MON ORDI BEUG DE PARTOUT !!!

Résolu
petrolette-8 Messages postés 236 Statut Membre -  
petrolette-8 Messages postés 236 Statut Membre -
Bonjour,

Voilà depuis quelques temps mon ordi n'arrète pas de faire des trucs bizarres. Au début j'avais plein de publicités qui apparissaient mais c'est terminée.

Maintenant mon ordi rame au démarrage c'est affreux !!! et sur Internet et là aux dernières nouvelles je n'avais plus de son (j'ai donc redémarrer pour en retrouver)
Et aussi il y a plusieurs messages d'erreurs qui s'affichent du genre erreur DLL etc.....

Bref c'est casse-pied j'en ai marre !!!!!!!!!!!!!!!!!!!!!!

Pouvez-vous m'aider SVP !!!

MERCI BEAUCOUP
Configuration: Windows XP
Internet Explorer 7.0

15 réponses

  1. Utilisateur anonyme
     
    Salut,

    Télécharge HijackThis ici :

    -> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

    -> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

    -> Clique sur Install ensuite sur I Accept

    -> Clique sur Do a scan system and save log file

    -> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      Bonjour voici le log hijackthis :

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:46:28, on 10/08/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Defender\MsMpEng.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\ControleParental\CPnumericable.exe
      C:\Program Files\NavNT\defwatch.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\NavNT\rtvscan.exe
      C:\Program Files\NavNT\vptray.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\Program Files\ControleParental\CPnumericableHelper.exe
      C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
      C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\SiteAdvisor\6261\SAService.exe
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Spyware Terminator\sp_rsser.exe
      c:\Program Files\Numericable\Mon Assistant Internet\bin\mad.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      C:\WINDOWS\system32\java.exe
      C:\PROGRA~1\Motive\ASSTCO~1\MOTIVE~1.EXE
      C:\WINDOWS\system32\MsgSys.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60076
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:4343
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
      O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [CPnumericableHelper] C:\Program Files\ControleParental\CPnumericableHelper.exe
      O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
      O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Mon Assistant Internet.lnk = C:\Program Files\Numericable\Mon Assistant Internet\bin\matcli.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} -
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL/jdk/6u7/jinstall-6u7-windows-i586-jc.cab?e=1218206262272&h=e0a844f0d5380a27dab40d335891ade7/&filename=jinstall-6u7-windows-i586-jc.cab
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Contrôle Parentale Numericable (CPnumericable) - Unknown owner - C:\Program Files\ControleParental\CPnumericable.exe
      O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: MpService - Canon Inc. - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
      O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
      O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
      O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      O24 - Desktop Component 0: (no name) - (no file)
      0
  2. Utilisateur anonyme
     
    on va eliminer la cause virale :

    Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique sur combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

    - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      ok je vais faire ça mais j'attend car antivir s'est mit en route et dans l'onglet virus information il y a 2Warning
      0
  3. Utilisateur anonyme
     
    il te detecte peut etre navilog qui est present sur ta machine
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      je ne sais pas je te rep quand l'analyse est finie

      a tout a lheure
      0
  4. Utilisateur anonyme
     
    ok
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      dsl j mit du tps

      voici le raport de combofix

      ComboFix 08-08-09.06 - FIERDEHAICHE 2008-08-10 18:34:17.6 - NTFSx86
      Endroit: C:\Documents and Settings\FIERDEHAICHE\Bureau\ComboFix.exe
      .

      ((((((((((((((((((((((((((((( Fichiers créés 2008-07-10 to 2008-08-10 ))))))))))))))))))))))))))))))))))))
      .

      2008-08-10 14:18 . 2008-08-10 14:18 <REP> d-------- C:\Deckard
      2008-08-10 14:09 . 2008-08-10 14:09 <REP> d-------- C:\Program Files\Avira
      2008-08-10 14:09 . 2008-08-10 14:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
      2008-08-09 21:43 . 2008-08-09 21:43 <REP> d-------- C:\VundoFix Backups
      2008-08-09 18:13 . 2008-08-09 18:13 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\SiteAdvisor
      2008-08-09 18:12 . 2008-08-09 18:12 <REP> d-------- C:\Documents and Settings\FIERDEHAICHE\Application Data\SiteAdvisor
      2008-08-09 17:55 . 2008-08-09 17:55 <REP> d-------- C:\Documents and Settings\LocalService\Bureau
      2008-08-09 17:54 . 2008-08-09 18:12 <REP> d-------- C:\Program Files\SiteAdvisor
      2008-08-09 17:54 . 2008-08-09 18:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SiteAdvisor
      2008-08-09 17:54 . 2008-08-09 17:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\McAfee
      2008-08-09 17:23 . 2008-08-10 11:03 <REP> d-------- C:\Documents and Settings\FIERDEHAICHE\Application Data\Spyware Terminator
      2008-08-09 17:23 . 2008-08-09 17:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
      2008-08-09 17:23 . 2008-08-09 17:23 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
      2008-08-09 17:22 . 2008-08-09 17:24 <REP> d-------- C:\Program Files\Spyware Terminator
      2008-08-09 17:00 . 2008-08-09 17:00 268 --ah----- C:\sqmdata17.sqm
      2008-08-09 17:00 . 2008-08-09 17:00 244 --ah----- C:\sqmnoopt17.sqm
      2008-08-09 15:53 . 2008-08-09 15:53 <REP> d-------- C:\Program Files\CCleaner
      2008-08-09 15:46 . 2008-08-09 15:46 <REP> d-------- C:\Program Files\Windows Installer Clean Up
      2008-08-09 13:27 . 2008-08-10 18:10 54,156 --ah----- C:\WINDOWS\QTFont.qfn
      2008-08-09 13:27 . 2008-08-10 14:10 1,409 --a------ C:\WINDOWS\QTFont.for
      2008-08-08 17:03 . 2008-08-08 20:32 <REP> d-------- C:\Program Files\ControleParental
      2008-08-08 17:03 . 2008-08-08 17:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\net.xooloo.livemark
      2008-08-08 16:55 . 2008-08-08 16:55 3 --a------ C:\WINDOWS\vrtemp.tmp
      2008-08-08 16:44 . 2008-08-08 16:44 <REP> d-------- C:\WINDOWS\Sun
      2008-08-08 16:42 . 2008-08-08 16:42 <REP> d-------- C:\Program Files\Sun
      2008-08-08 16:41 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
      2008-08-08 16:39 . 2008-08-08 16:41 <REP> d-------- C:\Program Files\Java
      2008-08-08 16:37 . 2008-08-08 16:37 <REP> d-------- C:\Program Files\Fichiers communs\Java
      2008-08-08 16:07 . 2001-09-26 21:07 120,379 --a------ C:\WINDOWS\system32\SYMEVNT.386
      2008-08-08 16:07 . 2001-09-26 21:07 57,696 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
      2008-08-08 16:07 . 2001-09-26 21:07 36,864 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
      2008-08-08 16:07 . 2001-09-26 21:07 4,032 --a------ C:\WINDOWS\system32\SYMEVNT1.DLL
      2008-08-08 16:06 . 2008-08-08 16:07 <REP> d-------- C:\Program Files\Symantec
      2008-08-08 16:06 . 2008-08-10 10:06 <REP> d-------- C:\Program Files\NavNT
      2008-08-08 16:06 . 2008-08-08 16:07 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Symantec
      2008-08-08 16:02 . 2008-08-09 15:58 <REP> d-------- C:\Program Files\MSECACHE
      2008-08-05 11:21 . 2008-04-23 06:16 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
      2008-08-05 11:21 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
      2008-08-05 11:21 . 2007-03-08 07:10 1,048,576 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
      2008-08-05 11:21 . 2008-04-23 06:16 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
      2008-08-05 11:21 . 2008-04-23 06:16 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
      2008-08-05 11:21 . 2008-04-23 06:16 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
      2008-08-05 11:21 . 2008-04-23 06:16 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
      2008-08-05 11:21 . 2008-04-23 06:16 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
      2008-08-05 11:21 . 2008-04-22 09:39 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
      2008-08-03 21:11 . 2008-08-07 20:18 <REP> d-------- C:\Program Files\Alwil Software
      2008-08-03 21:11 . 2003-03-18 22:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
      2008-08-03 21:11 . 2003-03-18 21:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
      2008-08-03 17:51 . 2008-04-13 09:36 144,384 --------- C:\WINDOWS\system32\drivers\hdaudbus.sys
      2008-08-03 17:51 . 2008-04-13 11:40 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
      2008-08-03 17:49 . 2006-12-28 12:01 19,569 --a------ C:\WINDOWS\[u]0/u05312_.tmp
      2008-08-03 16:30 . 2008-08-05 16:04 <REP> d-------- C:\WINDOWS\system32\fr-fr
      2008-08-01 14:16 . 2008-08-01 16:37 <REP> d-------- C:\WINDOWS\BDOSCAN8
      2008-07-31 20:32 . 2008-08-07 16:33 <REP> d-------- C:\Program Files\AxBx
      2008-07-31 18:16 . 2008-07-31 18:16 <REP> d-------- C:\Documents and Settings\FIERDEHAICHE\Application Data\Malwarebytes
      2008-07-31 18:15 . 2008-07-31 18:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
      2008-07-31 15:43 . 2008-08-09 13:37 <REP> d-------- C:\Program Files\Navilog1
      2008-07-31 15:08 . 2008-08-07 16:36 <REP> d-------- C:\Toolbar SD
      2008-07-31 14:40 . 2008-07-31 14:40 <REP> d-------- C:\Program Files\Trend Micro
      2008-07-31 13:19 . 2008-07-31 14:12 <REP> d-------- C:\Program Files\SpywareBlaster
      2008-07-31 13:19 . 2008-07-31 14:06 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
      2008-07-31 11:11 . 2008-07-31 11:11 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
      2008-07-30 12:57 . 2008-07-30 12:57 <REP> d-------- C:\Program Files\Windows Defender
      2008-07-29 15:46 . 2008-07-29 15:51 <REP> d-------- C:\Program Files\Google
      2008-07-28 16:10 . 2008-08-07 16:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      2008-07-28 13:12 . 2008-07-28 13:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
      2008-07-24 12:47 . 2008-07-24 12:47 <REP> d-------- C:\Program Files\Core Design
      2008-07-24 12:47 . 1997-08-14 16:17 117,248 --a------ C:\WINDOWS\system32\Edec.dll
      2008-07-24 12:47 . 1997-08-14 16:31 98,816 --a------ C:\WINDOWS\system32\Dec130.dll
      2008-07-24 12:47 . 1997-08-14 16:24 89,600 --a------ C:\WINDOWS\system32\Winsdec.dll
      2008-07-24 12:47 . 1997-08-14 11:10 80,896 --a------ C:\WINDOWS\system32\Winstr.dll
      2008-07-24 12:47 . 1997-08-14 16:06 60,416 --a------ C:\WINDOWS\system32\Winplay.dll
      2008-07-20 13:25 . 2008-07-24 12:44 <REP> d-------- C:\Program Files\Empire Interactive

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-08-09 16:11 --------- d-----w C:\Program Files\Yahoo!
      2008-08-08 14:55 --------- d-----w C:\Program Files\Numericable Controle Parental
      2008-08-08 14:07 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
      2008-08-03 16:28 --------- d-----w C:\Program Files\MSN Messenger
      2008-07-30 14:30 --------- d-----w C:\Program Files\Messager Wanadoo
      2008-07-28 10:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom
      2008-07-24 10:44 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
      2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
      2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
      2008-06-16 12:30 --------- d-----w C:\Program Files\K-Lite Codec Pack
      2008-06-16 12:09 --------- d-----w C:\Program Files\DivX
      2008-06-16 12:02 --------- d-----w C:\Documents and Settings\FIERDEHAICHE\Application Data\Yahoo!
      2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
      2008-06-10 16:46 --------- d-----w C:\Program Files\Woonoz
      2007-10-06 09:09 25,536 ----a-w C:\Documents and Settings\FIERDEHAICHE\Application Data\GDIPFONTCACHEV1.DAT
      2005-04-01 07:28 1,253 ----a-w C:\Program Files\uninstal.log
      .

      ((((((((((((((((((((((((((((( snapshot@2008-08-01_19.33.43.12 )))))))))))))))))))))))))))))))))))))))))
      .
      - 2002-08-28 23:33:20 50,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys
      + 2004-08-03 22:10:08 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys
      + 2005-04-10 08:36:46 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\1ndn1b3b.dat
      + 2005-04-10 08:36:46 2,678 -c----w C:\WINDOWS\$NtServicePackUninstall$\1zp7vzn3.dat
      + 2004-08-03 22:00:04 12,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\4mmdat.sys
      + 2004-08-03 22:10:12 48,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\61883.sys
      - 2002-08-30 11:00:00 59,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll
      + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll
      - 2002-08-30 11:00:00 185,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe
      + 2004-08-19 15:09:52 189,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe
      - 2002-08-30 11:00:00 1,818,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll
      + 2004-08-19 15:09:20 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll
      + 2004-08-19 15:09:20 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll.000
      - 2002-08-30 11:00:00 406,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll
      + 2004-08-19 15:09:20 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll
      + 2004-08-19 15:09:20 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll.000
      - 2002-08-30 11:00:00 125,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll
      + 2004-08-19 15:09:20 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll
      + 2004-08-19 15:09:20 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll.000
      - 2002-08-30 11:00:00 111,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclui.dll
      + 2004-08-19 15:09:20 119,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclui.dll
      - 2002-08-30 11:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acpi.sys
      + 2004-08-19 14:51:56 188,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\acpi.sys
      - 2002-08-30 11:00:00 219,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll
      + 2004-08-19 15:09:20 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll
      + 2004-08-19 15:09:20 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll.000
      - 2002-08-30 11:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\activeds.dll
      + 2004-08-19 15:09:20 194,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\activeds.dll
      - 2002-08-30 11:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe
      + 2004-08-19 15:09:52 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe
      - 2002-08-30 11:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll
      + 2004-08-19 15:09:20 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll
      - 2002-08-30 11:00:00 107,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll
      + 2004-08-19 15:09:20 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll
      + 2004-08-19 15:09:20 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll.000
      + 2004-08-19 15:09:20 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.dll
      + 2004-08-19 15:09:52 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\admin.exe
      - 2002-08-30 11:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\admparse.dll
      + 2004-08-19 15:09:20 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\admparse.dll
      - 2002-08-30 11:00:00 162,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll
      + 2004-08-19 15:09:20 175,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll
      - 2002-08-30 11:00:00 139,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll
      + 2004-08-19 15:09:20 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll
      - 2002-08-30 11:00:00 62,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll
      + 2004-08-19 15:09:20 68,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll
      - 2002-08-30 11:00:00 239,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll
      + 2004-08-19 15:09:20 263,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll
      + 2004-08-19 15:09:20 4,255 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv01nt5.dll
      + 2004-08-19 15:09:20 3,967 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv02nt5.dll
      + 2004-08-19 15:09:20 3,615 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv05nt5.dll
      + 2004-08-19 15:09:20 3,647 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv07nt5.dll
      + 2004-08-19 15:09:20 3,135 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv08nt5.dll
      + 2004-08-19 15:09:20 3,711 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv09nt5.dll
      + 2004-08-19 15:09:20 3,775 -c----w C:\WINDOWS\$NtServicePackUninstall$\adv11nt5.dll
      - 2002-08-30 11:00:00 626,176 -c----w C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll
      + 2004-08-19 15:09:20 685,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll
      - 2002-08-30 11:00:00 93,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\advpack.dll
      + 2004-08-19 15:09:20 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\advpack.dll
      - 2002-08-28 21:16:38 142,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys
      + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys
      + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys.001
      - 2002-08-30 11:00:00 131,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\afd.sys
      + 2008-06-20 10:44:38 138,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\afd.sys
      - 2002-08-30 11:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll
      + 2004-08-19 15:09:20 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll
      - 2002-08-30 11:00:00 204,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll
      + 2004-08-19 15:09:20 214,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll
      - 2002-08-30 11:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll
      + 2006-10-12 14:04:13 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll
      - 2002-08-30 11:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll
      + 2007-03-09 13:48:06 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll
      - 2002-08-30 11:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll
      + 2004-08-19 15:09:20 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll
      - 2002-08-30 11:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll
      + 2004-08-19 15:09:20 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll
      - 2002-08-30 11:00:00 39,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll
      + 2004-08-19 15:09:20 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll
      - 2002-08-30 11:00:00 235,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe
      + 2006-10-12 11:09:53 256,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe
      - 2001-08-17 19:58:00 25,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
      + 2004-08-03 22:07:42 42,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
      - 2001-08-17 19:58:02 29,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\agpcpq.sys
      + 2004-08-03 22:07:44 44,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\agpcpq.sys
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0405.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0406.dll
      + 2002-08-30 11:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0407.dll
      + 2002-08-30 11:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0408.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0409.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040b.dll
      + 2002-08-30 11:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040c.dll
      + 2002-08-30 11:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040e.dll
      + 2002-08-30 11:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0410.dll
      + 2002-08-30 11:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0413.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0414.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0415.dll
      + 2002-08-30 11:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0416.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0419.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041d.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041f.dll
      + 2002-08-30 11:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0816.dll
      + 2002-08-30 11:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0c0a.dll
      - 2002-08-30 11:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll
      + 2004-08-19 15:09:20 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll
      - 2002-08-30 11:00:00 91,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\ahui.exe
      + 2004-08-19 15:09:52 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\ahui.exe
      - 2002-08-30 11:00:00 41,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\alg.exe
      + 2004-08-19 15:09:52 44,544 -c----w C:\WINDOWS\$NtServicePackUninstall$\alg.exe
      - 2001-08-17 19:58:00 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\alim1541.sys
      + 2004-08-03 22:07:42 42,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\alim1541.sys
      - 2002-08-30 11:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll
      + 2004-08-19 15:09:20 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll
      - 2001-08-17 19:58:02 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdagp.sys
      + 2004-08-03 22:07:44 43,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdagp.sys
      - 2002-12-12 11:23:58 34,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys
      + 2004-08-19 14:52:42 41,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys
      - 2002-12-12 11:23:58 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys
      + 2004-08-19 14:52:44 41,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys
      - 2002-12-11 22:14:32 64,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\amstream.dll
      + 2004-08-19 15:09:20 70,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\amstream.dll
      - 2002-08-30 11:00:00 115,712 -c----w C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll
      + 2004-08-19 15:09:20 126,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll
      + 2004-08-19 15:09:20 334,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\aqueue.dll
      - 2002-08-30 11:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys
      + 2004-08-03 21:58:30 60,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys
      - 2002-08-30 11:00:00 14,366 -c----w C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll
      + 2001-03-02 18:52:40 15,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll
      - 2002-08-30 11:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll
      + 2004-08-19 15:09:20 65,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll
      - 2002-08-30 11:00:00 13,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys
      + 2004-08-03 22:05:04 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys
      - 2002-08-30 11:00:00 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\at.exe
      + 2004-08-19 15:09:52 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\at.exe
      - 2002-10-16 15:31:10 87,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
      + 2004-08-03 21:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
      + 2004-08-19 15:09:20 229,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati2cqag.dll
      + 2004-08-19 15:09:20 377,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati2dvaa.dll
      - 2003-06-19 12:33:10 301,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati2dvag.dll
      + 2004-08-19 15:09:20 201,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati2dvag.dll
      - 2003-06-19 12:04:16 845,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati3d1ag.dll
      + 2004-08-19 15:09:20 870,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati3d1ag.dll
      - 2003-06-19 12:12:42 1,033,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati3d2ag.dll
      + 2004-08-19 15:09:20 1,057,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati3d2ag.dll
      + 2004-08-19 15:09:20 1,888,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\ati3duag.dll
      + 2004-08-19 15:09:20 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\ativtmxx.dll
      + 2004-08-19 15:09:20 516,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\ativvaxx.dll
      - 2002-08-30 11:00:00 74,810 -c----w C:\WINDOWS\$NtServicePackUninstall$\atl.dll
      + 2004-08-19 15:09:20 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\atl.dll
      - 2002-08-30 11:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe
      + 2004-08-19 15:09:52 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe
      - 2002-08-30 11:00:00 57,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys
      + 2004-08-03 21:58:32 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys
      - 2002-08-30 11:00:00 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll
      + 2004-08-19 15:08:02 285,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll
      - 2002-08-30 11:00:00 53,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys
      + 2004-08-03 21:58:36 55,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys
      - 2002-08-30 11:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll
      + 2004-08-19 15:09:22 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll
      + 2002-08-30 11:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\attrib.exe
      + 2004-08-19 15:09:22 21,183 -c----w C:\WINDOWS\$NtServicePackUninstall$\atv01nt5.dll
      + 2004-08-19 15:09:22 11,359 -c----w C:\WINDOWS\$NtServicePackUninstall$\atv02nt5.dll
      + 2004-08-19 15:09:22 25,471 -c----w C:\WINDOWS\$NtServicePackUninstall$\atv04nt5.dll
      + 2004-08-19 15:09:22 14,143 -c----w C:\WINDOWS\$NtServicePackUninstall$\atv06nt5.dll
      + 2004-08-19 15:09:22 17,279 -c----w C:\WINDOWS\$NtServicePackUninstall$\atv10nt5.dll
      - 2002-08-30 11:00:00 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll
      + 2004-08-19 15:09:22 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll
      + 2004-08-19 15:09:52 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\auditusr.exe
      + 2004-08-19 15:09:22 20,540 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.dll
      + 2004-08-19 15:09:52 16,439 -c----w C:\WINDOWS\$NtServicePackUninstall$\author.exe
      - 2002-08-30 11:00:00 51,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\authz.dll
      + 2005-03-02 18:10:36 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\authz.dll
      - 2002-08-30 11:00:00 602,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
      + 2004-08-19 15:09:52 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
      - 2002-08-30 11:00:00 614,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe
      + 2004-08-19 15:09:52 638,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe
      - 2002-08-30 11:00:00 594,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe
      + 2004-08-19 15:09:52 616,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe
      - 2002-08-30 11:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe
      + 2004-08-19 15:09:52 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe
      + 2004-08-03 22:10:12 38,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\avc.sys
      + 2004-08-03 22:10:00 13,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\avcstrm.sys
      - 2002-08-30 11:00:00 76,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll
      + 2004-08-19 15:09:22 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll
      - 2002-08-30 11:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll
      + 2004-08-19 15:09:22 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll
      - 2002-08-30 11:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll
      + 2004-08-19 15:09:22 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll
      - 2002-08-30 11:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\batt.dll
      + 2004-08-19 15:09:22 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\batt.dll
      - 2003-02-17 07:16:26 11,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\bdasup.sys
      + 2004-08-03 22:10:14 11,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\bdasup.sys
      - 2002-08-30 11:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll
      + 2004-08-19 15:09:22 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll
      + 2004-08-19 15:09:22 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll
      + 2004-08-19 15:09:22 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll
      + 2004-08-19 15:09:52 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\blastcln.exe
      - 2002-08-30 11:00:00 68,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\bridge.sys
      + 2004-08-03 21:59:58 71,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\bridge.sys
      - 2002-08-30 11:00:00 69,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\browselc.dll
      + 2004-08-19 15:08:04 70,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\browselc.dll
      - 2002-08-30 11:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\browser.dll
      + 2004-08-19 15:09:22 77,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\browser.dll
      - 2002-08-30 11:00:00 1,022,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\browseui.dll
      + 2008-04-21 07:02:27 1,024,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\browseui.dll
      - 2002-08-30 11:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll
      + 2004-08-19 15:09:22 78,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll
      + 2004-08-19 15:09:22 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthci.dll
      + 2004-08-03 22:10:40 17,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthenum.sys
      + 2004-08-03 22:10:40 38,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthmodem.sys
      + 2004-08-03 21:58:40 100,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthpan.sys
      + 2008-06-14 17:59:52 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys
      + 2008-06-14 17:59:52 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys.001
      + 2004-08-03 22:10:38 35,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthprint.sys
      + 2004-08-19 15:09:22 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthserv.dll
      + 2004-08-03 22:10:36 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthusb.sys
      + 2004-08-19 15:09:22 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\btpanui.dll
      - 2002-08-30 11:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll
      + 2004-08-19 15:09:22 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll
      - 2002-08-30 11:00:00 81,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabview.dll
      + 2004-08-19 15:09:22 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabview.dll
      + 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\cacls.exe
      - 2002-08-30 11:00:00 360,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\callcont.dll
      + 2004-08-19 15:09:22 385,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\callcont.dll
      - 2002-08-30 11:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\camocx.dll
      + 2004-08-19 15:09:22 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\camocx.dll
      + 2002-08-30 11:00:00 146,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\capesnpn.dll
      - 2002-08-30 11:00:00 215,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll
      + 2005-07-26 04:39:54 225,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll
      - 2002-08-30 11:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll
      + 2004-08-19 15:09:22 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll
      - 2002-08-30 11:00:00 582,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll
      + 2005-07-26 04:39:54 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll
      - 2003-02-17 07:16:26 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys
      + 2004-08-03 22:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys
      - 2002-08-30 11:00:00 59,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys
      + 2004-08-03 22:14:12 63,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys
      - 2002-08-30 11:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll
      + 2008-04-21 07:02:27 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll
      - 2002-08-30 11:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdm.dll
      + 2004-08-19 15:09:22 66,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdm.dll
      - 2002-08-30 11:00:00 2,028,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll
      + 2005-09-10 01:55:14 2,067,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll
      - 2002-08-30 11:00:00 47,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
      + 2004-08-03 21:59:54 49,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
      - 2002-08-30 11:00:00 192,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\certcli.dll
      + 2004-08-19 15:09:22 200,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\certcli.dll
      - 2002-08-30 11:00:00 446,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll
      + 2004-08-19 15:09:22 467,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll
      - 2002-08-30 11:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll
      + 2004-08-19 15:09:22 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll
      - 2002-08-30 11:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll
      + 2004-08-19 15:08:04 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll
      + 2004-08-19 15:09:52 188,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe
      + 2004-08-19 15:09:22 15,423 -c----w C:\WINDOWS\$NtServicePackUninstall$\ch7xxnt5.dll
      + 2004-08-03 22:00:14 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\changer.sys
      + 2004-08-03 21:31:52 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtmbx.dll
      + 2004-08-03 21:31:54 56,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskdic.dll
      + 2004-08-03 21:31:54 173,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskf.dll
      + 2002-08-30 11:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\cic.dll
      - 2002-08-30 11:00:00 1,268,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll
      + 2004-08-19 15:09:22 1,352,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll
      + 2004-08-03 21:31:54 198,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\cintime.dll
      - 2002-08-30 11:00:00 64,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll
      + 2006-06-22 05:13:45 69,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll
      - 2002-08-30 11:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe
      + 2004-08-19 15:09:52 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe
      - 2002-08-30 11:00:00 46,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys
      + 2004-08-03 22:14:28 49,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys
      - 2002-08-30 11:00:00 100,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll
      + 2005-07-26 04:39:55 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll
      - 2002-08-30 11:00:00 468,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll
      + 2005-07-26 04:39:55 498,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll
      - 2002-08-30 11:00:00 62,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe
      + 2004-08-19 15:09:52 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe
      - 2002-08-30 11:00:00 127,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll
      + 2004-08-19 15:09:22 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll
      - 2002-08-30 11:00:00 45,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe
      + 2004-08-19 15:09:52 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe
      - 2002-08-30 11:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe
      + 2004-08-19 15:09:52 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe
      - 2002-08-30 11:00:00 30,720 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe
      + 2004-08-19 15:09:52 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe
      - 2002-08-30 11:00:00 54,272 -c----w C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll
      + 2004-08-19 15:09:22 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll
      + 2004-08-03 22:07:40 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys
      - 2002-08-30 11:00:00 12,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll
      + 2004-08-19 15:09:22 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll
      - 2002-08-30 11:00:00 388,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmd.exe
      + 2004-08-19 15:09:52 400,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmd.exe
      - 2002-08-30 11:00:00 333,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll
      + 2004-08-19 15:09:22 352,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll
      - 2002-08-30 11:00:00 41,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe
      + 2004-08-19 15:09:52 47,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe
      - 2002-08-30 11:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe
      + 2004-08-19 15:09:52 40,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe
      - 2002-08-30 11:00:00 180,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll
      + 2004-08-19 15:09:22 191,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll
      + 2004-08-19 15:09:22 13,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmsetacl.dll
      - 2002-08-30 11:00:00 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe
      + 2004-08-19 15:09:52 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe
      - 2002-08-30 11:00:00 37,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll
      + 2004-08-19 15:09:22 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll
      - 2002-08-30 11:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll
      + 2004-08-19 15:09:22 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll
      + 2004-08-19 15:09:22 83,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon2.dll
      - 2002-08-30 11:00:00 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\colbact.dll
      + 2005-07-26 04:39:55 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\colbact.dll
      + 2002-08-30 11:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\comaddin.dll
      - 2002-08-30 11:00:00 186,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll
      + 2005-07-26 04:39:56 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll
      - 2002-08-30 11:00:00 557,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
      + 2006-08-25 15:51:14 617,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
      - 2002-08-30 11:00:00 262,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll
      + 2004-08-19 15:09:22 281,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll
      - 2002-08-30 11:00:00 239,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\compatui.dll
      + 2004-08-19 15:09:22 253,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\compatui.dll
      - 2002-08-30 11:00:00 223,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\compstui.dll
      + 2004-08-19 15:09:22 230,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\compstui.dll
      + 2005-07-26 04:39:56 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.dll
      - 2002-08-30 11:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe
      + 2004-08-19 15:09:52 9,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe
      + 2002-08-30 11:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrereg.exe
      - 2002-08-30 11:00:00 851,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\comres.dll
      + 2004-08-19 15:09:22 851,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\comres.dll
      + 2002-08-30 11:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsetup.dll
      + 2002-08-30 11:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsnap.dll
      - 2002-08-30 11:00:00 1,172,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll
      + 2005-07-26 04:39:57 1,267,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll
      - 2002-08-30 11:00:00 495,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\comuid.dll
      + 2005-07-26 04:39:57 540,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\comuid.dll
      - 2002-08-30 11:00:00 1,007,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\conf.exe
      + 2004-08-19 15:09:52 1,044,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\conf.exe
      - 2002-08-30 11:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll
      + 2004-08-19 15:09:22 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll
      + 2002-08-30 11:00:00 346,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmsp.dll
      - 2002-08-30 11:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\conime.exe
      + 2004-08-19 15:09:52 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\conime.exe
      - 2002-08-30 11:00:00 14,877 -c----w C:\WINDOWS\$NtServicePackUninstall$\corpol.dll
      + 2007-08-13 16:42:54 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\corpol.dll
      - 2002-08-30 11:00:00 160,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\credui.dll
      + 2004-08-19 15:09:22 165,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\credui.dll
      - 2002-12-12 11:24:00 34,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys
      + 2004-08-19 14:59:26 40,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys
      - 2002-08-30 11:00:00 564,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll
      + 2004-08-19 15:09:22 604,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll
      - 2002-08-30 11:00:00 71,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll
      + 2004-08-19 15:09:22 75,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll
      - 2002-08-30 11:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll
      + 2004-08-19 15:09:22 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll
      - 2002-08-30 11:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll
      + 2004-08-19 15:09:22 54,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll
      - 2002-08-30 11:00:00 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll
      + 2004-08-19 15:09:22 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll
      - 2002-08-30 11:00:00 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
      + 2004-08-19 15:09:22 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
      - 2002-08-30 11:00:00 488,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll
      + 2004-08-19 15:09:22 530,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll
      - 2002-08-30 11:00:00 90,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll
      + 2004-08-19 15:09:22 102,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll
      - 2002-08-30 11:00:00 102,450 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscript.exe
      + 2004-08-19 15:09:52 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscript.exe
      - 2002-08-30 11:00:00 318,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscui.dll
      + 2004-08-19 15:09:22 337,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscui.dll
      - 2002-08-30 11:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll
      + 2004-08-19 15:09:22 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll
      - 2002-08-30 11:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrss.exe
      + 2004-08-19 15:09:52 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrss.exe
      - 2002-08-30 11:00:00 13,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
      + 2004-08-19 15:09:52 15,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
      + 2004-08-19 15:09:22 252,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctmasetp.dll
      - 2002-07-07 02:01:46 114,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\custsat.dll
      + 2006-06-02 19:32:20 33,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\custsat.dll
      - 2002-12-11 22:14:32 1,177,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll
      + 2004-08-19 15:09:22 1,179,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll
      - 2002-12-11 22:14:32 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll
      + 2004-08-19 15:09:22 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll
      - 2002-12-11 22:14:32 1,634,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll
      + 2004-08-19 15:09:22 1,689,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll
      - 2002-12-11 22:14:32 797,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll
      + 2004-08-19 15:09:24 825,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll
      - 2002-08-30 11:00:00 988,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\danim.dll
      + 2008-04-21 07:02:28 1,056,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\danim.dll
      - 2002-08-30 11:00:00 557,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\dao360.dll
      + 2004-08-19 15:09:24 561,179 -c----w C:\WINDOWS\$NtServicePackUninstall$\dao360.dll
      - 2002-08-30 11:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll
      + 2004-08-19 15:09:24 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll
      + 2002-08-30 11:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\datime.dll
      - 2002-08-30 11:00:00 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll
      + 2004-08-19 15:09:24 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll
      - 2002-08-30 11:00:00 489,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll
      + 2004-08-19 15:09:24 640,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll
      - 2002-08-30 11:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll
      + 2004-08-19 15:09:24 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll
      - 2002-08-30 11:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll
      + 2004-08-19 15:09:24 110,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll
      - 2002-08-30 11:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll
      + 2004-08-19 15:09:24 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll
      - 2002-08-30 11:00:00 1,740 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcache.bin
      + 2004-08-19 15:23:26 1,788 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcache.bin
      - 2002-08-30 11:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll
      + 2004-08-19 15:09:24 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll
      - 2002-08-30 11:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll
      + 2004-08-19 15:09:24 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll
      + 2002-08-30 11:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcomcnfg.exe
      - 2002-08-30 11:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe
      + 2004-08-19 15:09:52 31,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe
      - 2002-12-11 22:14:32 284,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll
      + 2004-08-19 15:09:24 266,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll
      - 2002-12-11 22:14:32 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll
      + 2004-08-19 15:09:24 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll
      - 2002-08-30 11:00:00 70,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\defrag.exe
      + 2004-08-19 15:09:52 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\defrag.exe
      - 2002-12-11 22:14:32 132,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\devenum.dll
      + 2004-08-19 15:09:24 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\devenum.dll
      - 2002-08-30 11:00:00 271,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll
      + 2004-08-19 15:09:24 290,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll
      - 2002-08-30 11:00:00 76,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe
      + 2004-08-19 15:09:52 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe
      - 2002-08-30 11:00:00 99,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe
      + 2004-08-19 15:09:52 104,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe
      - 2002-08-30 11:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll
      + 2004-08-19 15:09:24 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll
      - 2002-08-30 11:00:00 113,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll
      + 2004-08-19 15:09:24 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll
      - 2002-08-30 11:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll
      + 2004-08-19 15:09:24 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll
      - 2002-08-30 11:00:00 107,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll
      + 2004-08-19 15:09:24 115,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll
      - 2002-08-30 11:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll
      + 2006-05-19 13:23:35 112,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll
      + 2002-08-30 11:00:00 401,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpmon.dll
      - 2002-08-30 11:00:00 531,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dialer.exe
      + 2004-08-19 15:09:52 548,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\dialer.exe
      - 2002-08-30 11:00:00 79,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\diantz.exe
      + 2004-08-19 15:09:52 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\diantz.exe
      - 2002-08-30 11:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\digest.dll
      + 2004-08-19 15:09:24 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\digest.dll
      - 2002-08-30 11:00:00 158,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput.dll
      + 2004-08-19 15:09:24 165,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput.dll
      - 2002-08-30 11:00:00 175,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll
      + 2004-08-19 15:09:24 187,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll
      - 2002-08-30 11:00:00 76,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\directdb.dll
      + 2007-05-16 15:13:53 86,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\directdb.dll
      - 2002-08-30 11:00:00 33,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\disk.sys
      + 2004-08-03 21:59:56 36,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\disk.sys
      + 2002-08-30 11:00:00 1,502,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskcopy.dll
      - 2002-08-30 11:00:00 13,184 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys
      + 2004-08-03 21:59:54 14,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys
      - 2002-08-30 11:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe
      + 2004-08-19 15:09:52 167,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe
      + 2002-08-30 11:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUninstall$\dispex.dll
      - 2002-08-30 11:00:00 294,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe
      + 2004-08-19 15:09:52 294,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe
      - 2002-08-30 11:00:00 4,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe
      + 2004-08-19 15:09:52 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe
      + 2004-08-03 22:00:06 8,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\dlttape.sys
      - 2002-08-30 11:00:00 205,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe
      + 2004-08-19 15:09:52 225,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe
      - 2002-12-11 22:14:32 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmband.dll
      + 2004-08-19 15:09:24 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmband.dll
      - 2002-08-30 11:00:00 781,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys
      + 2004-08-19 15:01:16 800,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys
      - 2002-12-11 22:14:32 58,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll
      + 2004-08-19 15:09:24 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll
      + 2002-08-30 11:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdlgs.dll
      - 2002-08-30 11:00:00 184,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll
      + 2004-08-19 15:09:24 200,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll
      - 2002-12-11 22:14:32 171,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmime.dll
      + 2004-08-19 15:09:24 181,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmime.dll
      - 2002-08-30 11:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmio.sys
      + 2004-08-19 15:01:22 154,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmio.sys
      - 2002-12-11 22:14:32 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll
      + 2004-08-19 15:09:24 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll
      - 2002-08-30 11:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe
      + 2004-08-19 15:09:52 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe
      - 2002-12-11 22:14:32 76,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll
      + 2004-08-19 15:09:24 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll
      - 2002-08-30 11:00:00 22,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll
      + 2004-08-19 15:09:24 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll
      - 2002-12-11 22:14:32 98,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll
      + 2004-08-19 15:09:24 105,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll
      - 2002-12-11 22:14:32 100,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll
      + 2004-08-19 15:09:24 103,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll
      - 2002-12-11 22:14:32 116,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll
      + 2004-08-19 15:09:24 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll
      - 2001-08-17 19:59:58 50,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys
      + 2004-08-03 22:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys
      - 2002-08-30 11:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll
      + 2004-08-19 15:09:24 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll
      - 2002-08-30 11:00:00 139,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll
      + 2008-06-20 17:41:06 148,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll
      - 2002-08-30 11:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll
      + 2008-02-20 05:35:05 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll
      - 2002-08-30 11:00:00 46,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll
      + 2004-08-19 15:09:24 48,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll
      + 2004-08-03 21:58:30 207,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\dot4.sys
      - 2002-08-30 11:00:00 115,712 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll
      + 2004-08-19 14:50:54 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll
      - 2002-12-11 22:14:32 28,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe
      + 2004-08-19 15:09:52 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe
      - 2002-12-11 22:14:32 217,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll
      + 2004-08-19 15:09:24 229,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll
      - 2002-12-11 22:14:32 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll
      + 2004-08-19 15:09:24 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll
      - 2002-12-11 22:14:32 3,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll
      + 2004-08-19 15:08:08 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll
      - 2002-12-11 22:14:32 723,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll
      + 2004-08-19 15:09:24 375,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll
      - 2002-12-11 22:14:32 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll
      + 2004-08-19 15:09:24 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll
      - 2002-12-11 22:14:32 68,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll
      + 2004-08-19 15:09:24 60,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll
      - 2002-12-11 22:14:32 3,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll
      + 2004-08-19 15:08:08 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll
      - 2002-12-11 22:14:32 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe
      + 2004-08-19 15:09:52 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe
      - 2002-12-11 22:14:32 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll
      + 2004-08-19 15:09:24 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll
      - 2002-12-11 22:14:32 381,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll
      + 2004-08-19 15:09:24 213,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll
      - 2002-12-11 22:14:32 80,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe
      + 2004-08-19 15:09:52 83,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe
      - 2002-12-11 22:14:32 112,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll
      + 2004-08-19 15:09:24 116,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll
      - 2002-12-11 22:14:32 76,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll
      + 2004-08-19 15:09:24 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll
      - 2002-08-28 23:32:34 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmk.sys
      + 2004-08-03 22:08:00 60,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmk.sys
      - 2002-08-28 23:32:34 2,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys
      + 2004-08-03 22:07:58 2,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys
      - 2002-08-30 11:00:00 11,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\drprov.dll
      + 2004-08-19 15:09:24 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\drprov.dll
      - 2002-08-30 11:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll
      + 2004-08-19 15:09:24 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll
      - 2002-12-11 22:14:32 186,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll
      + 2004-08-19 15:09:24 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll
      - 2002-12-11 22:14:32 491,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll
      + 2004-08-19 15:09:24 72,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll
      - 2002-08-30 11:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll
      + 2004-08-19 15:09:24 93,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll
      + 2002-08-30 11:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquoui.dll
      - 2002-12-11 22:14:32 355,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound.dll
      + 2004-08-19 15:09:24 367,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound.dll
      - 2002-12-11 22:14:32 1,294,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll
      + 2004-08-19 15:09:24 1,294,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll
      - 2002-08-30 11:00:00 138,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll
      + 2004-08-19 15:09:24 145,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll
      - 2002-08-30 11:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll
      + 2004-08-19 15:08:10 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll
      - 2002-08-30 11:00:00 229,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll
      + 2004-08-19 15:09:24 240,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll
      - 2002-08-30 11:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssec.dll
      + 2004-08-19 15:09:24 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssec.dll
      - 2002-08-30 11:00:00 124,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll
      + 2004-08-03 21:31:44 137,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll
      - 2002-08-30 11:00:00 107,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll
      + 2004-08-19 15:09:24 113,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll
      - 2002-12-11 22:14:32 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dswave.dll
      + 2004-08-19 15:09:24 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dswave.dll
      - 2002-08-30 11:00:00 9,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe
      + 2004-08-19 15:09:52 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe
      - 2002-08-30 11:00:00 263,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\duser.dll
      + 2004-08-19 15:09:24 304,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\duser.dll
      - 2002-08-30 11:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe
      + 2004-08-19 15:09:52 17,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe
      - 2002-08-30 11:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe
      + 2004-08-19 15:09:52 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe
      - 2002-12-11 22:14:32 602,624 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll
      + 2004-08-19 15:09:24 619,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll
      - 2002-12-11 22:14:32 1,189,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll
      + 2004-08-19 15:09:24 1,227,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll
      - 2002-12-11 22:14:32 937,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe
      + 2004-08-19 15:09:52 1,298,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe
      - 2003-03-26 15:35:22 1,675,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll
      + 2004-08-19 15:09:24 2,113,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll
      - 2002-08-30 11:00:00 68,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxg.sys
      + 2004-08-03 22:00:56 71,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxg.sys
      - 2002-08-30 11:00:00 499,741 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll
      + 2006-08-24 12:17:20 500,278 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll
      - 2002-08-30 11:00:00 337,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll
      + 2004-08-19 15:09:24 357,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll
      - 2002-08-30 11:00:00 194,560 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll
      + 2004-08-19 15:09:24 201,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll
      - 2002-08-30 11:00:00 169,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\els.dll
      + 2004-08-19 15:09:26 187,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\els.dll
      - 2002-12-11 22:14:32 18,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\encapi.dll
      + 2004-08-19 15:09:26 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\encapi.dll
      - 2002-08-30 11:00:00 155,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\encdec.dll
      + 2004-08-19 15:09:26 186,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\encdec.dll
      + 2004-08-19 15:08:12 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\ep9res.dll
      - 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll
      + 2004-08-19 15:09:26 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll
      - 2002-08-30 11:00:00 225,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\es.dll
      + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\es.dll
      - 2002-08-30 11:00:00 1,034,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\esent.dll
      + 2005-10-20 22:25:53 1,097,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\esent.dll
      - 2002-08-30 11:00:00 235,520 -c----w C:\WINDOWS\$NtServicePackUninstall$\esscli.dll
      + 2004-08-19 15:09:26 247,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\esscli.dll
      - 2002-08-30 11:00:00 180,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe
      + 2004-08-19 15:09:52 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe
      - 2002-08-30 11:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
      + 2004-08-19 15:09:26 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
      + 2004-08-19 15:09:26 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntagnt.dll
      + 2004-08-19 15:09:54 26,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntcmd.exe
      - 2002-08-30 11:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll
      + 2004-08-19 15:09:26 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll
      + 2004-08-19 15:09:54 94,720 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntwin.exe
      - 2002-08-30 11:00:00 1,008,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
      + 2007-06-13 13:22:28 1,037,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
      - 2002-08-3
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Utilisateur anonyme
     
    TOUJOURS DES SOUCIS JE SUPPOSE ??
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      et oui :.( :.(
      0
  7. Utilisateur anonyme
     
    IL faudrait que tu verifie si ce fichier est present : C:\WINDOWS\system32\WININET.DLL
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      ok

      peux-tu m'indiquer comment faire stp
      0
  8. Utilisateur anonyme
     
    dans menu demarrer , dans rechercher tu copie/colle : WININET.DLL

    et tu regarde si il le trouve
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      Non il m'a trouver pas mal de fichier WININET.DLL

      Mais pas C:\WINDOWS\system32\WININET.DLL
      0
  9. Utilisateur anonyme
     
    ok

    le mieux a faire est :

    vas dans panneau de configuration
    affichage classique
    va sur centre de sauvegarde et de restauration
    en haut a gauche
    clic sur reparer windows en utilisant la restauration system

    coche choisir un point

    clic sur suivant
    choisi un point antérieur a tes soucis et lance la restauration
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      je ne trouve pas centre de sauvegarde et de restauration
      0
  10. Utilisateur anonyme
     
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      c'est bon j'y suis mais ça n'a rien a voir avec ce que tu ma mis avant le tuto la j'ai un calendrirer sous les yeux je fais quoi stp
      0
  11. Utilisateur anonyme
     
    tu choisi une date avant tes problemes et tu lance la resto
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      sinon regarde j'ai trouver ça Fichier WININET.DLL supprimé comment faire ?
      tu le met dans recherche il dise qu'on peut télécharger un fichier sur clé isb et le remettre.

      J'attend que tu lise et que tu me dise quoi faire
      si je restaure
      si j'installe le fichier
      0
  12. Utilisateur anonyme
     
    oui en effet tu peux le telecharger mais je ne suis pas sur que le probleme est la tante un erestauration et on ser fixé
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      j restaurer mais je fais koi maintenant? je cherche le fichier de tout a lheure?
      0
    2. petrolette-8 Messages postés 236 Statut Membre
       
      par contre au démarrage lordi a encore ramé !!!!!!
      0
  13. Utilisateur anonyme
     
    a pat le fait qu il rame y a d autres soucis ??
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      euh no mai j pa trouvé le fichier que tu as dit
      0
  14. Utilisateur anonyme
     
    c est un portable ou une tour ??

    Télécharge ToolsCleaner sur ton bureau.
    -->
    ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
    http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
    http://pc-system.fr/

    # Clique sur Recherche et laisse le scan agir ...
    # Clique sur Suppression pour finaliser.
    # Tu peux, si tu le souhaites, te servir des Options facultatives.
    # Clique sur Quitter pour obtenir le rapport.
    # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      une tour
      0
  15. Utilisateur anonyme
     
    ok faudra passer toolcleaner, ensuite ouvrir la tour et dépoussierer l intérieure avec amour
    0
    1. petrolette-8 Messages postés 236 Statut Membre
       
      bonjour

      voici le rapport de TCleaner

      -->- Recherche:

      C:\Qoobox: trouvé !
      C:\Toolbar SD: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\HijackThis.lnk: trouvé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\Navilog1.lnk: trouvé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\ComboFix.exe: trouvé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\HJTInstall.exe: trouvé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\ToolBar S&D.lnk: trouvé !
      C:\Program Files\Navilog1: trouvé !
      C:\Program Files\Navilog1\Navilog1.bat: trouvé !
      C:\Program Files\Trend Micro\HijackThis: trouvé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\HijackThis.lnk: supprimé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\Navilog1.lnk: supprimé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\ComboFix.exe: supprimé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\HJTInstall.exe: supprimé !
      C:\Documents and Settings\FIERDEHAICHE\Bureau\Parcours pub\ToolBar S&D.lnk: supprimé !
      C:\Program Files\Navilog1\Navilog1.bat: supprimé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
      C:\Qoobox: supprimé !
      C:\Toolbar SD: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
      C:\Program Files\Navilog1: supprimé !
      C:\Program Files\Trend Micro\HijackThis: supprimé !
      0
  16. Utilisateur anonyme
     
    réouvre hijackthis
    fais scan only
    coches ces lignes :

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60076

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076

    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} -
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/

    O24 - Desktop Component 0: (no name) - (no file)

    tu les coches et tu clic sur fix checked

    ensuite instal d urgence un antivirus (je te conseil Antivir) :

    Telecharge et instales l'antivirus Antivir Personal Edition Classic :

    ->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

    tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

    ensuite :

    Télécharge sur ton bureau DSS (ex Comboscan) de Deckard:

    http://deckard.geekstogo.com/dss.exe

    (choisis enregistrer, puis Bureau comme emplacement)

    Ferme toutes les applications en cours.

    Double-clic sur DSS.exe pour lancer l'outil.

    Une fenêtre s'ouvre, invitant à fermer toutes les applications, clique sur OK.

    A la fin de l'analyse, une fenêtre s'ouvre, clique sur OK.

    Le rapport main.txt va s'afficher, copie le dans ta prochaine réponse.
    Si un rapport complémentaire a été créé ( extra.txt ), poste le aussi dans ta réponse.

    Les rapports sont ici :
    (!) C:\Deckard\System Scanner\main.txt
    (!) C:\Deckard\System Scanner\extra.txt

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    -1
    1. petrolette-8 Messages postés 236 Statut Membre
       
      Voici le rapport main.txt

      Deckard's System Scanner v20071014.68
      Run by FIERDEHAICHE on 2008-08-10 14:18:50
      Computer is in Normal Mode.
      --------------------------------------------------------------------------------

      -- System Restore --------------------------------------------------------------

      Successfully created a Deckard's System Scanner Restore Point.


      -- Last 5 Restore Point(s) --
      15: 2008-08-10 12:19:04 UTC - RP379 - Deckard's System Scanner Restore Point
      14: 2008-08-10 12:09:14 UTC - RP378 - Avira AntiVir Personal - 10/08/2008 14:08
      13: 2008-08-09 13:46:04 UTC - RP377 - Installed Windows Installer Clean Up
      12: 2008-08-08 14:42:45 UTC - RP376 - Installé OpenOffice.org Installer 1.0
      11: 2008-08-08 14:37:12 UTC - RP375 - Installé Java(TM) 6 Update 7


      -- First Restore Point --
      1: 2008-08-03 16:34:22 UTC - RP365 - Point de vérification système


      Backed up registry hives.
      Performed disk cleanup.

      [color=red]Total Physical Memory: 256 MiB (512 MiB recommended).[/color]


      -- HijackThis (run as FIERDEHAICHE.exe) ----------------------------------------

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 14:21:26, on 10/08/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Windows Defender\MsMpEng.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\ControleParental\CPnumericable.exe
      C:\Program Files\NavNT\defwatch.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\NavNT\rtvscan.exe
      C:\Program Files\NavNT\vptray.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\Program Files\ControleParental\CPnumericableHelper.exe
      C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\SiteAdvisor\6261\SAService.exe
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Spyware Terminator\sp_rsser.exe
      c:\Program Files\Numericable\Mon Assistant Internet\bin\mad.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      C:\WINDOWS\system32\java.exe
      C:\PROGRA~1\Motive\ASSTCO~1\MOTIVE~1.EXE
      C:\WINDOWS\system32\MsgSys.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Documents and Settings\FIERDEHAICHE\Bureau\dss.exe
      C:\PROGRA~1\TRENDM~1\HIJACK~1\FIERDEHAICHE.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:4343
      O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [CPnumericableHelper] C:\Program Files\ControleParental\CPnumericableHelper.exe
      O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
      O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6261\SiteAdv.exe"
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Mon Assistant Internet.lnk = C:\Program Files\Numericable\Mon Assistant Internet\bin\matcli.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Contrôle Parentale Numericable (CPnumericable) - Unknown owner - C:\Program Files\ControleParental\CPnumericable.exe
      O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: MpService - Canon Inc. - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
      O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
      O23 - Service: Service SiteAdvisor (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
      O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      O24 - Desktop Component 0: (no name) - (no file)
      0
    2. petrolette-8 Messages postés 236 Statut Membre
       
      et le rapport extra.txt

      Deckard's System Scanner v20071014.68
      Extra logfile - please post this as an attachment with your post.
      --------------------------------------------------------------------------------

      -- System Information ----------------------------------------------------------

      Microsoft Windows XP Édition familiale (build 2600) SP 3.0
      Architecture: X86; Language: French

      CPU 0: Intel(R) Celeron(R) CPU 2.40GHz
      Percentage of Memory in Use: 71%
      Physical Memory (total/avail): 255.48 MiB / 72.46 MiB
      Pagefile Memory (total/avail): 594.07 MiB / 160.24 MiB
      Virtual Memory (total/avail): 2047.88 MiB / 1927.95 MiB

      A: is Removable (No Media)
      C: is Fixed (NTFS) - 68.51 GiB total, 59.34 GiB free.
      D: is CDROM (No Media)
      E: is CDROM (No Media)

      \\.\PHYSICALDRIVE0 - ST380012A - 74.53 GiB - 2 partitions
      \PARTITION0 - Unknown - 6.01 GiB
      \PARTITION1 (bootable) - Système de fichiers installable - 68.51 GiB - C:



      -- Security Center -------------------------------------------------------------

      AUOptions is scheduled to auto-install.


      -- Environment Variables -------------------------------------------------------

      ALLUSERSPROFILE=C:\Documents and Settings\All Users
      APPDATA=C:\Documents and Settings\FIERDEHAICHE\Application Data
      CLASSPATH="C:\WINDOWS\system32\QTJava.zip"
      CLIENTNAME=Console
      CommonProgramFiles=C:\Program Files\Fichiers communs
      COMPUTERNAME=SN100252080000
      ComSpec=C:\WINDOWS\system32\cmd.exe
      FP_NO_HOST_CHECK=NO
      HOMEDRIVE=C:
      HOMEPATH=\Documents and Settings\FIERDEHAICHE
      LOGONSERVER=\\SN100252080000
      NUMBER_OF_PROCESSORS=1
      OS=Windows_NT
      Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\ATI Technologies\ATI Control Panel;C:\PROGRA~1\FICHIE~1\TVNAVI~1
      PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
      PROCESSOR_ARCHITECTURE=x86
      PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 9, GenuineIntel
      PROCESSOR_LEVEL=15
      PROCESSOR_REVISION=0209
      ProgramFiles=C:\Program Files
      PROMPT=$P$G
      QTJAVA="C:\WINDOWS\system32\QTJava.zip"
      SESSIONNAME=Console
      SystemDrive=C:
      SystemRoot=C:\WINDOWS
      TEMP=C:\DOCUME~1\FIERDE~1\LOCALS~1\Temp
      TMP=C:\DOCUME~1\FIERDE~1\LOCALS~1\Temp
      USERDOMAIN=SN100252080000
      USERNAME=FIERDEHAICHE
      USERPROFILE=C:\Documents and Settings\FIERDEHAICHE
      windir=C:\WINDOWS


      -- User Profiles ---------------------------------------------------------------

      FIERDEHAICHE [I](admin)/I
      Administrateur [I](new local, admin)/I


      -- Add/Remove Programs ---------------------------------------------------------

      --> C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{09B44E78-A988-4BC0-962F-63ECD3333708} /l1036
      --> C:\PROGRA~1\NUMERI~1\MONASS~1\Uninstall.exe NC
      --> C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
      --> C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
      --> C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
      --> C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
      --> C:\WINDOWS\Modio\SLAMR2KO\Setup.exe /Remove
      --> C:\WINDOWS\System32\\MSIEXEC.EXE /x {8855FF30-19CE-4CB1-A654-87B38369CCE1}
      --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
      --> rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
      --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      --> stunwdm.exe
      Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe SVG Viewer 3.0 --> C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
      Avira AntiVir Personal - Free Antivirus --> C:\Program Files\Avira\AntiVir PersonalEdition Classic\setup.exe /REMOVE
      Canon MultiPASS Suite 4.30a --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A508AAA-3B69-4326-B89E-A6166FA05D3C}\mpmaster.exe" -l0x40c -Uninstall
      CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
      Clean Virus MSN --> "C:\Program Files\AxBx\Clean Virus MSN\unins000.exe"
      Contrôle Parental --> C:\Program Files\ControleParental\uninst.exe
      Encyclopédie Hachette Multimédia --> C:\WINDOWS\unvise32.exe C:\program files\EHMINSTALL\uninstal.log
      Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
      Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
      HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
      Java Runtime Environment 1.1 --> C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL1.isu"
      Java(TM) 6 Update 7 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
      LiveUpdate 1.6 (Symantec Corporation) --> C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
      Macromedia Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
      McAfee SiteAdvisor --> C:\Program Files\SiteAdvisor\6261\uninstall.exe
      Messager Wanadoo --> C:\PROGRA~1\MESSAG~1\Uninstall.exe
      Microsoft Office 2000 Premium --> MsiExec.exe /I{0000040C-78E1-11D2-B60F-006097C998E7}
      Microsoft Word 2002 --> MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) --> "C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) --> "C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782) --> "C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Step by Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941569) --> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950759) --> "C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950760) --> "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950762) --> "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376-v2) --> "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376) --> "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951698) --> "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951748) --> "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951978) --> "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
      Mon Assistant Internet --> C:\WINDOWS\Motive\NC\MCCUninst.exe
      Norton AntiVirus Corporate Edition --> MsiExec.exe /I{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}
      OpenOffice.org Installer 1.0 --> MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
      Packard Bell InfoCentre --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{07A1C2E1-76DD-11D6-9922-009027E9C183}\setup.exe"
      PowerDVD --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\SETUP.EXE" -uninstall
      QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
      Sonic RecordNow DX --> MsiExec.exe /I{8855FF30-19CE-4CB1-A654-87B38369CCE1}
      Spyware Terminator --> "C:\Program Files\Spyware Terminator\unins000.exe"
      Tomb Raider II --> C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Core Design\Tomb Raider II\Uninst.isu"
      VideoLAN VLC media player 0.8.6h --> C:\Program Files\VideoLAN\VLC\uninstall.exe
      Votre Budget --> RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{642DDC79-6847-454B-B10C-F69F621397AE}\SETUP.EXE" -l0x40c
      Windows Defender --> MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
      Windows Installer Clean Up --> MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52}
      Windows Live Messenger --> MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
      Windows XP Service Pack 3 --> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"


      -- Application Event Log -------------------------------------------------------

      Event Record #/Type46621 / Error
      Event Submitted/Written: 08/10/2008 02:14:13 PM
      Event ID/Source: 1002 / Application Hang
      Event Description:
      Application bloquée avscan.exe, version 8.1.4.7, module bloqué hungapp, version 0.0.0.0, adresse de blocage 0x00000000.

      Event Record #/Type46613 / Warning
      Event Submitted/Written: 08/10/2008 01:06:25 PM
      Event ID/Source: 1524 / Userenv
      Event Description:
      Windows ne peut pas décharger vos classes fichier de Registre - il est en cours d'utilisation par d'autres applications ou services. Le fichier sera déchargé quand il ne sera plus utilisé.

      Event Record #/Type46606 / Success
      Event Submitted/Written: 08/10/2008 10:28:01 AM
      Event ID/Source: 12001 / usnjsvc
      Event Description:
      The Messenger Sharing USN Journal Reader service started successfully.

      Event Record #/Type46603 / Warning
      Event Submitted/Written: 08/10/2008 09:50:47 AM
      Event ID/Source: 6 / Norton AntiVirus
      Event Description:
      L'analyse n'a pas pu ouvrir le fichier C:\WINDOWS\WINDOW~2.LOG [00000003].

      Event Record #/Type46602 / Warning
      Event Submitted/Written: 08/10/2008 09:50:47 AM
      Event ID/Source: 6 / Norton AntiVirus
      Event Description:
      L'analyse n'a pas pu ouvrir le fichier C:\WINDOWS\wiaservc.log [00000003].



      -- Security Event Log ----------------------------------------------------------

      No Errors/Warnings found.


      -- System Event Log ------------------------------------------------------------

      Event Record #/Type111967 / Error
      Event Submitted/Written: 08/10/2008 02:21:46 PM
      Event ID/Source: 7016 / Service Control Manager
      Event Description:
      Le service SmartLinkService a signalé un état actuel 0 non valide.

      Event Record #/Type111953 / Error
      Event Submitted/Written: 08/10/2008 01:13:17 PM
      Event ID/Source: 7000 / Service Control Manager
      Event Description:
      Le service NAVENG n'a pas pu démarrer en raison de l'erreur :
      %%5

      Event Record #/Type111927 / Error
      Event Submitted/Written: 08/10/2008 11:24:41 AM
      Event ID/Source: 59 / SideBySide
      Event Description:
      Generate Activation Context a échoué pour C:\WINDOWS\system32\WININET.DLL.
      Message d'erreur de référence : Opération réussie.
      .

      Event Record #/Type111926 / Error
      Event Submitted/Written: 08/10/2008 11:24:41 AM
      Event ID/Source: 58 / SideBySide
      Event Description:
      Erreur de syntaxe dans le fichier manifeste ou le fichier de stratégie "Mémoire insuffisante pour cette opération.
      1" à la ligne Mémoire insuffisante pour cette opération.
      2.

      Event Record #/Type111925 / Error
      Event Submitted/Written: 08/10/2008 11:24:41 AM
      Event ID/Source: 59 / SideBySide
      Event Description:
      Generate Activation Context a échoué pour C:\WINDOWS\system32\WININET.DLL.
      Message d'erreur de référence : Error Message is unavailable
      .



      -- End of Deckard's System Scanner: finished at 2008-08-10 14:23:36 ------------
      0