Rapport hijackthis Fermé

Question

Bonjour,
j'ai depuis hier des pop up envahissante, j'ai alors décidé de faire un rapport hijakthis mais je ne sais le décripter.
C'est pourquoi j'ai besoin de votre aide pour éradiquer les logiciel valeillant qu'il y a sur mon ordinateur.
Voici le Rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:21, on 29/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32
etdde.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {14370F76-7676-44A2-AD11-93A31C5FC9FC} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {86705777-D6AA-450F-BC40-FE01EBD5AE2C} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A0985293-2E0E-4784-8F7A-C7E731C15D52} - (no file)
O2 - BHO: {fb97d4a2-418c-b14a-76d4-d71a4377228a} - {a8227734-a17d-4d67-a41b-c8142a4d79bf} - C:\WINDOWS\system32\aziqub.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - https://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

g!rly · Answer

salut 

desinstalles avast ou bit defender > deux anti virus > conflit

puis

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe     

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

post egalement un nouveau rapport hijack this stp

@+

Phoenix_912 · Answer

Tout d'abord je tien a te remercier tout particulierement pour la rapidité avec laquelle tu m'a répondu! J'ai réalisé tous les travaux que tu m'as demandé et en voici les rapports : *** Rapport de Conbofix *** ComboFix 08-07-28.7 - Propriétaire 2008-07-29 22:40:34.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.211 [GMT 2:00] Endroit: C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\BM57e5ff70.txt C:\WINDOWS\cookies.ini C:\WINDOWS\system32\aziqub.dll C:\WINDOWS\system32\brioojsu.exe C:\WINDOWS\system32\efejhkmg.exe C:\WINDOWS\system32\ikxwbuih.dll C:\WINDOWS\system32\iqqlwmcm.dll C:\WINDOWS\system32\kjgstoom.dll C:\WINDOWS\system32\lndihprl.exe C:\WINDOWS\system32\mcrh.tmp C:\WINDOWS\system32\ojhsfhaj.ini C:\WINDOWS\system32\pnfjcnhs.dll C:\WINDOWS\system32\qtsxtlin.dll C:\WINDOWS\system32 xqhjuvk.dll C:\WINDOWS\system32\uatjplbn.exe C:\WINDOWS\system32\uhnawhba.ini C:\WINDOWS\system32\usucjdqj.dll C:\WINDOWS\system32\waodeuhe.dll C:\WINDOWS\system32\xqrtgfqn.dll . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-28 to 2008-07-29 )))))))))))))))))))))))))))))))))))) . 2008-07-29 22:29 . 2008-07-29 22:29 d-------- C:\Program Files\SiteAdvisor 2008-07-29 22:29 . 2008-07-29 22:29 d-------- C:\Documents and Settings\LocalService\Bureau 2008-07-29 22:29 . 2008-07-29 22:29 d-------- C:\Documents and Settings\LocalService\Application Data\SiteAdvisor 2008-07-29 22:29 . 2008-07-29 22:29 d-------- C:\Documents and Settings\All Users\Application Data\SiteAdvisor 2008-07-29 22:29 . 2008-07-29 22:29 d-------- C:\Documents and Settings\All Users\Application Data\McAfee 2008-07-29 21:06 . 2008-07-29 21:06 d-------- C:\Program Files\RogueRemover FREE 2008-07-28 19:14 . 2008-07-28 19:14 322,235 --a------ C:\fig16.jpg 2008-07-27 09:21 . 2008-07-27 09:56 d-------- C:\Nero 8.3.2.1b Ultra Edition HD-(MultiLanguage) 2008-07-24 09:01 . 2008-07-24 09:00 4,072,002 --a------ C:\10 France telecom.mp3 2008-07-23 15:40 . 2008-07-23 15:41 d-------- C:\Program Files\LimeWire 2008-07-23 11:39 . 2008-07-23 11:37 6,681,779 --a------ C:\119 - Electric Light Orchestra - Mr. Blue Sky.mp3 2008-07-20 21:32 . 2008-07-29 22:54 2,166,816 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2008-07-20 21:32 . 2008-07-29 22:51 27,464 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx 2008-07-20 21:26 . 2008-07-20 21:26 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier 2008-07-20 21:26 . 2008-07-09 09:05 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll 2008-07-20 21:26 . 2008-07-09 09:05 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll 2008-07-20 21:26 . 2008-07-09 09:05 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll 2008-07-20 21:26 . 2008-07-09 09:05 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll 2008-07-20 21:26 . 2008-07-20 21:29 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat 2008-07-20 21:25 . 2008-07-09 09:05 75,248 --a------ C:\WINDOWS\zllsputility.exe 2008-07-20 21:25 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll 2008-07-20 21:24 . 2008-07-20 21:24 d-------- C:\Program Files\Zone Labs 2008-07-12 10:51 . 2008-07-12 10:51 4,096 --a------ C:\WINDOWS\system32\crash 2008-07-05 20:21 . 2006-09-06 00:41 44,224 -ra------ C:\WINDOWS\system32\drivers\BVRPMPR5.SYS . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-29 20:32 --------- d-----w C:\Program Files\Fichiers communs\Softwin 2008-07-29 19:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-07-29 18:53 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-07-29 18:52 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-07-29 17:16 --------- d-----w C:\Program Files\Spyware Doctor 2008-07-21 10:20 1,346,048 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp 2008-07-17 19:13 --------- d-----w C:\Program Files\EA GAMES 2008-07-09 07:05 1,086,952 ----a-w C:\WINDOWS\system32\zpeng24.dll 2008-07-08 07:11 --------- d-----w C:\Program Files\Lavalys 2008-06-25 17:58 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-25 17:58 --------- d-----w C:\Program Files\Firefly Studios 2008-06-25 15:58 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2008-06-25 13:29 --------- d-----w C:\Program Files\BitTorrent 2008-06-25 13:29 --------- d-----w C:\Program Files\Azureus 2008-06-25 13:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Azureus 2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers cpip.sys 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers cpip6.sys 2008-06-15 17:37 --------- d-----w C:\Program Files\Microsoft Silverlight 2008-06-15 16:19 --------- d-----w C:\Program Files\CCleaner 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-06-14 17:22 --------- d-----w C:\Program Files\Harmony Assistant 2008-06-12 17:00 --------- d-----w C:\Program Files\DNA 2008-06-08 16:19 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-06-08 16:10 --------- d-----w C:\Program Files\Windows Live 2008-06-08 16:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-06-08 12:15 --------- d-----w C:\Program Files\Apple Software Update 2008-06-08 08:55 --------- d-----w C:\Program Files\iTunes 2008-06-08 08:54 --------- d-----w C:\Program Files\iPod 2008-06-08 08:48 --------- d-----w C:\Program Files\QuickTime 2008-06-07 20:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\Musicnotes 2008-06-03 15:47 41,288 ----a-w C:\WINDOWS\system32\drivers\ikfilesec.sys 2008-05-12 16:37 57,344 ----a-w C:\WINDOWS\system32 qRIyWPj.dll.vir 2008-05-09 10:55 90,112 ----a-w C:\WINDOWS\system32\wshext.dll 2008-05-09 10:55 430,080 ----a-w C:\WINDOWS\system32\vbscript.dll 2008-05-09 10:55 180,224 ----a-w C:\WINDOWS\system32\scrobj.dll 2008-05-09 10:55 172,032 ----a-w C:\WINDOWS\system32\scrrun.dll 2008-05-08 11:24 155,648 ----a-w C:\WINDOWS\system32\wscript.exe 2008-05-07 09:07 135,168 ----a-w C:\WINDOWS\system32\cscript.exe 2008-05-07 05:11 1,294,336 ----a-w C:\WINDOWS\system32\quartz.dll 2006-05-03 09:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll 2007-02-21 10:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll . ((((((((((((((((((((((((((((( snapshot@2008-05-14_22.05.00.20 ))))))))))))))))))))))))))))))))))))))))) . + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll + 2008-04-21 06:57:16 1,024,512 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\browseui.dll + 2008-04-21 06:57:16 152,064 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\cdfview.dll + 2008-04-21 06:57:17 1,056,768 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\danim.dll + 2008-04-21 06:57:17 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtmsft.dll + 2008-04-21 06:57:18 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtrans.dll + 2008-04-21 06:57:18 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\extmgr.dll + 2008-04-17 10:46:59 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iedw.exe + 2008-04-21 06:57:18 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iepeers.dll + 2008-04-21 06:57:18 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\inseng.dll + 2008-04-21 06:57:18 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\jsproxy.dll + 2008-04-21 06:57:22 3,087,872 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtml.dll + 2008-04-21 06:57:22 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtmled.dll + 2008-04-21 06:57:23 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\msrating.dll + 2008-04-21 06:57:23 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mstime.dll + 2008-04-21 06:57:23 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\pngfilt.dll + 2008-04-21 06:57:25 1,499,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shdocvw.dll + 2008-04-21 06:57:26 474,624 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shlwapi.dll + 2008-04-17 11:03:45 370,176 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\spru040c.dll + 2008-04-21 06:57:26 620,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\urlmon.dll + 2008-04-21 06:57:27 670,720 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\wininet.dll + 2008-04-21 06:43:36 3,087,872 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll + 2008-04-21 06:43:36 670,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll + 2008-04-21 06:30:24 3,088,384 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll + 2008-04-21 06:30:24 670,720 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950759\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\updspapi.dll + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll + 2008-05-08 12:14:51 203,008 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE mcast.sys + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR mcast.sys + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE mcast.sys + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll + 2008-04-14 16:17:04 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys + 2008-04-14 15:59:30 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll + 2008-05-07 04:55:47 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll + 2004-08-05 12:00:00 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\acadproc.dll + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\acadproc.dll.000 + 2004-08-05 12:00:00 189,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll.000 + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll.000 + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll.000 + 2004-08-05 12:00:00 119,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclui.dll + 2004-08-05 12:00:00 188,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\acpi.sys + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll.000 + 2004-08-05 12:00:00 194,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\activeds.dll + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe + 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll.000 + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.dll + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.exe + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\admparse.dll + 2004-08-05 12:00:00 175,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll + 2004-08-05 12:00:00 263,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll + 2004-08-05 12:00:00 685,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll + 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\advpack.dll + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys.000 + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\afd.sys + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll + 2004-08-05 12:00:00 214,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll + 2006-10-12 14:04:13 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll + 2007-03-09 13:48:06 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll + 2004-08-05 12:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll + 2006-10-12 11:09:53 256,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0401.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0404.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0405.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0406.dll + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0407.dll + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0408.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0409.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040b.dll + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040c.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040d.dll + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040e.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0410.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0411.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0412.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0413.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0414.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0415.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0416.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0419.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041d.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041f.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0804.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0816.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0c0a.dll + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\ahui.exe + 2004-08-05 12:00:00 44,544 -c----w C:\WINDOWS\$NtServicePackUninstall$\alg.exe + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll + 2004-08-05 12:00:00 41,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys + 2004-08-05 12:00:00 41,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys + 2004-08-05 12:00:00 70,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\amstream.dll + 2004-08-05 12:00:00 126,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll + 2004-08-05 12:00:00 334,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\aqueue.dll + 2004-08-05 12:00:00 60,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys + 2002-12-13 12:42:56 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\asferror.dll + 2004-08-05 12:00:00 65,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\at.exe + 2004-08-03 21:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\atapi.sys + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\atl.dll + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys + 2004-08-05 12:00:00 285,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll + 2004-08-05 12:00:00 55,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\attrib.exe + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\auditusr.exe + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.dll + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.exe + 2005-03-02 18:10:36 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\authz.dll + 2004-08-05 12:00:00 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\autochk.exe + 2004-08-05 12:00:00 638,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe + 2004-08-05 12:00:00 616,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\batt.dll + 2001-08-17 21:57:54 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\battc.sys + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll + 2004-08-05 12:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\blastcln.exe + 2004-08-05 12:00:00 71,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\bridge.sys + 2004-08-05 12:00:00 70,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\browselc.dll + 2004-08-05 12:00:00 77,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\browser.dll + 2008-04-21 07:02:27 1,024,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\browseui.dll + 2004-08-05 12:00:00 78,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthci.dll + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys.000 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthserv.dll + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\btpanui.dll + 2004-08-05 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\c_g18030.dll + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabview.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\cacls.exe + 2004-08-05 12:00:00 385,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\callcont.dll + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\camocx.dll + 2004-08-05 12:00:00 146,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\capesnpn.dll + 2005-07-26 04:39:54 225,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll + 2005-07-26 04:39:54 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll + 2004-08-03 22:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys + 2004-08-05 12:00:00 63,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys + 2008-04-21 07:02:27 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll + 2005-09-10 01:55:14 2,067,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll + 2004-08-05 12:00:00 49,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\certcli.dll + 2004-08-05 12:00:00 467,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll + 2003-03-24 14:52:04 188,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtmbx.dll + 2004-08-05 12:00:00 56,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskdic.dll + 2004-08-05 12:00:00 173,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskf.dll + 2004-08-05 12:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\cic.dll + 2004-08-05 12:00:00 1,352,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll + 2004-08-05 12:00:00 198,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\cintime.dll + 2006-06-22 05:13:45 69,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe + 2004-08-05 12:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys + 2005-07-26 04:39:55 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll + 2005-07-26 04:39:55 498,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe + 2004-08-05 12:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll + 2004-08-03 23:07:40 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll + 2004-08-05 12:00:00 400,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmd.exe + 2004-08-05 12:00:00 352,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll + 2004-08-05 12:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe + 2004-08-05 12:00:00 40,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe + 2004-08-05 12:00:00 191,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmsetacl.dll + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll + 2005-07-26 04:39:55 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\colbact.dll + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\comaddin.dll + 2005-07-26 04:39:56 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll + 2006-08-25 15:51:14 617,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll + 2004-08-05 12:00:00 281,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll + 2004-08-05 12:00:00 253,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\compatui.dll + 2001-08-17 21:58:00 9,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\compbatt.sys + 2004-08-05 12:00:00 230,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\compstui.dll + 2005-07-26 04:39:56 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.dll + 2004-08-05 12:00:00 9,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrereg.exe + 2004-08-05 12:00:00 851,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\comres.dll + 2004-08-05 12:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsetup.dll + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsnap.dll + 2005-07-26 04:39:57 1,267,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll + 2005-07-26 04:39:57 540,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\comuid.dll + 2004-08-05 12:00:00 1,044,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\conf.exe + 2004-08-05 12:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll + 2004-08-05 12:00:00 346,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmsp.dll + 2004-08-05 12:00:00 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\conime.exe + 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\corpol.dll + 2004-08-05 12:00:00 165,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\credui.dll + 2004-08-05 12:00:00 40,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys + 2004-08-05 12:00:00 604,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll + 2004-08-05 12:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll + 2004-08-05 12:00:00 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll + 2004-08-05 12:00:00 530,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll + 2004-08-05 12:00:00 102,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscript.exe + 2004-08-05 12:00:00 337,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscui.dll + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrss.exe + 2004-08-05 12:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\custsat.dll + 2004-08-05 12:00:00 1,179,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll + 2004-08-05 12:00:00 1,689,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll + 2004-08-05 12:00:00 825,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll + 2008-04-21 07:02:28 1,056,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\danim.dll + 2004-08-05 12:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll + 2004-08-05 12:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\datime.dll + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll + 2004-08-05 12:00:00 640,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll + 2004-08-05 12:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll + 2004-08-05 12:00:00 1,788 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcache.bin + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcomcnfg.exe + 2004-08-05 12:00:00 31,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe + 2004-08-05 12:00:00 266,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll + 2004-08-05 12:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\defrag.exe + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\devenum.dll + 2004-08-05 12:00:00 290,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe + 2004-08-05 12:00:00 104,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll + 2004-08-05 12:00:00 115,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll + 2006-05-19 13:23:35 112,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll + 2004-08-05 12:00:00 401,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpmon.dll + 2004-08-05 12:00:00 548,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\dialer.exe + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\diantz.exe + 2004-08-05 12:00:00 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\digest.dll + 2004-08-05 12:00:00 165,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput.dll + 2004-08-05 12:00:00 187,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll + 2007-05-16 15:13:53 86,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\directdb.dll + 2004-08-05 12:00:00 36,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\disk.sys + 2004-08-05 12:00:00 1,502,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskcopy.dll + 2004-08-05 12:00:00 14,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys + 2004-08-05 12:00:00 167,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe + 2004-08-05 12:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUninstall$\dispex.dll + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe + 2004-08-05 12:00:00 225,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmband.dll + 2004-08-05 12:00:00 800,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll + 2004-08-05 12:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdlgs.dll + 2004-08-05 12:00:00 200,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmime.dll + 2004-08-05 12:00:00 154,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmio.sys + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll + 2004-08-05 12:00:00 105,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll + 2004-08-05 12:00:00 103,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll + 2004-08-03 22:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll + 2008-02-20 05:35:05 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll + 2004-08-05 12:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe + 2004-08-05 12:00:00 229,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll + 2004-08-05 12:00:00 375,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll + 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll + 2004-08-05 12:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll + 2004-08-05 12:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll + 2004-08-05 12:00:00 213,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll + 2004-08-05 12:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe + 2004-08-05 12:00:00 116,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll + 2004-08-03 22:08:00 60,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmk.sys + 2004-08-03 22:07:58 2,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\drprov.dll + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll + 2004-08-05 12:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll + 2004-08-05 12:00:00 72,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll + 2004-08-05 12:00:00 93,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquoui.dll + 2004-08-05 12:00:00 367,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound.dll + 2004-08-05 12:00:00 1,294,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll + 2004-08-05 12:00:00 145,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssec.dll + 2004-08-05 12:00:00 137,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll + 2004-08-05 12:00:00 113,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dswave.dll + 2004-08-05 12:00:00 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe + 2004-08-05 12:00:00 304,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\duser.dll + 2004-08-05 12:00:00 17,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe + 2004-08-05 12:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe + 2004-08-05 12:00:00 619,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll + 2004-08-05 12:00:00 1,227,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll + 2004-08-05 12:00:00 1,298,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe + 2004-08-05 12:00:00 2,113,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll + 2004-08-05 12:00:00 71,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxg.sys + 2006-08-24 11:17:20 500,278 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll + 2008-04-21 07:02:28 357,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll + 2008-04-21 07:02:28 205,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll + 2004-08-05 12:00:00 187,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\els.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\encapi.dll + 2004-08-05 12:00:00 186,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\encdec.dll + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\es.dll + 2005-10-20 22:25:53 1,097,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\esent.dll + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\esscli.dll + 2004-08-05 12:00:00 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe + 2004-08-05 12:00:00 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll + 2004-08-05 12:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntagnt.dll + 2004-08-05 12:00:00 26,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntcmd.exe + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll + 2004-08-05 12:00:00 94,720 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntwin.exe + 2007-06-13 13:22:28 1,037,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\explorer.exe + 2004-08-05 12:00:00 380,957 -c----w C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll + 2008-04-21 07:02:28 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\extmgr.dll + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\extrac32.exe + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\exts.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\f3ahvoas.dll + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys + 2004-08-05 12:00:00 472,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\fastprox.dll + 2004-08-05 12:00:00 80,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\faultrep.dll + 2004-08-05 12:00:00 27,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\fdc.sys + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\feclient.dll + 2004-08-05 12:00:00 348,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\filemgmt.dll + 2004-08-05 12:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\findstr.exe + 2004-08-05 12:00:00 35,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\fips.sys + 2004-08-05 12:00:00 88,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys + 2006-08-21 12:26:15 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltlib.dll + 2006-08-21 09:14:58 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltmc.exe + 2006-08-21 09:14:58 128,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys + 2004-08-05 12:00:00 386,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontext.dll + 2005-10-17 21:21:08 80,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontsub.dll + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\fontview.exe + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\forcedos.exe + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\format.com + 2004-08-05 12:00:00 32,828 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp40ext.dll + 2004-05-12 23:39:48 184,435 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4amsft.dll + 2003-03-24 14:52:04 82,035 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4anscp.dll + 2003-03-24 14:52:04 147,513 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4apws.dll + 2003-03-24 14:52:04 49,210 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4areg.dll + 2003-03-24 14:52:04 102,509 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4atxt.dll + 2003-03-24 14:52:04 618,605 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll + 2003-03-24 14:52:04 41,020 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4avnb.dll + 2003-03-24 14:52:04 32,826 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4avss.dll + 2003-03-24 14:52:04 49,212 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4awebs.dll + 2004-05-12 23:39:48 876,653 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp4awel.dll + 2002-05-14 12:08:54 14,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp98sadm.exe + 2002-05-14 12:08:54 109,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\fp98swin.exe + 2003-03-24 14:52:04 24,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpadmcgi.exe + 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpadmdll.dll + 2003-03-24 14:52:04 188,494 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpcount.exe + 2002-05-14 12:08:54 94,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpencode.dll + 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpexedll.dll + 2004-05-12 23:39:48 598,071 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpmmc.dll + 2003-03-24 14:52:04 20,538 -c----w C:\WINDOWS\$NtServicePackUninstall$\fpremadm.exe + 2004-08-05 12:00:00 9,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\framebuf.dll + 2004-08-05 12:00:00 185,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\framedyn.dll + 2004-08-05 12:00:00 193,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\fsquirt.exe + 2004-08-05 12:00:00 46,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\ftp.exe + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\fwcfg.dll + 2004-08-05 12:00:00 452,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsapi.dll + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe + 2004-08-05 12:00:00 72,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscom.dll + 2004-08-05 12:00:00 285,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscomex.dll + 2004-08-05 12:00:00 238,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxscover.exe + 2004-08-05 12:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsdrv.dll + 2004-08-05 12:00:00 66,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsevent.dll + 2004-08-05 12:00:00 23,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsext32.dll + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsmon.dll + 2004-08-05 12:00:00 132,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsocm.dll + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsperf.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsres.dll + 2004-08-05 12:00:00 563,712 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsst.dll + 2004-08-05 12:00:00 268,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxssvc.exe + 2004-08-05 12:00:00 246,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxst30.dll + 2004-08-05 12:00:00 397,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxstiff.dll + 2004-08-05 12:00:00 156,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsui.dll + 2004-08-05 12:00:00 197,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxswzrd.dll + 2004-08-05 12:00:00 400,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\fxsxp32.dll + 2008-02-20 06:51:00 282,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\glu32.dll + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\gpkrsrc.dll + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\grpconv.exe + 2004-08-05 12:00:00 125,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\guitrn.dll + 2004-08-05 12:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\h323cc.dll + 2004-08-05 12:00:00 614,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll + 2004-08-05 12:00:00 134,400 -c----w C:\WINDOWS\$NtServicePackUninstall$\hal.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\hccoin.dll + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\help.exe + 2004-08-05 12:00:00 768,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe + 2004-08-05 12:00:00 743,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe + 2005-05-26 23:22:01 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\hh.exe + 2005-05-27 02:08:06 41,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\hid.dll + 2004-08-05 12:00:00 36,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys + 2004-08-05 12:00:00 24,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys + 2001-08-17 21:02:20 9,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\hidusb.sys + 2006-07-21 08:27:28 72,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\hlink.dll + 2004-08-05 12:00:00 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\hmmapi.dll + 2004-08-05 12:00:00 347,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll + 2004-08-05 12:00:00 336,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\hnetwiz.dll + 2004-08-05 12:00:00 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\hostmib.dll + 2004-08-05 12:00:00 146,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\hotplug.dll + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\hscupd.exe + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\http.sys + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\http.sys.000 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\httpapi.dll + 2004-08-05 12:00:00 43,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\htui.dll + 2004-08-05 12:00:00 13,463,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\hwxjpn.dll + 2004-11-17 17:42:33 354,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\hypertrm.dll + 2004-08-03 23:41:24 54,400 -c----w C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys + 2004-08-05 12:00:00 119,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\iasrad.dll + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\icaapi.dll + 2004-08-05 12:00:00 80,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\iccvid.dll + 2005-06-29 01:49:41 254,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\icm32.dll + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\icmp.dll + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\iconlib.dll + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn.dll + 2004-08-05 12:00:00 218,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn1.exe + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwconn2.exe + 2004-08-05 12:00:00 73,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwdial.dll + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwdl.dll + 2004-08-05 12:00:00 176,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwhelp.dll + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwphbk.dll + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwrmind.exe + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\icwutil.dll + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\idq.dll + 2004-08-05 12:00:00 34,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\ie4uinit.exe + 2004-08-05 12:00:00 139,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieakeng.dll + 2004-08-05 12:00:00 221,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieaksie.dll + 2004-08-05 12:00:00 323,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\iedkcs32.dll + 2008-04-17 10:52:54 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\iedw.exe + 2004-08-05 12:00:00 81,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\ieencode.dll + 2008-04-21 07:02:29 251,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\iernonce.dll + 2004-08-05 12:00:00 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\iesetup.dll + 2004-08-05 12:00:00 93,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\iexplore.exe + 2004-08-05 12:00:00 114,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\iexpress.exe + 2004-08-05 12:00:00 142,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\ifmon.dll + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\igmpagnt.dll + 2004-08-05 12:00:00 508,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\iis.dll + 2004-08-05 12:00:00 81,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\ils.dll + 2004-08-05 12:00:00 144,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\imagehlp.dll + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\imapi.exe + 2004-08-05 12:00:00 41,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\imapi.sys + 2004-08-05 12:00:00 106,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\imekrcic.dll + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\imekrmbx.dll + 2004-08-05 12:00:00 36,921 -c----w C:\WINDOWS\$NtServicePackUninstall$\imeshare.dll + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\imgutil.dll + 2004-08-05 12:00:00 811,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjp81k.dll + 2004-08-05 12:00:00 368,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpcic.dll + 2004-08-05 12:00:00 716,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpcus.dll + 2004-08-05 12:00:00 81,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjpdct.dll + 2004-08-05 12:00:00 274,489 -c----w C:\WINDOWS\$NtServicePackUninstall$\imjputyc.dll + 2004-08-05 12:00:00 102,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\imlang.dll + 2004-08-05 12:00:00 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\imm32.dll + 2004-08-05 12:00:00 118,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\imsinsnt.dll + 2004-08-05 12:00:00 315,452 -c----w C:\WINDOWS\$NtServicePackUninstall$\imskf.dll + 2004-08-05 12:00:00 282,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetcfg.dll + 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetmib1.dll + 2004-08-05 12:00:00 75,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetpp.dll + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetppui.dll + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetres.dll + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\inetwiz.exe + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\initpki.dll + 2004-08-05 12:00:00 126,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\input.dll + 2008-04-21 07:02:29 96,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\inseng.dll + 2004-08-03 23:43:40 5,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\intelide.sys + 2004-08-05 12:00:00 40,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys + 2004-08-05 12:00:00 29,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys + 2004-08-05 12:00:00 58,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe + 2006-05-19 13:23:35 95,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\iphlpapi.dll + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys + 2004-08-05 12:00:00 167,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipmontr.dll + 2004-09-29 22:28:37 134,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys + 2004-08-05 12:00:00 332,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll + 2004-08-05 12:00:00 355,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\ippromon.dll + 2004-08-05 12:00:00 36,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\iprip.dll + 2004-08-05 12:00:00 169,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\iprtrmgr.dll + 2004-08-05 12:00:00 74,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys + 2004-08-05 12:00:00 361,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsecsnp.dll + 2004-08-05 12:00:00 184,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll + 2004-08-05 12:00:00 388,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipsmsnap.dll + 2004-08-05 12:00:00 53,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipv6.exe + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipv6mon.dll + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipxroute.exe + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\ipxwan.dll + 2004-08-05 12:00:00 120,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir41_qc.dll + 2004-08-05 12:00:00 338,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir41_qcx.dll + 2004-08-05 12:00:00 755,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_32.dll + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_qc.dll + 2004-08-05 12:00:00 183,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\ir50_qcx.dll + 2004-08-03 23:00:54 87,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\irda.sys + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\irenum.sys + 2004-08-04 00:54:54 154,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\irftp.exe + 2004-08-04 00:54:30 28,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\irmon.dll + 2001-08-23 15:58:06 36,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\isign32.dll + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\isrdbg32.dll + 2005-05-27 02:08:06 155,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\itircl.dll + 2005-05-27 02:08:06 137,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\itss.dll + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\ixsso.dll + 2004-08-03 23:54:30 47,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\iyuv_32.dll + 2006-06-01 18:48:44 163,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\jgdw400.dll + 2006-06-01 18:48:44 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\jgpl400.dll + 2007-12-18 14:41:58 450,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\jscript.dll + 2008-04-21 07:02:29 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\jsproxy.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd101.dll + 2001-08-17 22:55:56 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd106.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbd106n.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdax2.dll + 2004-08-03 23:45:12 25,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdfi1.dll + 2004-08-03 22:45:14 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdhid.sys + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdibm02.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinbe1.dll + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinben.dll + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdinmal.dll + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdlk41a.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdlk41j.dll + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmaori.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmlt47.dll + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdmlt48.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdnec.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdno1.dll + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdsmsfi.dll + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdsmsno.dll + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\kbdukx.dll + 2004-08-05 12:00:00 7,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\kd1394.dll + 2005-06-15 17:50:31 295,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll + 2007-04-16 15:53:11 1,049,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll + 2004-08-05 12:00:00 157,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\keym

Phoenix_912 · Answer

ce message est trop long il me fadrait ten envoyer une quinzaine peut etre. 
Peut tu me donner ton adresse msn ou outlouk pour que je tenvoie mes fichiers texte merci.

g!rly · Answer

salut phoenix_912
non mais laisse, post un nouveau rapport hijack this stp

Phoenix_912 · Answer

ok voila :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:16, on 29/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32
etdde.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\SiteAdvisor\6261\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\HiJackThis\HijackThis.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - https://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

g!rly · Answer

Salut,

supprime ce fichier :

C:\WINDOWS\system32\rqRIyWPj.dll.vir

et fais analyser celui ci :

C:\WINDOWS\system32\SpOrder.dll 

sur ce site :

https://www.virustotal.com/gui/

tu upload le fichier et laisse l´analyse se faire, post le resultat a la fin.

@+

Rapport hijackthis

6 réponses

Discussions similaires