mozilla Firefox\plds4.dll"
29 May 2008 23:13:30        103 936 A....     "C:\Program Files\Mozilla Firefox\smime3.dll"
29 May 2008 16:24:14        151 552 A....     "C:\Program Files\Mozilla Firefox\softokn3.dll"
29 May 2008 23:13:30        414 208 A....     "C:\Program Files\Mozilla Firefox\sqlite3.dll"
29 May 2008 23:13:30        136 704 A....     "C:\Program Files\Mozilla Firefox\ssl3.dll"
29 May 2008 23:13:30        241 664 A....     "C:\Program Files\Mozilla Firefox\updater.exe"
29 May 2008 23:13:30         17 920 A....     "C:\Program Files\Mozilla Firefox\xpcom.dll"
29 May 2008 23:13:30      9 715 200 A....     "C:\Program Files\Mozilla Firefox\xul.dll"
 5 Jun 2008 18:18:02          5 737 A....     "C:\Program Files\Navilog1\gnc.exe"
28 Jun 2008  0:03:22        933 059 A....     "C:\Program Files\Navilog1
avilog1.bat"
28 Jun 2008  0:03:46        733 084 A....     "C:\Program Files\Navilog1
avreb.bat"
27 Jun 2008 15:36:48         52 781 A....     "C:\Program Files\Navilog1egnavi.reg"
11 Jul 2008 23:37:56          3 333 A....     "C:\Program Files\Navilog1\unins000.dat"
11 Jul 2008 23:37:44        689 104 A....     "C:\Program Files\Navilog1\unins000.exe"
 7 Jul 2008  9:41:56        939 344 A....     "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
 7 Jul 2008  9:41:56        428 880 A....     "C:\Program Files\Spybot - Search & Destroy\blindman.exe"
14 Jun 2008 11:24:30        255 392 A....     "C:\Program Files\Spybot - Search & Destroy\DelZip179.dll"
 7 Jul 2008  9:36:46      1 430 016 A....     "C:\Program Files\Spybot - Search & Destroy\SDFiles.exe"
 7 Jul 2008  9:41:58      1 562 448 A....     "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
 7 Jul 2008  9:42:00        414 544 A....     "C:\Program Files\Spybot - Search & Destroy\SDMain.exe"
 7 Jul 2008  9:37:40        958 976 A....     "C:\Program Files\Spybot - Search & Destroy\SDShred.exe"
 7 Jul 2008  9:42:00      1 429 840 A.SHR     "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
 7 Jul 2008  9:42:02        809 296 A....     "C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe"
 7 Jul 2008  9:42:04      4 891 472 A.SHR     "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
19 Jun 2008 18:35:36        333 288 A....     "C:\Program Files\Spybot - Search & Destroy\sqlite3.dll"
 7 Jul 2008  9:42:06      2 156 368 A.SHR     "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
 7 Jul 2008  9:42:06        835 920 A....     "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
 9 Jul 2008 22:50:14         26 047 A....     "C:\Program Files\Spybot - Search & Destroy\unins000.dat"
 9 Jul 2008 22:49:26        696 200 A....     "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
 7 Jul 2008  9:42:08        464 720 A....     "C:\Program Files\Spybot - Search & Destroy\Update.exe"
 3 Jul 2008  0:23:26        168 311 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aecore.dll"
25 Jun 2008  1:07:06        430 451 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeemu.dll"
25 Jun 2008  1:07:10        307 573 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aegen.dll"
25 Jun 2008  1:07:14        115 063 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aehelp.dll"
 3 Jul 2008  0:23:28      1 298 806 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeheur.dll"
25 Jun 2008  1:07:48        192 891 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeoffice.dll"
25 Jun 2008  1:07:54        364 918 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aepack.dll"
25 Jun 2008  1:07:58        418 165 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aerdl.dll"
25 Jun 2008  1:08:02        119 157 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescn.dll"
 3 Jul 2008  0:23:30        283 002 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescript.dll"
 7 Jul 2008 20:10:08          2 047 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeset.dat"
26 Jun 2008  0:34:30        124 161 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.dll"
26 Jun 2008  0:34:48         52 032 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys"
26 Jun 2008  0:34:36        147 201 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"
26 Jun 2008  0:34:40        208 592 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe"
 7 Jul 2008 20:10:08         16 478 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\build.dat"
26 Jun 2008  0:34:46        631 041 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\setup.exe"
26 Jun 2008  0:34:46         57 601 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\wksstats.dll"
24 Jun 2008 21:44:44      6 794 496 A....     "C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe"
24 Jun 2008 21:44:44         89 344 A....     "C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe"
29 May 2008 23:13:30         23 040 A....     "C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll"
29 May 2008 23:13:30        134 144 A....     "C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll"
17 Jun 2008 16:12:42        114 688 A....     "C:\Program Files\Mozilla Firefox\plugins
p32dsw.dll"
29 May 2008 23:13:30         65 536 A....     "C:\Program Files\Mozilla Firefox\plugins
pnul32.dll"
29 May 2008 16:24:14            117 A....     "C:\Program Files\Mozilla Firefoxes\hiddenWindow.html"
29 May 2008 23:13:28        508 608 A....     "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
 2 Jul 2008 23:25:56        276 186 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\desc.english.zip"
 5 Jun 2008 23:25:56          2 418 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\fpfix.zip"
 9 Jul 2008 23:25:58         28 887 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\lang.francais.zip"
11 Jul 2008 23:52:18             72 A....     "C:\Program Files\Symantec\LiveUpdate\ludirloc.dat"
 8 Jul 2008 17:52:28        396 288 A....     "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
 8 Jul 2008 17:54:10        396 288 A....     "C:\Program Files\Trend Micro\lalala.exe\HijackThis.exe"
 3 Jul 2008  0:23:26        168 311 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aecore.dll"
25 Jun 2008  1:07:06        430 451 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeemu.dll"
25 Jun 2008  1:07:10        307 573 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aegen.dll"
25 Jun 2008  1:07:14        115 063 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aehelp.dll"
 3 Jul 2008  0:23:28      1 298 806 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeheur.dll"
25 Jun 2008  1:07:48        192 891 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeoffice.dll"
25 Jun 2008  1:07:54        364 918 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aepack.dll"
25 Jun 2008  1:07:58        418 165 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aerdl.dll"
25 Jun 2008  1:08:02        119 157 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aescn.dll"
 3 Jul 2008  0:23:30        283 002 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aescript.dll"
 7 Jul 2008 20:10:08          2 047 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeset.dat"
24 May 2008 11:10:54        163 800 A....     "C:\Program Files\Netscape\Netscape\components\compreg.dat"
24 May 2008 10:00:10         95 319 A....     "C:\Program Files\Netscape\Netscape\components\xpti.dat"
17 Jun 2008 16:12:42        114 688 A....     "C:\Program Files\Netscape\Netscape\plugins
p32dsw.dll"
30 Jun 2008  0:03:14            728 A....     "C:\Program Files\Winamp\Plugins\ml\main.dat"
30 Jun 2008  0:03:14         22 803 A....     "C:\Program Files\W

jmd74 · Answer

24 Jun 2008 23:57:36            340 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000154.query"
24 Jun 2008 23:57:38            196 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000254.query"
24 Jun 2008 23:57:36          3 626 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000153.query"
24 Jun 2008 23:57:36          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000052.query"
24 Jun 2008 23:57:38            322 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000251.query"
24 Jun 2008 23:57:36          3 626 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000152.query"
24 Jun 2008 23:57:38            322 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000252.query"
24 Jun 2008 23:57:36            566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000050.query"
24 Jun 2008 23:57:36            274 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000150.query"
24 Jun 2008 23:57:36          1 520 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000051.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000250.query"
24 Jun 2008 23:57:36          5 350 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000157.query"
24 Jun 2008 23:57:36          1 312 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e6.query"
24 Jun 2008 23:57:38            174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e4.query"
24 Jun 2008 23:57:36            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e4.query"
24 Jun 2008 23:57:38          1 670 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e5.query"
24 Jun 2008 23:57:36          1 312 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e5.query"
24 Jun 2008 23:57:38          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e2.query"
24 Jun 2008 23:57:36          4 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e2.query"
24 Jun 2008 23:57:36          3 876 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e3.query"
24 Jun 2008 23:57:38            244 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e0.query"
24 Jun 2008 23:57:36            236 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e0.query"
24 Jun 2008 23:57:38          2 246 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e1.query"
24 Jun 2008 23:57:36            378 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e1.query"
24 Jun 2008 23:57:38          1 670 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e6.query"
24 Jun 2008 23:57:36          1 806 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000066.query"
24 Jun 2008 23:57:36          3 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000166.query"
24 Jun 2008 23:57:36          1 806 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000067.query"
24 Jun 2008 23:57:38          1 458 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000266.query"
24 Jun 2008 23:57:36            230 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000064.query"
24 Jun 2008 23:57:36            168 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000164.query"
24 Jun 2008 23:57:38            350 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000264.query"
24 Jun 2008 23:57:36          3 960 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000163.query"
24 Jun 2008 23:57:36          2 276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000062.query"
24 Jun 2008 23:57:38          2 044 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000261.query"
24 Jun 2008 23:57:36          3 960 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000162.query"
24 Jun 2008 23:57:36          2 276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000063.query"
24 Jun 2008 23:57:38          2 044 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000262.query"
24 Jun 2008 23:57:36            182 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000060.query"
24 Jun 2008 23:57:36            196 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000160.query"
24 Jun 2008 23:57:38            364 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000260.query"
24 Jun 2008 23:57:36          3 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000167.query"
24 Jun 2008 23:57:36          2 360 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f6.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f4.query"
24 Jun 2008 23:57:36            536 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f4.query"
24 Jun 2008 23:57:38          1 884 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f5.query"
24 Jun 2008 23:57:36          2 360 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f5.query"
24 Jun 2008 23:57:38          4 378 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f2.query"
24 Jun 2008 23:57:36          3 200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f2.query"
24 Jun 2008 23:57:38          4 032 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f3.query"
24 Jun 2008 23:57:36          3 200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f3.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f0.query"
24 Jun 2008 23:57:36            276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f0.query"
24 Jun 2008 23:57:38            354 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f1.query"
24 Jun 2008 23:57:38          1 884 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f6.query"
24 Jun 2008 23:57:36          2 528 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000076.query"
24 Jun 2008 23:57:40            614 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000275.query"
24 Jun 2008 23:57:36          3 526 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000176.query"
24 Jun 2008 23:57:40          1 628 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000276.query"
24 Jun 2008 23:57:36            438 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000074.query"
24 Jun 2008 23:57:40          1 180 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000273.query"
24 Jun 2008 23:57:36            234 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000174.query"
24 Jun 2008 23:57:36          2 528 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000075.query"
24 Jun 2008 23:57:40            222 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000274.query"
24 Jun 2008 23:57:36          3 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000173.query"
24 Jun 2008 23:57:36          1 974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000072.query"
24 Jun 2008 23:57:36          3 490 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000172.query"
24 Jun 2008 23:57:40          1 180 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000272.query"
24 Jun 2008 23:57:36            544 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000070.query"
24 Jun 2008 23:57:36            156 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000170.query"
24 Jun 2008 23:57:36          1 974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000071.query"
24 Jun 2008 23:57:40            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000270.query"
24 Jun 2008 23:57:38          3 526 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000177.query"
24 Jun 2008 23:57:38          1 592 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000209.query"
24 Jun 2008 23:57:36            532 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000008.query"
24 Jun 2008 23:57:36            266 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000108.query"
24 Jun 2008 23:57:36          1 634 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000009.query"
24 Jun 2008 23:57:38            146 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000208.query"
24 Jun 2008 23:57:36            284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000088.query"
24 Jun 2008 23:57:38            210 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000188.query"
24 Jun 2008 23:57:36            990 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000119.query"
24 Jun 2008 23:57:36            248 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000018.query"
24 Jun 2008 23:57:38          3 142 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000217.query"
24 Jun 2008 23:57:36            518 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000118.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000218.query"
24 Jun 2008 23:57:38          2 672 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000199.query"
24 Jun 2008 23:57:36            198 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000098.query"
24 Jun 2008 23:57:38            364 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000198.query"
24 Jun 2008 23:57:38            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001a8.query"
24 Jun 2008 23:57:36            212 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000a8.query"
24 Jun 2008 23:57:38            562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000229.query"
24 Jun 2008 23:57:36            488 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000028.query"
24 Jun 2008 23:57:38            664 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000227.query"
24 Jun 2008 23:57:36            152 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000128.query"
24 Jun 2008 23:57:36          1 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000029.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000228.query"
24 Jun 2008 23:57:38            292 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001b8.query"
24 Jun 2008 23:57:36            182 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000b8.query"
24 Jun 2008 23:57:36            358 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000038.query"
24 Jun 2008 23:57:38          2 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000237.query"
24 Jun 2008 23:57:36            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000138.query"
24 Jun 2008 23:57:36          1 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000039.query"
24 Jun 2008 23:57:38            184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000238.query"
24 Jun 2008 23:57:38            564 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001c8.query"
24 Jun 2008 23:57:36            276 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000c8.query"
24 Jun 2008 23:57:36            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000048.query"
24 Jun 2008 23:57:38          5 064 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000247.query"
24 Jun 2008 23:57:36            218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000148.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000248.query"
24 Jun 2008 23:57:38            102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001d8.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000d8.query"
24 Jun 2008 23:57:36          2 964 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000159.query"
24 Jun 2008 23:57:36            280 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000058.query"
24 Jun 2008 23:57:36            388 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000158.query"
24 Jun 2008 23:57:38            134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000258.query"
24 Jun 2008 23:57:38            172 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e8.query"
24 Jun 2008 23:57:36            284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000e8.query"
24 Jun 2008 23:57:38          2 330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001e9.query"
24 Jun 2008 23:57:36            212 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000068.query"
24 Jun 2008 23:57:38          1 458 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000267.query"
24 Jun 2008 23:57:36            124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000168.query"
24 Jun 2008 23:57:38            402 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000268.query"
24 Jun 2008 23:57:38            206 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f8.query"
24 Jun 2008 23:57:36            328 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000f8.query"
24 Jun 2008 23:57:38          3 184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001f9.query"
24 Jun 2008 23:57:36            426 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000078.query"
24 Jun 2008 23:57:40          1 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000277.query"
24 Jun 2008 23:57:38            258 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000178.query"
24 Jun 2008 23:57:36          2 540 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000079.query"
24 Jun 2008 23:57:40            230 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\00000278.query"
24 Jun 2008 23:57:36          4 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000f.query"
24 Jun 2008 23:57:38          1 780 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020e.query"
24 Jun 2008 23:57:38          1 780 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020f.query"
24 Jun 2008 23:57:38            210 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020c.query"
24 Jun 2008 23:57:36          4 260 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000e.query"
24 Jun 2008 23:57:36            356 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010c.query"
24 Jun 2008 23:57:38          1 592 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000020a.query"
24 Jun 2008 23:57:36          1 480 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010b.query"
24 Jun 2008 23:57:36            186 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000c.query"
24 Jun 2008 23:57:36          1 480 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000010a.query"
24 Jun 2008 23:57:36          1 634 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000000a.query"
24 Jun 2008 23:57:38          4 848 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018f.query"
24 Jun 2008 23:57:38          4 848 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018e.query"
24 Jun 2008 23:57:36          1 926 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008d.query"
24 Jun 2008 23:57:36          1 926 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008e.query"
24 Jun 2008 23:57:38            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018c.query"
24 Jun 2008 23:57:36          4 296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008b.query"
24 Jun 2008 23:57:38          1 452 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018b.query"
24 Jun 2008 23:57:36            570 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008c.query"
24 Jun 2008 23:57:38          1 452 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000018a.query"
24 Jun 2008 23:57:36          4 296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000008a.query"
24 Jun 2008 23:57:38          2 218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021e.query"
24 Jun 2008 23:57:36          2 078 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011e.query"
24 Jun 2008 23:57:36          1 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001d.query"
24 Jun 2008 23:57:38            244 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021c.query"
24 Jun 2008 23:57:36          2 078 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011d.query"
24 Jun 2008 23:57:36          1 582 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001e.query"
24 Jun 2008 23:57:38          2 218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021d.query"
24 Jun 2008 23:57:36            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011c.query"
24 Jun 2008 23:57:36          3 470 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001b.query"
24 Jun 2008 23:57:38          3 586 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021a.query"
24 Jun 2008 23:57:36            384 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001c.query"
24 Jun 2008 23:57:38          3 586 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000021b.query"
24 Jun 2008 23:57:36            990 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000011a.query"
24 Jun 2008 23:57:36          3 470 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000001a.query"
24 Jun 2008 23:57:36          2 864 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009f.query"
24 Jun 2008 23:57:38          7 042 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019f.query"
24 Jun 2008 23:57:38          7 042 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019e.query"
24 Jun 2008 23:57:36          2 864 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009e.query"
24 Jun 2008 23:57:38            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019c.query"
24 Jun 2008 23:57:36          2 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009b.query"
24 Jun 2008 23:57:36            264 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009c.query"
24 Jun 2008 23:57:38          2 672 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000019a.query"
24 Jun 2008 23:57:36          2 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000009a.query"
24 Jun 2008 23:57:36          2 140 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000af.query"
24 Jun 2008 23:57:38          4 026 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ae.query"
24 Jun 2008 23:57:36          2 140 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ae.query"
24 Jun 2008 23:57:38          1 050 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ab.query"
24 Jun 2008 23:57:36          2 100 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ab.query"
24 Jun 2008 23:57:38            242 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ac.query"
24 Jun 2008 23:57:36            200 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ac.query"
24 Jun 2008 23:57:38          1 050 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001aa.query"
24 Jun 2008 23:57:36          2 100 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000aa.query"
24 Jun 2008 23:57:38          4 026 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001af.query"
24 Jun 2008 23:57:38          3 514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022e.query"
24 Jun 2008 23:57:38          3 514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022f.query"
24 Jun 2008 23:57:36          2 662 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012e.query"
24 Jun 2008 23:57:36            530 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002d.query"
24 Jun 2008 23:57:38            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022c.query"
24 Jun 2008 23:57:36          2 662 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012d.query"
24 Jun 2008 23:57:36            530 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002e.query"
24 Jun 2008 23:57:36            444 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012c.query"
24 Jun 2008 23:57:38            562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000022a.query"
24 Jun 2008 23:57:36            296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012b.query"
24 Jun 2008 23:57:36            268 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002c.query"
24 Jun 2008 23:57:36            296 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000012a.query"
24 Jun 2008 23:57:36          1 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000002a.query"
24 Jun 2008 23:57:36          1 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bf.query"
24 Jun 2008 23:57:38          3 394 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001be.query"
24 Jun 2008 23:57:36          1 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000be.query"
24 Jun 2008 23:57:38          4 688 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bb.query"
24 Jun 2008 23:57:36          4 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bb.query"
24 Jun 2008 23:57:38            242 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bc.query"
24 Jun 2008 23:57:36            202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000bc.query"
24 Jun 2008 23:57:38          4 688 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ba.query"
24 Jun 2008 23:57:36          4 022 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ba.query"
24 Jun 2008 23:57:38          3 394 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001bf.query"
24 Jun 2008 23:57:38            904 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023e.query"
24 Jun 2008 23:57:36          4 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013f.query"
24 Jun 2008 23:57:38            904 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023f.query"
24 Jun 2008 23:57:36          4 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013e.query"
24 Jun 2008 23:57:36          1 492 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003d.query"
24 Jun 2008 23:57:38            156 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023c.query"
24 Jun 2008 23:57:36          1 492 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003e.query"
24 Jun 2008 23:57:36            232 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013c.query"
24 Jun 2008 23:57:38          4 014 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023a.query"
24 Jun 2008 23:57:36          3 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013b.query"
24 Jun 2008 23:57:36            324 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003c.query"
24 Jun 2008 23:57:38          4 014 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000023b.query"
24 Jun 2008 23:57:36          3 866 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000013a.query"
24 Jun 2008 23:57:36          1 134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000003a.query"
24 Jun 2008 23:57:36          8 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cf.query"
24 Jun 2008 23:57:38            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001cd.query"
24 Jun 2008 23:57:38            476 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ce.query"
24 Jun 2008 23:57:36          8 202 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ce.query"
24 Jun 2008 23:57:36          3 130 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cb.query"
24 Jun 2008 23:57:38             84 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001cc.query"
24 Jun 2008 23:57:36            254 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000cc.query"
24 Jun 2008 23:57:36          3 130 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ca.query"
24 Jun 2008 23:57:36          4 924 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004f.query"
24 Jun 2008 23:57:38            974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024e.query"
24 Jun 2008 23:57:36          2 656 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014f.query"
24 Jun 2008 23:57:36          2 656 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014e.query"
24 Jun 2008 23:57:38            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024c.query"
24 Jun 2008 23:57:36          4 924 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004e.query"
24 Jun 2008 23:57:38            974 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024d.query"
24 Jun 2008 23:57:36            226 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014c.query"
24 Jun 2008 23:57:36          2 474 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004b.query"
24 Jun 2008 23:57:38          2 858 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024a.query"
24 Jun 2008 23:57:36          6 124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014b.query"
24 Jun 2008 23:57:36            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004c.query"
24 Jun 2008 23:57:38          2 858 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000024b.query"
24 Jun 2008 23:57:36          6 124 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000014a.query"
24 Jun 2008 23:57:36          2 474 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000004a.query"
24 Jun 2008 23:57:38          2 102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001dd.query"
24 Jun 2008 23:57:36            514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000dd.query"
24 Jun 2008 23:57:38          2 102 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001de.query"
24 Jun 2008 23:57:36            514 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000de.query"
24 Jun 2008 23:57:38          1 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001db.query"
24 Jun 2008 23:57:36          1 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000db.query"
24 Jun 2008 23:57:38             84 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001dc.query"
24 Jun 2008 23:57:36            368 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000dc.query"
24 Jun 2008 23:57:38          1 420 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001da.query"
24 Jun 2008 23:57:36          1 892 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000da.query"
24 Jun 2008 23:57:36          5 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005f.query"
24 Jun 2008 23:57:38          5 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025e.query"
24 Jun 2008 23:57:36          5 038 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015f.query"
24 Jun 2008 23:57:38          5 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025f.query"
24 Jun 2008 23:57:36          5 038 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015e.query"
24 Jun 2008 23:57:38            146 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025c.query"
24 Jun 2008 23:57:36          5 728 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005e.query"
24 Jun 2008 23:57:36            252 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015c.query"
24 Jun 2008 23:57:36          2 810 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005b.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025a.query"
24 Jun 2008 23:57:36            410 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005c.query"
24 Jun 2008 23:57:38            278 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000025b.query"
24 Jun 2008 23:57:36          2 964 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000015a.query"
24 Jun 2008 23:57:36          2 810 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000005a.query"
24 Jun 2008 23:57:36          6 204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ef.query"
24 Jun 2008 23:57:38          2 284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ee.query"
24 Jun 2008 23:57:36          6 204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ee.query"
24 Jun 2008 23:57:36          3 834 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000eb.query"
24 Jun 2008 23:57:38            208 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ec.query"
24 Jun 2008 23:57:36            266 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ec.query"
24 Jun 2008 23:57:38          2 330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ea.query"
24 Jun 2008 23:57:36          3 834 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ea.query"
24 Jun 2008 23:57:38          2 284 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ef.query"
24 Jun 2008 23:57:40          1 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026e.query"
24 Jun 2008 23:57:36          1 702 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016f.query"
24 Jun 2008 23:57:40          1 968 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026f.query"
24 Jun 2008 23:57:36          1 878 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016e.query"
24 Jun 2008 23:57:36          1 106 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006d.query"
24 Jun 2008 23:57:40            216 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026c.query"
24 Jun 2008 23:57:36            184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016d.query"
24 Jun 2008 23:57:36          1 106 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006e.query"
24 Jun 2008 23:57:36            134 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016c.query"
24 Jun 2008 23:57:36          1 742 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006b.query"
24 Jun 2008 23:57:38          1 996 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026a.query"
24 Jun 2008 23:57:36          1 762 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016b.query"
24 Jun 2008 23:57:36            194 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006c.query"
24 Jun 2008 23:57:38          1 996 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000026b.query"
24 Jun 2008 23:57:36          1 762 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000016a.query"
24 Jun 2008 23:57:36          1 742 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000006a.query"
24 Jun 2008 23:57:36          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000ff.query"
24 Jun 2008 23:57:38          5 838 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fe.query"
24 Jun 2008 23:57:36          2 868 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fe.query"
24 Jun 2008 23:57:36          4 566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fb.query"
24 Jun 2008 23:57:38            218 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fc.query"
24 Jun 2008 23:57:36            318 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fc.query"
24 Jun 2008 23:57:38          3 184 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001fa.query"
24 Jun 2008 23:57:36          4 566 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000000fa.query"
24 Jun 2008 23:57:38          5 838 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\000001ff.query"
24 Jun 2008 23:57:36          6 448 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007f.query"
24 Jun 2008 23:57:40          3 162 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027e.query"
24 Jun 2008 23:57:38          2 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017f.query"
24 Jun 2008 23:57:40          3 162 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027f.query"
24 Jun 2008 23:57:38          2 562 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017e.query"
24 Jun 2008 23:57:40            214 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027c.query"
24 Jun 2008 23:57:36          6 448 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007e.query"
24 Jun 2008 23:57:38            204 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017c.query"
24 Jun 2008 23:57:40          3 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027a.query"
24 Jun 2008 23:57:38          3 912 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017b.query"
24 Jun 2008 23:57:36            330 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007c.query"
24 Jun 2008 23:57:40          3 174 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000027b.query"
24 Jun 2008 23:57:38          3 912 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000017a.query"
24 Jun 2008 23:57:36          2 540 A....     "C:\WINDOWS\pchealth\helpctr\OfflineCache\Personal_32#040c\0000007a.query"
24 Jun 2008 23:57:22         78 370 A....     "C:\WINDOWS\pchealth\helpctr\System\CompatCtr\CompatMode.htm"
24 Jun 2008 23:57:20          1 206 A....     "C:\WINDOWS\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js"
24 Jun 2008 23:57:22         19 128 A....     "C:\WINDOWS\pchealth\helpctr\System\errors\connection.htm"
26 Jun 2008  1:25:54         77 971 A....     "C:\WINDOWS\pchealth\helpctr\System\News\1036_Personal_0_gss3_small_banner.gif"
24 Jun 2008 23:57:20         19 779 A....     "C:\WINDOWS\pchealth\helpctr\System\panels\AdvSearch.htm"
24 Jun 2008 23:57:22            550 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml"
24 Jun 2008 23:57:22            676 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml"
24 Jun 2008 23:57:22            599 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml"
24 Jun 2008 23:57:22            581 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\RAURA.xml"
24 Jun 2008 23:57:22          3 159 A....     "C:\WINDOWS\pchealth\helpctr\System\scripts\Common.js"
24 Jun 2008 23:57:22         32 141 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\commonFunc.js"
24 Jun 2008 23:57:22         25 135 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm"
24 Jun 2008 23:57:20         27 910 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysComponentInfo.js"
24 Jun 2008 23:57:22         16 182 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysinfosum.htm"
24 Jun 2008 23:57:22          7 926 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm"
24 Jun 2008 23:57:20         14 129 A....     "C:\WINDOWS\pchealth\helpctr\System\sysinfo\wmi_data.js"
17 Jun 2008 15:17:14          2 669 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\autodownload.txt"
17 Jun 2008 16:12:46         12 800 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\CBrowser.x32"
17 Jun 2008 16:07:54         32 256 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\INetURL.x32"
17 Jun 2008 15:51:32        167 936 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Multiusr.x32"
17 Jun 2008 16:08:04         41 984 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Netfile.x32"
17 Jun 2008 16:08:10         36 352 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Netlingo.x32"
17 Jun 2008 16:11:24         49 152 A....     "C:\WINDOWS\system32\Adobe\Shockwave 11\Xtras\Speech.x32"
10 Jul 2008 21:09:08         30 147 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4457.French[1].dist"
10 Jul 2008 21:09:08         22 761 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4608.French[1].dist"
10 Jul 2008 21:09:08         33 617 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\061-4834.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\desktop.ini"
10 Jul 2008 21:09:06         48 206 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\1GW9GUP2\index-windows-1[1].sucatalog"
10 Jul 2008 21:09:08          3 782 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-3452.French[1].dist"
10 Jul 2008 21:09:08          6 079 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4249.French[1].dist"
10 Jul 2008 21:09:08          6 964 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4513.French[1].dist"
10 Jul 2008 21:09:08         40 164 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\061-4802.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\88BUNJ0L\desktop.ini"
10 Jul 2008 21:09:06          6 346 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4200.French[1].dist"
10 Jul 2008 21:09:08          6 855 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4512.French[1].dist"
10 Jul 2008 21:09:08         18 471 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4609.English[1].dist"
10 Jul 2008 21:09:08         32 404 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\061-4835.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\DZ0NKRVQ\desktop.ini"
10 Jul 2008 21:09:08         21 758 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4339.French[1].dist"
10 Jul 2008 21:09:08          6 579 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4514.French[1].dist"
10 Jul 2008 21:09:08         39 557 A....     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\061-4804.French[1].dist"
10 Jul 2008 21:09:04             67 ..SH.     "C:\WINDOWS\Temp\Fichiers Internet temporaires\Content.IE5\T4MXA628\desktop.ini"
24 Jun 2008 23:57:20         37 736 A....     "C:\WINDOWS\pchealth\helpctr\System\panels\subpanels\Search.htm"
24 Jun 2008 23:57:22          5 269 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Common\common.js"
24 Jun 2008 23:57:22         16 302 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistancecstatus.htm"
25 Jun 2008  0:02:42         58 096 A....     "C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.BUD"
24 Jun 2008 23:57:22         46 353 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm"
24 Jun 2008 23:57:22         11 185 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js"
24 Jun 2008 23:57:22         11 251 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm"
24 Jun 2008 23:57:22          2 500 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\ClientctoolScreen1.htm"
24 Jun 2008 23:57:22            690 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif"
24 Jun 2008 23:57:22         15 832 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js"
24 Jun 2008 23:57:22         30 911 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm"
24 Jun 2008 23:57:22          3 293 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm"
24 Jun 2008 23:57:22         21 215 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm"
24 Jun 2008 23:57:22          5 203 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js"
24 Jun 2008 23:57:22         14 676 A....     "C:\WINDOWS\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm"
24 Jun 2008 23:57:22          5 269 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js"
24 Jun 2008 23:57:22          5 691 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm"
24 Jun 2008 23:57:22          3 151 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm"
24 Jun 2008 23:57:22          3 623 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm"
24 Jun 2008 23:57:22          8 188 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Emailcscreen7.htm"
24 Jun 2008 23:57:22         30 864 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Emailcscreen6.htm"
24 Jun 2008 23:57:22          3 311 A....     "C:\WINDOWS\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm"


C:\Program Files\

12 Jun 2008 17:04:38              0 A....     "C:\Program Files\uninstall.dat"
28 May 2008 16:40:18      1 197 296 A....     "C:\Program Files\CCleaner\CCleaner.exe"
28 May 2008 21:37:56         24 064 A....     "C:\Program Files\CCleaner\lang-1036.dll"
 5 Jun 2008 21:23:02        114 326 A....     "C:\Program Files\CCleaner\uninst.exe"
 7 Jul 2008 17:35:30         77 432 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll"
 7 Jul 2008 17:35:30      1 175 160 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"
 7 Jul 2008 17:35:32         36 472 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll"
 7 Jul 2008 17:35:32        122 488 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe"
 7 Jul 2008 17:35:32        380 536 A....     "C:\Program Files\Malwarebytes' Anti-Malware\mbamtrayctrl.exe"
 7 Jul 2008 17:35:34         44 664 A....     "C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll"
 8 Jul 2008 12:04:24          7 684 A....     "C:\Program Files\Malwarebytes' Anti-Malware\unins000.dat"
 8 Jul 2008 12:02:16        688 760 A....     "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
 7 Jul 2008 17:35:34         57 464 A....     "C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll"
29 May 2008 23:13:28         17 408 A....     "C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll"
29 May 2008 23:13:28        185 856 A....     "C:\Program Files\Mozilla Firefox\crashreporter.exe"
29 May 2008 23:13:28        307 712 A....     "C:\Program Files\Mozilla Firefox\firefox.exe"
29 May 2008 16:24:14        233 472 A....     "C:\Program Files\Mozilla Firefox\freebl3.dll"
29 May 2008 23:13:28        695 808 A....     "C:\Program Files\Mozilla Firefox\js3250.dll"
29 May 2008 23:13:30        710 144 A....     "C:\Program Files\Mozilla Firefox\mozcrt19.dll"
29 May 2008 23:13:30        198 144 A....     "C:\Program Files\Mozilla Firefox
spr4.dll"
29 May 2008 23:13:30        697 856 A....     "C:\Program Files\Mozilla Firefox
ss3.dll"
29 May 2008 23:13:30        304 640 A....     "C:\Program Files\Mozilla Firefox
ssckbi.dll"
29 May 2008 23:13:30        103 936 A....     "C:\Program Files\Mozilla Firefox
ssdbm3.dll"
29 May 2008 23:13:30         87 552 A....     "C:\Program Files\Mozilla Firefox
ssutil3.dll"
29 May 2008 23:13:30         20 480 A....     "C:\Program Files\Mozilla Firefox\plc4.dll"
29 May 2008 23:13:30         17 408 A....     "C:\Program Files\Mozilla Firefox\plds4.dll"
29 May 2008 23:13:30        103 936 A....     "C:\Program Files\Mozilla Firefox\smime3.dll"
29 May 2008 16:24:14        151 552 A....     "C:\Program Files\Mozilla Firefox\softokn3.dll"
29 May 2008 23:13:30        414 208 A....     "C:\Program Files\Mozilla Firefox\sqlite3.dll"
29 May 2008 23:13:30        136 704 A....     "C:\Program Files\Mozilla Firefox\ssl3.dll"
29 May 2008 23:13:30        241 664 A....     "C:\Program Files\Mozilla Firefox\updater.exe"
29 May 2008 23:13:30         17 920 A....     "C:\Program Files\Mozilla Firefox\xpcom.dll"
29 May 2008 23:13:30      9 715 200 A....     "C:\Program Files\Mozilla Firefox\xul.dll"
 5 Jun 2008 18:18:02          5 737 A....     "C:\Program Files\Navilog1\gnc.exe"
28 Jun 2008  0:03:22        933 059 A....     "C:\Program Files\Navilog1
avilog1.bat"
28 Jun 2008  0:03:46        733 084 A....     "C:\Program Files\Navilog1
avreb.bat"
27 Jun 2008 15:36:48         52 781 A....     "C:\Program Files\Navilog1egnavi.reg"
11 Jul 2008 23:37:56          3 333 A....     "C:\Program Files\Navilog1\unins000.dat"
11 Jul 2008 23:37:44        689 104 A....     "C:\Program Files\Navilog1\unins000.exe"
 7 Jul 2008  9:41:56        939 344 A....     "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
 7 Jul 2008  9:41:56        428 880 A....     "C:\Program Files\Spybot - Search & Destroy\blindman.exe"
14 Jun 2008 11:24:30        255 392 A....     "C:\Program Files\Spybot - Search & Destroy\DelZip179.dll"
 7 Jul 2008  9:36:46      1 430 016 A....     "C:\Program Files\Spybot - Search & Destroy\SDFiles.exe"
 7 Jul 2008  9:41:58      1 562 448 A....     "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
 7 Jul 2008  9:42:00        414 544 A....     "C:\Program Files\Spybot - Search & Destroy\SDMain.exe"
 7 Jul 2008  9:37:40        958 976 A....     "C:\Program Files\Spybot - Search & Destroy\SDShred.exe"
 7 Jul 2008  9:42:00      1 429 840 A.SHR     "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
 7 Jul 2008  9:42:02        809 296 A....     "C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe"
 7 Jul 2008  9:42:04      4 891 472 A.SHR     "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
19 Jun 2008 18:35:36        333 288 A....     "C:\Program Files\Spybot - Search & Destroy\sqlite3.dll"
 7 Jul 2008  9:42:06      2 156 368 A.SHR     "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
 7 Jul 2008  9:42:06        835 920 A....     "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
 9 Jul 2008 22:50:14         26 047 A....     "C:\Program Files\Spybot - Search & Destroy\unins000.dat"
 9 Jul 2008 22:49:26        696 200 A....     "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
 7 Jul 2008  9:42:08        464 720 A....     "C:\Program Files\Spybot - Search & Destroy\Update.exe"
 3 Jul 2008  0:23:26        168 311 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aecore.dll"
25 Jun 2008  1:07:06        430 451 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeemu.dll"
25 Jun 2008  1:07:10        307 573 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aegen.dll"
25 Jun 2008  1:07:14        115 063 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aehelp.dll"
 3 Jul 2008  0:23:28      1 298 806 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeheur.dll"
25 Jun 2008  1:07:48        192 891 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeoffice.dll"
25 Jun 2008  1:07:54        364 918 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aepack.dll"
25 Jun 2008  1:07:58        418 165 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aerdl.dll"
25 Jun 2008  1:08:02        119 157 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescn.dll"
 3 Jul 2008  0:23:30        283 002 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aescript.dll"
 7 Jul 2008 20:10:08          2 047 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\aeset.dat"
26 Jun 2008  0:34:30        124 161 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.dll"
26 Jun 2008  0:34:48         52 032 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys"
26 Jun 2008  0:34:36        147 201 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"
26 Jun 2008  0:34:40        208 592 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe"
 7 Jul 2008 20:10:08         16 478 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\build.dat"
26 Jun 2008  0:34:46        631 041 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\setup.exe"
26 Jun 2008  0:34:46         57 601 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\wksstats.dll"
24 Jun 2008 21:44:44      6 794 496 A....     "C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe"
24 Jun 2008 21:44:44         89 344 A....     "C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe"
29 May 2008 23:13:30         23 040 A....     "C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll"
29 May 2008 23:13:30        134 144 A....     "C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll"
17 Jun 2008 16:12:42        114 688 A....     "C:\Program Files\Mozilla Firefox\plugins
p32dsw.dll"
29 May 2008 23:13:30         65 536 A....     "C:\Program Files\Mozilla Firefox\plugins
pnul32.dll"
29 May 2008 16:24:14            117 A....     "C:\Program Files\Mozilla Firefoxes\hiddenWindow.html"
29 May 2008 23:13:28        508 608 A....     "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
 2 Jul 2008 23:25:56        276 186 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\desc.english.zip"
 5 Jun 2008 23:25:56          2 418 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\fpfix.zip"
 9 Jul 2008 23:25:58         28 887 A....     "C:\Program Files\Spybot - Search & Destroy\Updates\lang.francais.zip"
11 Jul 2008 23:52:18             72 A....     "C:\Program Files\Symantec\LiveUpdate\ludirloc.dat"
 8 Jul 2008 17:52:28        396 288 A....     "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
 8 Jul 2008 17:54:10        396 288 A....     "C:\Program Files\Trend Micro\lalala.exe\HijackThis.exe"
 3 Jul 2008  0:23:26        168 311 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aecore.dll"
25 Jun 2008  1:07:06        430 451 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeemu.dll"
25 Jun 2008  1:07:10        307 573 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aegen.dll"
25 Jun 2008  1:07:14        115 063 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aehelp.dll"
 3 Jul 2008  0:23:28      1 298 806 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeheur.dll"
25 Jun 2008  1:07:48        192 891 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeoffice.dll"
25 Jun 2008  1:07:54        364 918 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aepack.dll"
25 Jun 2008  1:07:58        418 165 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aerdl.dll"
25 Jun 2008  1:08:02        119 157 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aescn.dll"
 3 Jul 2008  0:23:30        283 002 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aescript.dll"
 7 Jul 2008 20:10:08          2 047 A....     "C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\aeset.dat"
24 May 2008 11:10:54        163 800 A....     "C:\Program Files\Netscape\Netscape\components\compreg.dat"
24 May 2008 10:00:10         95 319 A....     "C:\Program Files\Netscape\Netscape\components\xpti.dat"
17 Jun 2008 16:12:42        114 688 A....     "C:\Program Files\Netscape\Netscape\plugins
p32dsw.dll"
30 Jun 2008  0:03:14            728 A....     "C:\Program Files\Winamp\Plugins\ml\main.dat"
30 Jun 2008  0:03:14         22 803 A....     "C:\Program Files\W

green day · Answer

Salut

lol ! tous ceux qui posent sur ce forum sont complètement zinzins ! :))

pas très difficile à analyser en fait, beaucoup de fichier dans le même répertoire, beaucoup de fichiers désinstaller de windows update, de fichier dans le perfetch ... rien de méchant ...

D'ou l'utilité de connaitre un peu les fichiers windows !

Tu peux arrêter de poster la suite jmd74 !

poste un nouveau combo par contre !

@+

jmd74 · Answer

Excuser moi apparemement j'ai pas compris ce qu'il fallait faire !

green day · Answer

Refais cette manip stp !

* Démarrer en mode sans echec
* Double cliquer combofix.exe.
* Appuyer sur la touche Y (Yes) pour démarrer le scan
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp


la suite demain !

@+

;-)

jmd74 · Answer

ComboFix 08-07-09.5 - Jean-Marc 2008-07-10 14:24:18.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1371 [GMT 2:00]
Endroit: C:\Documents and Settings\Jean-Marc\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Jean-Marc\Application Data\FunWebProducts
C:\Documents and Settings\Jean-Marc\Application Data\FunWebProducts\Data\Jean-Marc\avatar.dat
C:\WINDOWS\pack.epk
C:\WINDOWS\system32\oeminfo.ini

.
((((((((((((((((((((((((((((( Fichiers créés 2008-06-10 to 2008-07-10 ))))))))))))))))))))))))))))))))))))
.

2008-07-09 22:50 . 2008-07-09 22:50 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-07-09 22:50 . 2008-07-09 23:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-07-09 01:26 . 2008-07-09 01:26 1,355 --a------ C:\WINDOWS\imsins.BAK
2008-07-08 18:30 . 2008-07-08 20:13 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Documents and Settings\Jean-Marc\Application Data\Malwarebytes
2008-07-08 12:04 . 2008-07-08 12:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-08 12:04 . 2008-07-07 17:35 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-07-08 12:04 . 2008-07-07 17:35 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-07-04 19:41 . 2008-07-04 19:41 <REP> d-------- C:\WINDOWS\system32\Adobe
2008-06-25 11:37 . 2008-06-25 11:37 <REP> d-------- C:\Program Files\Lavasoft
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\system32\fr
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\system32\bits
2008-06-24 23:56 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\l2schemas
2008-06-24 23:54 . 2008-06-24 23:56 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-06-24 23:50 . 2008-06-24 23:50 <REP> d-------- C:\WINDOWS\EHome
2008-06-24 21:45 . 2008-06-24 21:50 <REP> d-------- C:\Program Files\Foxit
2008-06-24 21:45 . 2008-06-24 21:50 <REP> d-------- C:\Program Files\Conduit
2008-06-24 21:44 . 2008-06-24 21:44 <REP> d-------- C:\Program Files\Foxit Software
2008-06-24 18:41 . 2008-06-24 18:41 <REP> d-------- C:\Program Files\Avira
2008-06-24 17:44 . 2008-06-24 17:44 <REP> d-------- C:\Documents and Settings\LocalService\Mes documents
2008-06-24 17:29 . 2008-06-24 18:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-06-20 19:47 . 2008-06-20 19:47 247,808 --------- C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 19:47 . 2008-06-20 19:47 147,968 --------- C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 13:51 . 2008-06-20 13:51 361,600 --------- C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 13:40 . 2008-06-20 13:40 138,496 --------- C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 13:08 . 2008-06-20 13:08 225,856 --------- C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-17 18:00 . 2008-06-17 18:00 <REP> d-------- C:\Documents and Settings\Yannick\Application Data\MSN Pictures Displayer
2008-06-17 16:48 . 2008-06-15 15:28 81,920 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-06-17 16:37 . 2008-07-09 23:24 <REP> d-------- C:\Program Files\Enigma Software Group
2008-06-12 17:04 . 2008-06-12 17:04 0 --a------ C:\Program Files\uninstall.dat
2008-06-11 14:35 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 14:35 . 2008-06-14 19:33 272,768 --------- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 14:35 . 2008-05-08 16:02 203,136 --------- C:\WINDOWS\system32\dllcache\rmcast.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-09 18:03 3,370 ----a-w C:\WINDOWS\system32\tmp.reg
2008-07-09 17:33 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-07-09 11:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-07-08 15:54 --------- d-----w C:\Program Files\Trend Micro
2008-07-08 12:59 73,232 ----a-w C:\Documents and Settings\Jean-Marc\Application Data\GDIPFONTCACHEV1.DAT
2008-07-07 12:07 244 ----a-w C:\Documents and Settings\Yannick\Application Data\wklnhst.dat
2008-06-25 09:36 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-06-24 19:36 --------- d-----w C:\Program Files\Conference
2008-06-24 14:37 --------- d-----w C:\Program Files\Symantec
2008-06-24 14:37 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-06-24 14:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-05 20:12 --------- d-----w C:\Program Files\Navilog1
2008-06-05 19:23 --------- d-----w C:\Program Files\CCleaner
2008-05-29 07:35 86,528 ----a-w C:\WINDOWS\system32\VACFix.exe
2008-05-27 23:51 --------- d-----w C:\Program Files\Alwil Software
2008-05-27 23:30 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-05-26 17:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-05-20 09:56 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-05-18 19:40 82,944 ----a-w C:\WINDOWS\system32\IEDFix.exe
2008-05-18 19:40 82,944 ----a-w C:\WINDOWS\system32\404Fix.exe
2008-05-09 10:55 90,112 ----a-w C:\WINDOWS\system32\wshext.dll
2008-05-09 10:55 90,112 ------w C:\WINDOWS\system32\dllcache\wshext.dll
2008-05-09 10:55 512,000 ------w C:\WINDOWS\system32\dllcache\jscript.dll
2008-05-09 10:55 430,080 ----a-w C:\WINDOWS\system32\vbscript.dll
2008-05-09 10:55 430,080 ------w C:\WINDOWS\system32\dllcache\vbscript.dll
2008-05-09 10:55 180,224 ----a-w C:\WINDOWS\system32\scrobj.dll
2008-05-09 10:55 180,224 ------w C:\WINDOWS\system32\dllcache\scrobj.dll
2008-05-09 10:55 172,032 ----a-w C:\WINDOWS\system32\scrrun.dll
2008-05-09 10:55 172,032 ------w C:\WINDOWS\system32\dllcache\scrrun.dll
2008-05-08 11:24 155,648 ----a-w C:\WINDOWS\system32\wscript.exe
2008-05-08 11:24 155,648 ------w C:\WINDOWS\system32\dllcache\wscript.exe
2008-05-07 09:07 135,168 ----a-w C:\WINDOWS\system32\cscript.exe
2008-05-07 09:07 135,168 ------w C:\WINDOWS\system32\dllcache\cscript.exe
2008-05-07 05:11 1,294,336 ------w C:\WINDOWS\system32\quartz.dll
2008-05-07 05:11 1,294,336 ------w C:\WINDOWS\system32\dllcache\quartz.dll
2008-04-27 18:32 98,304 ----a-w C:\WINDOWS\DUMP441d.tmp
2008-04-27 18:29 90,112 ----a-w C:\WINDOWS\DUMP448a.tmp
2008-04-27 18:27 90,112 ----a-w C:\WINDOWS\DUMP4584.tmp
2008-04-27 18:26 90,112 ----a-w C:\WINDOWS\DUMP465f.tmp
2008-04-26 06:55 98,304 ----a-w C:\WINDOWS\DUMP4527.tmp
2008-04-25 17:10 98,304 ----a-w C:\WINDOWS\DUMP44aa.tmp
2008-04-25 13:29 90,112 ----a-w C:\WINDOWS\DUMP4e9d.tmp
2008-04-25 13:15 90,112 ----a-w C:\WINDOWS\DUMP511d.tmp
2008-04-25 13:14 90,112 ----a-w C:\WINDOWS\DUMP5033.tmp
2008-04-23 20:16 3,591,680 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-04-22 07:41 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-04-22 07:41 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-04-22 07:39 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-04-21 17:20 90,112 ----a-w C:\WINDOWS\DUMP51b9.tmp
2008-04-21 17:18 98,304 ----a-w C:\WINDOWS\DUMP4f77.tmp
2008-04-21 17:16 98,304 ----a-w C:\WINDOWS\DUMP4edb.tmp
2008-04-21 17:14 90,112 ----a-w C:\WINDOWS\DUMP4f2a.tmp
2008-04-21 17:13 98,304 ----a-w C:\WINDOWS\DUMP4ebc.tmp
2008-04-21 17:10 98,304 ----a-w C:\WINDOWS\DUMP4f29.tmp
2008-04-21 17:08 90,112 ----a-w C:\WINDOWS\DUMP53bd.tmp
2008-04-20 05:07 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-04-19 21:29 98,304 ----a-w C:\WINDOWS\DUMP54e6.tmp
2008-04-19 21:27 65,536 ----a-w C:\WINDOWS\DUMP65de.tmp
2008-04-19 13:56 98,304 ----a-w C:\WINDOWS\DUMP58fd.tmp
2008-04-19 13:54 98,304 ----a-w C:\WINDOWS\DUMP590c.tmp
2008-04-14 02:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
2008-04-14 02:37 332,800 ----a-w C:\WINDOWS\system32\netsetup.exe
2008-04-14 02:33 98,816 ----a-w C:\WINDOWS\system32\psbase.dll
2008-04-14 02:32 86,073 ----a-w C:\WINDOWS\system32\dllcache\voicesub.dll
2008-04-14 02:32 764,416 ----a-w C:\WINDOWS\system32\winntbbu.dll
2008-04-14 02:32 76,288 ----a-w C:\WINDOWS\system32\uniime.dll
2008-04-14 02:32 76,288 ----a-w C:\WINDOWS\system32\dllcache\uniime.dll
2008-04-14 02:32 67,584 ----a-w C:\WINDOWS\system32\dllcache\pmigrate.dll
2008-04-14 02:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 02:32 53,760 ----a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll
2008-04-14 02:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
2008-04-14 02:32 426,041 ----a-w C:\WINDOWS\system32\dllcache\voicepad.dll
2008-04-14 02:32 175,104 ----a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll
2008-04-14 02:32 15,872 ----a-w C:\WINDOWS\system32\dllcache\padrs404.dll
2008-04-14 02:32 15,360 ----a-w C:\WINDOWS\system32\dllcache\padrs804.dll
2008-04-14 02:32 10,240 ----a-w C:\WINDOWS\system32\dllcache\tmigrate.dll
2008-04-14 02:07 2,147,328 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 02:07 2,025,984 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-04-14 02:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
2008-04-14 02:04 93,184 ----a-w C:\WINDOWS\system32\msxml6r.dll
2008-04-14 02:04 93,184 ------w C:\WINDOWS\system32\dllcache\msxml6r.dll
2008-04-14 02:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll
2008-04-14 02:02 50,688 ----a-w C:\WINDOWS\system32\inetres.dll
2008-04-14 02:00 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dll
2008-04-14 01:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
2008-04-14 01:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
2008-04-14 01:58 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.dll
2008-04-14 01:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll
2008-04-14 01:54 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 22:49 72,848 ----a-w C:\Documents and Settings\Yannick\Application Data\GDIPFONTCACHEV1.DAT
2008-04-13 18:44 17,664 ----a-w C:\WINDOWS\system32\watchdog.sys
2008-04-13 18:40 445,440 ----a-w C:\WINDOWS\system32\xpob2res.dll
2008-04-13 18:36 2,986,496 ----a-w C:\WINDOWS\system32\xpsp2res.dll
2008-04-13 18:35 24,064 ----a-w C:\WINDOWS\system32\pidgen.dll
2008-04-13 18:35 197,632 ----a-w C:\WINDOWS\system32\xpsp1res.dll
2008-04-13 18:31 7,424 ----a-w C:\WINDOWS\system32\kd1394.dll
2002-04-25 01:00 266,240 ----a-w C:\Program Files\internet explorer\plugins\PanoViewer.dll
1999-04-30 15:00 98,304 ----a-w C:\Program Files\internet explorer\plugins\UPjpeg.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 04:33 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 10:59 204288]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 19:15 45056]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-07-15 02:07 32768]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 06:00 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 06:00 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 06:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 06:00 455168]
"eRecoveryService"="C:\Program Files\Acer\eRecovery\Monitor.exe" [2005-06-20 10:03 352256]
"AspireService"="C:\Program Files\Acer\Acer eMode Management\AspireService.exe" [2005-06-21 16:39 110592]
"MediaSync"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe" [2005-06-21 16:28 425984]
"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 12:00 49152]
"XCSyncML"="C:\WINDOWS\system32\XCSyncML.exe" [2005-07-14 11:07 135168]
"Norton Save and Restore"="C:\Program Files\Norton Save and Restore\Agent\NSRTray.exe" [2006-03-03 20:36 1582744]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 17:38 583048]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 18:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-06-14 09:48 14477312 C:\WINDOWS\RTHDCPL.EXE]
"AGRSMMSG"="AGRSMMSG.exe" [2004-04-13 13:49 88363 C:\WINDOWS\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 04:33 15360]

C:\Documents and Settings\Yannick\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2007-09-04 02:13:34 4579328]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Contr“leur de calendrier Ulead.lnk - C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe [2006-09-20 14:57:40 69632]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 15:39 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\NEC\\NEC Mobile Suite\\CommsService.exe"=
"<NO NAME>"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"C:\\Program Files\\RayV\\RayV\\RayV.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader
"6112:TCP"= 6112:TCP:Blizzard Downloader

R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys [2005-02-05 08:00]
R2 int15.sys;int15.sys;C:\Program Files\Acer\eRecovery\int15.sys [2005-01-13 15:46]
R2 Norton Save and Restore;Norton Save and Restore;C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe [2006-03-03 20:36]
R3 PAC207;USB PC Cam Plus;C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-02-24 13:29]
S3 archbus;NEC WMC USB_BJ1 Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\archbus.sys [2005-08-30 14:17]
S3 archmdfl;NEC WMC USB_BJ1 Modem Filter;C:\WINDOWS\system32\DRIVERS\archmdfl.sys [2005-08-30 14:17]
S3 archmdm;NEC WMC USB_BJ1 Modem Drivers;C:\WINDOWS\system32\DRIVERS\archmdm.sys [2005-08-30 14:17]
S3 archobex;NEC WMC USB_BJ1 OBEX Interface Drivers (WDM);C:\WINDOWS\system32\DRIVERS\archobex.sys [2005-08-30 14:17]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-06-12 19:09:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-07-10 09:26:44 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-10 14:28:17
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-07-10 14:29:28
ComboFix-quarantined-files.txt 2008-07-10 12:29:09

Pre-Run: 68,036,509,696 octets libres
Post-Run: 68,713,066,496 octets libres

245 --- E O F --- 2008-07-07 08:24:16

jmd74 · Answer

Attention je n'ai pas pu le faire en mode sans échec mais mode normal. Mille excuse pour tout à l'heure. J'avais compris la manipe : nos messages se sont croisé ! Merci pour ton rappel de manip . A demain !

raphy00 · Answer

Re,

Green day : Merci c'est trop sympa de m'aider...Mais je crois que je vais devoir te laisser (( sans vouloir abuser )), parce que je ne sais pas du tout quoi faire meme a present.. Desole hein...

En tout cas merci infiniment pour le coup de main ! 

(( Je suis.. ))

jmd74 · Answer

Ok ! Ben c'est pas grave je vais me débrouiller. 
Au revoir !

green day · Answer

Bonjour à vous

Jmd, nous sommes bénévoles, il ne faut pas s'attendre à des réponses rapides pendant un WE de 3 jours ! :)

on répond selon nos disponibilité avec grand plaisir !

toujours là ?

@+

jmd74 · Answer

Oui, mais là c'est un peu corser quand même !

Le mode sans echec ne fonctionne pas.

39 réponses

Discussions similaires

Newsletters