Un virus a supprimé mon antivirus

Résolu
bluesky67 -  
Bonjour,
j'ai attraper un virus qui m'a fait disparaitre mon antivirus et pas moyen d'executer hisjackthis pour vous remetre un log
avez vous une solution ?
je vous en remercie
Configuration: Windows XP
Internet Explorer 7.0

27 réponses

Résumé de la discussion

Infection informatique sur Windows XP a rendu l'antivirus inopérant et complexifié l'envoi des logs, rendant nécessaire l'utilisation d'outils spécialisés et de techniques de nettoyage pour neutraliser les éléments malveillants. Des solutions variées proposent FindyKill, OTMoveIt et HijackThis pour diagnostiquer et supprimer les malwares, puis Malwarebytes et des scans complets pour nettoyer les fichiers, processus et clés de registre affectés. Les échanges évoquent aussi des rapports log (HijackThis, FindyKill) et des étapes successives: sauvegarder les rapports, relancer les outils en mode suppression, puis redémarrer pour observer le nettoyage et la disparition des traces. En cas de persistance, une réinstallation propre des composants critiques et une vérification des éléments autorun/démarrage est suggérée comme étape suivante pour prévenir une réinfection.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Salut,

    Telecharge FindyKill :

    Fais un clic droit sur le lien et choisi enregistrer la cible sous .... le bureau

    ----> http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.rar

    --> Dezippe le (extraire) sur ton bureau

    --> Entre dans le dossier FindyKill

    --> Double clic sur findyKill.cmd

    choisi l option 1 (Recherche)

    Post le rapport FindyKill.txt

    Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
    4
    1. bluesky67 Auteur
      ----------------- FindyKill V3.075 ------------------

      Recherche effectuée à 19:47:36 le 12/09/2008
      Emplacement : C:\Documents and Settings\ERIC\Bureau\FindyKill\FindyKill\FindyKill.bat
      Outils Mis a jours le 11/09/08

      ----------------- *** Recherche *** ------------------

      »»»» Presence des fichiers dans C:

      »»»» Presence des fichiers dans C:\WINDOWS

      »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

      C:\WINDOWS\Prefetch\WINTEMS.EXE-????????.pf - Present !
      C:\WINDOWS\Prefetch\MDELK.EXE-????????.pf - Present !
      C:\WINDOWS\Prefetch\HLDRRR.EXE-????????.pf - Present !

      »»»» Presence des fichiers dans C:\WINDOWS\system32

      C:\WINDOWS\system32\mdelk.exe - Present !
      C:\WINDOWS\system32\wintems.exe - Present !
      C:\WINDOWS\system32\ban_list.txt - Present !

      »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

      C:\WINDOWS\system32\drivers\srosa.sys - Present !
      C:\WINDOWS\system32\drivers\hldrrr.exe - Present !
      "C:\WINDOWS\system32\drivers\downld" - Present !

      »»»» Presence des fichiers dans C:\Documents and Settings\ERIC\Application Data

      »»»» Registre :

      ! REG.EXE VERSION 3.0

      HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
      NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      nwiz REG_SZ nwiz.exe /install
      NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      HPDJ Taskbar Utility REG_SZ C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      HPHUPD05 REG_SZ C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      ccApp REG_SZ "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      SoundMan REG_SZ SOUNDMAN.EXE
      Symantec NetDriver Monitor REG_SZ C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
      NeroFilterCheck REG_SZ C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      WatchDog REG_SZ C:\Program Files\mobile PhoneTools\WatchDog.exe
      Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      {F5-51-10-02-DW} REG_SZ C:\WINDOWS\system32\rrwnw64o.exe DWbrk01
      ExploreUpdSched REG_SZ C:\WINDOWS\system32\scntptdm.exe DWbrk01
      avgnt REG_SZ "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
      KernelFaultCheck REG_EXPAND_SZ %systemroot%\system32\dumprep 0 -k

      HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

      ! REG.EXE VERSION 3.0

      HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
      ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
      BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      H/PC Connection Agent REG_SZ "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      TransIt REG_SZ C:\Program Files\Power Translator\Applications\TransIt.exe

      »»»» Presence d infections dans Support amovible :

      ----------- ! Recherche realisée avec success ! -----------
      0
      1. Utilisateur anonyme
        Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir

        Réouvre FindyKill , choisi cette fois ci l option 2 (Suppression)

        /!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage terminé"

        -------> ensuite post le rapport FindyKill.txt

        Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
        0
        1. bluesky67 Auteur
          ----------------- FindyKill V3.O75 -----------------

          Suppression effectuée à 20:00:08 le 12/09/2008
          Emplacement : C:\Documents and Settings\ERIC\Bureau\FindyKill\FindyKill\FindyKill.bat
          Outils Mis a jours le 11/09/08

          ------------*** Suppression ***-------------

          »»»» Suppression des fichiers dans C:

          »»»» Suppression des fichiers dans C:\WINDOWS

          »»»» Suppression des fichiers dans C:\WINDOWS\Prefetch

          Supprime ! - C:\WINDOWS\Prefetch\MDELK.EXE-????????.pf
          Supprime ! - C:\WINDOWS\Prefetch\HLDRRR.EXE-????????.pf
          Supprime ! - C:\WINDOWS\Prefetch\WINTEMS.EXE-????????.pf

          »»»» Suppression des fichiers dans C:\WINDOWS\system32

          Supprime ! - C:\WINDOWS\system32\mdelk.exe
          Supprime ! - C:\WINDOWS\system32\wintems.exe
          Supprime ! - C:\WINDOWS\system32\ban_list.txt

          »»»» Suppression des fichiers dans C:\WINDOWS\system32\drivers

          Supprime ! - C:\WINDOWS\system32\drivers\srosa.sys
          Supprime ! - C:\WINDOWS\system32\drivers\hldrrr.exe
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\128093.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\137968.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\142046.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\161921.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\165625.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\174484.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\176250.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\189218.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\209703.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\216828.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\221218.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\226406.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\228875.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\237234.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\241203.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\244828.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\252625.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\256421.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\293578.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\293828.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\314078.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\323062.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\338375.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\339843.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\353843.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\452156.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\495937.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\498437.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\533828.exe"
          Supprimé ! - "C:\WINDOWS\system32\drivers\downld\537875.exe"
          Supprime ! - "C:\WINDOWS\system32\drivers\downld"

          »»»» Suppression des fichiers dans C:\Documents and Settings\ERIC\Application Data

          ------------*** Verification ***-------------

          »»»» Suppression des fichiers dans C:\WINDOWS

          »»»» Presence des fichiers dans C:

          »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

          »»»» Presence des fichiers dans C:\WINDOWS\system32

          »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

          »»»» Presence des fichiers dans C:\Documents and Settings\ERIC\Application Data

          »»»» Suppression des clefs du registre..

          "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA " - Supprime !
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA " - Supprime !
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA " - Supprime !
          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Hardware Profiles\0001\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA " - Supprime !

          »»»» Suppression des clefs du registre effectuée !

          »»»» Affichage des fichiers cachés réparé !

          »»»» Services de securité Windows redemarré !

          »»»» Suppression des fichiers temporaires :

          Supprimé ! - "C:\WINDOWS\TEMP\Norton_NAV05 7-22-2008 8h24m54s.log"
          Supprimé ! - "C:\WINDOWS\TEMP\Norton_NAV05 7-3-2008 23h26m21s.log"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\080401011432.log"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\25.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\32 less site trans"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\5df3d.mst"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\9inB.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\9OJAZONJ.emf"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\activation_key"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\AR-1212338260718.pdf"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\BDE6.BAK"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\bhflmpkg.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\bis14.exe"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\BitDownload.zip"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\BitTorrent-5.0.9.exe"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\check_hotfix_for_vista.vbs"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\combo 2.txt"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\EPSLog.txt"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\EPS_PicLookup.dat"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\epurcfrver20.dll"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\epurcfrver20.dll.zip"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\FolderLst.txt"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\GLCA.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\GLGE.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\GLJB.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\GLKC.tmp"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\HtmlControl.dll"
          Supprimé ! - "C:\DOCUME~1\ERIC\LOCALS~1\Temp\INMEM000.REM"

          »»»» Suppression des fichiers dans Support amovible :

          ---------- ! Nettoyage realisé avec succès ! ----------

          »»»» Recherche d autres infections :

          C:\Documents and Settings\ERIC\Application Data\BitTorrent\incomplete\2627ade7-c786\Crack
          C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys
          C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\Read me- Cracking Instructions.txt
          C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys\czero.exe
          C:\Documents and Settings\ERIC\Mes documents\logiciels\Alive iPod Video Converter 2.1.3.8 + CRACK (Convert MPEG, DivX, XviD, MPEG, WMV, AVI, VOB and many more to iPod MP4 Video).zip
          C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.v2.2.1.FR.Incl-Keygen.rar
          C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.v3.1.FR.Incl-Keygen.rar
          C:\Documents and Settings\ERIC\Mes documents\logiciels\NERO 7\Keygen
          C:\Documents and Settings\ERIC\Mes documents\logiciels\NERO 7\Keygen\keygen.exe
          C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK
          C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK\a lire.txt
          C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK\Patch Norton Anti-Virus LiveUpdate.exe
          C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK\tmg-nav2k5.exe
          C:\Documents and Settings\ERIC\Mes documents\logiciels\WinRar 3.71 final\keygen.exe
          C:\Documents and Settings\ERIC\Recent\(Logiciel PC + Crack) MaGic TranSlator (traducteur anglais, francais, italien, allemand).rar.lnk
          C:\Documents and Settings\ERIC\Recent\Crack.lnk
          C:\Documents and Settings\ERIC\Recent\Jerrycan_v6.31_Incl.Keygen_FRENCH-BS.lnk

          -------------- ! Fin du rapport ! ---------------
          0
          2. Utilisateur anonyme
            télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
            double-clique sur OTMoveIt.exe pour le lancer.
            Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
            copie la liste qui se trouve en gras ci-dessous,
            et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

            C:\Documents and Settings\ERIC\Application Data\BitTorrent\incomplete\2627ade7-c786\Crack
            C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys
            C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\Read me- Cracking Instructions.txt
            C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys\czero.exe
            C:\Documents and Settings\ERIC\Mes documents\logiciels\Alive iPod Video Converter 2.1.3.8 + CRACK (Convert MPEG, DivX, XviD, MPEG, WMV, AVI, VOB and many more to iPod MP4 Video).zip
            C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.v2.2.1.FR.Incl-Keygen.rar
            C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.v3.1.FR.Incl-Keygen.rar
            C:\Documents and Settings\ERIC\Mes documents\logiciels\NERO 7\Keygen
            C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK
            C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK\tmg-nav2k5.exe
            C:\Documents and Settings\ERIC\Mes documents\logiciels\WinRar 3.71 final\keygen.exe
            C:\Documents and Settings\ERIC\Recent\(Logiciel PC + Crack) MaGic TranSlator (traducteur anglais, francais, italien, allemand).rar.lnk
            C:\Documents and Settings\ERIC\Recent\Crack.lnk
            C:\Documents and Settings\ERIC\Recent\Jerrycan_v6.31_Incl.Keygen_FRENCH-BS.lnk

            clique sur MoveIt! pour lancer la suppression.
            le résultat apparaitra dans le cadre "Results".
            clique sur Exit pour fermer.
            poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

            il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
            0
            1. bluesky67 Auteur
              C:\Documents and Settings\ERIC\Application Data\BitTorrent\incomplete\2627ade7-c786\Crack moved successfully.
              C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys moved successfully.
              C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\Read me- Cracking Instructions.txt moved successfully.
              File/Folder C:\Documents and Settings\ERIC\Mes documents\BitTorrent Downloads\Counter Strike Condition Zero\CS-CZ - Crack and Keys\czero.exe not found.
              C:\Documents and Settings\ERIC\Mes documents\logiciels\Alive iPod Video Converter 2.1.3.8 + CRACK (Convert MPEG, DivX, XviD, MPEG, WMV, AVI, VOB and many more to iPod MP4 Video).zip moved successfully.
              File/Folder C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.­v2.2.1.FR.Incl-Keygen.rar not found.
              File/Folder C:\Documents and Settings\ERIC\Mes documents\logiciels\WinAVI.3GP.MP4.PSP.Ipod.Video.Converter.­v3.1.FR.Incl-Keygen.rar not found.
              C:\Documents and Settings\ERIC\Mes documents\logiciels\NERO 7\Keygen moved successfully.
              C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK moved successfully.
              File/Folder C:\Documents and Settings\ERIC\Mes documents\logiciels\Norton Antivirus 2005 FR\CRACK\tmg-nav2k5.exe not found.
              C:\Documents and Settings\ERIC\Mes documents\logiciels\WinRar 3.71 final\keygen.exe moved successfully.
              C:\Documents and Settings\ERIC\Recent\(Logiciel PC + Crack) MaGic TranSlator (traducteur anglais, francais, italien, allemand).rar.lnk moved successfully.
              C:\Documents and Settings\ERIC\Recent\Crack.lnk moved successfully.
              File/Folder C:\Documents and Settings\ERIC\Recent\Jerrycan_v6.31_Incl.Keygen_FRENCH-BS.ln­k not found.
              File/Folder not found.

              OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09122008_202554
              0
              1. Utilisateur anonyme
                Télécharge HijackThis (outils de dignostic) ici :

                -> Fais un clic droit sur un des liens et choisi enregistrer la cible sous .... le bureau
                -> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
                -> ftp://ftp.commentcamarche.com/download/HJTInstall.exe

                -> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

                -> Clique sur Install ensuite sur I Accept

                -> Clique sur Do a scan system and save log file

                -> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse
                0
                1. bluesky67 Auteur
                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 20:38:22, on 12/09/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\ATKKBService.exe
                  C:\BHROOT\BIN\NT611SVC.EXE
                  C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
                  C:\Program Files\LEC\LogoMedia TranslateDotNet Server.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                  C:\BHROOT\BIN\PORTMAP.EXE
                  C:\WINDOWS\system32\rrwnw64o.exe
                  C:\Program Files\BHPS\Pmap1\bin\MapperMonService.exe
                  C:\Program Files\BHPS\JRE142\bin\javaw.exe
                  C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                  C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\BHROOT\BIN\DBMANG.EXE
                  C:\Program Files\BHPS\Gmg\bin\DBMonService.exe
                  C:\Program Files\BHPS\Gmg\bin\TomcatMonService.exe
                  C:\PROGRA~1\MI3AA1~1\rapimgr.exe
                  C:\Program Files\BHPS\JRE142\bin\java.exe
                  C:\Program Files\BHPS\Gmg\bin\tbmux32.exe
                  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                  C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                  C:\WINDOWS\system32\scntptdm.exe
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                  C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                  C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                  C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                  O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
                  O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
                  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                  O4 - HKLM\..\Run: [WatchDog] C:\Program Files\mobile PhoneTools\WatchDog.exe
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [{F5-51-10-02-DW}] C:\WINDOWS\system32\rrwnw64o.exe DWbrk01
                  O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\scntptdm.exe DWbrk01
                  O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
                  O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                  O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
                  O4 - HKCU\..\Run: [TransIt] C:\Program Files\Power Translator\Applications\TransIt.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\scntptdm.exe
                  O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rrwnw64o.exe
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                  O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
                  O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
                  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                  O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                  O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
                  O23 - Service: bh611 - Bell& Howell - C:\BHROOT\BIN\NT611SVC.EXE
                  O23 - Service: Bell & Howell Monitor Service (BHMonitorService) - Bell & Howell - C:\BHROOT\BIN\monitor.exe
                  O23 - Service: Bell & Howell Database Manager (dbmang) - Bell & Howell - C:\BHROOT\BIN\DBMANG.EXE
                  O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\LEC\LogoMedia TranslateDotNet Server.exe
                  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                  O23 - Service: ONC/RPC Portmapper (portmapper) - Bell & Howell - C:\BHROOT\BIN\PORTMAP.EXE
                  O23 - Service: pqeauto.database.dbmonitor.GMG - ProQuest Business Solutions - C:\Program Files\BHPS\Gmg\bin\DBMonService.exe
                  O23 - Service: pqeauto.energy.mappermonitor - ProQuest Business Solutions - C:\Program Files\BHPS\Pmap1\bin\MapperMonService.exe
                  O23 - Service: pqeauto.engine.tomcatmonitor.GMG - ProQuest Business Solutions - C:\Program Files\BHPS\Gmg\bin\TomcatMonService.exe
                  O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                  0
                  1. Utilisateur anonyme
                    désinstal liveupdate de symantec

                    Antivir est fonctionnel ? si oui -->ok si non, le désinstaller et le réinstaller

                    ensuite :

                    Telecharge malwarebytes

                    -> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

                    Tu l´instale; le programme va se mettre automatiquement a jour.

                    Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

                    Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

                    Puis click sur "rechercher".

                    Laisse le scanner le pc...

                    Si des elements on ete trouvés > click sur supprimer la selection.

                    si il t´es demandé de redemarrer > click sur "yes".

                    A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
                    Copie et colle le rapport stp.

                    PS : les rapport sont aussi rangé dans l onglet rapport/log

                    0
                    1. bluesky67 Auteur
                      Chiquitine29 est ce de sexe féminin?
                      0
                      1. bluesky67 Auteur
                        Malwarebytes' Anti-Malware 1.12
                        Version de la base de données: 791

                        Type de recherche: Examen complet (C:\|)
                        Eléments examinés: 130816
                        Temps écoulé: 28 minute(s), 31 second(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 0
                        Clé(s) du Registre infectée(s): 1
                        Valeur(s) du Registre infectée(s): 1
                        Elément(s) de données du Registre infecté(s): 0
                        Dossier(s) infecté(s): 0
                        Fichier(s) infecté(s): 5

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Clé(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> No action taken.

                        Valeur(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ExploreUpdSched (Trojan.Agent) -> No action taken.

                        Elément(s) de données du Registre infecté(s):
                        (Aucun élément nuisible détecté)

                        Dossier(s) infecté(s):
                        (Aucun élément nuisible détecté)

                        Fichier(s) infecté(s):
                        C:\Documents and Settings\ERIC\Mes documents\ opel tech2 com1-4 07-10-06\opeltech com1-4 07-10-06\ide21201.vxd (Adware.Winad) -> No action taken.
                        C:\WINDOWS\system32\winpfz33.sys (Malware.Trace) -> No action taken.
                        C:\WINDOWS\system32\scntptdm.exe (Trojan.Agent) -> No action taken.
                        C:\WINDOWS\system32\msnav32.ax (Malware.Trace) -> No action taken.
                        C:\WINDOWS\system32\zxdnt3d.cfg (Malware.Trace) -> No action taken.
                        0
                        1. bluesky67 Auteur
                          Malwarebytes' Anti-Malware 1.12
                          Version de la base de données: 791

                          Type de recherche: Examen complet (C:\|)
                          Eléments examinés: 130816
                          Temps écoulé: 28 minute(s), 31 second(s)

                          Processus mémoire infecté(s): 0
                          Module(s) mémoire infecté(s): 0
                          Clé(s) du Registre infectée(s): 1
                          Valeur(s) du Registre infectée(s): 1
                          Elément(s) de données du Registre infecté(s): 0
                          Dossier(s) infecté(s): 0
                          Fichier(s) infecté(s): 5

                          Processus mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Module(s) mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Clé(s) du Registre infectée(s):
                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> Quarantined and deleted successfully.

                          Valeur(s) du Registre infectée(s):
                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ExploreUpdSched (Trojan.Agent) -> Quarantined and deleted successfully.

                          Elément(s) de données du Registre infecté(s):
                          (Aucun élément nuisible détecté)

                          Dossier(s) infecté(s):
                          (Aucun élément nuisible détecté)

                          Fichier(s) infecté(s):
                          C:\Documents and Settings\ERIC\Mes documents\ opel tech2 com1-4 07-10-06\opeltech com1-4 07-10-06\ide21201.vxd (Adware.Winad) -> Quarantined and deleted successfully.
                          C:\WINDOWS\system32\winpfz33.sys (Malware.Trace) -> Quarantined and deleted successfully.
                          C:\WINDOWS\system32\scntptdm.exe (Trojan.Agent) -> Delete on reboot.
                          C:\WINDOWS\system32\msnav32.ax (Malware.Trace) -> Quarantined and deleted successfully.
                          C:\WINDOWS\system32\zxdnt3d.cfg (Malware.Trace) -> Quarantined and deleted successfully.
                          0
                          1. Utilisateur anonyme
                            réouvre malewarebyte
                            va sur quarantaine
                            supprime tout

                            comment va le pc ??

                            refais un scan hijackthis et post le rapport stp
                            0
                            1. bluesky67 Auteur
                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 09:54:17, on 13/09/2008
                              Platform: Windows XP SP2 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\ATKKBService.exe
                              C:\BHROOT\BIN\NT611SVC.EXE
                              C:\Program Files\LEC\LogoMedia TranslateDotNet Server.exe
                              C:\WINDOWS\system32\nvsvc32.exe
                              C:\BHROOT\BIN\PORTMAP.EXE
                              C:\Program Files\BHPS\Pmap1\bin\MapperMonService.exe
                              C:\Program Files\BHPS\JRE142\bin\javaw.exe
                              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\BHROOT\BIN\DBMANG.EXE
                              C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
                              C:\Program Files\BHPS\Gmg\bin\DBMonService.exe
                              C:\Program Files\BHPS\Gmg\bin\TomcatMonService.exe
                              C:\WINDOWS\SOUNDMAN.EXE
                              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                              C:\Program Files\BHPS\JRE142\bin\java.exe
                              C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
                              C:\Program Files\BHPS\Gmg\bin\tbmux32.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
                              C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
                              C:\PROGRA~1\MI3AA1~1\rapimgr.exe
                              c:\windows\system32\rwwnw64d.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                              C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                              C:\WINDOWS\system32\wuauclt.exe
                              C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                              C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                              C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                              C:\Program Files\BHPS\Gmg\bin\tbkern32.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                              O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                              O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
                              O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                              O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                              O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
                              O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                              O4 - HKLM\..\Run: [WatchDog] C:\Program Files\mobile PhoneTools\WatchDog.exe
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [{F5-51-10-02-DW}] c:\windows\system32\rwwnw64d.exe DWbrk01
                              O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                              O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
                              O4 - HKCU\..\Run: [TransIt] C:\Program Files\Power Translator\Applications\TransIt.exe
                              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                              O4 - Startup: Deewoo.lnk = C:\WINDOWS\system32\scntptdm.exe
                              O4 - Startup: DW_Start.lnk = C:\WINDOWS\system32\rwwnw64d.exe
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                              O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                              O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                              O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
                              O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
                              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                              O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
                              O23 - Service: bh611 - Bell& Howell - C:\BHROOT\BIN\NT611SVC.EXE
                              O23 - Service: Bell & Howell Monitor Service (BHMonitorService) - Bell & Howell - C:\BHROOT\BIN\monitor.exe
                              O23 - Service: Bell & Howell Database Manager (dbmang) - Bell & Howell - C:\BHROOT\BIN\DBMANG.EXE
                              O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\LEC\LogoMedia TranslateDotNet Server.exe
                              O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                              O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                              O23 - Service: ONC/RPC Portmapper (portmapper) - Bell & Howell - C:\BHROOT\BIN\PORTMAP.EXE
                              O23 - Service: pqeauto.database.dbmonitor.GMG - ProQuest Business Solutions - C:\Program Files\BHPS\Gmg\bin\DBMonService.exe
                              O23 - Service: pqeauto.energy.mappermonitor - ProQuest Business Solutions - C:\Program Files\BHPS\Pmap1\bin\MapperMonService.exe
                              O23 - Service: pqeauto.engine.tomcatmonitor.GMG - ProQuest Business Solutions - C:\Program Files\BHPS\Gmg\bin\TomcatMonService.exe
                              O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                              0
                              1. bluesky67 Auteur
                                bonjour,
                                il va mieux mais je n'ai toujours pas retrouvé l'icone de mon antivirus en bas à droite
                                0
                                1. Utilisateur anonyme
                                  je n'ai toujours pas retrouvé l'icone de mon antivirus en bas à droite

                                  --->je ne vois pas d antivirus d installé .... je te conseil Antivir

                                  Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                                  -> Double clique sur combofix.exe.
                                  -> Tape sur la touche 1 (Yes) pour démarrer le scan.
                                  -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

                                  NOTE : Le rapport se trouve également ici : C:\Combofix.txt

                                  Avant d'utiliser ComboFix :

                                  -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

                                  -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

                                  Une fois fait, sur ton bureau double-clic sur Combofix.exe.

                                  - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

                                  /!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

                                  - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

                                  - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

                                  -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

                                  -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
                                  0
                                  1. bluesky67 Auteur
                                    ComboFix 08-09-12.06 - ERIC 2008-09-13 10:57:19.4 - NTFSx86
                                    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.594 [GMT 2:00]
                                    Lancé depuis: C:\Documents and Settings\ERIC\Bureau\ComboFix.exe
                                    * Un nouveau point de restauration a été créé

                                    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                                    .

                                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                    .

                                    C:\Documents and Settings\ERIC\Cookies\eric@a.fish4.co[1].txt
                                    C:\Documents and Settings\ERIC\Cookies\eric@clicktorrent[2].txt
                                    C:\Documents and Settings\ERIC\Cookies\eric@paypal[2].txt
                                    C:\Documents and Settings\ERIC\Cookies\eric@trafiz[1].txt
                                    C:\Documents and Settings\ERIC\Cookies\eric@www.pixmania[3].txt
                                    C:\Documents and Settings\ERIC\Menu Démarrer\Programmes\Démarrage\Deewoo.lnk
                                    C:\Documents and Settings\ERIC\Menu Démarrer\Programmes\Démarrage\DW_Start.lnk
                                    C:\WINDOWS\BM9f5c6231.txt
                                    C:\WINDOWS\system32\_jqidjdabyrgf.dll
                                    C:\WINDOWS\system32\config\49374768.Evt
                                    C:\WINDOWS\system32\dao350.dll
                                    C:\WINDOWS\system32\drivers\downld
                                    C:\WINDOWS\system32\msnav32.ax
                                    C:\WINDOWS\system32\rrwnw64o.exe
                                    C:\WINDOWS\system32\rwwnw64d.exe
                                    C:\WINDOWS\system32\scntptdm.exe
                                    C:\WINDOWS\system32\winpfz33.sys
                                    C:\WINDOWS\system32\zxdnt3d.cfg

                                    .
                                    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                                    .

                                    -------\Service_asc3550p

                                    ((((((((((((((((((((((((((((( Fichiers cr‚‚s du 2008-08-13 au 2008-09-13 ))))))))))))))))))))))))))))))))))))
                                    .

                                    2008-09-13 10:01 . 2008-09-13 10:01 71,833 --a------ C:\WINDOWS\system32\muvxljmlhvhdjtr.exe
                                    2008-09-12 20:38 . 2008-09-12 20:38 <REP> d-------- C:\Program Files\Trend Micro
                                    2008-09-11 13:33 . 2008-09-11 13:33 167,936 --a------ C:\WINDOWS\system32\jqidjdabyrgf.dll
                                    2008-09-04 23:28 . 2008-09-04 23:33 <REP> d-------- C:\Program Files\RadarSyncBar
                                    2008-09-04 23:28 . 2008-09-04 23:33 <REP> d-------- C:\Program Files\Conduit
                                    2008-09-04 01:18 . 2008-09-04 01:18 <REP> d-------- C:\Program Files\OP-COM Demo
                                    2008-09-04 01:03 . 1998-10-09 18:56 327,168 --a------ C:\WINDOWS\IsUn0416.exe
                                    2008-08-24 21:42 . 2007-11-22 13:43 78,720 -----c--- C:\WINDOWS\system32\dllcache\sdbus.sys
                                    2008-08-24 21:42 . 2007-11-22 13:23 12,032 -----c--- C:\WINDOWS\system32\dllcache\sffdisk.sys
                                    2008-08-24 21:42 . 2007-11-22 13:23 11,008 -----c--- C:\WINDOWS\system32\dllcache\sffp_sd.sys
                                    2008-08-24 21:42 . 2007-11-22 13:23 10,240 --------- C:\WINDOWS\system32\drivers\sffp_mmc.sys
                                    2008-08-24 21:42 . 2007-11-22 13:23 10,240 -----c--- C:\WINDOWS\system32\dllcache\sffp_mmc.sys
                                    2008-08-22 16:33 . 2008-08-22 16:33 <REP> d-------- C:\Program Files\Fichiers communs\Borland Shared
                                    2008-08-22 16:33 . 2008-08-22 16:33 <REP> d-------- C:\Documents and Settings\ERIC\Application Data\Jerrycan
                                    2008-08-22 16:33 . 1999-01-20 05:01 210,032 --a------ C:\WINDOWS\system32\DBCLIENT.DLL
                                    2008-08-22 16:33 . 1999-11-12 05:11 183,808 --a------ C:\WINDOWS\system32\BDEADMIN.CPL
                                    2008-08-22 15:07 . 2008-08-22 15:07 <REP> d-------- C:\Program Files\Sudoku 9981
                                    2008-08-22 15:07 . 2008-08-22 15:07 <REP> d-------- C:\Documents and Settings\ERIC\Application Data\sudoku9981

                                    .
                                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                    .
                                    2008-09-12 18:58 --------- d-----w C:\Program Files\Symantec
                                    2008-09-12 16:36 --------- d-----w C:\Program Files\Norton AntiVirus
                                    2008-09-12 16:35 --------- d-----w C:\Program Files\LEC
                                    2008-09-12 16:21 --------- d-----w C:\Program Files\eMule
                                    2008-09-12 08:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
                                    2008-09-12 08:13 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
                                    2008-09-05 02:09 --------- d-----w C:\Documents and Settings\ERIC\Application Data\BitTorrent
                                    2008-08-31 20:36 --------- d-----w C:\Program Files\BHPS
                                    2008-08-24 21:19 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                                    2008-08-04 21:49 --------- d-----w C:\Program Files\Fichiers communs\BHPS
                                    2008-07-25 23:33 --------- d--h--w C:\Program Files\InstallShield Installation Information
                                    2008-07-25 21:24 --------- d-----w C:\Program Files\Xilisoft
                                    2008-07-22 07:46 --------- d-----w C:\Program Files\QuickTime
                                    2008-07-22 06:46 --------- d-----w C:\Program Files\Motorola Phone Tools
                                    2008-07-22 06:44 --------- d-----w C:\Program Files\Common Files
                                    2008-07-22 06:31 --------- d-----w C:\Program Files\Avanquest update
                                    2008-07-20 21:10 --------- d-----w C:\Documents and Settings\ERIC\Application Data\Planit International
                                    2008-07-20 21:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Planit Fusion Live Hygena
                                    2008-07-20 18:58 --------- d-----w C:\Program Files\INNOVA-engineering GmbH
                                    2008-07-13 07:59 --------- d-----w C:\Program Files\Java
                                    2008-06-15 09:38 92,064 ----a-w C:\Documents and Settings\ERIC\mqdmmdm.sys
                                    2008-06-15 09:38 9,232 ----a-w C:\Documents and Settings\ERIC\mqdmmdfl.sys
                                    2008-06-15 09:38 79,328 ----a-w C:\Documents and Settings\ERIC\mqdmserd.sys
                                    2008-06-15 09:38 66,656 ----a-w C:\Documents and Settings\ERIC\mqdmbus.sys
                                    2008-06-15 09:38 6,208 ----a-w C:\Documents and Settings\ERIC\mqdmcmnt.sys
                                    2008-06-15 09:38 5,936 ----a-w C:\Documents and Settings\ERIC\mqdmwhnt.sys
                                    2008-06-15 09:38 4,048 ----a-w C:\Documents and Settings\ERIC\mqdmcr.sys
                                    2008-06-15 09:38 25,600 ----a-w C:\Documents and Settings\ERIC\usbsermptxp.sys
                                    2008-06-15 09:38 22,768 ----a-w C:\Documents and Settings\ERIC\usbsermpt.sys
                                    2007-10-23 21:44 19,864 ----a-w C:\Documents and Settings\ERIC\Application Data\GDIPFONTCACHEV1.DAT
                                    .

                                    ((((((((((((((((((((((((((((( snapshot@2008-05-28_19.36.37.90 )))))))))))))))))))))))))))))))))))))))))
                                    .
                                    + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
                                    + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
                                    + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
                                    + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
                                    + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
                                    + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
                                    + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
                                    + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
                                    + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
                                    + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
                                    + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
                                    + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
                                    + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
                                    + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
                                    + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
                                    + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
                                    + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
                                    + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
                                    + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
                                    + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
                                    + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
                                    + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
                                    + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
                                    + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
                                    + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
                                    + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
                                    + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
                                    + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
                                    + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
                                    + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
                                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll
                                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe
                                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\spcustom.dll
                                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
                                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updspapi.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
                                    + 2008-05-08 12:14:51 203,008 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
                                    + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
                                    + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
                                    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
                                    + 2008-06-14 18:03:13 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
                                    + 2008-06-14 17:33:37 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
                                    + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
                                    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
                                    + 2008-04-14 16:17:04 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
                                    + 2008-04-14 15:59:30 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
                                    + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
                                    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
                                    + 2008-05-07 04:55:47 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
                                    + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
                                    + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
                                    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
                                    + 2006-08-16 12:13:24 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
                                    + 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
                                    + 2008-06-20 17:37:01 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
                                    + 2008-06-20 17:37:01 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
                                    + 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
                                    + 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
                                    + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
                                    + 2008-06-20 17:47:22 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
                                    + 2008-06-20 17:47:22 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
                                    + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
                                    + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
                                    + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
                                    + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
                                    + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
                                    + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
                                    + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
                                    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
                                    + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
                                    + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
                                    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
                                    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
                                    + 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys
                                    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe
                                    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950762$\spuninst\updspapi.dll
                                    + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys
                                    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
                                    + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
                                    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe
                                    + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376$\spuninst\updspapi.dll
                                    + 2007-10-29 22:43:32 1,293,824 -c----w C:\WINDOWS\$NtUninstallKB951698$\quartz.dll
                                    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe
                                    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951698$\spuninst\updspapi.dll
                                    + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtUninstallKB951748$\afd.sys
                                    + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtUninstallKB951748$\dnsapi.dll
                                    + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll
                                    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe
                                    + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB951748$\spuninst\updspapi.dll
                                    + 2007-10-30 17:20:55 360,064 -c----w C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
                                    + 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys
                                    - 2007-11-23 15:19:11 248,632 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
                                    + 2008-08-15 09:46:34 250,928 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
                                    - 2007-11-23 15:19:11 781,104 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
                                    + 2008-08-31 23:54:28 783,744 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
                                    - 2007-11-23 15:19:53 118,112 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
                                    + 2008-08-31 23:54:33 120,408 ----a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
                                    - 2007-11-23 15:19:52 609,104 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
                                    + 2008-08-31 23:54:33 611,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
                                    - 2006-06-15 17:33:54 1,132,192 ----a-w C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll
                                    + 2008-05-29 14:52:30 3,200,272 ----a-w C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll
                                    + 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
                                    + 2008-06-14 17:59:52 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
                                    + 2007-11-22 11:43:05 78,720 ------w C:\WINDOWS\Driver Cache\i386\sdbus.sys
                                    + 2007-11-22 11:23:48 12,032 ------w C:\WINDOWS\Driver Cache\i386\sffdisk.sys
                                    + 2007-11-22 11:23:48 11,008 ------w C:\WINDOWS\Driver Cache\i386\sffp_sd.sys
                                    + 2008-03-01 12:58:06 124,928 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
                                    + 2008-03-01 12:58:06 347,136 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
                                    + 2008-03-01 12:58:06 214,528 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
                                    + 2008-03-01 12:58:06 133,120 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
                                    + 2008-03-01 12:58:06 63,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
                                    + 2008-02-29 08:56:41 70,656 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
                                    + 2008-03-01 12:58:06 153,088 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
                                    + 2008-03-01 12:58:06 230,400 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
                                    + 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
                                    + 2008-03-01 12:58:07 383,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
                                    + 2008-03-01 12:58:07 384,512 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
                                    + 2008-03-01 12:58:08 6,066,176 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
                                    + 2008-03-01 12:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
                                    + 2008-03-01 12:58:08 267,776 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
                                    + 2008-02-22 10:00:51 13,824 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
                                    + 2008-02-29 08:57:05 625,664 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
                                    + 2008-03-01 12:58:08 27,648 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
                                    + 2008-03-01 12:58:08 459,264 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
                                    + 2008-03-01 12:58:08 52,224 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
                                    + 2008-03-01 16:28:10 3,591,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
                                    + 2008-03-01 12:58:09 478,208 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
                                    + 2008-03-01 12:58:10 193,024 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
                                    + 2008-03-01 12:58:10 671,232 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
                                    + 2008-03-01 12:58:10 102,912 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
                                    + 2008-03-01 12:58:10 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
                                    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
                                    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
                                    + 2008-03-01 12:58:10 105,984 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
                                    + 2008-03-01 12:58:10 1,159,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
                                    + 2008-03-01 12:58:11 233,472 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
                                    + 2008-03-01 12:58:11 826,368 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
                                    + 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll
                                    + 2008-04-23 04:16:39 347,136 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll
                                    + 2008-04-23 04:16:39 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll
                                    + 2008-04-23 04:16:39 133,120 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll
                                    + 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll
                                    + 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
                                    + 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll
                                    + 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll
                                    + 2008-04-20 05:07:51 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll
                                    + 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
                                    + 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
                                    + 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
                                    + 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
                                    + 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
                                    + 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
                                    + 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
                                    + 2008-04-23 04:16:40 27,648 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
                                    + 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
                                    + 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
                                    + 2008-04-23 20:16:42 3,591,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
                                    + 2008-04-23 04:16:40 478,208 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
                                    + 2008-04-23 04:16:40 193,024 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
                                    + 2008-04-23 04:16:40 671,232 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
                                    + 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
                                    + 2008-04-23 04:16:40 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
                                    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
                                    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
                                    + 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
                                    + 2008-04-23 04:16:40 1,159,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
                                    + 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
                                    + 2008-04-23 04:16:40 826,368 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll
                                    + 2006-10-26 18:49:48 1,011,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]00021090100C0400000000000F01FEC\12.0.4518\MSDAIPP.DLL
                                    + 2006-10-26 18:49:46 970,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]00021090100C0400000000000F01FEC\12.0.4518\MSONSEXT.DLL
                                    + 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACACEDAO.DLL
                                    + 2006-10-26 20:18:12 162,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACCWIZ.DLL
                                    + 2006-10-27 14:00:12 1,751,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACECORE.DLL
                                    + 2006-10-27 14:00:10 576,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEDAO.DLL
                                    + 2006-10-27 14:00:06 47,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEERR.DLL
                                    + 2006-10-27 14:00:08 191,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEES.DLL
                                    + 2006-10-26 19:13:34 338,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEEXCH.DLL
                                    + 2006-10-26 19:13:44 629,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEEXCL.DLL
                                    + 2006-10-26 19:13:28 207,736 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACELTS.DLL
                                    + 2006-10-26 19:13:32 279,352 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEODBC.DLL
                                    + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEODDBS.DLL
                                    + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEODEXL.DLL
                                    + 2006-10-26 19:13:08 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEODPDX.DLL
                                    + 2006-10-26 19:13:12 15,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEODTXT.DLL
                                    + 2006-10-27 14:00:06 387,960 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEOLEDB.DLL
                                    + 2006-10-26 19:13:38 392,048 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEPDE.DLL
                                    + 2006-10-26 19:13:30 260,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACER2X.DLL
                                    + 2006-10-26 19:13:32 289,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACER3X.DLL
                                    + 2006-10-26 19:13:20 56,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACERCLR.DLL
                                    + 2006-10-26 19:13:38 551,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEREP.DLL
                                    + 2006-10-26 19:13:30 224,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACETXT.DLL
                                    + 2006-10-27 14:40:34 208,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEWSS.DLL
                                    + 2006-10-26 19:13:34 371,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ACEXBE.DLL
                                    + 2006-10-27 14:41:04 399,640 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\CDLMSO.DLL
                                    + 2006-10-26 18:59:24 205,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\CLVIEW.EXE
                                    + 2006-10-26 20:30:42 65,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\COLLIMP.DLL
                                    + 2006-10-26 19:12:52 189,760 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\CONTACTPICKER.DLL
                                    + 2006-10-26 18:48:14 439,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\DWDCW20.DLL
                                    + 2006-10-26 13:10:08 1,190,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\FM20.DLL
                                    + 2006-10-26 18:21:24 1,682,232 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\FPSRVUTL.DLL
                                    + 2006-10-27 14:09:36 983,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\FPWEC.DLL
                                    + 2006-10-26 19:02:12 2,526,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\GRAPH.EXE
                                    + 2006-10-26 19:12:52 173,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IEAWSDC.DLL
                                    + 2006-10-26 19:55:38 138,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
                                    + 2006-10-27 14:10:08 1,439,032 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\INFOPATH.EXE
                                    + 2006-10-27 14:10:10 5,456,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IPDESIGN.DLL
                                    + 2006-10-27 14:10:10 5,281,592 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IPEDITOR.DLL
                                    + 2006-10-26 20:42:00 176,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IPOLK.DLL
                                    + 2007-11-23 15:19:52 609,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IPOMHOST.DLL
                                    + 2007-11-23 15:19:53 118,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\IPOMINT.DLL
                                    + 2006-10-26 18:55:10 828,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MEDCAT.DLL
                                    + 2006-10-27 14:01:34 10,371,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSACCESS.EXE
                                    + 2006-10-26 20:18:06 66,880 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSAEXP30.DLL
                                    + 2006-10-26 12:58:14 117,552 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSCONV97.DLL
                                    + 2006-10-27 13:59:06 161,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSOCF.DLL
                                    + 2006-10-26 18:48:12 14,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSOCFU.DLL
                                    + 2006-10-26 19:12:58 428,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSODCW.DLL
                                    + 2006-10-26 20:13:36 26,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSOEURO.DLL
                                    + 2006-10-26 19:00:08 6,635,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSORES.DLL
                                    + 2006-10-26 12:56:36 436,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSORUN.DLL
                                    + 2006-10-26 18:50:04 672,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSQRY32.EXE
                                    + 2006-10-26 12:56:40 505,136 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSSOAP30.DLL
                                    + 2006-10-26 18:55:12 832,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSTORDB.EXE
                                    + 2006-10-26 18:55:06 538,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\MSTORES.DLL
                                    + 2006-10-26 19:12:30 65,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\NAME.DLL
                                    + 2006-10-26 19:06:54 232,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\ODEPLOY.EXE
                                    + 2006-10-26 19:14:06 7,033,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OFFOWC.DLL
                                    + 2006-10-26 19:00:08 274,744 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OIS.EXE
                                    + 2006-10-26 19:00:12 998,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OISAPP.DLL
                                    + 2006-10-26 19:00:10 285,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OISGRAPH.DLL
                                    + 2006-10-26 19:07:04 6,536,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OSETUP.DLL
                                    + 2006-07-26 17:53:56 459,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OUTLFLTR.DLL
                                    + 2006-10-27 14:16:36 46,864 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
                                    + 2006-10-26 20:30:44 482,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\PORTCONN.DLL
                                    + 2006-10-27 14:04:06 465,200 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\POWERPNT.EXE
                                    + 2006-10-27 14:04:06 7,980,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\PPCORE.DLL
                                    + 2007-11-23 15:19:11 248,632 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\PPTPIA.DLL
                                    + 2006-10-26 20:13:38 38,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\REFEDIT.DLL
                                    + 2006-10-26 20:42:12 744,808 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\REGFORM.EXE
                                    + 2006-10-26 19:13:00 503,624 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\SELFCERT.EXE
                                    + 2006-10-26 19:06:58 439,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\SETUP.EXE
                                    + 2006-10-26 20:18:16 502,608 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\SOA.DLL
                                    + 2006-07-28 14:21:58 277,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\SSGEN.DLL
                                    + 2006-10-27 13:57:08 2,330,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\STSLIST.DLL
                                    + 2006-09-29 23:42:56 2,583,344 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\VBE6.DLL
                                    + 2006-10-26 21:58:38 3,732,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\VVIEWER.DLL
                                    + 2007-11-23 15:19:11 781,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.4518\WORDPIA.DLL
                                    + 2007-09-14 19:45:58 16,901,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.6215\MSO.DLL
                                    + 2007-10-05 18:44:24 14,168,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.6215\OART.DLL
                                    + 2007-10-02 17:51:22 8,436,776 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.6215\OARTCONV.DLL
                                    + 2007-08-28 22:19:24 1,654,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.6215\OGL.DLL
                                    + 2007-08-28 22:38:22 2,016,656 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109110000000000000000F01FEC\12.0.6215\PPTVIEW.EXE
                                    + 2006-10-27 13:14:34 14,151,456 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002159FA00C0400000000000F01FEC\12.0.4518\OART.DLL
                                    + 2006-10-27 13:18:36 1,658,152 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002159FA00C0400000000000F01FEC\12.0.4518\OGL.DLL
                                    - 2008-05-15 20:58:18 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
                                    + 2008-09-12 08:32:29 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
                                    - 2008-05-15 20:58:19 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
                                    + 2008-09-12 08:32:29 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
                                    - 2008-05-15 20:58:19 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
                                    + 2008-09-12 08:32:29 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
                                    - 2008-05-15 20:58:19 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
                                    + 2008-09-12 08:32:29 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
                                    - 2008-05-15 20:58:19 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
                                    + 2008-09-12 08:32:29 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
                                    - 2008-05-15 20:58:19 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
                                    + 2008-09-12 08:32:29 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
                                    - 2008-05-15 20:58:19 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
                                    + 2008-09-12 08:32:29 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
                                    - 2008-05-15 20:58:19 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
                                    + 2008-09-12 08:32:29 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
                                    - 2008-05-15 20:58:19 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
                                    + 2008-09-12 08:32:29 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
                                    - 2008-05-15 20:58:19 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
                                    + 2008-09-12 08:32:29 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
                                    - 2008-05-15 20:58:18 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
                                    + 2008-09-12 08:32:29 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
                                    - 2007-11-23 15:27:33 217,864 ----a-w C:\WINDOWS\Installer\{90120000-006E-040C-0000-0000000FF1CE}\misc.exe
                                    + 2008-08-31 23:56:45 217,864 ----a-r C:\WINDOWS\Installer\{90120000-006E-040C-0000-0000000FF1CE}\misc.exe
                                    - 2007-11-10 11:29:45 49,936 ----a-w C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
                                    + 2008-09-12 08:32:07 49,936 ----a-r C:\WINDOWS\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
                                    + 2008-06-01 17:00:18 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A81200000003}\SC_Reader.exe
                                    + 2008-07-23 08:13:01 22,486 ----a-r C:\WINDOWS\Installer\{D523D985-7E7D-4A06-BEB6-3F49131A118C}\_6FEFF9B68218417F98F549.exe
                                    + 2008-07-23 08:13:01 22,486 ----a-r C:\WINDOWS\Installer\{D523D985-7E7D-4A06-BEB6-3F49131A118C}\_D62BB5FAED29A039E47793.exe
                                    + 2008-07-23 08:13:01 22,486 ----a-r C:\WINDOWS\Installer\{D523D985-7E7D-4A06-BEB6-3F49131A118C}\_DEACB13143EAF6B2C3C9AE.exe
                                    - 2005-03-23 15:56:00 306,688 ----a-w C:\WINDOWS\IsUninst.exe
                                    + 1998-10-29 12:45:06 306,688 ----a-w C:\WINDOWS\IsUninst.exe
                                    - 2000-08-31 06:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
                                    + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe
                                    + 2008-06-17 14:23:02 202,168 ----a-w C:\WINDOWS\system32\Adobe\Director\SwDir.dll
                                    + 2008-06-17 14:13:22 487,424 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
                                    + 2008-06-17 13:36:00 1,798,144 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll
                                    + 2008-06-17 14:13:26 9,216 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
                                    + 2008-06-17 13:25:58 697,344 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll
                                    + 2008-06-17 13:26:00 1,145,896 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe
                                    + 2008-06-17 13:25:58 52,288 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll
                                    + 2008-06-17 13:32:18 892,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
                                    + 2008-06-17 14:11:56 253,952 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
                                    + 2008-06-17 14:15:00 446,464 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
                                    + 2008-06-17 14:22:46 439,736 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100458.exe
                                    + 2008-06-17 14:15:44 114,688 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
                                    + 2008-06-17 14:11:44 94,208 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
                                    + 2008-06-17 13:25:58 50,808 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
                                    + 1999-06-25 08:55:30 149,504 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
                                    - 2008-03-01 12:58:06 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
                                    + 2008-06-23 16:28:17 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
                                    + 2005-05-19 14:51:56 159,744 ----a-w C:\WINDOWS\system32\cNewMenu6.dll
                                    + 2002-08-22 22:12:14 26,624 ------w C:\WINDOWS\system32\CTL3D95.DLL
                                    - 2008-03-01 12:58:06 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
                                    + 2008-06-23 16:28:17 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
                                    - 2004-08-05 12:00:00 138,496 -c--a-w C:\WINDOWS\system32\dllcache\afd.sys
                                    + 2008-06-20 10:44:38 138,368 -c--a-w C:\WINDOWS\system32\dllcache\afd.sys
                                    + 2008-06-14 17:59:52 272,768 -c----w C:\WINDOWS\system32\dllcache\bthport.sys
                                    + 2004-08-05 12:00:00 18,688 -c--a-w C:\WINDOWS\system32\dllcache\cdaudio.sys
                                    - 2008-02-20 05:35:05 148,992 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
                                    + 2008-06-20 17:41:06 148,992 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
                                    - 2008-03-01 12:58:06 347,136 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
                                    + 2008-06-23 16:28:17 347,136 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
                                    - 2008-03-01 12:58:06 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll
                                    + 2008-06-23 16:28:17 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll
                                    - 2005-07-26 04:39:57 243,200 -c--a-w C:\WINDOWS\system32\dllcache\es.dll
                                    + 2008-07-07 20:31:48 253,952 -c--a-w C:\WINDOWS\system32\dllcache\es.dll
                                    - 2008-03-01 12:58:06 133,120 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll
                                    + 2008-06-23 16:28:17 133,120 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll
                                    - 2008-03-01 12:58:06 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
                                    + 2008-06-23 16:28:17 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
                                    - 2008-02-29 08:56:41 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
                                    + 2008-06-23 09:21:30 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
                                    - 2008-03-01 12:58:06 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
                                    + 2008-06-23 16:28:18 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
                                    - 2008-03-01 12:58:06 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
                                    + 2008-06-23 16:28:18 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
                                    - 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll
                                    + 2008-06-21 05:23:54 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll
                                    - 2008-03-01 12:58:07 383,488 -c--a-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
                                    + 2008-06-23 16:28:18 383,488 -c--a-w C:\WINDOWS\system32\dllcache\ieapfltr.dll
                                    - 2008-03-01 12:58:07 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
                                    + 2008-06-23 16:28:18 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
                                    - 2008-03-01 12:58:08 6,066,176 -c--a-w C:\WINDOWS\system32\dllcache\ieframe.dll
                                    + 2008-06-23 16:28:19 6,066,176 -c--a-w C:\WINDOWS\system32\dllcache\ieframe.dll
                                    - 2008-03-01 12:58:08 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
                                    + 2008-06-23 16:28:19 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
                                    - 2008-03-01 12:58:08 267,776 -c--a-w C:\WINDOWS\system32\dllcache\iertutil.dll
                                    + 2008-06-23 16:28:20 267,776 -c--a-w C:\WINDOWS\system32\dllcache\iertutil.dll
                                    - 2008-02-22 10:00:51 13,824 -c--a-w C:\WINDOWS\system32\dllcache\ieudinit.exe
                                    + 2008-06-23 09:20:26 13,824 -c--a-w C:\WINDOWS\system32\dllcache\ieudinit.exe
                                    - 2008-02-29 08:57:05 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
                                    + 2008-06-23 09:21:49 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
                                    - 2007-08-21 06:17:23 683,520 -c--a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
                                    + 2008-04-11 18:51:06 683,520 -c--a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
                                    - 2008-03-01 12:58:08 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll
                                    + 2008-06-23 16:28:20 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll
                                    - 2004-08-05 12:00:00 331,776 -c--a-w C:\WINDOWS\system32\dllcache\msadce.dll
                                    + 2008-05-01 14:31:48 331,776 -c--a-w C:\WINDOWS\system32\dllcache\msadce.dll
                                    - 2005-06-29 01:49:41 74,240 -c--a-w C:\WINDOWS\system32\dllcache\mscms.dll
                                    + 2008-06-24 16:23:56 74,240 -c--a-w C:\WINDOWS\system32\dllcache\mscms.dll
                                    - 2008-03-01 12:58:08 459,264 -c--a-w C:\WINDOWS\system32\dllcache\msfeeds.dll
                                    + 2008-06-23 16:28:20 459,264 -c--a-w C:\WINDOWS\system32\dllcache\msfeeds.dll
                                    - 2008-03-01 12:58:08 52,224 -c--a-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
                                    + 2008-06-23 16:28:20 52,224 -c--a-w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
                                    - 2008-03-01 16:28:10 3,591,680 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll
                                    + 2008-06-24 08:28:24 3,592,192 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll
                                    - 2008-03-01 12:58:09 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll
                                    + 2008-06-23 16:28:22 477,696 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll
                                    - 2008-03-01 12:58:10 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll
                                    + 2008-06-23 16:28:22 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll
                                    - 2008-03-01 12:58:10 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll
                                    + 2008-06-23 16:28:22 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll
                                    - 2004-08-05 12:00:00 247,808 -c--a-w C:\WINDOWS\system32\dllcache\mswsock.dll
                                    + 2008-06-20 17:41:06 247,808 -c--a-w C:\WINDOWS\system32\dllcache\mswsock.dll
                                    - 2008-03-01 12:58:10 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll
                                    + 2008-06-23 16:28:22 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll
                                    - 2008-03-01 12:58:10 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
                                    + 2008-06-23 16:28:22 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
                                    - 2007-10-29 22:43:32 1,293,824 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
                                    + 2008-05-07 05:15:36 1,293,824 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
                                    - 2006-07-13 08:48:58 202,240 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
                                    + 2008-05-08 12:28:49 202,752 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
                                    - 2007-10-30 17:20:55 360,064 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
                                    + 2008-06-20 10:45:13 360,320 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
                                    - 2006-08-16 09:37:30 225,664 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
                                    + 2008-06-20 09:52:06 225,920 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
                                    - 2008-03-01 12:58:10 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
                                    + 2008-06-23 16:28:22 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
                                    - 2008-03-01 12:58:10 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll
                                    + 2008-06-23 16:28:23 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll
                                    - 2008-03-01 12:58:11 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
                                    + 2008-06-23 16:28:23 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
                                    - 2008-03-01 12:58:11 826,368 -c----w C:\WINDOWS\system32\dllcache\wininet.dll
                                    + 2008-06-23 16:28:23 826,368 -c----w C:\WINDOWS\system32\dllcache\wininet.dll
                                    - 2008-02-20 05:35:05 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
                                    + 2008-06-20 17:41:06 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
                                    - 2004-08-05 12:00:00 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
                                    + 2008-06-20 10:44:38 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
                                    + 2008-06-14 17:59:52 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
                                    + 2002-08-22 22:12:16 6,848 ------w C:\WINDOWS\system32\drivers\DS1410D.SYS
                                    - 2007-05-07 13:11:22 42,112 ----a-w C:\WINDOWS\system32\drivers\motodrv.sys
                                    + 2007-10-10 15:41:50 42,112 ----a-w C:\WINDOWS\system32\drivers\motodrv.sys
                                    - 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
                                    + 2008-05-08 12:28:49 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
                                    - 2004-08-05 12:00:00 67,584 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys
                                    + 2007-11-22 11:43:05 78,720 ----a-w C:\WINDOWS\system32\drivers\sdbus.sys
                                    - 2004-08-05 12:00:00 11,136 ----a-w C:\WINDOWS\system32\drivers\sffdisk.sys
                                    + 2007-11-22 11:23:48 12,032 ----a-w C:\WINDOWS\system32\drivers\sffdisk.sys
                                    - 2004-08-05 12:00:00 10,240 ----a-w C:\WINDOWS\system32\drivers\sffp_sd.sys
                                    + 2007-11-22 11:23:48 11,008 ----a-w C:\WINDOWS\system32\drivers\sffp_sd.sys
                                    - 2007-10-30 17:20:55 360,064 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
                                    + 2008-06-20 10:45:13 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
                                    - 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
                                    + 2008-06-20 09:52:06 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
                                    + 2008-06-15 09:38:11 25,600 ----a-w C:\WINDOWS\system32\drivers\usbsermptxp.sys
                                    + 2007-11-02 13:36:10 18,176 -c--a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motccgp.sys
                                    + 2007-01-23 18:03:44 7,680 -c--a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motccgpfl.sys
                                    + 2007-11-02 13:51:28 6,400 -c--a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motswch.sys
                                    + 2006-11-13 13:36:28 1,419,232 -c--a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\wdfcoinstaller01005.dll
                                    + 2007-06-20 12:57:46 23,680 -c--a-w C:\WINDOWS\system32\DRVSTORE\motmodem_1773A9D77CA457C58EA444F15EB0DD1D3A4BD531\motmodem.sys
                                    + 2006-11-13 13:36:28 1,419,232 -c--a-w C:\WINDOWS\system32\DRVSTORE\motmodem_1773A9D77CA457C58EA444F15EB0DD1D3A4BD531\wdfcoinstaller01005.dll
                                    + 2006-07-28 06:10:08 6,144 -c--a-w C:\WINDOWS\system32\DRVSTORE\motodrv_00BA6D2CC9FA3D92B1F7A501D8C2342DBC5171A4\mot_ci.dll
                                    + 2007-10-10 15:41:50 42,112 -c--a-w C:\WINDOWS\system32\DRVSTORE\motodrv_00BA6D2CC9FA3D92B1F7A501D8C2342DBC5171A4\motodrv.sys
                                    + 2007-01-23 20:36:20 6,016 -c--a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\motfilt.sys
                                    + 2008-03-03 14:03:10 23,296 -c--a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\Motousbnet.sys
                                    + 2007-11-02 13:51:28 6,400 -c--a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\motswch.sys
                                    + 2006-11-13 13:36:28 1,419,232 -c--a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\wdfcoinstaller01005.dll
                                    + 2007-06-20 12:57:50 23,680 -c--a-w C:\WINDOWS\system32\DRVSTORE\motport_48526F1C0031F7FEF3D21901B32B4ECC2BB837F6\motport.sys
                                    + 2006-11-13 13:36:28 1,419,232 -c--a-w C:\WINDOWS\system32\DRVSTORE\motport_48526F1C0031F7FEF3D21901B32B4ECC2BB837F6\wdfcoinstaller01005.dll
                                    + 2002-08-22 22:12:16 6,848 ------w C:\WINDOWS\system32\DS1410D.SYS
                                    - 2008-03-01 12:58:06 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
                                    + 2008-06-23 16:28:17 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
                                    - 2008-03-01 12:58:06 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
                                    + 2008-06-23 16:28:17 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
                                    - 2005-07-26 04:39:57 243,200 ----a-w C:\WINDOWS\system32\es.dll
                                    + 2008-07-07 20:31:48 253,952 ----a-w C:\WINDOWS\system32\es.dll
                                    - 2008-03-01 12:58:06 133,120 ------w C:\WINDOWS\system32\extmgr.dll
                                    + 2008-06-23 16:28:17 133,120 ------w C:\WINDOWS\system32\extmgr.dll
                                    - 2006-10-26 13:10:08 1,190,688 ----a-w C:\WINDOWS\system32\FM20.DLL
                                    + 2007-08-22 23:03:38 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL
                                    + 2008-07-12 20:07:58 152,191 ----a-w C:\WINDOWS\system32\g42.exe
                                    + 2008-07-13 08:29:25 1,127,424 ----a-w C:\WINDOWS\system32\GEAR32PD.DLL
                                    - 2008-03-01 12:58:06 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
                                    + 2008-06-23 16:28:17 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
                                    - 2008-02-29 08:56:41 70,656 ------w C:\WINDOWS\system32\ie4uinit.exe
                                    + 2008-06-23 09:21:30 70,656 ------w C:\WINDOWS\system32\ie4uinit.exe
                                    - 2008-03-01 12:58:06 153,088 ------w C:\WINDOWS\system32\ieakeng.dll
                                    + 2008-06-23 16:28:18 153,088 ------w C:\WINDOWS\system32\ieakeng.dll
                                    - 2008-03-01 12:58:06 230,400 ------w C:\WINDOWS\system32\ieaksie.dll
                                    + 2008-06-23 16:28:18 230,400 ------w C:\WINDOWS\system32\ieaksie.dll
                                    - 2008-02-15 05:44:25 161,792 ------w C:\WINDOWS\system32\ieakui.dll
                                    + 2008-06-21 05:23:54 161,792 ------w C:\WINDOWS\system32\ieakui.dll
                                    - 2008-03-01 12:58:07 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
                                    + 2008-06-23 16:28:18 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
                                    - 2008-03-01 12:58:07 384,512 ------w C:\WINDOWS\system32\iedkcs32.dll
                                    + 2008-06-23 16:28:18 384,512 ------w C:\WINDOWS\system32\iedkcs32.dll
                                    - 2008-03-01 12:58:08 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
                                    + 2008-06-23 16:28:19 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
                                    - 2008-03-01 12:58:08 44,544 ------w C:\WINDOWS\system32\iernonce.dll
                                    + 2008-06-23 16:28:19 44,544 ------w C:\WINDOWS\system32\iernonce.dll
                                    - 2008-03-01 12:58:08 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
                                    + 2008-06-23 16:28:20 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
                                    - 2008-02-22 10:00:51 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
                                    + 2008-06-23 09:20:26 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
                                    - 2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
                                    + 2008-04-11 18:51:06 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
                                    - 2008-02-22 00:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
                                    + 2008-06-09 23:21:01 135,168 ----a-w C:\WINDOWS\system32\java.exe
                                    - 2008-02-22 00:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
                                    + 2008-06-09 23:21:04 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
                                    - 2008-02-22 01:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
                                    + 2008-06-10 00:32:34 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
                                    - 2008-03-01 12:58:08 27,648 ------w C:\WINDOWS\system32\jsproxy.dll
                                    + 2008-06-23 16:28:20 27,648 ------w C:\WINDOWS\system32\jsproxy.dll
                                    - 2008-03-30 13:05:44 1,488,688 ----a-w C:\WINDOWS\system32\LegitCheckControl.dll
                                    + 2008-03-20 16:06:36 1,480,232 ----a-w C:\WINDOWS\system32\LegitCheckControl.DLL
                                    + 2008-03-25 02:32:44 218,496 ----a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
                                    + 2008-08-24 20:49:05 74,649 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                                    + 2002-08-22 22:12:34 356,352 ------w C:\WINDOWS\system32\MFC30.DLL
                                    - 2008-05-09 21:35:04 16,863,864 ----a-w C:\WINDOWS\system32\MRT.exe
                                    + 2008-08-26 20:28:12 16,208,504 ----a-w C:\WINDOWS\system32\MRT.exe
                                    - 2005-06-29 01:49:41 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
                                    + 2008-06-24 16:23:56 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
                                    - 2008-03-01 12:58:08 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
                                    + 2008-06-23 16:28:20 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
                                    - 2008-03-01 12:58:08 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
                                    + 2008-06-23 16:28:20 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
                                    - 2008-03-01 16:28:10 3,591,680 ----a-w C:\WINDOWS\system32\mshtml.dll
                                    + 2008-06-24 08:28:24 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll
                                    - 2008-03-01 12:58:09 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll
                                    + 2008-06-23 16:28:22 477,696 ----a-w C:\WINDOWS\system32\mshtmled.dll
                                    - 2008-03-01 12:58:10 193,024 ------w C:\WINDOWS\system32\msrating.dll
                                    + 2008-06-23 16:28:22 193,024 ------w C:\WINDOWS\system32\msrating.dll
                                    - 2008-03-01 12:58:10 671,232 ------w C:\WINDOWS\system32\mstime.dll
                                    + 2008-06-23 16:28:22 671,232 ------w C:\WINDOWS\system32\mstime.dll
                                    - 2004-08-05 12:00:00 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
                                    + 2008-06-20 17:41:06 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
                                    - 2008-03-01 12:58:10 102,912 ------w C:\WINDOWS\system32\occache.dll
                                    + 2008-06-23 16:28:22 102,912 ------w C:\WINDOWS\system32\occache.dll
                                    - 2008-03-01 12:58:10 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
                                    + 2008-06-23 16:28:22 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
                                    - 2007-10-29 22:43:32 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
                                    + 2008-05-07 05:15:36 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
                                    - 2008-05-26 19:57:32 2,049,428 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
                                    + 2008-09-12 16:43:57 15,392 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
                                    - 2006-10-08 19:51:14 14,640 ------w C:\WINDOWS\system32\spmsg.dll
                                    + 2007-11-30 12:39:29 18,296 ------w C:\WINDOWS\system32\spmsg.dll
                                    - 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe
                                    + 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe
                                    + 2005-05-19 14:52:38 131,072 ----a-w C:\WINDOWS\system32\uCyberActiveX.dll
                                    - 2008-03-01 12:58:10 105,984 ----a-w C:\WINDOWS\system32\url.dll
                                    + 2008-06-23 16:28:22 105,984 ----a-w C:\WINDOWS\system32\url.dll
                                    - 2008-03-01 12:58:10 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
                                    + 2008-06-23 16:28:23 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
                                    - 2008-03-01 12:58:11 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
                                    + 2008-06-23 16:28:23 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
                                    - 2008-03-01 12:58:11 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                                    + 2008-06-23 16:28:23 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                                    - 2006-10-18 19:47:20 295,936 ------w C:\WINDOWS\system32\wmpeffects.dll
                                    + 2008-06-24 16:12:58 295,936 ------w C:\WINDOWS\system32\wmpeffects.dll
                                    + 2002-08-22 22:13:56 303,616 ------w C:\WINDOWS\system32\XNMBA425.DLL
                                    + 2002-08-22 22:12:57 360,448 ------w C:\WINDOWS\system32\XNMBA458.DLL
                                    + 2002-08-22 22:13:56 143,360 ------w C:\WINDOWS\system32\XNMHB425.DLL
                                    + 2002-08-22 22:12:57 92,672 ------w C:\WINDOWS\system32\XNMHB458.DLL
                                    + 2002-08-22 22:13:56 66,560 ------w C:\WINDOWS\system32\XNMHN425.DLL
                                    + 2002-08-22 22:12:57 25,600 ------w C:\WINDOWS\system32\XNMHN458.DLL
                                    + 2002-08-22 22:13:57 56,320 ------w C:\WINDOWS\system32\XNMTE425.DLL
                                    + 2002-08-22 22:12:57 64,512 ------w C:\WINDOWS\system32\XNMTE458.DLL
                                    - 2008-03-31 13:15:01 1,230,336 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
                                    + 2008-07-23 08:12:55 1,230,336 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
                                    + 2007-08-22 22:18:08 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
                                    + 2006-12-01 20:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
                                    + 2006-12-01 20:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
                                    + 2006-12-01 20:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
                                    + 2006-12-01 22:25:52 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
                                    + 2006-12-01 22:25:56 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
                                    + 2006-12-01 22:25:58 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
                                    + 2006-12-01 22:26:00 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
                                    + 2006-12-01 22:08:00 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
                                    + 2006-12-01 22:08:00 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
                                    + 2006-12-01 22:08:00 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
                                    + 2006-12-01 22:08:00 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
                                    + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
                                    + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
                                    + 2006-12-01 22:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
                                    + 2006-12-01 22:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727
                                    0
                                    1. bluesky67 Auteur
                                      je vais installé antivir ,peus tu m'aider à le configurer ?
                                      0
                                      1. Utilisateur anonyme
                                        télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau.
                                        double-clique sur OTMoveIt.exe pour le lancer.
                                        Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
                                        copie la liste qui se trouve en gras ci-dessous,
                                        et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

                                        C:\WINDOWS\system32\muvxljmlhvhdjtr.e­xe
                                        C:\WINDOWS\system32\jqidjdabyrgf.dll
                                        C:\Program Files\Conduit

                                        clique sur MoveIt! pour lancer la suppression.
                                        le résultat apparaitra dans le cadre "Results".
                                        clique sur Exit pour fermer.
                                        poste le rapport situé dans C:\_OTMoveIt\MovedFiles + un nouveau rapport hijackthis

                                        pour antivir :

                                        tuto : https://www.malekal.com/avira-free-security-antivirus-gratuit/
                                        tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

                                        0
                                        1. bluesky67 Auteur
                                          File/Folder C:\WINDOWS\system32\muvxljmlhvhdjtr.e­xe not found.
                                          C:\WINDOWS\system32\jqidjdabyrgf.dll unregistered successfully.
                                          C:\WINDOWS\system32\jqidjdabyrgf.dll moved successfully.
                                          C:\Program Files\Conduit moved successfully.
                                          File/Folder not found.

                                          OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09132008_112852
                                          0
                                          • 1
                                          • 2

                                          Discussions similaires

                                          Supprime sur snap mais comment être re ajouté
                                          Nini

                                          10 réponses
                                          Que se passe-t-il quand on supprime un ami sur snapchat
                                          Lilob7

                                          1 réponse