virus TROJAN qq1 peut vérifier mn hijackthis? Résolu/Fermé

Question

Bonjour,

j'ai le virus TROJAN et je n'arrive pas à l'enlever, j'ai fais tous les scans mais il revient tout le tps, est ce que quelqu'un peut verifier mon fichier log hijackthis ??? SVP merci d'avance

BlackLexa · Answer

=> poste ton rapport HiJack  içi

BlackLexa · Answer

je suis pas trop specialiste des infections mais est ce que t'a essayé Spyboat Search and Destroy ?

Sinon envoi un mp à jlpjlp , ce membre a l'air de bien s' y conaitre en infection

BlackLexa · Answer

J'ai trouvé un site pour analyser ton rapport => http://www.hijackthis.de/fr 
:)

BlackLexa · Answer

et quelques conseils pour que tu sois plus embeté par des virus : 

- faire attention lord de l'installation de certains programmes , penser décocher installer la toolbar x.......c'est toujours source de problèmes ces trucs là 

- utiliser un bon antivirus , + parefeu (look n stop est parfait) + UnHackme + windows worms door cleaner ou Zebprotect + sophos anti rootkit

BlackLexa · Answer

Le problème c''est de savoir par quoi tu es infecté et comment desinfecter ton pc , hors je suis pas spécialiste des logs hijack et l'analyse automatique n'a rien donné , donc ce que je ferai ca serait formater et reinstaller , je sais c'est un peu  la solution baclée mais j'en vois pas d'autres.
Si tu es bien protégé , si tu fais attention à ce que tu telecharges tu ne devrais plus avoir de problèmes , moi même j'ai jamais de virus , et pourtant je download pas mal . 

Dernière chose : oubli bitdefender c'est  de la m--rde , ca vaut rien . Prend Avast  ou Kapersky ou Nod 32

E..T · Answer

Salut,
Déjà il y a deux antivirus ce n'est pas bon du tout car dans ce cas ils sont inefficaces et rentrent en conflits. 
>> C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe 
>> C:\Program Files\Softwin\BitDefender9\vsserv.exe 
Il va falloir faire un choix.
Bit defender c'est une version d'essai ou tu l'as payé ?

Très important
Met à jour internet explorer
>> https://support.microsoft.com/fr-fr/allproducts
Pourquoi le laisser à jour >> https://forum.malekal.com/viewtopic.php?f=45&t=12405&p=95936#p95936

Vérifie JAVA >> ICI c'est une chose importante aussi.
Une foi les nouvelles versions installées virent les anciennes.
++

E..T · Answer

Connais tu la version ou référence de bit defender ??
Car je pense que sur ces licences il n'y a pas de pare feu!

E..T · Answer

Ouep ,
Ecrit tes mots en entier s'il te plait!
Tu as un icône bit defender en bas à droite double clique dessus et regarde si il y a un pare feu.

Pour les anciennes versions tu les virent par ajouts suppressions de programmes.

++

E..T · Answer

Ouep,
Pour le pare feu vas dans démarrer puis panneau de configuration puis centre de sécurité et regarde si tu as pare feu actif.
Tu as une page d'accueil quand même de bitdefender?  Lorsque tu rentres dans ton logiciel?

Pour IE lis ceci si tu ne l'as pas lu >> https://forum.malekal.com/viewtopic.php?f=45&t=12405&p=95936#p95936
Je te l'avais mis dans un message au dessus.

++

E..T · Answer

Salut,
Met à jour firefox
>> http://www.mozilla-europe.org/fr/firefox/

Et poste un rapport hijackthis.
++

puccaro · Answer

ca y'est je l'avais déjà fait après internet explorer... et maintenant ?

E..T · Answer

Met à jour firefox
>> http://www.mozilla-europe.org/fr/firefox/

pour voir si tu as encore des erreurs dis moi quoi.
++

E..T · Answer

Bon on va voir,

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe




-> Double clique sur combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message 

Et dis moi si il y a toujours le message.

++

puccaro · Answer

j'ai encore un autre souci la !!! y'a eu la mise à jour automatique de windows donc après ca mon ordi m'a demandé de redémarrer, ce que j'ai fait.... ensuite lorsque ca a démarré tout a changé mes fenetres sont devenues comme si j'avais windows 98 ..... comment ca se fait ?? je suis dégoutée la, j'en ai trop marre, j'ai peur que mon pc soit foutu.... en plus j'ai meme pas eu le temps de faire ce que tu m'as dit avec combofix....

E..T · Answer

Ouep,
Ne fait plus rien!
Attends les conseils.
A toute.
++

puccaro · Answer

en plus j'ai toujours l'icone qui me dit des mises à jour sont pretes pour votre ordinateur.... alors que je viens de les faire !!! comment ca se fait ???

E..T · Answer

Essaye Démarrer >> Panneau de configuration >> Affichage >> Thèmes >> Passe le en thème XP.
Dis moi quoi.
++

puccaro · Answer

qu'est ce que je fais maintenant ?? est ce que j'ai un virus qui est en train de contaminer tout mon pc ? help me stp

E..T · Answer

Bon la je vais aller bosser!
Quels sont tes soucis ?
Car ton rapport hijackthis est clean!


Fais un scan avec internet explorer
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

Et poste le rapport.

@++

E..T · Answer

Non on verra ce soir quand tu auras mis le rapport de kaspersky.
A ce soir.
Byye

E..T · Answer

Ouep, 
Sur conseil de Chiquitine passe un coup de combofix ;) comme indiqué message 28.
Je lui ai demandé de l'aide.
Le reste ce soir ;)
@++

E..T · Answer

Bonsoir puccaro,
Envoi le rapport s'il te plait ;)
++

puccaro · Answer

c'est bizarre je n'arrive pas à poster le rapport combofix.... peut-etre qu'il est trop long nan ???

puccaro · Answer

il n'y a pas un autre moyen de te donner le rapport car je pense que c'est parce qu'il est trop long que je n'arrive pas à le poster sur le forum.... je ne sais pas comment je pourrais faire meme si je le poste en plusieurs fois c'est trop long....

merci d'avance!

puccaro · Answer

ComboFix 08-10-11.04 - Caroline 2008-10-14 16:36:39.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.451 [GMT 2:00] Lancé depuis: C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] . ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-14 au 2008-10-14 )))))))))))))))))))))))))))))))))))) . 2008-10-14 12:50 . 2008-10-14 12:50 d-------- C:\WINDOWS\system32\Kaspersky Lab 2008-10-14 12:50 . 2008-10-14 12:50 d-------- C:\WINDOWS\LastGood 2008-10-09 19:45 . 2008-10-09 19:45 d-------- C:\Program Files\Avira 2008-10-09 19:45 . 2008-10-09 19:45 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-10-09 12:49 . 2008-10-09 12:55 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-10-08 16:35 . 2008-10-14 11:10 d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-08 16:35 . 2008-10-14 11:10 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-08 16:06 . 2008-10-08 16:06 d-------- C:\Program Files\Trend Micro 2008-10-08 12:38 . 2008-10-08 12:38 d-------- C:\Documents and Settings\Caroline\Application Data\Malwarebytes 2008-10-08 12:38 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-08 12:38 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-08 12:37 . 2008-10-08 12:38 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-08 12:37 . 2008-10-08 12:37 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-14 14:41 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-10-13 16:25 --------- d-----w C:\Documents and Settings\Caroline\Application Data\Skype 2008-10-13 16:19 --------- d-----w C:\Documents and Settings\Caroline\Application Data\skypePM 2008-10-13 14:06 --------- d-----w C:\Program Files\Java 2008-10-08 13:47 612 ----a-w C:\Program Files\Iifkb.txt 2008-08-24 21:33 --------- d-----w C:\Documents and Settings\Caroline\Application Data\Azureus 2008-08-23 21:19 --------- d-----w C:\Program Files\Google 2008-08-23 16:05 --------- d-----w C:\Program Files\Skype 2008-08-23 16:05 --------- d-----w C:\Program Files\Fichiers communs\Skype 2008-08-23 16:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2008-08-22 22:30 6,120 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd 2008-08-22 22:30 54,862 ----a-w C:\WINDOWS\BricoPackUninst.cmd 2008-08-22 21:34 --------- d-----w C:\Program Files\Azureus 2008-08-19 12:02 --------- d-----w C:\Documents and Settings\Caroline\Application Data\U3 2008-08-18 18:50 --------- d-----w C:\Program Files\ABBYY FineReader 6.0 Sprint 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 68,808 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 68,808 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll 2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2007-07-19 21:47 156 ----a-w C:\Documents and Settings\Caroline\Application Data\wklnhst.dat . ------- Sigcheck ------- 2008-04-14 04:34 112640 7e3defe771cb451b0ff630bfa435417e C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe 2008-04-14 04:34 112640 7e3defe771cb451b0ff630bfa435417e C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\wuauclt.exe 2008-07-18 22:10 68808 136896c2cdc3f689876e0d44485153ea C:\WINDOWS\system32\wuauclt.exe 2008-07-18 22:10 68808 136896c2cdc3f689876e0d44485153ea C:\WINDOWS\system32\dllcache\wuauclt.exe . ((((((((((((((((((((((((((((( snapshot@2008-10-13_ 7.38.47.64 ))))))))))))))))))))))))))))))))))))))))) . + 2004-08-05 21:00:00 53,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\1394bus.sys + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\acadproc.dll + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\acadproc.dll.000 + 2004-08-05 21:00:00 189,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe + 2004-08-05 21:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll + 2004-08-05 21:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll.000 + 2004-08-05 21:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll + 2004-08-05 21:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll.000 + 2004-08-05 21:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll + 2004-08-05 21:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclua.dll.000 + 2004-08-05 21:00:00 119,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\aclui.dll + 2004-08-05 21:00:00 188,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\acpi.sys + 2004-08-05 21:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll + 2004-08-05 21:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll.000 + 2004-08-05 21:00:00 194,048 -c----w C:\WINDOWS\$NtServicePackUninstall$\activeds.dll + 2004-08-05 21:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe + 2004-08-05 21:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll + 2004-08-05 21:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll + 2004-08-05 21:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll.000 + 2004-08-05 21:00:00 175,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll + 2004-08-05 21:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll + 2004-08-05 21:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll + 2004-08-05 21:00:00 263,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll + 2004-08-05 21:00:00 685,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUninstall$\aec.sys.000 + 2008-06-20 10:44:38 138,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\afd.sys + 2004-08-05 21:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll + 2004-08-05 21:00:00 214,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll + 2006-10-12 14:04:13 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll + 2007-03-09 13:48:06 57,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll + 2004-08-05 21:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll + 2004-08-05 21:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll + 2004-08-05 21:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll + 2006-10-12 11:09:53 256,512 -c----w C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe + 2004-08-04 05:07:42 42,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\agp440.sys + 2004-08-04 05:07:44 44,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\agpcpq.sys + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0401.dll + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0404.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0405.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0406.dll + 2004-08-05 21:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0407.dll + 2004-08-05 21:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0408.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0409.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040b.dll + 2004-08-05 21:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040c.dll + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040d.dll + 2004-08-05 21:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt040e.dll + 2004-08-05 21:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0410.dll + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0411.dll + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0412.dll + 2004-08-05 21:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0413.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0414.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0415.dll + 2004-08-05 21:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0416.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0419.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041d.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt041f.dll + 2004-08-05 13:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0804.dll + 2004-08-05 21:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0816.dll + 2004-08-05 21:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\agt0c0a.dll + 2004-08-05 21:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll + 2004-08-05 21:00:00 101,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\ahui.exe + 2004-08-05 21:00:00 44,544 -c----w C:\WINDOWS\$NtServicePackUninstall$\alg.exe + 2004-08-04 05:07:42 42,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\alim1541.sys + 2004-08-05 21:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll + 2004-08-04 05:07:44 43,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdagp.sys + 2004-08-05 21:00:00 41,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys + 2004-08-05 21:00:00 41,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys + 2004-08-05 21:00:00 70,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\amstream.dll + 2004-08-05 21:00:00 126,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll + 2004-08-05 21:00:00 60,800 -c----w C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys + 2004-08-05 21:00:00 65,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll + 2004-08-05 21:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys + 2004-08-05 21:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\at.exe + 2004-08-04 04:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\atapi.sys + 2004-08-05 21:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\atl.dll + 2004-08-05 21:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe + 2004-08-05 21:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys + 2004-08-05 21:00:00 285,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll + 2004-08-05 21:00:00 55,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys + 2004-08-05 21:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll + 2004-08-05 21:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\attrib.exe + 2004-08-05 21:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll + 2004-08-05 21:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\auditusr.exe + 2005-03-02 18:10:36 56,832 -c----w C:\WINDOWS\$NtServicePackUninstall$\authz.dll + 2004-08-05 21:00:00 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\autochk.exe + 2004-08-05 21:00:00 638,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe + 2004-08-05 21:00:00 616,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe + 2004-08-05 21:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe + 2004-08-05 21:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll + 2004-08-05 21:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll + 2004-08-05 21:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll + 2004-08-05 21:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\batt.dll + 2001-08-18 05:57:54 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\battc.sys + 2004-08-05 21:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll + 2004-08-05 21:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll + 2004-08-05 21:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll + 2004-08-05 21:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUninstall$\blastcln.exe + 2004-08-05 21:00:00 71,552 -c----w C:\WINDOWS\$NtServicePackUninstall$\bridge.sys + 2004-08-05 21:00:00 70,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\browselc.dll + 2004-08-05 21:00:00 77,312 -c----w C:\WINDOWS\$NtServicePackUninstall$\browser.dll + 2008-06-23 15:39:58 1,021,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\browseui.dll + 2004-08-05 21:00:00 78,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll + 2004-08-05 21:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthci.dll + 2008-06-14 17:59:52 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys + 2008-06-14 17:59:52 272,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthport.sys.000 + 2004-08-05 21:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\bthserv.dll + 2004-08-05 21:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\btpanui.dll + 2004-08-05 13:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\c_g18030.dll + 2004-08-05 21:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll + 2004-08-05 21:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\cabview.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\cacls.exe + 2004-08-05 21:00:00 385,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\callcont.dll + 2004-08-05 21:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\camocx.dll + 2004-08-05 21:00:00 146,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\capesnpn.dll + 2005-07-26 04:39:54 225,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll + 2004-08-05 21:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll + 2005-07-26 04:39:54 625,152 -c----w C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll + 2004-08-03 21:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys + 2004-08-05 21:00:00 63,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys + 2008-06-23 15:39:58 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll + 2005-09-10 01:55:14 2,067,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll + 2004-08-05 21:00:00 49,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys + 2004-08-05 21:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\certcli.dll + 2004-08-05 21:00:00 467,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll + 2004-08-05 21:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll + 2004-08-05 21:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll + 2004-08-05 13:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtmbx.dll + 2004-08-05 13:00:00 56,320 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskdic.dll + 2004-08-05 13:00:00 173,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\chtskf.dll + 2004-08-05 21:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\cic.dll + 2004-08-05 21:00:00 1,352,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll + 2004-08-05 13:00:00 198,656 -c----w C:\WINDOWS\$NtServicePackUninstall$\cintime.dll + 2006-06-22 05:13:45 69,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll + 2004-08-05 21:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe + 2004-08-05 21:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys + 2005-07-26 04:39:55 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll + 2005-07-26 04:39:55 498,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll + 2004-08-05 21:00:00 110,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe + 2004-08-05 21:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll + 2004-08-05 21:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe + 2004-08-05 21:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe + 2004-08-05 21:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe + 2004-08-05 21:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll + 2004-08-04 07:07:40 14,080 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys + 2004-08-05 21:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll + 2004-08-05 21:00:00 428,032 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmd.exe + 2004-08-05 21:00:00 457,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll + 2004-08-05 21:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe + 2004-08-05 21:00:00 40,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe + 2004-08-05 21:00:00 191,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll + 2004-08-05 21:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmsetacl.dll + 2004-08-05 21:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe + 2004-08-05 21:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll + 2004-08-05 21:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll + 2005-07-26 04:39:55 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\colbact.dll + 2004-08-05 21:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUninstall$\comaddin.dll + 2005-07-26 04:39:56 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll + 2006-08-25 15:51:14 617,472 -c----w C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll + 2004-08-05 21:00:00 281,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll + 2004-08-05 21:00:00 253,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\compatui.dll + 2001-08-18 05:58:00 9,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\compbatt.sys + 2004-08-05 21:00:00 230,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\compstui.dll + 2005-07-26 04:39:56 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.dll + 2004-08-05 21:00:00 9,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe + 2004-08-05 21:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\comrereg.exe + 2004-08-05 21:00:00 851,968 -c----w C:\WINDOWS\$NtServicePackUninstall$\comres.dll + 2004-08-05 21:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsetup.dll + 2004-08-05 21:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsnap.dll + 2005-07-26 04:39:57 1,267,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll + 2005-07-26 04:39:57 540,160 -c----w C:\WINDOWS\$NtServicePackUninstall$\comuid.dll + 2004-08-05 21:00:00 1,044,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\conf.exe + 2004-08-05 21:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll + 2004-08-05 21:00:00 346,112 -c----w C:\WINDOWS\$NtServicePackUninstall$\confmsp.dll + 2004-08-05 21:00:00 27,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\conime.exe + 2007-08-13 16:42:54 17,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\corpol.dll + 2004-08-05 21:00:00 190,976 -c----w C:\WINDOWS\$NtServicePackUninstall$\credui.dll + 2004-08-05 21:00:00 40,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys + 2004-08-05 21:00:00 604,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll + 2004-08-05 21:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll + 2004-08-05 21:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll + 2004-08-05 21:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll + 2004-08-05 21:00:00 63,488 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll + 2004-08-05 21:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll + 2004-08-05 21:00:00 530,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll + 2004-08-05 21:00:00 102,912 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll + 2004-08-05 21:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscript.exe + 2004-08-05 21:00:00 337,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\cscui.dll + 2004-08-05 21:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll + 2004-08-05 21:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUninstall$\csrss.exe + 2004-08-05 21:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe + 2004-08-05 21:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\custsat.dll + 2004-08-05 21:00:00 1,179,648 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll + 2004-08-05 21:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll + 2004-08-05 21:00:00 1,689,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll + 2004-08-05 21:00:00 825,344 -c----w C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll + 2008-06-23 15:39:59 1,056,768 -c----w C:\WINDOWS\$NtServicePackUninstall$\danim.dll + 2004-08-05 21:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll + 2004-08-05 21:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\datime.dll + 2004-08-05 21:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll + 2004-08-05 21:00:00 640,000 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll + 2004-08-05 21:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll + 2004-08-05 21:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll + 2004-08-05 21:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll + 2004-08-05 21:00:00 1,788 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcache.bin + 2004-08-05 21:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll + 2004-08-05 21:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll + 2004-08-05 21:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dcomcnfg.exe + 2004-08-05 21:00:00 31,744 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe + 2004-08-05 21:00:00 266,240 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll + 2004-08-05 21:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll + 2004-08-05 21:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUninstall$\defrag.exe + 2004-08-05 21:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\devenum.dll + 2004-08-05 21:00:00 290,816 -c----w C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll + 2004-08-05 21:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe + 2004-08-05 21:00:00 104,960 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe + 2004-08-05 21:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll + 2004-08-05 21:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll + 2004-08-05 21:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll + 2004-08-05 21:00:00 115,200 -c----w C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll + 2006-05-19 13:23:35 112,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll + 2004-08-05 21:00:00 401,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dhcpmon.dll + 2004-08-05 21:00:00 548,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\dialer.exe + 2004-08-05 21:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\diantz.exe + 2004-08-05 21:00:00 68,608 -c----w C:\WINDOWS\$NtServicePackUninstall$\digest.dll + 2004-08-05 21:00:00 165,376 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput.dll + 2004-08-05 21:00:00 187,904 -c----w C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll + 2007-05-16 15:13:53 86,528 -c----w C:\WINDOWS\$NtServicePackUninstall$\directdb.dll + 2004-08-05 21:00:00 36,352 -c----w C:\WINDOWS\$NtServicePackUninstall$\disk.sys + 2004-08-05 21:00:00 1,502,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskcopy.dll + 2004-08-05 21:00:00 14,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys + 2004-08-05 21:00:00 167,936 -c----w C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe + 2004-08-05 21:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUninstall$\dispex.dll + 2004-08-05 21:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe + 2004-08-05 21:00:00 225,280 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe + 2004-08-05 21:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmband.dll + 2004-08-05 21:00:00 800,256 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys + 2004-08-05 21:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll + 2004-08-05 21:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdlgs.dll + 2004-08-05 21:00:00 200,704 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll + 2004-08-05 21:00:00 181,248 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmime.dll + 2004-08-05 21:00:00 154,496 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmio.sys + 2004-08-05 21:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll + 2004-08-05 21:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe + 2004-08-05 21:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll + 2004-08-05 21:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll + 2004-08-05 21:00:00 105,984 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll + 2004-08-05 21:00:00 103,424 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll + 2004-08-05 21:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll + 2004-08-03 21:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys + 2004-08-05 21:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll + 2008-06-20 17:41:06 148,992 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll + 2008-02-20 05:35:05 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll + 2004-08-05 21:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll + 2004-08-05 21:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll + 2004-08-05 21:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe + 2004-08-05 21:00:00 229,888 -c----w C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll + 2004-08-05 21:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll + 2004-08-05 21:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll + 2004-08-05 21:00:00 375,296 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll + 2004-08-05 21:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll + 2004-08-05 21:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll + 2004-08-05 21:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll + 2004-08-05 21:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe + 2004-08-05 21:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll + 2004-08-05 21:00:00 213,504 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll + 2004-08-05 21:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe + 2004-08-05 21:00:00 116,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll + 2004-08-05 21:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll + 2004-08-03 21:08:00 60,288 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmk.sys + 2004-08-03 21:07:58 2,944 -c----w C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys + 2004-08-05 21:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\drprov.dll + 2004-08-05 21:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll + 2004-08-05 21:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll + 2004-08-05 21:00:00 72,192 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll + 2004-08-05 21:00:00 93,696 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll + 2004-08-05 21:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\dskquoui.dll + 2004-08-05 21:00:00 367,616 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound.dll + 2004-08-05 21:00:00 1,294,336 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll + 2004-08-05 21:00:00 145,408 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll + 2004-08-05 21:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll + 2004-08-05 21:00:00 240,640 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll + 2004-08-05 21:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssec.dll + 2004-08-05 21:00:00 137,216 -c----w C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll + 2004-08-05 21:00:00 113,664 -c----w C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll + 2004-08-05 21:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\dswave.dll + 2004-08-05 21:00:00 10,752 -c----w C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe + 2004-08-05 21:00:00 304,128 -c----w C:\WINDOWS\$NtServicePackUninstall$\duser.dll + 2004-08-05 21:00:00 17,920 -c----w C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe + 2004-08-05 21:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe + 2004-08-05 21:00:00 619,008 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll + 2004-08-05 21:00:00 1,227,264 -c----w C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll + 2004-08-05 21:00:00 1,298,432 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe + 2004-08-05 21:00:00 2,113,536 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll + 2004-08-05 21:00:00 71,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxg.sys + 2006-08-24 11:17:20 500,278 -c----w C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll + 2004-08-05 21:00:00 187,392 -c----w C:\WINDOWS\$NtServicePackUninstall$\els.dll + 2004-08-05 21:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUninstall$\encapi.dll + 2004-08-05 21:00:00 186,368 -c----w C:\WINDOWS\$NtServicePackUninstall$\encdec.dll + 2004-08-05 21:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll + 2008-07-07 20:31:48 253,952 -c----w C:\WINDOWS\$NtServicePackUninstall$\es.dll + 2005-10-20 22:25:53 1,097,728 -c----w C:\WINDOWS\$NtServicePackUninstall$\esent.dll + 2004-08-05 21:00:00 247,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\esscli.dll + 2004-08-05 21:00:00 195,072 -c----w C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe + 2004-08-05 21:00:00 55,808 -c----w C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll + 2004-08-05 21:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll + 2007-06-13 13:22:28 979,456 -c----w C:\WINDOWS\$NtServicePackUninstall$\explorer.exe + 2004-08-05 21:00:00 380,957 -c----w C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll + 2004-08-05 21:00:00 45,568 -c----w C:\WINDOWS\$NtServicePackUninstall$\extrac32.exe + 2004-08-05 21:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUninstall$\exts.dll + 2004-08-05 13:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUninstall$\f3ahvoas.dll

puccaro · Answer

-- Instantané actualisé --
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDMCon"="c:\progra~1\softwin\bitdef~1\bdmcon.exe" [2007-08-07 372736]
"BDNewsAgent"="c:\progra~1\softwin\bitdef~1\bdnagent.exe" [2005-06-09 9728]
"BDSwitchAgent"="c:\progra~1\softwin\bitdef~1\bdswitch.exe" [2005-04-06 33280]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-26 7561216]
"SynTPStart"="C:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-09-14 102400]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\Caroline\Menu D‚marrer\Programmes\D‚marrage\
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 630784]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Ask  Harrap's Shorter.lnk - C:\Program Files\Harrap's Multim‚dia\Shorter\bin\HiHarrapsTray.exe [2007-10-02 122880]
D‚marrage rapide de HP Photosmart Premier.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2005-09-24 73728]
HP Pavilion Webcam Tray Icon.lnk - C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe [2007-04-17 98304]
Post-it© Software Notes Lite.lnk - C:\Program Files\3M\PSNLite\PsnLite.exe [2004-10-15 2080768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=sockspy.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.mpng"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"vidc.mvjp"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"vidc.444p"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"VIDC.MJPG"= Pvmjpg30.dll
"msacm.l3codec"= l3codecp.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"C:\Program Files\Avid\Avid Liquid 7\Program\RM.exe"=
"C:\Program Files\Avid\Avid Liquid 7\Program\StudioU.mod"=
"C:\Program Files\Messenger\msmsgs.exe"=
"C:\Program Files\Azureus\Azureus.exe"=
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"C:\Program Files\Windows Live\Messenger\livecall.exe"=
"C:\Program Files\Mozilla Firefox\firefox.exe"=
"C:\Program Files\adslTV\adsltv.exe"=
"C:\Program Files\VideoLAN\VLC\vlc.exe"=
"C:\WINDOWS\system32\dpvsetup.exe"=
"C:\Program Files\Skype\Phone\Skype.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=

S0 ejocx;ejocx;C:\WINDOWS\system32\drivers\wlyjeh.sys [ ]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{09d639f6-e3ec-11dc-a032-001b244fc2b0}]
\Shell\Auto\command - F:\UFO.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL UFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{11822892-6112-11dd-a0ee-001b244fc2b0}]
\Shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{324885ab-2106-11dc-9ed9-001b244fc2b0}]
\Shell\AutoRun\command - E:\
.
.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Caroline\Application Data\Mozilla\Firefox\Profiles\ive2ikn1.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.fr
FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-14 16:41:59
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

PROCESSUS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
.
Heure de fin: 2008-10-14 16:49:10
ComboFix-quarantined-files.txt  2008-10-14 14:49:02
ComboFix2.txt  2008-10-13 05:39:43

Avant-CF: 22 181 806 080 octets libres
Après-CF: 22,196,719,616 octets libres

5973	--- E O F ---	2008-10-14 09:01:20




ca c'est la fin du rapport, entre le debut de ce que j'ai envoyé et la fin, y'a encore plein de choses ...... si je dois tout envoyer, je dois tout faire en plusieurs fois.... desolée y'a pas un autre moyen ?

puccaro · Answer

j'ai refais combofix.... je t'envoie le nouveau rapport .... merci beaucoup... ComboFix 08-10-11.04 - Caroline 2008-10-15 7:38:31.3 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.151 [GMT 2:00] Lancé depuis: C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] . ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-15 au 2008-10-15 )))))))))))))))))))))))))))))))))))) . 2008-10-14 10:47 . 2008-06-23 18:28 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-10-14 10:47 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-10-14 10:47 . 2007-03-08 07:10 1,048,576 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-10-14 10:47 . 2008-06-23 18:28 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-10-14 10:47 . 2008-06-23 18:28 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-10-14 10:47 . 2008-06-23 18:28 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-10-14 10:47 . 2008-06-23 18:28 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll 2008-10-14 10:47 . 2008-06-23 18:28 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-10-14 10:47 . 2008-06-23 11:20 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-10-09 19:45 . 2008-10-09 19:45 d-------- C:\Program Files\Avira 2008-10-09 19:45 . 2008-10-09 19:45 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-10-09 12:49 . 2008-10-09 12:55 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-10-08 16:35 . 2008-10-14 11:10 d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-08 16:35 . 2008-10-14 11:10 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-08 16:06 . 2008-10-08 16:06 d-------- C:\Program Files\Trend Micro 2008-10-08 12:38 . 2008-10-08 12:38 d-------- C:\Documents and Settings\Caroline\Application Data\Malwarebytes 2008-10-08 12:38 . 2008-09-10 00:04 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-08 12:38 . 2008-09-10 00:03 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-08 12:37 . 2008-10-08 12:38 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-08 12:37 . 2008-10-08 12:37 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-15 05:40 81,984 ----a-w C:\WINDOWS\system32\bdod.bin 2008-10-14 16:41 --------- d-----w C:\Documents and Settings\Caroline\Application Data\Skype 2008-10-14 16:38 --------- d-----w C:\Documents and Settings\Caroline\Application Data\skypePM 2008-10-14 15:51 --------- d-----w C:\Program Files\Skype 2008-10-13 14:06 --------- d-----w C:\Program Files\Java 2008-10-08 13:47 612 ----a-w C:\Program Files\Iifkb.txt 2008-08-24 21:33 --------- d-----w C:\Documents and Settings\Caroline\Application Data\Azureus 2008-08-23 21:19 --------- d-----w C:\Program Files\Google 2008-08-23 16:05 --------- d-----w C:\Program Files\Fichiers communs\Skype 2008-08-23 16:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2008-08-22 22:30 6,120 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd 2008-08-22 22:30 54,862 ----a-w C:\WINDOWS\BricoPackUninst.cmd 2008-08-22 21:34 --------- d-----w C:\Program Files\Azureus 2008-08-19 12:02 --------- d-----w C:\Documents and Settings\Caroline\Application Data\U3 2008-08-18 18:50 --------- d-----w C:\Program Files\ABBYY FineReader 6.0 Sprint 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 68,808 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 68,808 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll 2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2007-07-19 21:47 156 ----a-w C:\Documents and Settings\Caroline\Application Data\wklnhst.dat . ------- Sigcheck ------- 2005-07-03 12:10 663552 39846b1ac2b99349272ee6e075c3b8af C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\wininet.dll 2006-01-09 20:02 666112 5404e2ead19d7e2a5c4086015062343c C:\WINDOWS\$hf_mig$\KB912945\SP2QFE\wininet.dll 2007-01-04 16:02 669184 114342601ac7ea73b0d2a0ed8505b8b9 C:\WINDOWS\$hf_mig$\KB928090\SP2QFE\wininet.dll 2007-02-19 17:23 669696 1bde6d5dba35797eca8db8fcb80fc015 C:\WINDOWS\$hf_mig$\KB931768\SP2QFE\wininet.dll 2007-04-18 14:44 669696 a3bf56a786b277e881fd9137f55f0b4b C:\WINDOWS\$hf_mig$\KB933566\SP2QFE\wininet.dll 2007-06-26 16:36 669696 19058fbdc72f7bae085369c6d0a7d074 C:\WINDOWS\$hf_mig$\KB937143\SP2QFE\wininet.dll 2007-08-22 14:57 669696 4f6a45b54d26708e2c2bf2c43d83edea C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\wininet.dll 2007-10-11 07:59 670208 0465cde31add22f6233ffb4fe4af01cf C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\wininet.dll 2007-12-07 02:47 670208 c057d734b1951393fd07e2607513d4d9 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\wininet.dll 2008-02-16 11:32 670208 dcb8a9f102663d962be60cde38a6c1d7 C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\wininet.dll 2008-04-21 08:57 670720 f2f343d7ed0223645ba773b840eb4993 C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\wininet.dll 2008-04-21 08:43 670208 7af7d7d178f2863e7e7c880b55c88b76 C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll 2008-04-21 08:30 670720 82b3264706b9921c67b196319fda51de C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll 2008-06-23 18:15 671232 8ca18fd7cccabff7e84702bc1bbf5dcb C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\wininet.dll 2008-06-23 17:10 670208 d2177655bc338a07b99913f6a4bed52d C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll 2008-06-23 16:56 670720 4e00327da458beffea8f4b222f466b20 C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll 2008-06-23 17:40 827904 52589bae67dd9859724287372668690b C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll 2004-08-05 23:00 660480 58fe94ef42e074f4cad8bf02e70e6478 C:\WINDOWS\$NtUninstallKB896727$\wininet.dll 2006-01-09 20:02 662528 e795f45061710e1ed8e80dd4188f5b26 C:\WINDOWS\$NtUninstallKB928090$\wininet.dll 2007-01-04 15:55 663040 25d38ffa2b441e326850ae4cb67d1a91 C:\WINDOWS\$NtUninstallKB931768$\wininet.dll 2007-02-19 17:04 663040 129a4681b22150d08e35e144494240a2 C:\WINDOWS\$NtUninstallKB933566$\wininet.dll 2007-04-18 14:32 663040 ca6f58031096fc2509c57670129469f7 C:\WINDOWS\$NtUninstallKB937143$\wininet.dll 2007-06-26 16:12 663040 889269134af28b2142f47a337ca3a1cd C:\WINDOWS\$NtUninstallKB939653$\wininet.dll 2007-08-22 15:13 663040 18048557aa56de4b1955fdf7a21f9b24 C:\WINDOWS\$NtUninstallKB942615$\wininet.dll 2007-10-11 08:13 663552 d2fd027e5d3af96dee6c5cc225079df0 C:\WINDOWS\$NtUninstallKB944533$\wininet.dll 2007-12-07 03:07 663552 c5a40de381481d288addee45fc67f652 C:\WINDOWS\$NtUninstallKB947864$\wininet.dll 2008-02-16 11:02 663552 c9218cd3cd93586ffe9ae789282cae63 C:\WINDOWS\$NtUninstallKB950759$\wininet.dll 2008-04-21 09:02 663552 355a69cc05045428ce6b9e6bfbd4b74b C:\WINDOWS\$NtUninstallKB953838$\wininet.dll 2008-06-23 17:40 697856 08478bc046ae9381d9eb4883dd48f93a C:\WINDOWS\ie7\wininet.dll 2007-08-13 18:54 818688 a4a0fc92358f39538a6494c42ef99fe9 C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll 2008-06-23 18:28 817152 5f8a137bed66cb1150f139e4e6a6355c C:\WINDOWS\ServicePackFiles\i386\wininet.dll 2008-04-14 04:33 670208 4a6e04ea20f48d750d9bfed8600d516b C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\wininet.dll 2008-06-23 18:28 826368 ac0bd61dc2c64906fbfe50e005fefa2c C:\WINDOWS\SoftwareDistribution\Download\93d2fb5e96afcaf76e5b7606e1b329f8\SP2GDR\wininet.dll 2008-06-23 17:40 827904 52589bae67dd9859724287372668690b C:\WINDOWS\SoftwareDistribution\Download\93d2fb5e96afcaf76e5b7606e1b329f8\SP2QFE\wininet.dll 2008-06-23 18:28 817152 5f8a137bed66cb1150f139e4e6a6355c C:\WINDOWS\system32\wininet.dll 2008-06-23 18:28 826368 ac0bd61dc2c64906fbfe50e005fefa2c C:\WINDOWS\system32\dllcache\wininet.dll 2008-04-14 04:34 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\explorer.exe 2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe 2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe 2004-08-05 23:00 1036288 4c33e5b9a6197b6ed215f6cfba0a2daa C:\WINDOWS\$NtUninstallKB938828$\explorer.exe 2008-04-14 04:34 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\ServicePackFiles\i386\explorer.exe 2008-04-14 04:34 1037824 f2317622d29f9ff0f88aeecd5f60f0dd C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\explorer.exe 2008-04-14 04:34 112640 7e3defe771cb451b0ff630bfa435417e C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe 2008-04-14 04:34 112640 7e3defe771cb451b0ff630bfa435417e C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\wuauclt.exe 2008-07-18 22:10 68808 136896c2cdc3f689876e0d44485153ea C:\WINDOWS\system32\wuauclt.exe 2008-07-18 22:10 68808 136896c2cdc3f689876e0d44485153ea C:\WINDOWS\system32\dllcache\wuauclt.exe . ((((((((((((((((((((((((((((( snapshot_2008-10-14_16.48.28,39 ))))))))))))))))))))))))))))))))))))))))) . - 2004-08-05 21:00:00 352,256 ----a-w C:\WINDOWS\BricoPacks\SysFiles\10_cmdial32.dll + 2008-04-14 02:33:21 353,280 ----a-w C:\WINDOWS\BricoPacks\SysFiles\10_cmdial32.dll - 2004-08-05 21:00:00 165,888 ----a-w C:\WINDOWS\BricoPacks\SysFiles\12_credui.dll + 2008-04-14 02:33:21 165,888 ----a-w C:\WINDOWS\BricoPacks\SysFiles\12_credui.dll - 2007-06-13 13:22:28 1,037,312 ----a-w C:\WINDOWS\BricoPacks\SysFiles\14_explorer.exe + 2008-04-14 02:34:03 1,037,824 ----a-w C:\WINDOWS\BricoPacks\SysFiles\14_explorer.exe - 2004-08-05 21:00:00 386,560 ----a-w C:\WINDOWS\BricoPacks\SysFiles\15_fontext.dll + 2008-04-14 02:33:24 386,560 ----a-w C:\WINDOWS\BricoPacks\SysFiles\15_fontext.dll - 2004-08-05 21:00:00 768,512 ----a-w C:\WINDOWS\BricoPacks\SysFiles\17_helpctr.exe + 2008-04-14 02:34:06 769,024 ----a-w C:\WINDOWS\BricoPacks\SysFiles\17_helpctr.exe - 2004-08-05 21:00:00 146,944 ----a-w C:\WINDOWS\BricoPacks\SysFiles\18_hotplug.dll + 2008-04-14 02:33:26 146,944 ----a-w C:\WINDOWS\BricoPacks\SysFiles\18_hotplug.dll - 2004-08-05 21:00:00 98,304 ----a-w C:\WINDOWS\BricoPacks\SysFiles\2_ahui.exe + 2008-04-14 02:33:53 98,304 ----a-w C:\WINDOWS\BricoPacks\SysFiles\2_ahui.exe - 2004-08-05 21:00:00 157,184 ----a-w C:\WINDOWS\BricoPacks\SysFiles\23_keymgr.dll + 2008-04-14 02:33:28 157,184 ----a-w C:\WINDOWS\BricoPacks\SysFiles\23_keymgr.dll - 2004-08-05 21:00:00 221,696 ----a-w C:\WINDOWS\BricoPacks\SysFiles\24_logon.scr + 2008-04-14 02:34:32 221,696 ----a-w C:\WINDOWS\BricoPacks\SysFiles\24_logon.scr - 2004-08-05 21:00:00 246,784 ----a-w C:\WINDOWS\BricoPacks\SysFiles\26_migwiz.exe + 2008-04-14 02:34:11 251,904 ----a-w C:\WINDOWS\BricoPacks\SysFiles\26_migwiz.exe - 2004-08-05 21:00:00 216,064 ----a-w C:\WINDOWS\BricoPacks\SysFiles\28_moricons.dll + 2008-04-13 16:45:30 216,064 ----a-w C:\WINDOWS\BricoPacks\SysFiles\28_moricons.dll - 2004-08-05 21:00:00 1,004,032 ----a-w C:\WINDOWS\BricoPacks\SysFiles\29_msgina.dll + 2008-04-14 02:33:31 1,007,104 ----a-w C:\WINDOWS\BricoPacks\SysFiles\29_msgina.dll - 2008-06-23 15:40:02 3,080,704 ----a-w C:\WINDOWS\BricoPacks\SysFiles\30_mshtml.dll + 2008-06-24 08:28:24 3,592,192 ----a-w C:\WINDOWS\BricoPacks\SysFiles\30_mshtml.dll - 2004-08-05 21:00:00 347,648 ----a-w C:\WINDOWS\BricoPacks\SysFiles\31_mspaint.exe + 2008-04-14 02:34:14 347,648 ----a-w C:\WINDOWS\BricoPacks\SysFiles\31_mspaint.exe - 2004-08-05 21:00:00 281,600 ----a-w C:\WINDOWS\BricoPacks\SysFiles\32_mstask.dll + 2008-04-14 02:33:33 281,600 ----a-w C:\WINDOWS\BricoPacks\SysFiles\32_mstask.dll - 2004-08-05 21:00:00 655,360 ----a-w C:\WINDOWS\BricoPacks\SysFiles\33_mstscax.dll + 2008-04-14 02:33:28 2,061,824 ----a-w C:\WINDOWS\BricoPacks\SysFiles\33_mstscax.dll - 2004-08-05 21:00:00 91,648 ----a-w C:\WINDOWS\BricoPacks\SysFiles\34_mydocs.dll + 2008-04-14 02:33:34 91,648 ----a-w C:\WINDOWS\BricoPacks\SysFiles\34_mydocs.dll - 2004-08-05 21:00:00 55,296 ----a-w C:\WINDOWS\BricoPacks\SysFiles\35_narrator.exe + 2008-04-14 02:34:14 55,296 ----a-w C:\WINDOWS\BricoPacks\SysFiles\35_narrator.exe - 2004-08-05 21:00:00 144,896 ----a-w C:\WINDOWS\BricoPacks\SysFiles\37_netid.dll + 2008-04-14 02:33:34 144,896 ----a-w C:\WINDOWS\BricoPacks\SysFiles\37_netid.dll - 2004-08-05 21:00:00 1,723,904 ----a-w C:\WINDOWS\BricoPacks\SysFiles\38_netshell.dll + 2008-04-14 02:33:35 1,719,808 ----a-w C:\WINDOWS\BricoPacks\SysFiles\38_netshell.dll - 2004-08-12 12:57:16 250,880 ----a-w C:\WINDOWS\BricoPacks\SysFiles\39_newdev.dll + 2008-04-14 02:33:35 250,880 ----a-w C:\WINDOWS\BricoPacks\SysFiles\39_newdev.dll - 2004-08-05 21:00:00 28,672 ----a-w C:\WINDOWS\BricoPacks\SysFiles\4_batmeter.dll + 2008-04-14 02:33:19 29,184 ----a-w C:\WINDOWS\BricoPacks\SysFiles\4_batmeter.dll - 2004-08-05 21:00:00 70,656 ----a-w C:\WINDOWS\BricoPacks\SysFiles\40_notepad.exe + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\BricoPacks\SysFiles\40_notepad.exe - 2004-08-05 21:00:00 70,656 ----a-w C:\WINDOWS\BricoPacks\SysFiles\41_notepad.exe + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\BricoPacks\SysFiles\41_notepad.exe - 2004-08-05 21:00:00 145,920 ----a-w C:\WINDOWS\BricoPacks\SysFiles\42_ntshrui.dll + 2008-04-14 02:33:36 145,920 ----a-w C:\WINDOWS\BricoPacks\SysFiles\42_ntshrui.dll - 2004-08-05 21:00:00 97,280 ----a-w C:\WINDOWS\BricoPacks\SysFiles\44_occache.dll + 2008-06-23 16:28:22 102,912 ----a-w C:\WINDOWS\BricoPacks\SysFiles\44_occache.dll - 2004-08-05 21:00:00 578,560 ----a-w C:\WINDOWS\BricoPacks\SysFiles\46_printui.dll + 2008-04-14 02:33:38 578,560 ----a-w C:\WINDOWS\BricoPacks\SysFiles\46_printui.dll - 2004-08-05 21:00:00 685,056 ----a-w C:\WINDOWS\BricoPacks\SysFiles\47_rasdlg.dll + 2008-04-14 02:33:39 685,568 ----a-w C:\WINDOWS\BricoPacks\SysFiles\47_rasdlg.dll - 2004-08-05 21:00:00 153,088 ----a-w C:\WINDOWS\BricoPacks\SysFiles\48_regedit.exe + 2008-04-14 02:34:19 153,088 ----a-w C:\WINDOWS\BricoPacks\SysFiles\48_regedit.exe - 2004-08-05 21:00:00 572,416 ----a-w C:\WINDOWS\BricoPacks\SysFiles\49_shdoclc.dll + 2008-04-14 02:00:59 572,416 ----a-w C:\WINDOWS\BricoPacks\SysFiles\49_shdoclc.dll - 2008-06-23 15:39:58 1,024,000 ----a-w C:\WINDOWS\BricoPacks\SysFiles\5_browseui.dll + 2008-04-14 02:33:20 1,025,024 ----a-w C:\WINDOWS\BricoPacks\SysFiles\5_browseui.dll - 2008-06-23 15:40:05 1,495,040 ----a-w C:\WINDOWS\BricoPacks\SysFiles\50_shdocvw.dll + 2008-04-14 02:33:41 1,499,136 ----a-w C:\WINDOWS\BricoPacks\SysFiles\50_shdocvw.dll - 2007-10-25 16:56:24 8,510,976 ----a-w C:\WINDOWS\BricoPacks\SysFiles\51_shell32.dll + 2008-04-14 02:33:41 8,517,632 ----a-w C:\WINDOWS\BricoPacks\SysFiles\51_shell32.dll - 2004-08-05 21:00:00 440,320 ----a-w C:\WINDOWS\BricoPacks\SysFiles\52_shimgvw.dll + 2008-04-14 02:33:41 440,320 ----a-w C:\WINDOWS\BricoPacks\SysFiles\52_shimgvw.dll - 2008-06-23 15:40:06 474,624 ----a-w C:\WINDOWS\BricoPacks\SysFiles\53_shlwapi.dll + 2008-04-14 02:33:41 474,624 ----a-w C:\WINDOWS\BricoPacks\SysFiles\53_shlwapi.dll - 2004-08-05 21:00:00 133,120 ----a-w C:\WINDOWS\BricoPacks\SysFiles\54_sndrec32.exe + 2008-04-14 02:34:22 133,120 ----a-w C:\WINDOWS\BricoPacks\SysFiles\54_sndrec32.exe - 2004-08-05 21:00:00 122,368 ----a-w C:\WINDOWS\BricoPacks\SysFiles\56_stobject.dll + 2008-04-14 02:33:46 122,368 ----a-w C:\WINDOWS\BricoPacks\SysFiles\56_stobject.dll - 2004-08-05 21:00:00 107,520 ----a-w C:\WINDOWS\BricoPacks\SysFiles\58_sysocmgr.exe + 2008-04-14 02:34:24 107,520 ----a-w C:\WINDOWS\BricoPacks\SysFiles\58_sysocmgr.exe - 2004-08-05 21:00:00 1,005,056 ----a-w C:\WINDOWS\BricoPacks\SysFiles\59_syssetup.dll + 2008-04-14 02:33:46 1,013,248 ----a-w C:\WINDOWS\BricoPacks\SysFiles\59_syssetup.dll - 2004-08-05 21:00:00 85,504 ----a-w C:\WINDOWS\BricoPacks\SysFiles\6_cabview.dll + 2008-04-14 02:33:20 85,504 ----a-w C:\WINDOWS\BricoPacks\SysFiles\6_cabview.dll - 2004-08-05 21:00:00 143,360 ----a-w C:\WINDOWS\BricoPacks\SysFiles\60_taskmgr.exe + 2008-04-14 02:34:25 143,360 ----a-w C:\WINDOWS\BricoPacks\SysFiles\60_taskmgr.exe - 2005-11-23 13:40:36 391,168 ----a-w C:\WINDOWS\BricoPacks\SysFiles\62_themeui.dll + 2008-04-14 02:33:46 391,168 ----a-w C:\WINDOWS\BricoPacks\SysFiles\62_themeui.dll - 2004-08-05 21:00:00 37,888 ----a-w C:\WINDOWS\BricoPacks\SysFiles\64_url.dll + 2008-06-23 16:28:22 105,984 ----a-w C:\WINDOWS\BricoPacks\SysFiles\64_url.dll - 2008-06-23 15:40:06 617,984 ----a-w C:\WINDOWS\BricoPacks\SysFiles\65_urlmon.dll + 2008-06-23 16:28:23 1,159,680 ----a-w C:\WINDOWS\BricoPacks\SysFiles\65_urlmon.dll - 2004-08-05 21:00:00 281,600 ----a-w C:\WINDOWS\BricoPacks\SysFiles\66_webcheck.dll + 2008-06-23 16:28:23 233,472 ----a-w C:\WINDOWS\BricoPacks\SysFiles\66_webcheck.dll - 2004-08-05 21:00:00 438,784 ----a-w C:\WINDOWS\BricoPacks\SysFiles\67_wiaacmgr.exe + 2008-04-14 02:34:27 438,784 ----a-w C:\WINDOWS\BricoPacks\SysFiles\67_wiaacmgr.exe - 2004-08-05 21:00:00 594,432 ----a-w C:\WINDOWS\BricoPacks\SysFiles\68_wiashext.dll + 2008-04-14 02:33:48 594,432 ----a-w C:\WINDOWS\BricoPacks\SysFiles\68_wiashext.dll - 2008-06-23 15:40:08 663,552 ----a-w C:\WINDOWS\BricoPacks\SysFiles\69_wininet.dll + 2008-06-23 16:28:23 826,368 ----a-w C:\WINDOWS\BricoPacks\SysFiles\69_wininet.dll - 2004-08-05 21:00:00 773,632 ----a-w C:\WINDOWS\BricoPacks\SysFiles\70_WINNTBBU.DLL + 2008-04-14 02:32:53 764,416 ----a-w C:\WINDOWS\BricoPacks\SysFiles\70_WINNTBBU.DLL - 2007-03-17 13:44:47 293,376 ----a-w C:\WINDOWS\BricoPacks\SysFiles\71_winsrv.dll + 2008-04-14 02:33:48 293,888 ----a-w C:\WINDOWS\BricoPacks\SysFiles\71_winsrv.dll - 2004-08-05 21:00:00 2,986,496 ----a-w C:\WINDOWS\BricoPacks\SysFiles\76_xpsp2res.dll + 2008-04-13 18:36:46 2,986,496 ----a-w C:\WINDOWS\BricoPacks\SysFiles\76_xpsp2res.dll - 2004-08-05 21:00:00 340,480 ----a-w C:\WINDOWS\BricoPacks\SysFiles\77_zipfldr.dll + 2008-04-14 02:33:52 340,992 ----a-w C:\WINDOWS\BricoPacks\SysFiles\77_zipfldr.dll - 2004-08-05 21:00:00 515,584 ----a-w C:\WINDOWS\BricoPacks\SysFiles\78_logonui.exe + 2008-04-14 02:34:09 515,584 ----a-w C:\WINDOWS\BricoPacks\SysFiles\78_logonui.exe - 2004-08-05 21:00:00 65,536 ----a-w C:\WINDOWS\BricoPacks\SysFiles\8_cleanmgr.exe + 2008-04-14 02:33:57 65,536 ----a-w C:\WINDOWS\BricoPacks\SysFiles\8_cleanmgr.exe - 2004-08-05 21:00:00 60,416 ----a-w C:\WINDOWS\BricoPacks\SysFiles\80_msimn.exe + 2008-04-14 02:34:13 60,416 ----a-w C:\WINDOWS\BricoPacks\SysFiles\80_msimn.exe - 2004-08-05 21:00:00 2,534,400 ----a-w C:\WINDOWS\BricoPacks\SysFiles\81_msoeres.dll + 2008-04-14 02:02:34 2,534,400 ----a-w C:\WINDOWS\BricoPacks\SysFiles\81_msoeres.dll - 2004-08-05 21:00:00 400,896 ----a-w C:\WINDOWS\BricoPacks\SysFiles\9_cmd.exe + 2008-04-14 02:33:57 401,408 ----a-w C:\WINDOWS\BricoPacks\SysFiles\9_cmd.exe - 2004-08-05 21:00:00 457,728 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\10_cmdial32.dll + 2008-04-14 02:33:21 458,752 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\10_cmdial32.dll - 2004-08-05 21:00:00 190,976 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\12_credui.dll + 2008-04-14 02:33:21 190,976 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\12_credui.dll - 2007-06-13 13:22:28 979,456 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\14_explorer.exe + 2008-04-14 02:34:03 979,968 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\14_explorer.exe - 2004-08-05 21:00:00 396,288 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\15_fontext.dll + 2008-04-14 02:33:24 396,288 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\15_fontext.dll - 2004-08-05 21:00:00 764,928 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\17_helpctr.exe + 2008-04-14 02:34:06 765,440 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\17_helpctr.exe - 2004-08-05 21:00:00 161,792 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\18_hotplug.dll + 2008-04-14 02:33:26 161,792 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\18_hotplug.dll - 2004-08-05 21:00:00 101,376 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\2_ahui.exe + 2008-04-14 02:33:53 101,376 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\2_ahui.exe - 2004-08-05 21:00:00 409,600 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\23_keymgr.dll + 2008-04-14 02:33:28 409,600 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\23_keymgr.dll - 2004-08-05 21:00:00 3,128,320 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\24_logon.scr + 2008-04-14 02:34:32 3,128,320 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\24_logon.scr - 2004-08-05 21:00:00 544,768 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\26_migwiz.exe + 2008-04-14 02:34:11 549,888 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\26_migwiz.exe - 2004-08-05 21:00:00 380,416 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\28_moricons.dll + 2008-04-13 16:45:30 379,904 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\28_moricons.dll - 2004-08-05 21:00:00 1,111,552 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\29_msgina.dll + 2008-04-14 02:33:31 1,114,624 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\29_msgina.dll - 2008-06-23 15:40:02 3,522,048 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\30_mshtml.dll + 2008-06-24 08:28:24 3,865,088 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\30_mshtml.dll - 2004-08-05 21:00:00 444,928 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\31_mspaint.exe + 2008-04-14 02:34:14 444,928 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\31_mspaint.exe - 2004-08-05 21:00:00 328,192 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\32_mstask.dll + 2008-04-14 02:33:33 328,192 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\32_mstask.dll - 2004-08-05 21:00:00 657,408 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\33_mstscax.dll + 2008-04-14 02:33:28 2,089,472 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\33_mstscax.dll - 2004-08-05 21:00:00 86,528 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\34_mydocs.dll + 2008-04-14 02:33:34 86,528 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\34_mydocs.dll - 2004-08-05 21:00:00 56,832 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\35_narrator.exe + 2008-04-14 02:34:14 56,832 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\35_narrator.exe - 2004-08-05 21:00:00 153,088 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\37_netid.dll + 2008-04-14 02:33:34 153,088 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\37_netid.dll - 2004-08-05 21:00:00 2,139,648 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\38_netshell.dll + 2008-04-14 02:33:35 2,135,552 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\38_netshell.dll - 2004-08-12 12:57:16 415,744 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\39_newdev.dll + 2008-04-14 02:33:35 415,744 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\39_newdev.dll - 2004-08-05 21:00:00 28,672 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\4_batmeter.dll + 2008-04-14 02:33:19 29,184 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\4_batmeter.dll - 2004-08-05 21:00:00 156,672 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\40_notepad.exe + 2008-04-14 02:34:15 156,672 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\40_notepad.exe - 2004-08-05 21:00:00 156,672 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\41_notepad.exe + 2008-04-14 02:34:15 156,672 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\41_notepad.exe - 2004-08-05 21:00:00 233,984 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\42_ntshrui.dll + 2008-04-14 02:33:36 233,984 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\42_ntshrui.dll - 2004-08-05 21:00:00 147,968 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\44_occache.dll + 2008-06-23 16:28:22 164,352 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\44_occache.dll - 2004-08-05 21:00:00 758,784 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\46_printui.dll + 2008-04-14 02:33:38 758,784 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\46_printui.dll - 2004-08-05 21:00:00 1,256,960 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\47_rasdlg.dll + 2008-04-14 02:33:39 1,257,472 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\47_rasdlg.dll - 2004-08-05 21:00:00 230,912 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\48_regedit.exe + 2008-04-14 02:34:19 230,912 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\48_regedit.exe - 2004-08-05 21:00:00 689,664 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\49_shdoclc.dll + 2008-04-14 02:00:59 689,664 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\49_shdoclc.dll - 2008-06-23 15:39:58 1,021,952 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\5_browseui.dll + 2008-04-14 02:33:20 1,023,488 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\5_browseui.dll - 2008-06-23 15:40:05 1,774,080 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\50_shdocvw.dll + 2008-04-14 02:33:41 1,778,688 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\50_shdocvw.dll - 2007-10-25 16:56:24 12,924,928 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\51_shell32.dll + 2008-04-14 02:33:41 12,931,584 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\51_shell32.dll - 2004-08-05 21:00:00 1,790,464 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\52_shimgvw.dll + 2008-04-14 02:33:41 1,790,464 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\52_shimgvw.dll - 2008-06-23 15:40:06 499,200 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\53_shlwapi.dll + 2008-04-14 02:33:41 499,200 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\53_shlwapi.dll - 2004-08-05 21:00:00 182,272 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\54_sndrec32.exe + 2008-04-14 02:34:22 182,272 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\54_sndrec32.exe - 2004-08-05 21:00:00 147,968 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\56_stobject.dll + 2008-04-14 02:33:46 147,968 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\56_stobject.dll - 2004-08-05 21:00:00 183,296 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\58_sysocmgr.exe + 2008-04-14 02:34:24 183,296 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\58_sysocmgr.exe - 2004-08-05 21:00:00 1,261,568 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\59_syssetup.dll + 2008-04-14 02:33:46 1,269,760 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\59_syssetup.dll - 2004-08-05 21:00:00 83,456 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\6_cabview.dll + 2008-04-14 02:33:20 83,456 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\6_cabview.dll - 2004-08-05 21:00:00 189,440 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\60_taskmgr.exe + 2008-04-14 02:34:25 189,440 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\60_taskmgr.exe - 2005-11-23 13:40:36 393,728 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\62_themeui.dll + 2008-04-14 02:33:46 393,728 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\62_themeui.dll - 2004-08-05 21:00:00 59,392 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\64_url.dll + 2008-06-23 16:28:22 62,464 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\64_url.dll - 2008-06-23 15:40:06 691,712 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\65_urlmon.dll + 2008-06-23 16:28:23 1,233,408 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\65_urlmon.dll - 2004-08-05 21:00:00 442,880 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\66_webcheck.dll + 2008-06-23 16:28:23 394,240 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\66_webcheck.dll - 2004-08-05 21:00:00 890,880 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\67_wiaacmgr.exe + 2008-04-14 02:34:27 890,368 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\67_wiaacmgr.exe - 2004-08-05 21:00:00 774,656 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\68_wiashext.dll + 2008-04-14 02:33:48 774,656 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\68_wiashext.dll - 2008-06-23 15:40:08 697,856 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\69_wininet.dll + 2008-06-23 16:28:23 817,152 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\69_wininet.dll - 2004-08-05 21:00:00 773,120 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\70_WINNTBBU.DLL + 2008-04-14 02:32:53 763,904 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\70_WINNTBBU.DLL - 2007-03-17 13:44:47 294,400 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\71_winsrv.dll + 2008-04-14 02:33:48 294,912 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\71_winsrv.dll - 2004-08-05 21:00:00 3,378,176 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\76_xpsp2res.dll + 2008-04-13 18:36:46 3,378,176 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\76_xpsp2res.dll - 2004-08-05 21:00:00 907,776 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\77_zipfldr.dll + 2008-04-14 02:33:52 908,288 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\77_zipfldr.dll - 2004-08-05 21:00:00 5,650,944 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\78_logonui.exe + 2008-04-14 02:34:09 5,650,944 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\78_logonui.exe - 2004-08-05 21:00:00 110,080 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\8_cleanmgr.exe + 2008-04-14 02:33:57 110,080 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\8_cleanmgr.exe - 2004-08-05 21:00:00 223,744 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\80_msimn.exe + 2008-04-14 02:34:13 223,744 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\80_msimn.exe - 2004-08-05 21:00:00 2,534,400 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\81_msoeres.dll + 2008-04-14 02:02:34 2,534,400 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\81_msoeres.dll - 2004-08-05 21:00:00 428,032 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\9_cmd.exe + 2008-04-14 02:33:57 428,032 ----a-w C:\WINDOWS\BricoPacks\Vista Inspirat 2\PackFiles\9_cmd.exe + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\updspapi.dll + 2007-08-13 16:54:10 765,952 -c----w C:\WINDOWS\ie7updates\KB938127-v2-IE7\vgx.dll + 2007-08-13 16:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll + 2007-08-13 16:35:46 346,624 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll + 2007-08-13 16:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll + 2007-08-13 16:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll + 2007-08-13 16:36:26 61,952 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll + 2007-08-13 16:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe + 2007-08-13 16:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll + 2007-08-13 16:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll + 2007-08-13 15:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll + 2007-02-12 14:10:12 2,451,312 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dat

puccaro · Answer

et voici l'autre partie...



3,488	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
+ 2007-08-13 16:39:50	382,976	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
+ 2007-08-13 16:54:10	6,049,280	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
+ 2007-08-13 16:39:10	43,008	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
+ 2007-08-13 16:34:04	266,752	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
+ 2007-08-13 16:39:10	13,312	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
+ 2007-08-13 16:43:56	622,080	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
+ 2007-08-13 16:54:10	27,136	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
+ 2007-08-13 16:54:10	458,752	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
+ 2007-08-13 16:54:10	50,688	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
+ 2007-08-13 16:54:12	3,578,368	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
+ 2007-08-13 16:54:10	475,648	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
+ 2007-08-13 16:44:26	192,000	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
+ 2007-08-13 16:54:10	670,720	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
+ 2007-08-13 16:44:06	101,376	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
+ 2007-08-13 16:36:12	44,544	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
+ 2007-03-06 01:34:38	216,800	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48	394,976	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
+ 2007-08-13 16:44:30	105,984	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
+ 2007-08-13 16:54:10	1,162,240	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
+ 2007-08-13 16:54:10	231,424	-c----w	C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
- 2007-11-14 13:15:00	29,926	----a-r	C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
+ 2008-10-14 15:44:58	29,926	----a-r	C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
- 2008-04-14 02:34:15	70,656	----a-w	C:\WINDOWS\notepad.exe
+ 2008-04-14 02:34:15	156,672	----a-w	C:\WINDOWS\notepad.exe
- 2008-04-14 02:34:06	769,024	----a-w	C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
+ 2008-04-14 02:34:06	765,440	----a-w	C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
- 2008-04-14 02:34:19	153,088	----a-w	C:\WINDOWS\regedit.exe
+ 2008-04-14 02:34:19	230,912	----a-w	C:\WINDOWS\regedit.exe
- 2008-04-14 02:33:53	98,304	------w	C:\WINDOWS\ServicePackFiles\i386\ahui.exe
+ 2008-04-14 02:33:53	101,376	----a-w	C:\WINDOWS\ServicePackFiles\i386\ahui.exe
- 2008-04-14 02:33:20	1,025,024	------w	C:\WINDOWS\ServicePackFiles\i386\browseui.dll
+ 2008-04-14 02:33:20	1,023,488	----a-w	C:\WINDOWS\ServicePackFiles\i386\browseui.dll
- 2008-04-14 02:33:20	85,504	------w	C:\WINDOWS\ServicePackFiles\i386\cabview.dll
+ 2008-04-14 02:33:20	83,456	----a-w	C:\WINDOWS\ServicePackFiles\i386\cabview.dll
- 2008-04-14 02:33:57	65,536	------w	C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
+ 2008-04-14 02:33:57	110,080	----a-w	C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
- 2008-04-14 02:33:57	401,408	------w	C:\WINDOWS\ServicePackFiles\i386\cmd.exe
+ 2008-04-14 02:33:57	428,032	----a-w	C:\WINDOWS\ServicePackFiles\i386\cmd.exe
- 2008-04-14 02:33:21	353,280	------w	C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
+ 2008-04-14 02:33:21	458,752	----a-w	C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
- 2008-04-14 02:33:21	165,888	------w	C:\WINDOWS\ServicePackFiles\i386\credui.dll
+ 2008-04-14 02:33:21	190,976	----a-w	C:\WINDOWS\ServicePackFiles\i386\credui.dll
- 2008-04-14 02:33:24	386,560	------w	C:\WINDOWS\ServicePackFiles\i386\fontext.dll
+ 2008-04-14 02:33:24	396,288	----a-w	C:\WINDOWS\ServicePackFiles\i386\fontext.dll
- 2008-04-14 02:34:06	769,024	------w	C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
+ 2008-04-14 02:34:06	765,440	----a-w	C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
- 2008-04-14 02:33:26	146,944	------w	C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
+ 2008-04-14 02:33:26	161,792	----a-w	C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
- 2008-04-14 02:34:06	93,184	------w	C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
+ 2004-08-05 21:00:00	832,512	----a-w	C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
- 2008-04-14 02:33:28	157,184	------w	C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
+ 2008-04-14 02:33:28	409,600	----a-w	C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
- 2008-04-14 02:34:32	221,696	------w	C:\WINDOWS\ServicePackFiles\i386\logon.scr
+ 2008-04-14 02:34:32	3,128,320	----a-w	C:\WINDOWS\ServicePackFiles\i386\logon.scr
- 2008-04-14 02:34:09	515,584	------w	C:\WINDOWS\ServicePackFiles\i386\logonui.exe
+ 2008-04-14 02:34:09	5,650,944	----a-w	C:\WINDOWS\ServicePackFiles\i386\logonui.exe
- 2008-04-14 02:34:11	251,904	------w	C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
+ 2008-04-14 02:34:11	549,888	----a-w	C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
- 2008-04-13 16:45:30	216,064	------w	C:\WINDOWS\ServicePackFiles\i386\moricons.dll
+ 2008-04-13 16:45:30	379,904	----a-w	C:\WINDOWS\ServicePackFiles\i386\moricons.dll
- 2008-04-14 02:33:31	1,007,104	------w	C:\WINDOWS\ServicePackFiles\i386\msgina.dll
+ 2008-04-14 02:33:31	1,114,624	----a-w	C:\WINDOWS\ServicePackFiles\i386\msgina.dll
- 2008-04-14 02:33:31	3,066,880	------w	C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
+ 2008-06-24 08:28:24	3,865,088	----a-w	C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
- 2008-04-14 02:34:13	60,416	------w	C:\WINDOWS\ServicePackFiles\i386\msimn.exe
+ 2008-04-14 02:34:13	223,744	----a-w	C:\WINDOWS\ServicePackFiles\i386\msimn.exe
- 2008-04-14 02:34:14	347,648	------w	C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
+ 2008-04-14 02:34:14	444,928	----a-w	C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
- 2008-04-14 02:33:33	281,600	------w	C:\WINDOWS\ServicePackFiles\i386\mstask.dll
+ 2008-04-14 02:33:33	328,192	----a-w	C:\WINDOWS\ServicePackFiles\i386\mstask.dll
- 2008-04-14 02:33:34	91,648	------w	C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
+ 2008-04-14 02:33:34	86,528	----a-w	C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
- 2008-04-14 02:34:14	55,296	------w	C:\WINDOWS\ServicePackFiles\i386\narrator.exe
+ 2008-04-14 02:34:14	56,832	----a-w	C:\WINDOWS\ServicePackFiles\i386\narrator.exe
- 2008-04-14 02:33:34	144,896	------w	C:\WINDOWS\ServicePackFiles\i386\netid.dll
+ 2008-04-14 02:33:34	153,088	----a-w	C:\WINDOWS\ServicePackFiles\i386\netid.dll
- 2008-04-14 02:33:35	1,719,808	------w	C:\WINDOWS\ServicePackFiles\i386\netshell.dll
+ 2008-04-14 02:33:35	2,135,552	----a-w	C:\WINDOWS\ServicePackFiles\i386\netshell.dll
- 2008-04-14 02:33:35	250,880	------w	C:\WINDOWS\ServicePackFiles\i386\newdev.dll
+ 2008-04-14 02:33:35	415,744	----a-w	C:\WINDOWS\ServicePackFiles\i386\newdev.dll
- 2008-04-14 02:34:15	70,656	------w	C:\WINDOWS\ServicePackFiles\i386\notepad.exe
+ 2008-04-14 02:34:15	156,672	----a-w	C:\WINDOWS\ServicePackFiles\i386\notepad.exe
- 2008-04-14 02:33:36	145,920	------w	C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
+ 2008-04-14 02:33:36	233,984	----a-w	C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
- 2008-04-14 02:33:38	97,280	------w	C:\WINDOWS\ServicePackFiles\i386\occache.dll
+ 2008-06-23 16:28:22	164,352	----a-w	C:\WINDOWS\ServicePackFiles\i386\occache.dll
- 2008-04-14 02:33:38	578,560	------w	C:\WINDOWS\ServicePackFiles\i386\printui.dll
+ 2008-04-14 02:33:38	758,784	----a-w	C:\WINDOWS\ServicePackFiles\i386\printui.dll
- 2008-04-14 02:33:39	685,568	------w	C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
+ 2008-04-14 02:33:39	1,257,472	----a-w	C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
- 2008-04-14 02:34:19	153,088	------w	C:\WINDOWS\ServicePackFiles\i386\regedit.exe
+ 2008-04-14 02:34:19	230,912	----a-w	C:\WINDOWS\ServicePackFiles\i386\regedit.exe
- 2008-04-14 02:00:59	572,416	------w	C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
+ 2008-04-14 02:00:59	689,664	----a-w	C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
- 2008-04-14 02:33:41	1,499,136	------w	C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
+ 2008-04-14 02:33:41	1,778,688	----a-w	C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
- 2008-04-14 02:33:41	8,517,632	------w	C:\WINDOWS\ServicePackFiles\i386\shell32.dll
+ 2008-04-14 02:33:41	12,931,584	----a-w	C:\WINDOWS\ServicePackFiles\i386\shell32.dll
- 2008-04-14 02:33:41	440,320	------w	C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
+ 2008-04-14 02:33:41	1,790,464	----a-w	C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
- 2008-04-14 02:33:41	474,624	------w	C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
+ 2008-04-14 02:33:41	499,200	----a-w	C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
- 2008-04-14 02:34:22	133,120	------w	C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
+ 2008-04-14 02:34:22	182,272	----a-w	C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
- 2008-04-14 02:33:46	122,368	------w	C:\WINDOWS\ServicePackFiles\i386\stobject.dll
+ 2008-04-14 02:33:46	147,968	----a-w	C:\WINDOWS\ServicePackFiles\i386\stobject.dll
- 2008-04-14 02:34:24	107,520	------w	C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
+ 2008-04-14 02:34:24	183,296	----a-w	C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
- 2008-04-14 02:33:46	1,013,248	------w	C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
+ 2008-04-14 02:33:46	1,269,760	----a-w	C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
- 2008-04-14 02:34:25	143,360	------w	C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
+ 2008-04-14 02:34:25	189,440	----a-w	C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
- 2008-04-14 02:33:46	391,168	------w	C:\WINDOWS\ServicePackFiles\i386\themeui.dll
+ 2008-04-14 02:33:46	393,728	----a-w	C:\WINDOWS\ServicePackFiles\i386\themeui.dll
- 2008-04-14 02:33:48	37,888	------w	C:\WINDOWS\ServicePackFiles\i386\url.dll
+ 2008-06-23 16:28:22	62,464	----a-w	C:\WINDOWS\ServicePackFiles\i386\url.dll
- 2008-04-14 02:33:48	621,568	------w	C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
+ 2008-06-23 16:28:23	1,233,408	----a-w	C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
- 2008-04-14 02:33:48	281,600	------w	C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
+ 2008-06-23 16:28:23	394,240	----a-w	C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
- 2008-04-14 02:34:27	438,784	------w	C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
+ 2008-04-14 02:34:27	890,368	----a-w	C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
- 2008-04-14 02:33:48	594,432	------w	C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
+ 2008-04-14 02:33:48	774,656	----a-w	C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
- 2008-04-14 02:32:53	764,416	------w	C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
+ 2008-04-14 02:32:53	763,904	----a-w	C:\WINDOWS\ServicePackFiles\i386\WINNTBBU.DLL
- 2008-04-14 02:33:48	293,888	------w	C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
+ 2008-04-14 02:33:48	294,912	----a-w	C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
- 2008-04-13 17:39:24	2,897,920	------w	C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
+ 2008-04-13 18:36:46	3,378,176	----a-w	C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll
- 2008-04-14 02:33:52	340,992	------w	C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
+ 2008-04-14 02:33:52	908,288	----a-w	C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
- 2007-08-13 16:39:00	123,904	----a-w	C:\WINDOWS\system32\advpack.dll
+ 2008-06-23 16:28:17	124,928	----a-w	C:\WINDOWS\system32\advpack.dll
- 2008-04-14 02:33:53	98,304	----a-w	C:\WINDOWS\system32\ahui.exe
+ 2008-04-14 02:33:53	101,376	----a-w	C:\WINDOWS\system32\ahui.exe
- 2008-04-14 02:33:20	1,025,024	----a-w	C:\WINDOWS\system32\browseui.dll
+ 2008-04-14 02:33:20	1,023,488	----a-w	C:\WINDOWS\system32\browseui.dll
- 2008-04-14 02:33:20	85,504	----a-w	C:\WINDOWS\system32\cabview.dll
+ 2008-04-14 02:33:20	83,456	----a-w	C:\WINDOWS\system32\cabview.dll
- 2008-04-14 02:33:57	65,536	----a-w	C:\WINDOWS\system32\cleanmgr.exe
+ 2008-04-14 02:33:57	110,080	----a-w	C:\WINDOWS\system32\cleanmgr.exe
- 2008-04-14 02:33:57	401,408	----a-w	C:\WINDOWS\system32\cmd.exe
+ 2008-04-14 02:33:57	428,032	----a-w	C:\WINDOWS\system32\cmd.exe
- 2008-04-14 02:33:21	353,280	----a-w	C:\WINDOWS\system32\cmdial32.dll
+ 2008-04-14 02:33:21	458,752	----a-w	C:\WINDOWS\system32\cmdial32.dll
- 2008-04-14 02:33:21	165,888	----a-w	C:\WINDOWS\system32\credui.dll
+ 2008-04-14 02:33:21	190,976	----a-w	C:\WINDOWS\system32\credui.dll
- 2007-08-13 16:39:00	123,904	------w	C:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-06-23 16:28:17	124,928	------w	C:\WINDOWS\system32\dllcache\advpack.dll
- 2007-08-13 16:35:46	346,624	----a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-06-23 16:28:17	347,136	----a-w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2007-08-13 16:35:38	214,528	----a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-06-23 16:28:17	214,528	----a-w	C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2007-08-13 16:54:10	131,584	----a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-06-23 16:28:17	133,120	----a-w	C:\WINDOWS\system32\dllcache\extmgr.dll
- 2007-08-13 16:39:06	54,784	------w	C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-06-23 09:21:30	70,656	------w	C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2007-08-13 16:39:26	152,064	------w	C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-06-23 16:28:18	153,088	------w	C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2007-08-13 16:39:54	229,376	------w	C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-06-23 16:28:18	230,400	------w	C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2007-08-13 15:56:54	161,792	------w	C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-06-21 05:23:54	161,792	------w	C:\WINDOWS\system32\dllcache\ieakui.dll
- 2007-08-13 16:39:50	382,976	------w	C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-06-23 16:28:18	384,512	------w	C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2007-08-13 16:39:10	43,008	------w	C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-06-23 16:28:19	44,544	------w	C:\WINDOWS\system32\dllcache\iernonce.dll
- 2007-08-13 16:43:56	622,080	------w	C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-06-23 09:21:49	625,664	------w	C:\WINDOWS\system32\dllcache\iexplore.exe
- 2007-08-13 16:54:10	27,136	----a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-06-23 16:28:20	27,648	----a-w	C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2007-08-13 16:54:12	3,578,368	----a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-06-24 08:28:24	3,592,192	----a-w	C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-08-13 16:54:10	475,648	----a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-06-23 16:28:22	477,696	----a-w	C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2007-08-13 16:44:26	192,000	----a-w	C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-06-23 16:28:22	193,024	----a-w	C:\WINDOWS\system32\dllcache\msrating.dll
- 2007-08-13 16:54:10	670,720	----a-w	C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-06-23 16:28:22	671,232	----a-w	C:\WINDOWS\system32\dllcache\mstime.dll
- 2007-08-13 16:44:06	101,376	------w	C:\WINDOWS\system32\dllcache\occache.dll
+ 2008-06-23 16:28:22	102,912	------w	C:\WINDOWS\system32\dllcache\occache.dll
- 2007-08-13 16:36:12	44,544	----a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-06-23 16:28:22	44,544	----a-w	C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2007-08-13 16:44:30	105,984	------w	C:\WINDOWS\system32\dllcache\url.dll
+ 2008-06-23 16:28:22	105,984	------w	C:\WINDOWS\system32\dllcache\url.dll
- 2007-08-13 16:54:10	1,162,240	----a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-06-23 16:28:23	1,159,680	----a-w	C:\WINDOWS\system32\dllcache\urlmon.dll
- 2007-08-13 16:54:10	765,952	----a-w	C:\WINDOWS\system32\dllcache\VGX.dll
+ 2008-05-27 17:25:06	765,952	----a-w	C:\WINDOWS\system32\dllcache\vgx.dll
- 2007-08-13 16:54:10	231,424	------w	C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-06-23 16:28:23	233,472	------w	C:\WINDOWS\system32\dllcache\webcheck.dll
- 2007-08-13 16:35:46	346,624	----a-w	C:\WINDOWS\system32\dxtmsft.dll
+ 2008-06-23 16:28:17	347,136	----a-w	C:\WINDOWS\system32\dxtmsft.dll
- 2007-08-13 16:35:38	214,528	----a-w	C:\WINDOWS\system32\dxtrans.dll
+ 2008-06-23 16:28:17	214,528	----a-w	C:\WINDOWS\system32\dxtrans.dll
- 2007-08-13 16:54:10	131,584	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2008-06-23 16:28:17	133,120	----a-w	C:\WINDOWS\system32\extmgr.dll
- 2008-04-14 02:33:24	386,560	----a-w	C:\WINDOWS\system32\fontext.dll
+ 2008-04-14 02:33:24	396,288	----a-w	C:\WINDOWS\system32\fontext.dll
- 2008-04-14 02:33:26	146,944	----a-w	C:\WINDOWS\system32\hotplug.dll
+ 2008-04-14 02:33:26	161,792	----a-w	C:\WINDOWS\system32\hotplug.dll
- 2007-08-13 16:36:26	61,952	------w	C:\WINDOWS\system32\icardie.dll
+ 2008-06-23 16:28:17	63,488	----a-w	C:\WINDOWS\system32\icardie.dll
- 2007-08-13 16:39:06	54,784	----a-w	C:\WINDOWS\system32\ie4uinit.exe
+ 2008-06-23 09:21:30	70,656	----a-w	C:\WINDOWS\system32\ie4uinit.exe
- 2007-08-13 16:39:26	152,064	----a-w	C:\WINDOWS\system32\ieakeng.dll
+ 2008-06-23 16:28:18	153,088	----a-w	C:\WINDOWS\system32\ieakeng.dll
- 2007-08-13 16:39:54	229,376	----a-w	C:\WINDOWS\system32\ieaksie.dll
+ 2008-06-23 16:28:18	230,400	----a-w	C:\WINDOWS\system32\ieaksie.dll
- 2007-08-13 15:56:54	161,792	----a-w	C:\WINDOWS\system32\ieakui.dll
+ 2008-06-21 05:23:54	161,792	----a-w	C:\WINDOWS\system32\ieakui.dll
- 2007-02-12 14:10:12	2,451,312	------w	C:\WINDOWS\system32\ieapfltr.dat
+ 2007-04-17 09:32:38	2,455,488	----a-w	C:\WINDOWS\system32\ieapfltr.dat
- 2007-07-11 10:27:48	383,488	------w	C:\WINDOWS\system32\ieapfltr.dll
+ 2008-06-23 16:28:18	383,488	----a-w	C:\WINDOWS\system32\ieapfltr.dll
- 2007-08-13 16:39:50	382,976	----a-w	C:\WINDOWS\system32\iedkcs32.dll
+ 2008-06-23 16:28:18	384,512	----a-w	C:\WINDOWS\system32\iedkcs32.dll
- 2007-08-13 16:54:10	6,049,280	------w	C:\WINDOWS\system32\ieframe.dll
+ 2008-06-23 16:28:19	6,066,176	----a-w	C:\WINDOWS\system32\ieframe.dll
- 2007-08-13 16:39:10	43,008	----a-w	C:\WINDOWS\system32\iernonce.dll
+ 2008-06-23 16:28:19	44,544	----a-w	C:\WINDOWS\system32\iernonce.dll
- 2007-08-13 16:34:04	266,752	------w	C:\WINDOWS\system32\iertutil.dll
+ 2008-06-23 16:28:20	267,776	----a-w	C:\WINDOWS\system32\iertutil.dll
- 2007-08-13 16:39:10	13,312	----a-w	C:\WINDOWS\system32\ieudinit.exe
+ 2008-06-23 09:20:26	13,824	----a-w	C:\WINDOWS\system32\ieudinit.exe
- 2007-08-13 16:54:10	27,136	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2008-06-23 16:28:20	27,648	----a-w	C:\WINDOWS\system32\jsproxy.dll
- 2008-04-14 02:33:28	157,184	----a-w	C:\WINDOWS\system32\keymgr.dll
+ 2008-04-14 02:33:28	409,600	----a-w	C:\WINDOWS\system32\keymgr.dll
- 2008-04-14 02:34:32	221,696	----a-w	C:\WINDOWS\system32\logon.scr
+ 2008-04-14 02:34:32	3,128,320	----a-w	C:\WINDOWS\system32\logon.scr
- 2008-04-14 02:34:09	515,584	----a-w	C:\WINDOWS\system32\logonui.exe
+ 2008-04-14 02:34:09	5,650,944	----a-w	C:\WINDOWS\system32\logonui.exe
- 2008-04-13 16:45:30	216,064	----a-w	C:\WINDOWS\system32\moricons.dll
+ 2008-04-13 16:45:30	379,904	----a-w	C:\WINDOWS\system32\moricons.dll
- 2007-08-13 16:54:10	458,752	------w	C:\WINDOWS\system32\msfeeds.dll
+ 2008-06-23 16:28:20	459,264	----a-w	C:\WINDOWS\system32\msfeeds.dll
- 2007-08-13 16:54:10	50,688	------w	C:\WINDOWS\system32\msfeedsbs.dll
+ 2008-06-23 16:28:20	52,224	----a-w	C:\WINDOWS\system32\msfeedsbs.dll
- 2008-04-14 02:33:31	1,007,104	----a-w	C:\WINDOWS\system32\msgina.dll
+ 2008-04-14 02:33:31	1,114,624	----a-w	C:\WINDOWS\system32\msgina.dll
- 2007-08-13 16:54:12	3,578,368	----a-w	C:\WINDOWS\system32\mshtml.dll
+ 2008-06-24 08:28:24	3,865,088	----a-w	C:\WINDOWS\system32\mshtml.dll
- 2007-08-13 16:54:10	475,648	----a-w	C:\WINDOWS\system32\mshtmled.dll
+ 2008-06-23 16:28:22	477,696	----a-w	C:\WINDOWS\system32\mshtmled.dll
- 2008-04-14 02:34:14	347,648	----a-w	C:\WINDOWS\system32\mspaint.exe
+ 2008-04-14 02:34:14	444,928	----a-w	C:\WINDOWS\system32\mspaint.exe
- 2007-08-13 16:44:26	192,000	----a-w	C:\WINDOWS\system32\msrating.dll
+ 2008-06-23 16:28:22	193,024	----a-w	C:\WINDOWS\system32\msrating.dll
- 2008-04-14 02:33:33	281,600	----a-w	C:\WINDOWS\system32\mstask.dll
+ 2008-04-14 02:33:33	328,192	----a-w	C:\WINDOWS\system32\mstask.dll
- 2007-08-13 16:54:10	670,720	----a-w	C:\WINDOWS\system32\mstime.dll
+ 2008-06-23 16:28:22	671,232	----a-w	C:\WINDOWS\system32\mstime.dll
- 2008-04-14 02:33:28	2,061,824	----a-w	C:\WINDOWS\system32\mstscax.dll
+ 2008-04-14 02:33:28	2,089,472	----a-w	C:\WINDOWS\system32\mstscax.dll
- 2008-04-14 02:33:34	91,648	----a-w	C:\WINDOWS\system32\mydocs.dll
+ 2008-04-14 02:33:34	86,528	----a-w	C:\WINDOWS\system32\mydocs.dll
- 2008-04-14 02:34:14	55,296	----a-w	C:\WINDOWS\system32\narrator.exe
+ 2008-04-14 02:34:14	56,832	----a-w	C:\WINDOWS\system32\narrator.exe
- 2008-04-14 02:33:34	144,896	----a-w	C:\WINDOWS\system32\netid.dll
+ 2008-04-14 02:33:34	153,088	----a-w	C:\WINDOWS\system32\netid.dll
- 2008-04-14 02:33:35	1,719,808	----a-w	C:\WINDOWS\system32\netshell.dll
+ 2008-04-14 02:33:35	2,135,552	----a-w	C:\WINDOWS\system32\netshell.dll
- 2008-04-14 02:33:35	250,880	----a-w	C:\WINDOWS\system32\newdev.dll
+ 2008-04-14 02:33:35	415,744	----a-w	C:\WINDOWS\system32\newdev.dll
- 2008-04-14 02:34:15	70,656	----a-w	C:\WINDOWS\system32\notepad.exe
+ 2008-04-14 02:34:15	156,672	----a-w	C:\WINDOWS\system32\notepad.exe
- 2008-04-14 02:33:36	145,920	----a-w	C:\WINDOWS\system32\ntshrui.dll
+ 2008-04-14 02:33:36	233,984	----a-w	C:\WINDOWS\system32\ntshrui.dll
- 2007-08-13 16:44:06	101,376	----a-w	C:\WINDOWS\system32\occache.dll
+ 2008-06-23 16:28:22	164,352	----a-w	C:\WINDOWS\system32\occache.dll
- 2008-10-14 09:28:50	64,706	----a-w	C:\WINDOWS\system32\perfc009.dat
+ 2008-10-15 04:55:22	64,706	----a-w	C:\WINDOWS\system32\perfc009.dat
- 2008-10-14 09:28:50	78,354	----a-w	C:\WINDOWS\system32\perfc00C.dat
+ 2008-10-15 04:55:23	78,354	----a-w	C:\WINDOWS\system32\perfc00C.dat
- 2008-10-14 09:28:50	409,566	----a-w	C:\WINDOWS\system32\perfh009.dat
+ 2008-10-15 04:55:23	409,566	----a-w	C:\WINDOWS\system32\perfh009.dat
- 2008-10-14 09:28:50	477,728	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2008-10-15 04:55:23	477,728	----a-w	C:\WINDOWS\system32\perfh00C.dat
- 2007-08-13 16:36:12	44,544	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2008-06-23 16:28:22	44,544	----a-w	C:\WINDOWS\system32\pngfilt.dll
- 2008-04-14 02:33:38	578,560	----a-w	C:\WINDOWS\system32\printui.dll
+ 2008-04-14 02:33:38	758,784	----a-w	C:\WINDOWS\system32\printui.dll
- 2008-04-14 02:33:39	685,568	----a-w	C:\WINDOWS\system32\rasdlg.dll
+ 2008-04-14 02:33:39	1,257,472	----a-w	C:\WINDOWS\system32\rasdlg.dll
- 2008-04-14 02:00:59	572,416	----a-w	C:\WINDOWS\system32\shdoclc.dll
+ 2008-04-14 02:00:59	689,664	----a-w	C:\WINDOWS\system32\shdoclc.dll
- 2008-04-14 02:33:41	1,499,136	----a-w	C:\WINDOWS\system32\shdocvw.dll
+ 2008-04-14 02:33:41	1,778,688	----a-w	C:\WINDOWS\system32\shdocvw.dll
- 2008-04-14 02:33:41	8,517,632	----a-w	C:\WINDOWS\system32\shell32.dll
+ 2008-04-14 02:33:41	12,931,584	----a-w	C:\WINDOWS\system32\shell32.dll
- 2008-04-14 02:33:41	440,320	----a-w	C:\WINDOWS\system32\shimgvw.dll
+ 2008-04-14 02:33:41	1,790,464	----a-w	C:\WINDOWS\system32\shimgvw.dll
- 2008-04-14 02:33:41	474,624	----a-w	C:\WINDOWS\system32\shlwapi.dll
+ 2008-04-14 02:33:41	499,200	----a-w	C:\WINDOWS\system32\shlwapi.dll
- 2008-04-14 02:34:22	133,120	----a-w	C:\WINDOWS\system32\sndrec32.exe
+ 2008-04-14 02:34:22	182,272	----a-w	C:\WINDOWS\system32\sndrec32.exe
- 2008-04-14 02:33:46	122,368	----a-w	C:\WINDOWS\system32\stobject.dll
+ 2008-04-14 02:33:46	147,968	----a-w	C:\WINDOWS\system32\stobject.dll
- 2008-04-14 02:34:24	107,520	----a-w	C:\WINDOWS\system32\sysocmgr.exe
+ 2008-04-14 02:34:24	183,296	----a-w	C:\WINDOWS\system32\sysocmgr.exe
- 2008-04-14 02:33:46	1,013,248	----a-w	C:\WINDOWS\system32\syssetup.dll
+ 2008-04-14 02:33:46	1,269,760	----a-w	C:\WINDOWS\system32\syssetup.dll
- 2008-04-14 02:34:25	143,360	----a-w	C:\WINDOWS\system32\taskmgr.exe
+ 2008-04-14 02:34:25	189,440	----a-w	C:\WINDOWS\system32\taskmgr.exe
- 2008-04-14 02:33:46	391,168	----a-w	C:\WINDOWS\system32\themeui.dll
+ 2008-04-14 02:33:46	393,728	----a-w	C:\WINDOWS\system32\themeui.dll
- 2007-08-13 16:44:30	105,984	----a-w	C:\WINDOWS\system32\url.dll
+ 2008-06-23 16:28:22	62,464	----a-w	C:\WINDOWS\system32\url.dll
- 2007-08-13 16:54:10	1,162,240	----a-w	C:\WINDOWS\system32\urlmon.dll
+ 2008-06-23 16:28:23	1,233,408	----a-w	C:\WINDOWS\system32\urlmon.dll
- 2008-04-14 02:34:11	251,904	----a-w	C:\WINDOWS\system32\usmt\migwiz.exe
+ 2008-04-14 02:34:11	549,888	----a-w	C:\WINDOWS\system32\usmt\migwiz.exe
- 2007-08-13 16:54:10	231,424	----a-w	C:\WINDOWS\system32\webcheck.dll
+ 2008-06-23 16:28:23	394,240	----a-w	C:\WINDOWS\system32\webcheck.dll
- 2008-04-14 02:34:27	438,784	----a-w	C:\WINDOWS\system32\wiaacmgr.exe
+ 2008-04-14 02:34:27	890,368	----a-w	C:\WINDOWS\system32\wiaacmgr.exe
- 2008-04-14 02:33:48	594,432	----a-w	C:\WINDOWS\system32\wiashext.dll
+ 2008-04-14 02:33:48	774,656	----a-w	C:\WINDOWS\system32\wiashext.dll
- 2008-04-14 02:32:53	764,416	----a-w	C:\WINDOWS\system32\winntbbu.dll
+ 2008-04-14 02:32:53	763,904	----a-w	C:\WINDOWS\system32\WINNTBBU.DLL
- 2008-04-14 02:33:48	293,888	----a-w	C:\WINDOWS\system32\winsrv.dll
+ 2008-04-14 02:33:48	294,912	----a-w	C:\WINDOWS\system32\winsrv.dll
- 2008-04-13 18:36:46	2,986,496	----a-w	C:\WINDOWS\system32\xpsp2res.dll
+ 2008-04-13 18:36:46	3,378,176	----a-w	C:\WINDOWS\system32\xpsp2res.dll
- 2008-04-14 02:33:52	340,992	----a-w	C:\WINDOWS\system32\zipfldr.dll
+ 2008-04-14 02:33:52	908,288	----a-w	C:\WINDOWS\system32\zipfldr.dll
.
-- Instantané actualisé --
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDMCon"="c:\progra~1\softwin\bitdef~1\bdmcon.exe" [2007-08-07 372736]
"BDNewsAgent"="C:\Program Files\Softwin\BitDefender9\bdnagent.exe" [2005-06-09 9728]
"BDSwitchAgent"="C:\Program Files\Softwin\BitDefender9\bdswitch.exe" [2005-04-06 33280]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-26 7561216]
"SynTPStart"="C:\Program Files\Synaptics\SynTP\SynTPStart.exe" [2007-09-14 102400]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\Caroline\Menu D‚marrer\Programmes\D‚marrage\
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 630784]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Ask  Harrap's Shorter.lnk - C:\Program Files\Harrap's Multim‚dia\Shorter\bin\HiHarrapsTray.exe [2007-10-02 122880]
D‚marrage rapide de HP Photosmart Premier.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2005-09-24 73728]
HP Pavilion Webcam Tray Icon.lnk - C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe [2007-04-17 98304]
Post-it© Software Notes Lite.lnk - C:\Program Files\3M\PSNLite\PsnLite.exe [2004-10-15 2080768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=sockspy.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.mpng"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"vidc.mvjp"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"vidc.444p"= C:\Program Files\t@b\[u]0/u.958\686\tabdec.dll
"VIDC.MJPG"= Pvmjpg30.dll
"msacm.l3codec"= l3codecp.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"C:\Program Files\Avid\Avid Liquid 7\Program\RM.exe"=
"C:\Program Files\Avid\Avid Liquid 7\Program\StudioU.mod"=
"C:\Program Files\Messenger\msmsgs.exe"=
"C:\Program Files\Azureus\Azureus.exe"=
"C:\Program Files\Mozilla Firefox\firefox.exe"=
"C:\Program Files\adslTV\adsltv.exe"=
"C:\Program Files\VideoLAN\VLC\vlc.exe"=
"C:\WINDOWS\system32\dpvsetup.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"C:\Program Files\Windows Live\Messenger\livecall.exe"=
"C:\Program Files\Skype\Phone\Skype.exe"=

S0 ejocx;ejocx;C:\WINDOWS\system32\drivers\wlyjeh.sys [ ]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{09d639f6-e3ec-11dc-a032-001b244fc2b0}]
\Shell\Auto\command - F:\UFO.exe
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL UFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{11822892-6112-11dd-a0ee-001b244fc2b0}]
\Shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{324885ab-2106-11dc-9ed9-001b244fc2b0}]
\Shell\AutoRun\command - E:\
.
.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Caroline\Application Data\Mozilla\Firefox\Profiles\ive2ikn1.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.fr
FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-15 07:42:44
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

PROCESSUS: C:\WINDOWS\explorer.exe
-> C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
.
Heure de fin: 2008-10-15  7:48:50
ComboFix-quarantined-files.txt  2008-10-15 05:48:40
ComboFix2.txt  2008-10-14 14:49:14
ComboFix3.txt  2008-10-13 05:39:43

Avant-CF: 22 343 512 064 octets libres
Après-CF: 22,329,413,632 octets libres

777	--- E O F ---	2008-10-14 14:58:38

E..T · Answer

Bonsoir,

Télécharge UsbFix sur ton bureau

--> Lance l installation avec les paramétrés par défaut

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

--> Le pc va redémarrer

-->Après redémarrage post le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides


lien entier : http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

@++

E..T · Answer

Bonsoir,
Poste un nouveau rapport hijackthis.
@++

E..T · Answer

Salut,
Rien de grave ur ton rapport.

Tu as toujours deux antivirus! Vire antivir et garde bitdefender.
Désinstalle correctement antivir par ajouts suppression de programme.


Tu n'as pas mis à jour internet explorer!!

//!!\Très important//!!\
1  // Met à jour internet explorer
>> https://support.microsoft.com/fr-fr/allproducts
Pourquoi le laisser à jour: A lire >> https://forum.malekal.com/viewtopic.php?f=45&t=12405&p=95936#p95936

2 // Désinstalle la Yahoo Toolbar
https://fr.aide.yahoo.com/kb/account?redirect=true

@++

puccaro · Answer

coucou !!!

voila j'ai désinstallé antivir... par contre je l'avais téléchargé internet explorer 7 c'est bizarre... j'avais meme mis à jour firefox juste après... il faut que je le refasses ??? 
Par contre, je ne l'ai pas la toolbar yahoo, j'ai fait comme indiquer :
   1. Déroulez le menu « Outils » de Firefox.
   2. Choisissez « Modules complémentaires » et activez l'onglet « Extensions ».
   3. Dans la fenêtre du gestionnaire d'extensions, retrouvez la ligne « Yahoo!Toolbar ».
   4. Cliquez sur cette ligne pour la sélectionner (la ligne devient surlignée et affiche des boutons d'action).
   5. Cliquez sur « Désinstaller ».
   6. Dans la fenêtre qui apparaît, cliquez sur désinstaller (ou sur OK selon les versions).
   7. Quittez le gestionnaire d'extensions et relancez Firefox.

mais lorsque je vais dans l'onglet extensions, y'a rien sur la page, c'est vide donc je ne peux rien supprimer... comment je fais ?

et ensuite, que dois je faire pour que les virus ne reviennent pas ??

merci d'avance.

E..T · Answer

Désolé pour la yahoo toolbar jô dit une bêtise!!

Tu vas fixer ces lignes avec hijackthis, comme suit
Tu réouvres hijack
Tu refais un scan en choisissant >> Do a system scan and loge and file
Et après tu verras une option Fix checked coche la ligne et valides. Seulement celles la.

O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing) 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') 

Une foi que tu as fait tout ça va renvoi un rapport hijackthis.
++

puccaro · Answer

coucou !!!

voila j'ai fait ce que tu m'as dit, je t'envoies le nouveau rapport hijackthis.... et maintenant que dois je faire ? stp merci


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:10:04, on 18/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ClickCatcher MSIE handler - {16664845-0E00-11D2-8059-000000000000} - C:\Program Files\Fichiers communs\ReGet Shared\Catcher.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGetDx\iebar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [BDMCon] c:\progra~1\softwin\bitdef~1\bdmcon.exe
O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Ask  Harrap's Shorter.lnk = ?
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Pavilion Webcam Tray Icon.lnk = ?
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tous Télécharger par ReGet Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_All.htm
O8 - Extra context menu item: Télécharger avec Re&Get Deluxe - C:\Program Files\Fichiers communs\ReGet Shared\CC_Link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender9\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

E..T · Answer

Hello,

Pour moi tout est ok sur le rapport ;-)
Comment va le pc ?

Fais ceci démarrer >> panneau de configuration >> centre de sécurité et regarde si tout est bien activé ?
(tout doit être en vert;)

Si tout est ok : Télécharge ToolsCleaner il permet de supprimer les logiciels installés pendant la désinfection.
--> http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


@++

puccaro · Answer

coucou !!!!

cava j'ai fait tout ce que tu m'as dit... par contre quand j'ouvre msn j'ai encore le message d'erreur qui dit :

Une erreur est survenue sur le script de cette page:
ligne : 2
car: 1
erreur: erreur de syntaxe
code: 0
URL: http://rad.msn.com/ADSAdclient31.dll?
GetAd=&PG=IMSFRF&AP=1007

Voulez-vous continuer à executer des scripts sur cette page?
oui non

Qu'est ce que c'est ????

et sinon voila mon rapport toolscleaner :


[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix.txt: trouvé !
C:\Combofix: trouvé !
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\HijackThis.lnk: trouvé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe: trouvé !
C:\Documents and Settings\Caroline\Mes documents\Utilitaires d'installation\Drivers\HJTInstall.exe: trouvé !
C:\Documents and Settings\Caroline\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\HijackThis.lnk: supprimé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\Caroline\Mes documents\Utilitaires d'installation\Drivers\HJTInstall.exe: supprimé !
C:\Documents and Settings\Caroline\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Combofix: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !


Merci beaucoup, je fais quoi maintenant ? stp

E..T · Answer

On va essyer de voir le problème msn ;)
Avec quoi tu ouvres msn Mozilla ?

E..T · Answer

Pour msn tu utilises mozilla ?

E..T · Answer

C'est surement pour ça !
Essaye de repasser avec IE sur msn j'avais fait la même chose mais plein de soucis et aujourd'hui avec IE ça marche nickel.
@+

E..T · Answer

Sinon pour msn tu le désinstalles et tu le remets.
http://www.commentcamarche.net/forum/affich 3408238 reinstaller msn sans perdre les contacts
http://www.commentcamarche.net/forum/affich 8195241 reinstallation sans perdre donnees


Fais ceci démarrer >> panneau de configuration >> centre de sécurité et regarde si tout est bien activé ?
(tout doit être en vert;)  ??
Comme ça tu vas voir si ton pare feu est activé ;)

Pour bien sécuriser ton pc je te met quelques astuces de la FAQ :
>> http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet
>> http://www.commentcamarche.net/faq/sujet 8934 securisation de son pc

Voila et si tout est ok tu peux mettre en résolu ;)

Bon surf.
@+

E..T · Answer

puccaro tu t'en sors ?
@++

E..T · Answer

Hello,

Si tout est ok pour toi :
Télécharge ToolsCleaner il permet de supprimer les logiciels installés pendant la désinfection.
--> http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

@++

puccaro · Answer

hello !!

ca y'est c'est fait !! je t'envoies le rapport !! merci tout est ok maintenant ??????


[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix.txt: trouvé !
C:\Combofix: trouvé !
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\HijackThis.lnk: trouvé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe: trouvé !
C:\Documents and Settings\Caroline\Mes documents\Utilitaires d'installation\Drivers\HJTInstall.exe: trouvé !
C:\Documents and Settings\Caroline\Recent\HijackThis.lnk: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\HijackThis.lnk: supprimé !
C:\Documents and Settings\Caroline\Bureau\Antivirus\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\Caroline\Mes documents\Utilitaires d'installation\Drivers\HJTInstall.exe: supprimé !
C:\Documents and Settings\Caroline\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Combofix: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

E..T · Answer

Ouep,
Tout est bon tu peux mettre en résolu.
Bon surf.
@++

E..T · Answer

De rien ;-)
Bonne continuation.
++

Virus TROJAN qq1 peut vérifier mn hijackthis?

45 réponses

Discussions similaires