Ordinateur infecté par autorun

Résolu
modjo37 Messages postés 34 Statut Membre -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
Voila le problème mon PC est visiblement infecté par autorun.inf
Je possède Avast Antivirus.
Comment faire pour me débarasser de ce vers??
Je vous remercie par avance pour l'aide que vous pourrez m'apporter!!
Configuration: Windows XP
Internet Explorer 7.0

54 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

L'infection par autorun.inf sur un PC Windows XP compromet le système et complique le nettoyage malgré Avast Antivirus et une connexion Livebox. Des mesures efficaces consistent à utiliser CCleaner pour nettoyer les traces, réparer le registre et supprimer les éléments résiduels, tout en évitant l'installation de barres ou outils indésirables. Pour la continuité de la connexion, la solution suggérée est de réinstaller la Livebox après le nettoyage afin de rétablir une association réseau stable et éviter les conflits. En cas de persistance, certains contributeurs ont partagé des rapports d’outils comme HiJackThis, SDFix ou ComboFix pour analyser les éléments avancés, bien que leur utilisation exige prudence et connaissances techniques.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt,

    Telecharge UsbFix sur ton bureau
    http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

    --> Lance l installation avec les parametres par default

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

    --> Double clic sur le raccourci UsbFix sur ton bureau

    --> Le pc va redémarer

    -->Apres redémarrage post le rapport UsbFix.txt

    Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
    Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides
    0
  2. modjo37 Messages postés 34 Statut Membre
     
    Voici le rapport de USBfix
    Merci pour ta réactivité et ton aide

    -------------- UsbFix V2.409 ---------------

    * User : Mathieu - PORTABLE
    * Outils mis a jours le 18/11/2008 par Chiquitine29 et Chimay8
    * Recherche effectuée à 21:29:02 le 18/11/2008
    * Windows Xp - Internet Explorer 7.0.5730.11

    --------------- [ Processus actifs ] ----------------

    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\WINDOWS\system32\userinit.exe
    C:\WINDOWS\system32\WgaTray.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\DOCUME~1\Mathieu\LOCALS~1\Temp\1.tmp\b2e.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\alg.exe

    --------------- [ Informations lecteurs ] ----------------

    C: - Lecteur fixe

    E: - Lecteur fixe

    F: - Lecteur fixe

    +- Contenu de l'autorun : E:\autorun.inf

    [autorun]
    shellexecute="resycled\boot.com e:"
    shell\Open\command="resycled\boot.com e:"
    shell=Open

    +- Contenu de l'autorun : F:\autorun.inf

    [autorun]
    shellexecute="resycled\boot.com f:"
    shell\Open\command="resycled\boot.com f:"
    shell=Open

    --------------- [ Lecteur C ] ----------------

    C: - Lecteur fixe

    +- Listing des fichiers présents :

    [17/01/2007 19:01][--a------] C:\AUTOEXEC.BAT
    [05/08/2004 11:00][-rahs----] C:\NTDETECT.COM
    [07/09/2006 01:22][-rahs----] C:\boot.ini
    [07/09/2006 01:22][-rahs----] C:\Settings.ini
    [07/09/2008 18:42][--a------] C:\ComboFix.txt
    [07/09/2008 18:42][--a------] C:\SWSTAMP.TXT
    [07/09/2008 18:42][--a------] C:\UsbFix.txt
    [07/09/2008 18:42][--a------] C:\xscan.txt
    [06/10/2005 12:29][--a------] C:\CONFIG.SYS
    [06/10/2005 12:29][--a------] C:\hiberfil.sys
    [06/10/2005 12:29][--a------] C:\IO.SYS
    [06/10/2005 12:29][--a------] C:\MSDOS.SYS
    [06/10/2005 12:29][--a------] C:\pagefile.sys

    --------------- [ Lecteur E ] ----------------

    E: - Lecteur fixe

    +- Listing des fichiers présents :

    [18/11/2008 21:27][-r-hs----] E:\autorun.inf

    --------------- [ Lecteur F ] ----------------

    F: - Lecteur fixe

    +- Listing des fichiers présents :

    [18/11/2008 21:27][-r-hs----] F:\autorun.inf

    --------------- [ Registre / Startup ] ----------------

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

    TOSCDSPD=C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
    WOOKIT=C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

    00THotkey=C:\WINDOWS\system32\00THotkey.exe
    000StTHK=000StTHK.exe
    IgfxTray=C:\WINDOWS\system32\igfxtray.exe
    HotKeysCmds=C:\WINDOWS\system32\hkcmd.exe
    Persistence=C:\WINDOWS\system32\igfxpers.exe
    Apoint=C:\Program Files\Apoint2K\Apoint.exe
    TouchED=C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    AGRSMMSG=AGRSMMSG.exe
    TFNF5=TFNF5.exe
    SmoothView=C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
    TPSMain=TPSMain.exe
    TPSODDCtl=TPSODDCtl.exe
    TMESRV.EXE=C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
    TMERzCtl.EXE=C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
    TOSDCR=TOSDCR.EXE
    TFncKy=TFncKy.exe
    IntelZeroConfig=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    IntelWireless=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    EOUApp=C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    RoxioDragToDisc="C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
    pdfw=C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
    AVFX Engine=C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    LVCOMSX=C:\WINDOWS\system32\LVCOMSX.EXE
    LogitechVideoRepair=C:\Program Files\Logitech\Video\ISStart.exe
    LogitechVideoTray=C:\Program Files\Logitech\Video\LogiTray.exe
    SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    WOOWATCH=C:\PROGRA~1\Wanadoo\Watch.exe
    WOOTASKBARICON=C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
    Installed=1
    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
    Installed=1
    NoChange=1
    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
    Installed=1

    --------------- [ Registre / Mountpoint2 ] ----------------

    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\AutoRun\command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\explore\Command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\open\Command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\AutoRun\command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\explore\Command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\open\Command
    Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f904c-98d6-11dc-a7a5-00166f7a4f6b}\Shell\AutoRun\command

    --------------- [ Nettoyage des disques ] ----------------

    E:\autorun.inf ~> fichier appelé : "E:\"resycled\boot.com e:"" ( absent ! )
    F:\autorun.inf ~> fichier appelé : "F:\"resycled\boot.com f:"" ( absent ! )
    Supprimé ! - [15/11/2008 03:52][-r-hs----] C:\resycled\boot.com
    Supprimé ! - [18/11/2008 21:30][dr-hs----] C:\resycled
    Supprimé ! - [18/11/2008 21:27][-r-hs----] E:\autorun.inf
    Supprimé ! - [15/11/2008 03:52][-r-hs----] E:\resycled\boot.com
    Supprimé ! - [18/11/2008 21:30][dr-hs----] E:\resycled
    Supprimé ! - [18/11/2008 21:27][-r-hs----] F:\autorun.inf
    Supprimé ! - [15/11/2008 03:52][-r-hs----] F:\resycled\boot.com
    Supprimé ! - [18/11/2008 21:27][dr-hs----] F:\resycled

    --------------- [ Resumé ] ----------------

    -> /!\ Le resultat doit etre interprété par un spécialiste /!\

    [17/01/2007 19:01][--a------] C:\AUTOEXEC.BAT
    [05/08/2004 11:00][-rahs----] C:\NTDETECT.COM
    [07/09/2006 01:22][-rahs----] C:\boot.ini
    [07/09/2006 01:22][-rahs----] C:\Settings.ini

    --------------- ! Fin du rapport ! ----------------
    0
  3. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok cela devrait être bon les autorun ont été virés

    encore des soucis ????

    colle un rapport hijackthis

    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

    manuel :

    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

    ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

    Ensuite avec Explorer créer un dossier c:\hijackthis
    Décompresser Hijackthis dans ce dossier.
    C'est important pour les sauvegardes."
    0
  4. modjo37 Messages postés 34 Statut Membre
     
    A priori il n'y a plus de problèmes, Avast ne s'excite plus.
    Merci beaucoup!!!!!:))

    Voici le scan de HiJack

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:48:55, on 18/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Wanadoo\GestionnaireInternet.exe
    C:\Program Files\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Wanadoo\Watch.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    le rapport hijakhcits est incomplet

    pour protéger gratos ton ordi

    http://www.commentcamarche.net/telecharger/logiciel 4 securite

    mettre un antivirus

    AVAST en français ou ANTIVIR (en anglais mais très efficace)
    https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
    -------------
    des anti-espions :
    MalwareByte's Anti-Malware + SPYBOT

    +
    SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

    Rq : spybot et ad-aware ont sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
    --------
    un pare feu :
    celui de (Windows) ou mieux Online armor ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit) ou COMODO

    http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall
    https://www.01net.com/telecharger/windows/Securite/firewall/fiches/39911.html
    https://forum.pcastuces.com/sujet.asp?f=25&s=35606
    https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
    https://manuelsdaide.com/contact/
    http://www.open-files.com/forum/index.php?showtopic=29277
    http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

    -----------
    CCLEANER pour effacer les traces de surf
    ---------
    naviguer avec firefox ou safari ou opera et non internet explorer plus touché par les virus
    http://www.mozilla-europe.org/fr/products/firefox/
    0
  7. modjo37 Messages postés 34 Statut Membre
     
    Voici un nouveau rapport de Hijack
    Encore merci pour ton aide

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:14:58, on 18/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
    C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\system32\00THotkey.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\TFNF5.exe
    C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
    C:\WINDOWS\system32\TPSMain.exe
    C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
    C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE
    C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\WINDOWS\system32\HPZipm12.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
    O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
    O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [TPSODDCtl] TPSODDCtl.exe
    O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
    O4 - HKLM\..\Run: [TMERzCtl.EXE] C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
    O4 - HKLM\..\Run: [TOSDCR] TOSDCR.EXE
    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
    O4 - HKLM\..\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer = 85.255.112.110;85.255.112.172
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer = 85.255.112.110;85.255.112.172
    O20 - AppInit_DLLs: yaorhv.dll
    O23 - Service: ArcGIS License Manager - Unknown owner - C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    0
  8. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    aie on a bien fais de chercher plus loin!!!! tu es détourné en ukraine :(

    smit fraud fix (colle le rapport)

    1/ telecharger :

    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    2/ fais l'option 5 et colle le rapport
    0
  9. modjo37 Messages postés 34 Statut Membre
     
    Aie!!!Ca veut dire quoi??
    D'autre part, depuis l'utilisation de SmitFraud je n'arrive plus me connecter à internet. J'envoie ce message d'un autre PC.
    Voici le message:
    C:\Programe files\wanadoo\gestionnaire internet.HPL est absent.
    Est ce que je dois déinstaller et réinstaller Orange
    Merci!!!!

    SmitFraudFix v2.375

    Rapport fait à 22:34:18,18, 18/11/2008
    Executé à partir de C:\Documents and Settings\Mathieu\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» DNS Avant Fix

    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

    Description: Intel(R) PRO/100 VE Network Connection - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 85.255.112.110;85.255.112.172

    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

    Description: Intel(R) PRO/Wireless 2200BG Network Connection - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 85.255.112.110;85.255.112.172

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: DhcpNameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: DhcpNameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172

    »»»»»»»»»»»»»»»»»»»»»»»» DNS Après Fix

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
    0
  10. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    oui reinstalle orange pour voir

    _________________
    aie car
    comme indiqué par smitfraudfix:

    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

    Description: Intel(R) PRO/100 VE Network Connection - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 85.255.112.110;85.255.112.172

    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

    ________________

    scan avec
    MalwareByte's Anti-Malware en mode normal et vire ce qui est trouvé et colle le rapport

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    _______________

    remets ensuite un rapport hijakhits et dis tes soucis

    rq:

    Pour réparer la connexion internet:

    1/
    # Cliquez sur le bouton Démarrer.
    # Cliquez sur l'option de menu Paramètres.
    # Cliquez sur l'option Panneau de configuration.
    # Après l'ouverture du Panneau de configuration, faites un double clic sur l'icône Connexions réseau. Si votre Panneau de configuration est paramétré pour un affichage en catégories, faites un double clic sur Connexions réseau et Internet puis cliquez sur Connexions réseau tout en bas.
    # Vous verrez alors une liste de toutes les connexions réseau disponibles. Repérez la connexion vers votre adaptateur Sans Fil ou Réseau local et faites un clic droit dessus.
    # Cliquez simplement sur l'option de menu Réparer.

    2/
    utilise lspfix
    https://www.01net.com/telecharger/windows/Utilitaire/reseau/fiches/33379.html
    http://lanceyien-info.com/index.php?page=utilitaires#lspfix
    http://www.zdnet.fr/telecharger/windows/fiche/0,39021313,39138667s,00.htm

    3/
    -Télécharge cet outil d'ici:
    WinSockFix
    http://www.softpedia.com/progDownload/WinS...load-15337.html
    (prends le deuxieme miroir)
    -Une fois téléchargé,tu le lances

    -Tu cliques sur"ReG-Backup" pour créer une sauvegarde du registre,dans un dossier de ton choix.

    -Une fois la sauvegarde éffectuée,clique sur "Fix", au méssage "WinsockFix will now attempt to Repair your connection" tu reponds par "OUI"

    -Il va travailler,tu le laisse faire,à la fin des corrections tu auras le méssage suivant"Repair completed Please Reboot", tu cliques sur "OK"

    -Le PC va redémarrer,

    -Communique les résultats.

    ___________________

    4/
    erreur 1068 - Suite à infection virale de votre ordinateur avec un virus du type "bagle" ou "beagle" ...

    Vous n'arrivez plus a vous connecter avec votre wifi. Si vous allez dans les outils administration sur la page "services" pour activer "configuration automatique sans fil" vous avez l'erreur 1068.

    Si c'est votre cas et que vous vous etes arraché les cheveux, voici la solution:

    Vous devez aller dans la base de registre avec regedit ou autre.

    1. Demarrer > executer > Tapez : "regedit" en ok

    2. Allez sur HKEY Local Machine > system > CurrentControlSet > Services > Ndisuio

    Dans cette clé il y a une entrée nommée "START", double cliquez dessus. Cette entrée doit être 3 pour que le protocole NDIS E/S demarre correctement.

    Un virus comme "bagle / Beagle" change cette entrée et la met sur 4 (disable) et cause le probleme que vous avez.

    Reboutez ensuite votre PC et tout devrait rentrer dans l'ordre.

    5/ utilise ZEB RESTORE

    http://telechargement.zebulon.fr/zeb-restore.html

    ____________

    6/
    ou repare windows

    http://www.informatruc.com/reparer-windows-xp/

    7/ sinon on verra pour restaurer avant l'utilisation de smitfraudfix
    0
  11. modjo37 Messages postés 34 Statut Membre
     
    Merci
    Pour l'instant je vais te laisser. Je t'envois tout ça demain. Encore merci pour ton aide
    A demain
    *Bonne soirée
    0
  12. modjo37 Messages postés 34 Statut Membre
     
    Bonsoir
    Alors voila, plusieurs problèmes:

    1- Lorsque je lance Malwarebytes au bout de une ou 2 min un messagage d'erreur apparaît me disant que Malwarebytes a rencontré un prb et doit fermer. J'ai essayé plusieurs fois, j'ai désinstallé et réinstallé une fois...rien n'y fait (J'effectue bien le scan en mode sans échec).

    2- J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
    Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
    Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
    (la live box fonctionne puisque je l'utilise en ce moment)

    3-A l'étape 3 de la réparation internet que tu m'as fourni, lorsque je veux créer une sauvegarde de registre avec Winsofix un message d'erreur apparait
    "Warning Error saving file C:\ERDNT\SECURITY continue with the next file?
    du coup je choisis NON

    Voila, je suis complétement largué!!!
    J'espère que tu pourras m'aider!!!!
    Encore MERCI
    0
  13. modjo37 Messages postés 34 Statut Membre
     
    >PS: je suis entrain de refaire un scan malwarebytes en mode normal ,ça a l'air de fonctionner .désolé
    0
  14. modjo37 Messages postés 34 Statut Membre
     
    Voici le rapport de Malwarebyte

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1306
    Windows 5.1.2600 Service Pack 3

    19/11/2008 19:29:30
    mbam-log-2008-11-19 (19-29-30).txt

    Type de recherche: Examen complet (C:\|E:\|)
    Eléments examinés: 139424
    Temps écoulé: 36 minute(s), 50 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 2
    Valeur(s) du Registre infectée(s): 1
    Elément(s) de données du Registre infecté(s): 11
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 3

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System (Rootkit.DNSChanger.H) -> Data: kddvu.exe -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\WINDOWS\system32\kddvu.exe (Rootkit.DNSChanger.H) -> Delete on reboot.
    C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Mathieu\Local Settings\Temp\~tmpa.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    0
  15. modjo37 Messages postés 34 Statut Membre
     
    Et voici le rapport de Hijack comme prévu
    Merci

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:40:39, on 19/11/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\WINDOWS\system32\DVDRAMSV.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
    C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\00THotkey.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Program Files\Apoint2K\Apoint.exe
    C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\TFNF5.exe
    C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
    C:\WINDOWS\system32\TPSMain.exe
    C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE
    C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
    C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
    C:\WINDOWS\system32\TPSBattM.exe
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\Program Files\Apoint2K\Apntex.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
    O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
    O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
    O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [TPSODDCtl] TPSODDCtl.exe
    O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
    O4 - HKLM\..\Run: [TMERzCtl.EXE] C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
    O4 - HKLM\..\Run: [TOSDCR] TOSDCR.EXE
    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
    O4 - HKLM\..\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [C:\WINDOWS\system32\kddvu.exe] C:\WINDOWS\system32\kddvu.exe
    O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
    O20 - AppInit_DLLs: yaorhv.dll
    O23 - Service: ArcGIS License Manager - Unknown owner - C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
    0
  16. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok parfait malwarebyte a bien bossé!!! vire ce qui est en quarantaine dedans

    _________________

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
  17. modjo37 Messages postés 34 Statut Membre
     
    Voici le rapport de combofix

    Je n'arrive toujours pas à installer orange et par conséquent impossibilité de me connecter à internet
    <(J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
    Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
    Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
    (la live box fonctionne puisque je l'utilise en ce moment)
    <

    ComboFix 08-11-18.A2 - Mathieu 2008-11-19 20:59:13.2 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.163 [GMT 1:00]
    Lancé depuis: c:\documents and settings\Mathieu\Bureau\combofix.exe
    Commutateurs utilisés :: c:\documents and settings\Mathieu\Bureau\winxp_fr_per_bf.exe
    * Un nouveau point de restauration a été créé
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\IE4 Error Log.txt

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-19 au 2008-11-19 ))))))))))))))))))))))))))))))))))))
    .

    2008-11-19 18:32 . 2008-11-19 20:28 <REP> d-------- C:\ERDNT
    2008-11-19 18:29 . 2008-11-19 18:29 <REP> d-------- C:\restau
    2008-11-19 18:18 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-11-19 18:17 . 2008-11-19 18:18 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-11-19 18:17 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-11-18 22:33 . 2007-09-05 23:22 289,144 --a------ c:\windows\system32\VCCLSID.exe
    2008-11-18 22:33 . 2006-04-27 16:49 288,417 --a------ c:\windows\system32\SrchSTS.exe
    2008-11-18 22:33 . 2008-10-01 14:51 87,552 --a------ c:\windows\system32\VACFix.exe
    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\o4Patch.exe
    2008-11-18 22:33 . 2008-05-18 20:40 82,944 --a------ c:\windows\system32\IEDFix.exe
    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\IEDFix.C.exe
    2008-11-18 22:33 . 2008-08-18 11:19 82,432 --a------ c:\windows\system32\404Fix.exe
    2008-11-18 22:33 . 2003-06-05 20:13 53,248 --a------ c:\windows\system32\Process.exe
    2008-11-18 22:33 . 2004-07-31 17:50 51,200 --a------ c:\windows\system32\dumphive.exe
    2008-11-18 22:33 . 2007-10-03 23:36 25,600 --a------ c:\windows\system32\WS2Fix.exe
    2008-11-18 21:24 . 2008-11-18 21:30 <REP> d-------- c:\program files\UsbFix
    2008-11-18 20:48 . 2008-11-18 20:48 27,904 --a------ c:\windows\system32\drivers\ndisprot.sys
    2008-11-13 16:19 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
    2008-11-13 16:18 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
    2008-11-06 16:16 . 2008-11-06 16:16 <REP> d-------- c:\program files\PDFCreator Toolbar
    2008-11-06 16:16 . 2008-11-06 16:18 <REP> d-------- c:\program files\PDFCreator
    2008-11-06 16:16 . 2008-11-06 16:16 253,139 --a------ c:\windows\PDFCreator_Toolbar_Uninstaller_2390.exe
    2008-11-06 16:16 . 1998-07-13 02:08 141,312 --a------ c:\windows\system32\MSCMCFR.DLL
    2008-11-06 16:16 . 1998-06-24 01:00 137,000 --a------ c:\windows\system32\MSMAPI32.OCX
    2008-11-06 16:16 . 1998-07-13 02:08 119,568 --a------ c:\windows\system32\VB6FR.DLL
    2008-11-06 16:16 . 2001-10-28 17:42 116,224 --a------ c:\windows\system32\pdfcmnnt.dll
    2008-11-06 16:16 . 1998-07-13 02:08 59,904 --a------ c:\windows\system32\MSCC2FR.DLL
    2008-11-06 16:16 . 1998-07-06 01:00 23,552 --a------ c:\windows\system32\MSMPIDE.DLL
    2008-11-01 14:35 . 2008-11-01 14:35 <REP> d-------- c:\program files\MSECache
    2008-10-27 12:43 . 2008-04-14 04:33 159,232 --a------ c:\windows\system32\ptpusd.dll
    2008-10-27 12:43 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll
    2008-10-24 12:34 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-18 22:01 --------- d-----w c:\program files\Wanadoo
    2008-11-18 19:33 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2008-11-17 19:07 --------- d-----w c:\program files\eMule
    2008-11-17 18:40 --------- d-----w c:\program files\PowerArchiver
    2008-11-16 20:50 --------- d-----w c:\program files\SpywareBlaster
    2008-11-11 15:31 --------- d-----w c:\documents and settings\Mathieu\Application Data\uTorrent
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-05 12:55 --------- d-----w c:\program files\NOS
    2008-10-05 12:55 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Printer Info Cache
    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Image Zone Express
    2008-09-17 18:41 69,689 ----a-w c:\windows\UNZIP.DLL
    2008-09-17 18:41 507,904 ----a-w c:\windows\TMUPDATE.DLL
    2008-09-17 18:41 286,720 ----a-w c:\windows\PATCH.EXE
    2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
    2008-09-14 20:47 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe
    2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll
    2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll
    .

    ((((((((((((((((((((((((((((( snapshot@2008-09-07_19.41.45.50 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2004-08-05 10:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-05 10:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-05 10:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-05 10:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-05 10:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-05 10:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-05 10:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-05 10:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-05 10:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-05 10:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-05 10:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-05 10:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-05 10:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-05 10:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-05 10:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-05 10:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-05 10:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-05 10:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-05 10:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-05 10:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2001-03-02 19:52:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
    + 2004-08-05 10:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-05 10:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-03 20:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-05 10:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-05 10:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-05 10:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-05 10:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-05 10:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-05 10:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-05 10:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-05 10:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-05 10:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-05 10:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-10-23 15:34:35 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-05 10:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-05 10:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-05 10:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:29:18 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:29:19 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-03 22:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-05 10:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2006-10-23 15:34:35 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-05 10:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-05 10:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-05 10:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-05 10:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-05 10:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-05 10:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-05 10:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:29:20 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:29:21 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-05 10:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-05 10:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-05 10:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-05 10:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-05 10:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-05 10:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-05 10:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:29:21 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:29:22 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-05 10:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-05 10:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
    + 2004-08-05 10:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:29:23 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2005-03-08 01:29:38 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-05 10:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-05 10:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:29:25 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:29:27 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-05 10:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-05 10:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-05 10:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-05 10:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2007-01-08 18:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-05 10:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-05 10:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-05 10:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-05 10:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-05 10:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-05 10:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-05 10:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-05 10:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-05 10:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2004-05-11 22:18:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-05 10:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-05 10:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-05 10:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2006-10-23 15:34:36 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-05 10:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-05 10:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-05 10:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-05 10:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-05 10:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-05 10:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-05 10:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-05 10:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-05 10:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-05 10:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-05 10:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-05 10:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-05 10:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-05 10:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-05 10:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-05 10:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-05 10:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-05 10:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-05 10:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-05 10:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-05 10:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-05 10:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-05 10:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-05 10:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-05 10:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-05 10:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-05 10:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-05 10:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-03 21:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-05 10:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-05 10:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-05 10:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-05 10:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-05 10:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-05 10:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-05 10:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-05 10:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-05 10:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-03 21:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-03 21:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-05 10:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-05 10:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-05 10:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-05 10:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-05 10:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-05 10:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-05 10:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-05 10:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-05 10:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-05 10:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-05 10:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-05 10:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-05 10:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-05 10:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-05 10:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-05 10:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-05 10:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-05 10:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-24 12:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-05 10:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-05 10:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
    + 2004-08-05 10:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2008-07-07 20:18:27 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-05 10:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-05 10:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-05 10:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
    + 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-05 10:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-05 10:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-05 10:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-05 10:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-05 10:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-05 10:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-05 10:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-05 10:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-05 10:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2004-08-05 10:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-05 10:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2003-03-24 13:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-05 10:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-05 10:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-05 10:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-05 10:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-05 10:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-05 10:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-05 10:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
    + 2004-08-05 10:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-05 10:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-05 10:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-05 10:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-05 10:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-05 10:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-05 10:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-05 10:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-05 10:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-05 10:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-05 10:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-05 10:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-03 22:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-05 10:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-05 10:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-05 10:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-05 10:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-05 10:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 11:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-05 10:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-05 10:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-05 10:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-05 10:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-05 10:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-05 10:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-05 10:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-05 10:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-05 10:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-05 10:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-05 10:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-05 10:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 00:43:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-05 10:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-05 10:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-05 10:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-05 10:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-05 10:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-05 10:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-05 10:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-05 10:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-05 10:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-05 10:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-05 10:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-05 10:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 1998-03-22 11:34:14 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 1998-03-22 11:34:14 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 1998-10-07 15:46:18 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 1998-10-07 15:50:22 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll
    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll.000
    + 2001-08-23 14:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 02:08:06 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:08:06 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-03 23:54:30 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:48:44 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:48:44 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 11:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2004-08-05 10:00:00 25,216 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\
    0
  18. modjo37 Messages postés 34 Statut Membre
     
    Voici le rapport de combofix

    Je n'arrive toujours pas à installer orange et par conséquent impossibilité de me connecter à internet
    <(J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
    Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
    Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
    (la live box fonctionne puisque je l'utilise en ce moment)
    <

    ComboFix 08-11-18.A2 - Mathieu 2008-11-19 20:59:13.2 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.163 [GMT 1:00]
    Lancé depuis: c:\documents and settings\Mathieu\Bureau\combofix.exe
    Commutateurs utilisés :: c:\documents and settings\Mathieu\Bureau\winxp_fr_per_bf.exe
    * Un nouveau point de restauration a été créé
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\IE4 Error Log.txt

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-19 au 2008-11-19 ))))))))))))))))))))))))))))))))))))
    .

    2008-11-19 18:32 . 2008-11-19 20:28 <REP> d-------- C:\ERDNT
    2008-11-19 18:29 . 2008-11-19 18:29 <REP> d-------- C:\restau
    2008-11-19 18:18 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-11-19 18:17 . 2008-11-19 18:18 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-11-19 18:17 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-11-18 22:33 . 2007-09-05 23:22 289,144 --a------ c:\windows\system32\VCCLSID.exe
    2008-11-18 22:33 . 2006-04-27 16:49 288,417 --a------ c:\windows\system32\SrchSTS.exe
    2008-11-18 22:33 . 2008-10-01 14:51 87,552 --a------ c:\windows\system32\VACFix.exe
    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\o4Patch.exe
    2008-11-18 22:33 . 2008-05-18 20:40 82,944 --a------ c:\windows\system32\IEDFix.exe
    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\IEDFix.C.exe
    2008-11-18 22:33 . 2008-08-18 11:19 82,432 --a------ c:\windows\system32\404Fix.exe
    2008-11-18 22:33 . 2003-06-05 20:13 53,248 --a------ c:\windows\system32\Process.exe
    2008-11-18 22:33 . 2004-07-31 17:50 51,200 --a------ c:\windows\system32\dumphive.exe
    2008-11-18 22:33 . 2007-10-03 23:36 25,600 --a------ c:\windows\system32\WS2Fix.exe
    2008-11-18 21:24 . 2008-11-18 21:30 <REP> d-------- c:\program files\UsbFix
    2008-11-18 20:48 . 2008-11-18 20:48 27,904 --a------ c:\windows\system32\drivers\ndisprot.sys
    2008-11-13 16:19 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
    2008-11-13 16:18 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
    2008-11-06 16:16 . 2008-11-06 16:16 <REP> d-------- c:\program files\PDFCreator Toolbar
    2008-11-06 16:16 . 2008-11-06 16:18 <REP> d-------- c:\program files\PDFCreator
    2008-11-06 16:16 . 2008-11-06 16:16 253,139 --a------ c:\windows\PDFCreator_Toolbar_Uninstaller_2390.exe
    2008-11-06 16:16 . 1998-07-13 02:08 141,312 --a------ c:\windows\system32\MSCMCFR.DLL
    2008-11-06 16:16 . 1998-06-24 01:00 137,000 --a------ c:\windows\system32\MSMAPI32.OCX
    2008-11-06 16:16 . 1998-07-13 02:08 119,568 --a------ c:\windows\system32\VB6FR.DLL
    2008-11-06 16:16 . 2001-10-28 17:42 116,224 --a------ c:\windows\system32\pdfcmnnt.dll
    2008-11-06 16:16 . 1998-07-13 02:08 59,904 --a------ c:\windows\system32\MSCC2FR.DLL
    2008-11-06 16:16 . 1998-07-06 01:00 23,552 --a------ c:\windows\system32\MSMPIDE.DLL
    2008-11-01 14:35 . 2008-11-01 14:35 <REP> d-------- c:\program files\MSECache
    2008-10-27 12:43 . 2008-04-14 04:33 159,232 --a------ c:\windows\system32\ptpusd.dll
    2008-10-27 12:43 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll
    2008-10-24 12:34 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-18 22:01 --------- d-----w c:\program files\Wanadoo
    2008-11-18 19:33 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2008-11-17 19:07 --------- d-----w c:\program files\eMule
    2008-11-17 18:40 --------- d-----w c:\program files\PowerArchiver
    2008-11-16 20:50 --------- d-----w c:\program files\SpywareBlaster
    2008-11-11 15:31 --------- d-----w c:\documents and settings\Mathieu\Application Data\uTorrent
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-05 12:55 --------- d-----w c:\program files\NOS
    2008-10-05 12:55 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Printer Info Cache
    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Image Zone Express
    2008-09-17 18:41 69,689 ----a-w c:\windows\UNZIP.DLL
    2008-09-17 18:41 507,904 ----a-w c:\windows\TMUPDATE.DLL
    2008-09-17 18:41 286,720 ----a-w c:\windows\PATCH.EXE
    2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
    2008-09-14 20:47 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe
    2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll
    2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll
    .

    ((((((((((((((((((((((((((((( snapshot@2008-09-07_19.41.45.50 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2004-08-05 10:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-05 10:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-05 10:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-05 10:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-05 10:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2004-08-05 10:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-05 10:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-05 10:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
    + 2004-08-05 10:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-05 10:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-05 10:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-05 10:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-05 10:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-05 10:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-05 10:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-05 10:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-05 10:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-05 10:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
    + 2004-08-05 10:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
    + 2004-08-05 10:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2001-03-02 19:52:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
    + 2004-08-05 10:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
    + 2004-08-05 10:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-03 20:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-05 10:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-05 10:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-05 10:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-05 10:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-05 10:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-05 10:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-05 10:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
    + 2004-08-05 10:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-05 10:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-05 10:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2006-10-23 15:34:35 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-05 10:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-05 10:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-05 10:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:29:18 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:29:19 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-03 22:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
    + 2004-08-05 10:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2006-10-23 15:34:35 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-05 10:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-05 10:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-05 10:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-05 10:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-05 10:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-05 10:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-05 10:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:29:20 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:29:21 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-05 10:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-05 10:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
    + 2004-08-05 10:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-05 10:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-05 10:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-05 10:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-05 10:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:29:21 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:29:22 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-05 10:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-05 10:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
    + 2004-08-05 10:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:29:23 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2005-03-08 01:29:38 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-05 10:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-05 10:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:29:25 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:29:27 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-05 10:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-05 10:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-05 10:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-05 10:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2007-01-08 18:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-05 10:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-05 10:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-05 10:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-05 10:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-05 10:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-05 10:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-05 10:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-05 10:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-05 10:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2004-05-11 22:18:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-05 10:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-05 10:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-05 10:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2006-10-23 15:34:36 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-05 10:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-05 10:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-05 10:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-05 10:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-05 10:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-05 10:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-05 10:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-05 10:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-05 10:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-05 10:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-05 10:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-05 10:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-05 10:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-05 10:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-05 10:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-05 10:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-05 10:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-05 10:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-05 10:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-05 10:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-05 10:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-05 10:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-05 10:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-05 10:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-05 10:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-05 10:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-05 10:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-05 10:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-03 21:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-05 10:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-05 10:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-05 10:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-05 10:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-05 10:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-05 10:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
    + 2004-08-05 10:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
    + 2004-08-05 10:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
    + 2004-08-05 10:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
    + 2004-08-03 21:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
    + 2004-08-03 21:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
    + 2004-08-05 10:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
    + 2004-08-05 10:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
    + 2004-08-05 10:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
    + 2004-08-05 10:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
    + 2004-08-05 10:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
    + 2004-08-05 10:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
    + 2004-08-05 10:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
    + 2004-08-05 10:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
    + 2004-08-05 10:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
    + 2004-08-05 10:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
    + 2004-08-05 10:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
    + 2004-08-05 10:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
    + 2004-08-05 10:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
    + 2004-08-05 10:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
    + 2004-08-05 10:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
    + 2004-08-05 10:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
    + 2004-08-05 10:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
    + 2004-08-05 10:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
    + 2006-08-24 12:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
    + 2004-08-05 10:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
    + 2004-08-05 10:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
    + 2004-08-05 10:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
    + 2008-07-07 20:18:27 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
    + 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
    + 2004-08-05 10:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
    + 2004-08-05 10:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
    + 2004-08-05 10:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
    + 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
    + 2004-08-05 10:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
    + 2004-08-05 10:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
    + 2004-08-05 10:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
    + 2004-08-05 10:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
    + 2004-08-05 10:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
    + 2004-08-05 10:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
    + 2004-08-05 10:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
    + 2004-08-05 10:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
    + 2004-08-05 10:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
    + 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
    + 2004-08-05 10:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
    + 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
    + 2004-08-05 10:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
    + 2003-03-24 13:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
    + 2004-08-05 10:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
    + 2004-08-05 10:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
    + 2004-08-05 10:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
    + 2004-08-05 10:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
    + 2004-08-05 10:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
    + 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
    + 2004-08-05 10:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
    + 2004-08-05 10:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
    + 2004-08-05 10:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
    + 2004-08-05 10:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
    + 2004-08-05 10:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
    + 2004-08-05 10:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
    + 2004-08-05 10:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
    + 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
    + 2004-08-05 10:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
    + 2004-08-05 10:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
    + 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
    + 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
    + 2004-08-05 10:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
    + 2004-08-05 10:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
    + 2004-08-05 10:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
    + 2004-08-05 10:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
    + 2004-08-05 10:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
    + 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
    + 2004-08-03 22:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
    + 2004-08-05 10:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
    + 2004-08-05 10:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
    + 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
    + 2004-08-05 10:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
    + 2004-08-05 10:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
    + 2004-08-05 10:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
    + 2006-10-17 11:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
    + 2004-08-05 10:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
    + 2004-08-05 10:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
    + 2004-08-05 10:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
    + 2004-08-05 10:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
    + 2004-08-05 10:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
    + 2004-08-05 10:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
    + 2004-08-05 10:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
    + 2004-08-05 10:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
    + 2004-08-05 10:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
    + 2004-08-05 10:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
    + 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
    + 2004-08-05 10:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
    + 2004-08-05 10:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
    + 2004-08-04 00:43:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
    + 2004-08-05 10:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
    + 2004-08-05 10:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
    + 2004-08-05 10:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
    + 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
    + 2004-08-05 10:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
    + 2004-08-05 10:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
    + 2004-08-05 10:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
    + 2004-08-05 10:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
    + 2004-08-05 10:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
    + 2004-08-05 10:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
    + 2004-08-05 10:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
    + 2004-08-05 10:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
    + 2004-08-05 10:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
    + 1998-03-22 11:34:14 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
    + 1998-03-22 11:34:14 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
    + 1998-10-07 15:46:18 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
    + 1998-10-07 15:50:22 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll
    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll.000
    + 2001-08-23 14:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
    + 2005-05-27 02:08:06 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
    + 2005-05-27 02:08:06 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
    + 2004-08-03 23:54:30 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
    + 2006-06-01 18:48:44 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
    + 2006-06-01 18:48:44 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
    + 2006-10-17 11:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
    + 2004-08-05 10:00:00 25,216 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\
    0
  19. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    as tu tenté les reparations proposées? pour le net
    0
    1. modjo37 Messages postés 34 Statut Membre
       
      Sinon tous les virus ont ils été supprimés de mon ordinateur???
      Merci
      0
  20. modjo37 Messages postés 34 Statut Membre
     
    A l'étape 3 de la réparation internet que tu m'as fourni, lorsque je veux créer une sauvegarde de registre avec Winsofix un message d'erreur apparait
    "Warning Error saving file C:\ERDNT\SECURITY continue with the next file?
    du coup je choisis NON
    0
  21. yor1-44 Messages postés 90 Statut Membre 2
     
    désolé d'intervenir dans votre sujet, mais je n'est plus de contact avec un membre qui me guidait et j'ai des logiciels qui sont restés sur mon bureau (c-fix et ad-remover) alors qu'un autre logiciel (toolcleaner2)était censé les désinstaller. Faut-il relancer une discussion ? merci de votre réponse.
    0
  • 1
  • 2
  • 3

Discussions similaires

Tukif bloqué ? Solutions express !
Paparazzi -
bzh60 -

5 réponses