Help virus bagle

scheuch -  
chimay8 Messages postés 7947 Statut Contributeur sécurité -
Bonjour,
Je résume la situation : mc afee a disparut de la barre des tache et je n'arrive plus a le lancer (symptome qui m'a rappelé bagle)
J'ai donc essayé de faire une passe avec Drweb CureIt (solution qui avait marché la dernière fois grace à l'aide d'Apollo) : ce dernier plante a chaque fois au bout de 5-10 minute...
J'ai également passé elibagla qui ne detecte rien..
Puis j'ai fais un scan en ligne avec kaspersky qui m'a detecté 91 element infecté et 15 virus (je crois) dont plusieurs win32.bagle.of et autre terminaisons je vous joins un rapport
C:\Documents and Settings\Administrateur\Cookies\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008112220081123\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\NTUSER.DAT L'objet est verrouillé ignoré

C:\Documents and Settings\Administrateur\NtUser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré

C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.zzn ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.zzn ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp NSIS: infecté - 2 ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.abaf ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.abaf ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp NSIS: infecté - 2 ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.aaff ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.aaff ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp NSIS: infecté - 2 ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.zaz ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.zaz ignoré

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp NSIS: infecté - 2 ignoré

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\2WK5UK9V\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\GRELG5S6\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\GRELG5S6\index[3].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré

C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[5].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[6].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[4].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[5].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[6].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[7].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[5].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[6].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[7].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[8].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\ASE_Setup_Free_fr[1].exe Infecté : not-a-virus:FraudTool.Win32.Agent.cg ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[4].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[5].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

C:\Program Files\BitTorrent Fastest Tool\DWbrk03_0308.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe/stream/Script Infecté : Trojan-Downloader.NSIS.Agent.ax ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe/stream Infecté : Trojan-Downloader.NSIS.Agent.ax ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe NSIS: infecté - 2 ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP80\A0021249.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP80\A0022249.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027330.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027332.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027333.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027365.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027402.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027642.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027643.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027644.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027702.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028061.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028062.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028063.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028064.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028691.exe Infecté : not-a-virus:FraudTool.Win32.VirusRemover.k ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028700.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028736.exe Infecté : Trojan-Downloader.Win32.Bagle.agb ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028911.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028912.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028913.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028917.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028918.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028919.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0029933.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030326.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030327.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030328.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030329.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030603.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031766.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031767.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031776.exe Infecté : Trojan-Downloader.Win32.Bagle.agb ignoré

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031779.exe Infecté : not-a-virus:FraudTool.Win32.VirusRemover.k ignoré

C:\WINDOWS\CSC\00000001 L'objet est verrouillé ignoré

C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\ODiag.evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\OSession.evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré

C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré

C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré

C:\WINDOWS\system32\drivers\sptd3661.sys L'objet est verrouillé ignoré

C:\WINDOWS\system32\g4.exe/stream/data0002 Infecté : Trojan-Clicker.Win32.Agent.cfq ignoré

C:\WINDOWS\system32\g4.exe/stream Infecté : Trojan-Clicker.Win32.Agent.cfq ignoré

C:\WINDOWS\system32\g4.exe NSIS: infecté - 2 ignoré

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré

D:\Nouveau dossier (9)\setup.exe Infecté : Trojan-Downloader.Win32.Bagle.agh ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE/WISE0013.BIN Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE/WISE0016.BIN Infecté : not-a-virus:AdWare.Win32.Agent.bzo ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE Infecté : not-a-virus:AdWare.Win32.Agent.bzo ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe ZIP: infecté - 3 ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd3.zip/setup.exe Infecté : Trojan-Downloader.Win32.Bagle.agh ignoré

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd3.zip ZIP: infecté - 1 ignoré

D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

D:\System Volume Information\_restore{D651D4F3-45F8-4D1C-959F-7FDDA50705F1}\RP770\A0318806.exe Infecté : not-a-virus:FraudTool.Win32.Takedawnload.a ignoré

E:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
Configuration: Windows XP
Internet Explorer 7.0

3 réponses

  1.
    chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    salut,

    fais ceci stp

    Télécharges : - CCleaner (n'installe pas la barre d'outil Yahoo)
    https://www.pcastuces.com/logitheque/ccleaner.htm
    Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corrigé ton registre .Lors de l'installation, avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 première.
    Une fois le prg instalé et lancé, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures"( Par la suite, laisse-le avec ses réglages par défaut. C'est tout ).

    Un tuto ( aide ):
    http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

    ---> Utilisation:
    ! déconnectes toi et fermes toutes les applications en cours !
    * vas dans "nettoyeur" : fait analyse puis nettoyage
    * vas dans "registre" : fait chercher les erreurs et réparer ( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

    ( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )

    ensuite

    Télécharge FindyKill de Chiquitine29

    ****Notes importantes****
    * si tu as le programme "Elibagla" sur ton PC , supprime le ( risque de conflit entre les deux outils ) .

    Fais un clic droit sur le lien, enregister sous .....sur le bureau

    http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

    Dézippe le sur le bureau

    Entre dans le dossier FindyKill

    double clic sur FindyKill.exe

    choisi l'option 1 (recherche)

    un rapport va s ouvrir, post le dans ta prochaine réponse stp

    Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
    1
  2. scheuch
     
    J'ai également passé combofix renommé en CF (combo-fix allait pas surement du fait que je l'ai deja utilisé ya trois mois?...)
    voici le rapport

    ComboFix 08-11-22.01 - Administrateur 2008-11-22 21:12:36.5 - NTFSx86 NETWORK
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.824 [GMT 1:00]
    Lancé depuis: c:\documents and settings\Administrateur\Bureau\CF.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert
    c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert\AntiSpywareExpert.lnk
    c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert\Uninstall AntiSpywareExpert.lnk
    c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner
    c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner\PCPrivacyCleaner.lnk
    c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner\Uninstall PCPrivacyCleaner.lnk
    c:\documents and settings\Mireille\Menu Démarrer\Programmes\Démarrage\Deewoo.lnk
    c:\documents and settings\Mireille\Menu Démarrer\Programmes\Démarrage\DW_Start.lnk
    c:\documents and settings\Sylvain\Application Data\PCPrivacyCleaner
    c:\documents and settings\Sylvain\Application Data\PCPrivacyCleaner\Logs\scns.log
    C:\InfoSat.txt
    c:\windows\bptswvdf.dll
    c:\windows\clofghls.dll
    c:\windows\IE4 Error Log.txt
    c:\windows\qxdepnbs.dll
    c:\windows\system32\Ati2evxx.dll
    c:\windows\system32\drivers\srosa2.sys
    c:\windows\system32\XwxHOnnn.ini
    c:\windows\system32\XwxHOnnn.ini2
    c:\windows\Tasks\flpdtunl.job
    c:\windows\Tasks\sfyciggl.job

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_BOONTY_GAMES
    -------\Legacy_SROSA
    -------\Service_Boonty Games

    ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-22 au 2008-11-22 ))))))))))))))))))))))))))))))))))))
    .

    2008-11-22 17:03 . 2008-11-22 17:03 <REP> d-------- c:\program files\AxBx
    2008-11-22 16:58 . 2008-11-22 16:58 <REP> d-------- c:\program files\Avira GmbH
    2008-11-22 16:10 . 2008-11-22 16:10 <REP> d--h----- c:\windows\system32\GroupPolicy
    2008-11-19 09:38 . 2008-11-19 09:38 <REP> d-------- c:\program files\McAfee.com
    2008-11-19 09:37 . 2008-11-19 09:39 <REP> d-------- c:\program files\McAfee
    2008-11-19 09:37 . 2008-11-19 09:38 <REP> d-------- c:\program files\Fichiers communs\McAfee
    2008-11-18 20:27 . 2008-11-18 20:27 <REP> d-------- c:\documents and settings\Sylvain\Application Data\TmpRecentIcons
    2008-11-18 20:27 . 2008-11-18 00:07 102,400 --a------ c:\windows\tskerxag.exe
    2008-11-18 19:33 . 2008-11-19 09:49 <REP> d-------- c:\program files\GenoPro
    2008-11-18 08:51 . 2008-11-18 08:51 119 --a------ C:\Delme.bat
    2008-11-17 15:38 . 2008-11-18 08:50 12 --a------ c:\windows\WPOSTAL.INI
    2008-11-17 15:38 . 2008-11-17 15:38 0 --a------ c:\windows\WD.INI
    2008-11-17 15:37 . 2008-11-18 08:51 <REP> d-------- C:\WPOSTAL
    2008-11-17 14:56 . 2008-11-17 14:56 <REP> d-------- C:\lccp
    2008-11-17 12:22 . 2008-11-17 14:30 <REP> d-------- c:\program files\Codutil 59
    2008-11-13 11:31 . 2008-11-13 12:14 <REP> d-------- c:\program files\Iminent
    2008-11-04 15:18 . 2008-11-04 15:18 225 --a------ c:\windows\wininit.ini
    2008-11-02 09:04 . 2008-11-02 09:04 <REP> d-------- C:\MWASPI
    2008-11-02 09:04 . 1997-06-11 19:01 30,208 --------- c:\windows\system32\WNASPI32.DLL
    2008-11-02 09:04 . 2000-03-29 17:11 8,096 --------- c:\windows\system32\drivers\MASPINT.SYS
    2008-11-02 09:04 . 1999-10-22 17:58 4,030 --------- c:\windows\system\WINASPI.DLL
    2008-11-02 09:04 . 1997-02-28 03:00 2,486 --------- c:\windows\system\AS16POST.BIN
    2008-11-02 09:04 . 2008-11-02 09:04 291 --a------ c:\windows\msfsetup.ini
    2008-11-02 08:49 . 2008-11-02 08:49 <REP> d-------- c:\program files\Sony Corporation
    2008-11-02 08:25 . 2008-11-02 09:20 420 --a------ c:\windows\PCPHOTO.INI
    2008-11-02 08:10 . 2008-11-02 08:10 <REP> d-------- c:\program files\PIXELA
    2008-10-26 23:29 . 2008-11-14 13:31 <REP> d-------- c:\documents and settings\Sylvain\Application Data\dvdcss

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-22 15:58 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-11-21 16:45 --------- d-----w c:\program files\Jewel Quest
    2008-11-20 11:14 --------- d-----w c:\program files\Dl_cats
    2008-11-19 09:26 --------- d-----w c:\documents and settings\Sylvain\Application Data\WinButler
    2008-11-19 08:53 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
    2008-11-19 08:04 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee
    2008-11-19 08:01 --------- d-----w c:\program files\Spybot - Search & Destroy
    2008-11-19 08:01 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2008-11-18 16:38 --------- d-----w c:\program files\Code Postal
    2008-11-18 10:50 --------- d-----w c:\program files\CDex_150
    2008-11-12 23:11 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
    2008-11-12 18:36 --------- d-----w c:\documents and settings\Mireille\Application Data\AdobeUM
    2008-11-07 08:00 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore
    2008-11-04 14:18 --------- d-----w c:\program files\Everest Poker
    2008-11-03 19:54 --------- d-----w c:\program files\Web Hottest Videos Personal Player
    2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-24 09:30 --------- d-----w c:\documents and settings\Sylvain\Application Data\AdobeUM
    2008-10-22 15:10 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2008-10-22 15:10 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2008-10-22 07:47 --------- d-----w c:\program files\Abbyy FineReader 6.0 Sprint
    2008-10-20 16:21 --------- d-----w c:\documents and settings\Sylvain\Application Data\DeepBurner
    2008-10-20 16:11 --------- d-----w c:\program files\Astonsoft
    2008-09-27 08:25 --------- d-----w c:\program files\Mario Forever
    2008-09-26 08:40 --------- d-----w c:\program files\BufferZone
    2008-09-01 21:50 45,056 ----a-w c:\windows\NCUNINST.EXE
    2008-06-11 10:11 0 ----a-w c:\program files\temp01
    2008-08-04 14:08 2 --shatr c:\windows\winstart.bat
    .

    ((((((((((((((((((((((((((((( snapshot@2008-08-21_16.09.17.96 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB873339\update\update.exe
    + 2008-11-21 17:15:50 666,624 ----a-w c:\windows\$hf_mig$\KB873339\update\update.exe
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB885835\update\update.exe
    + 2008-11-21 17:15:51 666,624 ----a-w c:\windows\$hf_mig$\KB885835\update\update.exe
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB885836\update\update.exe
    + 2008-11-21 17:15:51 666,624 ----a-w c:\windows\$hf_mig$\KB885836\update\update.exe
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB886185\update\update.exe
    + 2008-11-21 17:15:52 666,624 ----a-w c:\windows\$hf_mig$\KB886185\update\update.exe
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB887472\update\update.exe
    + 2008-11-21 17:15:53 666,624 ----a-w c:\windows\$hf_mig$\KB887472\update\update.exe
    - 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB888302\update\update.exe
    + 2008-11-21 17:15:54 666,624 ----a-w c:\windows\$hf_mig$\KB888302\update\update.exe
    - 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe
    + 2008-11-21 17:15:55 730,336 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe
    - 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB890859\update\update.exe
    + 2008-11-21 17:15:56 730,336 ----a-w c:\windows\$hf_mig$\KB890859\update\update.exe
    - 2008-08-19 15:29:33 666,624 ----a-w c:\windows\$hf_mig$\KB891781\update\update.exe
    + 2008-11-21 17:15:57 666,624 ----a-w c:\windows\$hf_mig$\KB891781\update\update.exe
    - 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB893756\update\update.exe
    + 2008-11-21 17:15:58 730,336 ----a-w c:\windows\$hf_mig$\KB893756\update\update.exe
    - 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB894391\update\update.exe
    + 2008-11-21 17:15:59 730,336 ----a-w c:\windows\$hf_mig$\KB894391\update\update.exe
    - 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB896358\update\update.exe
    + 2008-11-21 17:16:00 730,336 ----a-w c:\windows\$hf_mig$\KB896358\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB896423\update\update.exe
    + 2008-11-21 17:16:01 730,336 ----a-w c:\windows\$hf_mig$\KB896423\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB896428\update\update.exe
    + 2008-11-21 17:16:02 730,336 ----a-w c:\windows\$hf_mig$\KB896428\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB898461\update\update.exe
    + 2008-11-21 17:16:02 730,336 ----a-w c:\windows\$hf_mig$\KB898461\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB899587\update\update.exe
    + 2008-11-21 17:16:04 730,336 ----a-w c:\windows\$hf_mig$\KB899587\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB899591\update\update.exe
    + 2008-11-21 17:16:04 730,336 ----a-w c:\windows\$hf_mig$\KB899591\update\update.exe
    - 2008-08-19 15:29:34 727,776 ----a-w c:\windows\$hf_mig$\KB900485\update\update.exe
    + 2008-11-21 17:16:05 727,776 ----a-w c:\windows\$hf_mig$\KB900485\update\update.exe
    - 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB900725\update\update.exe
    + 2008-11-21 17:16:07 730,336 ----a-w c:\windows\$hf_mig$\KB900725\update\update.exe
    - 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB901017\update\update.exe
    + 2008-11-21 17:16:08 730,336 ----a-w c:\windows\$hf_mig$\KB901017\update\update.exe
    - 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB901214\update\update.exe
    + 2008-11-21 17:16:08 730,336 ----a-w c:\windows\$hf_mig$\KB901214\update\update.exe
    - 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB902400\update\update.exe
    + 2008-11-21 17:16:10 730,336 ----a-w c:\windows\$hf_mig$\KB902400\update\update.exe
    - 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB905414\update\update.exe
    + 2008-11-21 17:16:11 730,336 ----a-w c:\windows\$hf_mig$\KB905414\update\update.exe
    - 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB905749\update\update.exe
    + 2008-11-21 17:16:12 730,336 ----a-w c:\windows\$hf_mig$\KB905749\update\update.exe
    - 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB908519\update\update.exe
    + 2008-11-21 17:16:13 727,776 ----a-w c:\windows\$hf_mig$\KB908519\update\update.exe
    - 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB908531\update\update.exe
    + 2008-11-21 17:16:14 727,776 ----a-w c:\windows\$hf_mig$\KB908531\update\update.exe
    - 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB910437\update\update.exe
    + 2008-11-21 17:16:14 727,776 ----a-w c:\windows\$hf_mig$\KB910437\update\update.exe
    - 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB911280\update\update.exe
    + 2008-11-21 17:16:15 727,776 ----a-w c:\windows\$hf_mig$\KB911280\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB911562\update\update.exe
    + 2008-11-21 17:16:16 727,776 ----a-w c:\windows\$hf_mig$\KB911562\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB911927\update\update.exe
    + 2008-11-21 17:16:17 727,776 ----a-w c:\windows\$hf_mig$\KB911927\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB913580\update\update.exe
    + 2008-11-21 17:16:18 727,776 ----a-w c:\windows\$hf_mig$\KB913580\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB914388\update\update.exe
    + 2008-11-21 17:16:19 727,776 ----a-w c:\windows\$hf_mig$\KB914388\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB914389\update\update.exe
    + 2008-11-21 17:16:20 727,776 ----a-w c:\windows\$hf_mig$\KB914389\update\update.exe
    - 2008-08-19 15:29:36 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe
    + 2008-11-21 17:16:21 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB916595\update\update.exe
    + 2008-11-21 17:16:21 727,776 ----a-w c:\windows\$hf_mig$\KB916595\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB917344\update\update.exe
    + 2008-11-21 17:15:47 727,776 ----a-w c:\windows\$hf_mig$\KB917344\update\update.exe
    - 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB918118\update\update.exe
    + 2008-11-21 17:16:22 727,776 ----a-w c:\windows\$hf_mig$\KB918118\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB918439\update\update.exe
    + 2008-11-21 17:16:23 727,776 ----a-w c:\windows\$hf_mig$\KB918439\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB919007\update\update.exe
    + 2008-11-21 17:16:24 727,776 ----a-w c:\windows\$hf_mig$\KB919007\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920213\update\update.exe
    + 2008-11-21 17:16:25 727,776 ----a-w c:\windows\$hf_mig$\KB920213\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920670\update\update.exe
    + 2008-11-21 17:16:26 727,776 ----a-w c:\windows\$hf_mig$\KB920670\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920683\update\update.exe
    + 2008-11-21 17:16:27 727,776 ----a-w c:\windows\$hf_mig$\KB920683\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920685\update\update.exe
    + 2008-11-21 17:16:28 727,776 ----a-w c:\windows\$hf_mig$\KB920685\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920872\update\update.exe
    + 2008-11-21 17:16:29 727,776 ----a-w c:\windows\$hf_mig$\KB920872\update\update.exe
    - 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB922582\update\update.exe
    + 2008-11-21 17:16:30 727,776 ----a-w c:\windows\$hf_mig$\KB922582\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB922819\update\update.exe
    + 2008-11-21 17:16:31 727,776 ----a-w c:\windows\$hf_mig$\KB922819\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB923414\update\update.exe
    + 2008-11-21 17:16:32 727,776 ----a-w c:\windows\$hf_mig$\KB923414\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB923980\update\update.exe
    + 2008-11-21 17:16:33 727,776 ----a-w c:\windows\$hf_mig$\KB923980\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB924270\update\update.exe
    + 2008-11-21 17:16:33 727,776 ----a-w c:\windows\$hf_mig$\KB924270\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB924496\update\update.exe
    + 2008-11-21 17:16:34 727,776 ----a-w c:\windows\$hf_mig$\KB924496\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB925902\update\update.exe
    + 2008-11-21 17:16:35 727,776 ----a-w c:\windows\$hf_mig$\KB925902\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB926255\update\update.exe
    + 2008-11-21 17:16:36 727,776 ----a-w c:\windows\$hf_mig$\KB926255\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB926436\update\update.exe
    + 2008-11-21 17:16:37 727,776 ----a-w c:\windows\$hf_mig$\KB926436\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB927779\update\update.exe
    + 2008-11-21 17:16:38 727,776 ----a-w c:\windows\$hf_mig$\KB927779\update\update.exe
    - 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB927802\update\update.exe
    + 2008-11-21 17:16:39 727,776 ----a-w c:\windows\$hf_mig$\KB927802\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB927891\update\update.exe
    + 2008-11-21 17:16:40 727,776 ----a-w c:\windows\$hf_mig$\KB927891\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB928255\update\update.exe
    + 2008-11-21 17:16:41 727,776 ----a-w c:\windows\$hf_mig$\KB928255\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB928843\update\update.exe
    + 2008-11-21 17:16:42 727,776 ----a-w c:\windows\$hf_mig$\KB928843\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB929123\update\update.exe
    + 2008-11-21 17:16:43 727,776 ----a-w c:\windows\$hf_mig$\KB929123\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB930178\update\update.exe
    + 2008-11-21 17:16:44 727,776 ----a-w c:\windows\$hf_mig$\KB930178\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB930916\update\update.exe
    + 2008-11-21 17:16:45 727,776 ----a-w c:\windows\$hf_mig$\KB930916\update\update.exe
    - 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB931261\update\update.exe
    + 2008-11-21 17:15:48 727,776 ----a-w c:\windows\$hf_mig$\KB931261\update\update.exe
    - 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe
    + 2008-11-21 17:16:47 727,776 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe
    - 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB932168\update\update.exe
    + 2008-11-21 17:16:47 727,776 ----a-w c:\windows\$hf_mig$\KB932168\update\update.exe
    - 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe
    + 2008-11-21 17:16:48 727,776 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe
    - 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB935839\update\update.exe
    + 2008-11-21 17:16:49 727,776 ----a-w c:\windows\$hf_mig$\KB935839\update\update.exe
    - 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB935840\update\update.exe
    + 2008-11-21 17:16:50 727,776 ----a-w c:\windows\$hf_mig$\KB935840\update\update.exe
    - 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB936021\update\update.exe
    + 2008-11-21 17:16:51 727,776 ----a-w c:\windows\$hf_mig$\KB936021\update\update.exe
    - 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe
    + 2008-11-21 17:16:52 727,776 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe
    - 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938127\update\update.exe
    + 2008-11-21 17:16:53 727,776 ----a-w c:\windows\$hf_mig$\KB938127\update\update.exe
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2008-11-21 17:16:54 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    - 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938828\update\update.exe
    + 2008-11-21 17:16:55 727,776 ----a-w c:\windows\$hf_mig$\KB938828\update\update.exe
    - 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938829\update\update.exe
    + 2008-11-21 17:16:56 727,776 ----a-w c:\windows\$hf_mig$\KB938829\update\update.exe
    - 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe
    + 2008-11-21 17:16:57 727,776 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe
    - 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe
    + 2008-11-21 17:16:58 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe
    - 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe
    + 2008-11-21 17:16:59 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe
    - 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2008-11-21 17:17:00 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe
    + 2008-11-21 17:17:00 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe
    + 2008-11-21 17:17:02 727,776 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe
    + 2008-11-21 17:17:03 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe
    + 2008-11-21 17:17:04 727,776 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe
    + 2008-11-21 17:17:05 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe
    + 2008-11-21 17:15:49 727,776 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944533\update\update.exe
    + 2008-11-21 17:17:06 727,776 ----a-w c:\windows\$hf_mig$\KB944533\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe
    + 2008-11-21 17:17:07 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe
    - 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2008-11-21 17:17:08 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    - 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe
    + 2008-11-21 17:17:09 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe
    - 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2008-11-21 17:17:10 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    - 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB947864\update\update.exe
    + 2008-11-21 17:17:12 727,776 ----a-w c:\windows\$hf_mig$\KB947864\update\update.exe
    - 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2008-11-21 17:17:13 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    - 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2008-11-21 17:17:14 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    - 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2008-11-21 17:17:15 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    - 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950759\update\update.exe
    + 2008-11-21 17:17:17 767,352 ----a-w c:\windows\$hf_mig$\KB950759\update\update.exe
    - 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2008-11-21 17:17:18 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    - 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2008-11-21 17:17:19 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    - 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2008-11-21 17:17:20 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    - 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2008-11-21 17:17:22 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    - 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2008-11-21 17:17:23 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    - 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2008-11-21 17:17:26 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    - 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    + 2008-11-21 17:17:24 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    - 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2008-11-21 17:17:27 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    - 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2008-11-21 17:17:28 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    - 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2008-11-21 17:17:29 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    - 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2008-11-21 17:17:31 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    - 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB953838\update\update.exe
    + 2008-11-21 17:17:33 767,352 ----a-w c:\windows\$hf_mig$\KB953838\update\update.exe
    - 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2008-11-21 17:17:34 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2008-09-15 15:14:42 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP2QFE\win32k.sys
    + 2008-09-15 15:26:07 1,846,528 ----a-w c:\windows\$hf_mig$\KB954211\SP3GDR\win32k.sys
    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-11-21 17:17:36 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-08-20 05:33:47 1,024,512 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\browseui.dll
    + 2008-08-20 05:33:44 152,064 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\cdfview.dll
    + 2008-08-20 05:33:44 1,056,768 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\danim.dll
    + 2008-08-20 05:33:45 357,888 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\dxtmsft.dll
    + 2008-08-20 05:33:45 205,312 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\dxtrans.dll
    + 2008-08-20 05:33:45 55,808 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\extmgr.dll
    + 2008-08-19 09:38:57 18,432 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\iedw.exe
    + 2008-08-20 05:33:45 251,904 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\iepeers.dll
    + 2008-08-20 05:33:45 96,768 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\inseng.dll
    + 2008-08-20 05:33:46 16,384 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\jsproxy.dll
    + 2008-08-20 05:33:48 3,088,384 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mshtml.dll
    + 2008-08-20 05:33:46 449,024 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mshtmled.dll
    + 2008-08-20 05:33:45 146,432 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\msrating.dll
    + 2008-08-20 05:33:45 532,480 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mstime.dll
    + 2008-08-20 05:33:45 39,424 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\pngfilt.dll
    + 2008-08-20 05:33:46 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\shdocvw.dll
    + 2008-08-20 05:33:46 474,624 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\shlwapi.dll
    + 2008-08-19 09:51:37 370,176 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\spru040c.dll
    + 2008-08-20 05:33:47 621,056 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\urlmon.dll
    + 2008-08-20 05:33:46 671,744 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\wininet.dll
    + 2008-08-20 05:10:12 3,088,896 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\mshtml.dll
    + 2008-08-20 05:10:11 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\shdocvw.dll
    + 2008-08-20 05:10:11 620,544 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\urlmon.dll
    + 2008-08-20 05:10:11 670,208 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\wininet.dll
    + 2008-08-20 05:07:31 3,088,896 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\mshtml.dll
    + 2008-08-20 05:07:27 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\shdocvw.dll
    + 2008-08-20 05:07:28 621,056 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\urlmon.dll
    + 2008-08-20 05:07:28 670,720 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956390\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956390\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956390\update\spcustom.dll
    + 2008-11-21 17:17:40 767,352 ----a-w c:\windows\$hf_mig$\KB956390\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956390\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2008-11-21 17:17:41 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-08-14 09:48:52 138,368 ----a-w c:\windows\$hf_mig$\KB956803\SP2QFE\afd.sys
    + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3GDR\afd.sys
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2008-11-21 17:17:42 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:39:07 2,144,768 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlmp.exe
    + 2008-08-14 13:39:12 2,065,024 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
    + 2008-08-14 13:39:03 2,022,912 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrpamp.exe
    + 2008-08-14 13:39:11 2,188,032 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
    + 2008-08-14 13:23:44 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlmp.exe
    + 2008-08-14 13:23:49 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
    + 2008-08-14 13:23:44 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrpamp.exe
    + 2008-08-14 13:23:49 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2008-11-21 17:17:45 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-08-28 10:35:33 333,056 ----a-w c:\windows\$hf_mig$\KB957095\SP2QFE\srv.sys
    + 2008-09-08 10:41:42 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3GDR\srv.sys
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2008-11-21 17:17:46 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
    + 2007-07-27 06:28:58 234,872 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
    + 2007-07-27 08:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
    + 2006-10-18 20:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
    + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll
    + 2008-03-20 08:09:22 1,845,376 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2008-06-23 15:39:58 1,024,000 -c----w c:\windows\$NtUninstallKB956390$\browseui.dll
    + 2008-06-23 15:39:58 152,064 -c----w c:\windows\$NtUninstallKB956390$\cdfview.dll
    + 2008-06-23 15:39:59 1,056,768 -c----w c:\windows\$NtUninstallKB956390$\danim.dll
    + 2008-06-23 15:40:00 357,888 -c----w c:\windows\$NtUninstallKB956390$\dxtmsft.dll
    + 2008-06-23 15:40:00 205,312 -c----w c:\windows\$NtUninstallKB956390$\dxtrans.dll
    + 2008-06-23 15:40:00 55,808 -c----w c:\windows\$NtUninstallKB956390$\extmgr.dll
    + 2008-06-23 09:49:29 18,432 -c----w c:\windows\$NtUninstallKB956390$\iedw.exe
    + 2008-06-23 15:40:00 251,392 -c----w c:\windows\$NtUninstallKB956390$\iepeers.dll
    + 2008-06-23 15:40:00 96,768 -c----w c:\windows\$NtUninstallKB956390$\inseng.dll
    + 2008-06-23 15:40:00 16,384 -c----w c:\windows\$NtUninstallKB956390$\jsproxy.dll
    + 2008-06-23 15:40:02 3,080,704 -c----w c:\windows\$NtUninstallKB956390$\mshtml.dll
    + 2008-06-23 15:40:03 449,024 -c----w c:\windows\$NtUninstallKB956390$\mshtmled.dll
    + 2008-06-23 15:40:03 146,432 -c----w c:\windows\$NtUninstallKB956390$\msrating.dll
    + 2008-06-23 15:40:04 532,480 -c----w c:\windows\$NtUninstallKB956390$\mstime.dll
    + 2008-06-23 15:40:04 39,424 -c----w c:\windows\$NtUninstallKB956390$\pngfilt.dll
    + 2008-06-23 15:40:05 1,495,040 -c----w c:\windows\$NtUninstallKB956390$\shdocvw.dll
    + 2008-06-23 15:40:06 474,624 -c----w c:\windows\$NtUninstallKB956390$\shlwapi.dll
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956390$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB956390$\spuninst\updspapi.dll
    + 2008-06-23 15:40:06 617,984 -c----w c:\windows\$NtUninstallKB956390$\urlmon.dll
    + 2008-06-23 15:40:08 663,552 -c----w c:\windows\$NtUninstallKB956390$\wininet.dll
    + 2008-07-03 09:42:35 370,176 -c----w c:\windows\$NtUninstallKB956390$\xpsp3res.dll
    + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe
    + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll
    + 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlmp.exe
    + 2007-02-28 16:02:36 2,059,648 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\$NtUninstallKB956841$\ntkrpamp.exe
    + 2007-02-28 16:02:36 2,182,400 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe
    + 2008-07-09 07:40:35 406,392 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll
    + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe
    + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2008-09-03 16:02:58 7,680 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-09-03 16:02:49 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-09-03 16:02:58 33,792 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-09-03 16:10:30 8,192 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-09-03 16:10:33 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-09-03 16:02:58 4,608 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-09-03 16:02:58 26,112 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-09-03 16:10:44 720,896 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-09-03 16:02:48 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-09-03 16:10:33 299,008 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-09-03 16:02:50 6,144 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
    + 2008-09-03 16:02:48 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-09-03 16:02:48 32,768 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-09-03 16:02:48 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-09-03 16:02:58 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll
    + 2008-09-03 16:10:41 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
    + 2008-09-03 16:02:58 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-09-03 16:10:38 303,104 ----a-w c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2008-09-03 16:10:41 1,294,336 ----a-w c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
    + 2008-09-03 16:10:31 1,703,936 ----a-w c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-09-03 16:10:43 90,112 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-09-03 16:02:59 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-09-03 16:10:37 466,944 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-09-03 16:10:35 241,664 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-09-03 16:10:35 66,560 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
    + 2008-09-03 16:10:40 372,736 ----a-w c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-09-03 16:10:45 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-09-03 16:10:39 323,584 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-09-03 16:10:36 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-09-03 16:10:37 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-09-03 16:10:42 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-09-03 16:10:29 819,200 ----a-w c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2008-09-03 16:10:34 57,344 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-09-03 16:10:32 573,440 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-09-07 10:01:08 1,265,664 ----a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-09-03 16:10:36 2,052,096 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-09-03 16:10:39 1,339,392 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
    + 2008-09-07 10:01:09 1,232,896 ----a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    + 2008-11-13 10:27:28 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-11-13 10:27:39 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-11-13 10:27:40 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-11-13 10:27:40 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2008-11-13 10:27:35 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2008-11-13 10:27:23 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-11-13 10:27:23 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-11-13 10:27:48 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2008-11-13 10:27:31 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-11-13 10:27:27 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-11-13 10:27:22 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2008-11-13 10:27:24 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-11-13 10:27:37 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-11-13 10:27:38 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-11-13 10:27:38 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-11-13 10:27:25 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2008-11-13 10:27:26 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2008-11-13 10:27:26 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2008-11-13 10:27:27 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2008-11-13 10:27:25 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-11-13 10:27:51 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-11-13 10:27:50 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2008-11-13 10:27:20 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-11-13 10:27:49 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-11-13 10:27:52 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2008-11-13 10:27:22 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-11-13 10:27:21 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-11-13 10:27:21 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-11-13 10:27:44 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2008-11-13 10:27:29 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-11-13 10:27:45 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2008-11-13 10:27:41 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2008-11-13 10:27:23 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2008-11-13 10:27:36 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-11-13 10:27:30 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2008-11-13 10:27:29 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-11-13 10:27:30 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-11-13 10:27:46 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-11-13 10:27:42 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-11-13 10:27:47 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-11-13 10:27:42 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-11-13 10:27:43 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-11-13 10:27:28 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-11-13 10:27:31 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-11-13 10:27:48 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2008-11-13 10:27:32 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-11-13 10:27:33 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-11-13 10:27:33 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-11-13 10:27:34 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2008-11-13 10:27:45 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-11-13 10:33:05 26,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\7527619a8527124493b75df432f678ec\Accessibility.ni.dll
    + 2008-11-13 10:33:18 958,464 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\agsXMPP\f2a674f4971b8b408c721eb8bd534bb0\agsXMPP.ni.dll
    + 2008-11-13 10:47:44 860,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\0dcf76bf3805674ebba922446ff935e1\AspNetMMCExt.ni.dll
    + 2008-11-13 10:47:45 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\e91b028d4fc7274e94ad582424f54f6a\CustomMarshalers.ni.dll
    + 2008-11-13 10:47:44 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f3329b73547c844fa823b9334f2de5c9\dfsvc.ni.exe
    + 2008-11-13 10:32:00 671,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\IMBooster\9040ef9e3f314f439b826e0a8ac8e14e\IMBooster.ni.exe
    + 2008-11-13 10:33:23 561,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.AxImp\31fb71173182614db446f981891746fe\Iminent.AxImp.ni.dll
    + 2008-11-13 10:33:13 442,368 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Business\2a6747a25642164faa24cd08e73de851\Iminent.Business.ni.dll
    + 2008-11-13 10:33:22 2,760,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Services\a1d889f42123204ba2f0c005204250ee\Iminent.Services.ni.dll
    + 2008-11-13 10:32:05 888,832 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Windows\b97894f63b6d8041acc156de1402267e\Iminent.Windows.ni.dll
    + 2008-11-13 10:33:15 692,224 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Workflow\59a24c3d364d2347bad346159a146e47\Iminent.Workflow.ni.dll
    + 2008-11-13 10:47:47 880,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\bdbdcd4dcb2cd64fae17c1bcc6715b12\Microsoft.Build.Engine.ni.dll
    + 2008-11-13 10:47:47 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\56b5329463f6554aaa678d5301f4605c\Microsoft.Build.Framework.ni.dll
    + 2008-11-13 10:47:51 1,691,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d8d4835b54f01a4ea805c1ec0aefb7da\Microsoft.Build.Tasks.ni.dll
    + 2008-11-13 10:47:51 163,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2420b95bf8ad73409eaa4de914563cab\Microsoft.Build.Utilities.ni.dll
    + 2008-11-13 10:33:24 208,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX.A#\2db1ed91104e324d97ca3b846376c3fd\Microsoft.DirectX.AudioVideoPlayback.ni.dll
    + 2008-11-13 10:33:26 1,036,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX.D#\6f2bec2204163948946ccb3194fee581\Microsoft.DirectX.Direct3D.ni.dll
    + 2008-11-13 10:33:27 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX\d537dc4d5d646345a59fe212232141fa\Microsoft.DirectX.ni.dll
    + 2008-11-13 10:47:56 1,724,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c3729472bc21364cbd1e43c094253c29\Microsoft.VisualBasic.ni.dll
    + 2008-11-13 10:32:17 17,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\02bacde773f7474b92816fc5f6d92100\Microsoft.VisualC.ni.dll
    + 2008-11-13 10:28:39 11,411,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f627e31ff1d4fa4993935bb35144d16d\mscorlib.ni.dll
    + 2008-11-13 10:33:24 44,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\9e2e32c7e2b1ef45874d0dc34fde3feb\stdole.ni.dll
    + 2008-11-13 10:33:03 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\1ebbf31b5f81054485de16d6be007958\System.Configuration.Install.ni.dll
    + 2008-11-13 10:32:07 962,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\6c7fb6ed8486c741b9ea229a1ae13b2e\System.Configuration.ni.dll
    + 2008-11-13 10:33:11 1,183,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\e0127a5cc9197447960051f144fcfad1\System.Data.OracleClient.ni.dll
    + 2008-11-13 10:32:14 2,703,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\07d92ad2dfe8d642840bb88a9efb4635\System.Data.SqlXml.ni.dll
    + 2008-11-13 10:30:13 6,688,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\07bd339c0ac6bd43940389a876867bfa\System.Data.ni.dll
    + 2008-11-13 10:33:08 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\067b000155e116439b0beed643f38af4\System.Deployment.ni.dll
    + 2008-11-13 10:31:08 10,723,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\84122489d339534c8b906499cf6711a1\System.Design.ni.dll
    + 2008-11-13 10:33:02 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6f93fd26530b384ca1e6928be20db4de\System.DirectoryServices.Protocols.ni.dll
    + 2008-11-13 10:32:24 1,220,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ff105785fb642d42ac35e6bf63e1102d\System.DirectoryServices.ni.dll
    + 2008-11-13 10:29:08 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\bdea27b85df937428ec7e4ee6d6cbc4d\System.Drawing.Design.ni.dll
    + 2008-11-13 10:29:14 1,626,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\156ca32e17ed57429041551de0d61d3a\System.Drawing.ni.dll
    + 2008-11-13 10:32:21 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d3d866f80b3e54cacf986410abb6210\System.EnterpriseServices.ni.dll
    + 2008-11-13 10:32:21 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d3d866f80b3e54cacf986410abb6210\System.EnterpriseServices.Wrapper.dll
    + 2008-11-13 10:32:26 815,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\1f030996ed73be4e8aa688062daf56c6\System.Runtime.Remoting.ni.dll
    + 2008-11-13 10:33:04 339,968 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\0a7f897c7f488f4a866ccb9ffaae6268\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2008-11-13 10:32:16 729,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\43d2c3c1f20f6247b012246f73ebfc43\System.Security.ni.dll
    + 2008-11-13 10:33:03 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a53c614c8cc7f04fbf9677f6575f866e\System.ServiceProcess.ni.dll
    + 2008-11-13 10:32:19 684,032 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4706d836616eec43b5e309d67027b13e\System.Transactions.ni.dll
    + 2008-11-13 10:48:02 2,310,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a4b90d17ae9aa4a9c39b7f4e4b89ea5\System.Web.Mobile.ni.dll
    + 2008-11-13 10:33:08 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b3b59c44902a804083df27f0b23876b6\System.Web.RegularExpressions.ni.dll
    + 2008-11-13 10:33:00 1,945,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f7df5e448710b7448b9e88e6f0267a0b\System.Web.Services.ni.dll
    + 2008-11-13 10:32:54 11,808,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\2085e28b90c4e94caf8760a731083982\System.Web.ni.dll
    + 2008-11-13 10:29:41 13,107,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2e9514fec985444da732c61eaf0bbec0\System.Windows.Forms.ni.dll
    + 2008-11-13 10:29:54 5,640,192 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\01ba4ab822edff4f9f115d559caec019\System.Xml.ni.dll
    + 2008-11-13 10:29:05 8,093,696 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\40eb45e0cb16bd4fafae2cadea212b08\System.ni.dll
    + 2008-09-07 10:01:24 61,440 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_6c10a18e\CustomMarshalers.dll
    + 2008-09-07 10:01:58 118,784 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_d5b7da66\CustomMarshalers.dll
    + 2008-09-07 10:01:52 3,391,488 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_1ab1eb87\mscorlib.dll
    + 2008-09-07 10:02:19 8,908,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_a3f1d3e2\mscorlib.dll
    + 2008-09-07 10:02:12 3,395,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2e0ba750\System.Design.dll
    + 2008-09-07 10:01:45 1,470,464 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_6cfbd4af\System.Design.dll
    + 2008-09-07 10:01:59 192,512 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b6456224\System.Drawing.Design.dll
    + 2008-09-07 10:01:26 90,112 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_e2fda4fa\System.Drawing.Design.dll
    + 2008-09-07 10:02:14 2,244,608 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_93cf9a54\System.Drawing.dll
    + 2008-09-07 10:01:47 835,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_d4d06b10\System.Drawing.dll
    + 2008-09-07 10:01:33 3,018,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4366c04d\System.Windows.Forms.dll
    + 2008-09-07 10:02:05 7,884,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_a4e66254\System.Windows.Forms.dll
    + 2008-09-07 10:02:09 5,513,216 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_1264eb63\System.Xml.dll
    + 2008-09-07 10:01:40 2,088,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_41f7e7c5\System.Xml.dll
    + 2008-09-07 10:01:58 4,788,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_202b9e1b\System.dll
    + 2008-09-07 10:01:21 1,966,080 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_331bf0ca\System.dll
    + 2002-07-25 17:13:18 24,576 ----a-w c:\windows\Downloaded Program Files\dwusplay.dll
    + 2002-07-25 17:13:12 196,608 ----a-w c:\windows\Downloaded Program Files\dwusplay.exe
    + 2004-06-16 05:02:10 323,584 ----a-w c:\windows\Downloaded Program Files\isusweb.dll
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    - 2007-02-28 16:02:21 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 13:44:35 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 16:02:36 2,059,648 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 13:44:39 2,059,776 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 16:02:21 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 13:44:33 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 16:02:36 2,182,400 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 13:44:37 2,182,400 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE
    + 2008-08-22 15:16:48 3,457,024 ----a-w c:\windows\ERUNT\SDFIX\Users\00000001\ntuser.dat
    + 2008-08-22 15:16:48 61,440 ----a-w c:\windows\ERUNT\SDFIX\Users\00000002\UsrClass.dat
    + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE
    + 2008-08-22 15:16:35 3,457,024 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat
    + 2008-08-22 15:16:35 61,440 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat
    + 2007-09-14 19:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\MSO.DLL
    + 2007-08-28 22:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\OGL.DLL
    + 2008-11-12 23:07:48 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2006-08-20 16:18:18 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    + 2008-11-12 23:12:00 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    - 2006-08-20 16:18:19 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    + 2008-11-12 23:12:00 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    - 2006-08-20 16:18:18 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    + 2008-11-12 23:12:00 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    - 2006-08-20 16:18:19 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    + 2008-11-12 23:12:00 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    - 2006-08-20 16:18:19 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    + 2008-11-12 23:12:00 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    - 2006-08-20 16:18:19 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    + 2008-11-12 23:12:00 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    - 2006-08-20 16:18:18 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    + 2008-11-12 23:12:00 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    - 2006-08-20 16:18:18 922,384 ----a-r c:\windows\Installer\{9
    0
  3. jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645
     
    bonjour , peux tu passer ccleaner avec les réglages donné et puis me mettre un rapport ZHPDiag , Merci

    télécharge Ccleaner à partir de cette adresses

    .enregistres le sur le bureau
    .double-cliques sur le fichier pour lancer l'installation
    .sur la fenêtre de l'installation langage bien choisir français et OK
    .cliques sur suivant
    .lis la licence et j'accepte
    .cliques sur suivant
    .la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner
    .cliques sur intaller
    .cliques sur fermer
    .double-cliques sur l'icône de Ccleaner pour l'ouvrir
    .une fois ouvert tu cliques sur option et puis avancé
    .tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures
    .cliques sur nettoyeur
    .cliques sur windows et dans la colonne avancé
    .cochesla première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la
    .cliques sur analyse une fois l'analyse terminé
    .cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien
    .cliques maintenant sur registre et puis sur rechercher les erreurs
    .laisses tout cochées et cliques sur réparrer les erreurs sélectionnées
    .il te demande de sauvegarder OUI
    .tu lui donnes un nom pour pouvoir la retrouver et enregistre
    .cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
    .il supprime et fermer tu vériffis en relancant rechercher les erreurs
    .tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
    .tu peux fermer Ccleaner

    pour aider si besion tutoriel: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

    *******************************************************************************************

    Ouvres ce lien et télécharges ZHPDiag sur ton bureau :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    .cliques droit dessus et extraire tous
    .ouvres le nouveau dossier ZHPDiag
    .double clique sur la seringue ZHPDiag
    .cliques sur tous
    .cliques sur la loupe attend quelque minutes
    .cliques sur l'appariel photos
    .enregistres le de façon à le retrouver
    .tu fermes ZHPDiag
    . tu ouvres ton rapport ZHPDiag
    .cliques sur édition
    .et puis tous sélectionner
    .et recliques sur édition
    .coller
    .tu reviens sur le forum et dans le cadre de la discution tu cliques droit dans le cadre de discution
    .et coller

    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Erreur 0x800700E1
Didiervd -
Viktimz -

11 réponses
Virus dans filezilla
balnelius10 -
fabul -

9 réponses