Popups adultfriendfinder casino antivirus2009Résolu/Fermé

Question

Bonjour,

Voilà le problème comme indiqué dans le titre, avec en plus des erreurs de script, des ralentissements et même parfois pire, l'ordinateur complètement figé.

Ca fait 3 jours que j'essaie de m'en débarasser avec antivir, spybot, ad-aware, superantispyware, navilog, ccleaner, trojanhunter,  combofix, spyware terminator, vundofix etc...

Rien n'a marché, le plus efficace semblait être navilog et spyware terminator mais la vermine s'est à nouveau répandue dans l'ordi après redémarrage.

Dans windows system 32 il y a un sale dll appelé gurelido.dll qui n'arrête pas de se recréer essaye d'infecter toutes sortes de choses.

Voilà le rapport hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:02, on 2008-12-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\LOGI_MWX.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\Nicolas\Bureau\Games\utorrent.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\cmd.execf
C:\WINDOWS\system32\findstr.exe
c:\program files\avira\antivir personaledition classic\avcenter.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
C:\Documents and Settings\Nicolas\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {53E12A99-CD13-4EBF-A367-346453B0DDCD} - C:\WINDOWS\system32\khfFUOig.dll (file missing)
O2 - BHO: (no name) - {66b8516a-c4fd-4bf2-b96c-ee0f74419d30} - C:\WINDOWS\system32\viruvupe.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [c8584b90] rundll32.exe "C:\WINDOWS\system32\zuzisoge.dll",b
O4 - HKLM\..\Run: [CPMcb6b780c] Rundll32.exe "C:\WINDOWS\system32\suzeyiji.dll",a
O4 - HKLM\..\Run: [seyofudavu] Rundll32.exe "C:\WINDOWS\system32\gurelido.dll",s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [seyofudavu] Rundll32.exe "C:\WINDOWS\system32\gurelido.dll",s (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Graph.lnk = C:\WINDOWS\system32\Graphic.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {377FF862-62E0-4F33-B6E5-F58E0BC0F209} (NlsComm Component Class) - https://www.hanbiton.com/home/error.aspx
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {987ECFCE-E607-4D52-B2C5-2EA1F6F303C4} (WinlessActiveX Control) - http://www.pangya.com/PangyaLauncher/PangyaLauncher.cab
O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{645DDFA0-4DDA-4CAC-B3F5-2A656C7C1178}: NameServer = 192.168.1.1,213.36.80.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{CACC0F3E-96B9-47BA-8752-97751D917011}: NameServer = 192.168.1.1,213.36.80.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - AppInit_DLLs: aasmrr.dll C:\WINDOWS\system32\buzalevu.dll c:\windows\system32\suzeyiji.dll
O20 - Winlogon Notify: ssqRHYrS - ssqRHYrS.dll (file missing)
O20 - Winlogon Notify: yayaWnom - yayaWnom.dll (file missing)
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\suzeyiji.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\suzeyiji.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.exe
O23 - Service: License Management Service ESD - Unknown owner - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: {crel0ntrcsa - Unknown owner - (no file)

Lyonnais92 · Answer

Bonjour,

poste le dernier rapport de Combofix.

===================

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau :

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)

=====================

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier  C:\WINDOWS\system32\suzeyiji.dll

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse. 

Si VirusTotal indique que le fichier a déjà été analysé, cliquer sur le bouton Reanalyse le fichier maintenant 

=======================

Fais aussi analyser :

C:\WINDOWS\system32\gurelido.dll

lousticvoyager · Answer

ComboFix 08-11-30.01 - Nicolas 2008-12-02 2:11:27.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1299 [GMT 1:00] Lancé depuis: c:\documents and settings\Nicolas\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat c:\windows\system32\akoripoj.ini c:\windows\system32\azivubeb.ini c:\windows\system32\barihuye.dll c:\windows\system32\buzalevu.dll c:\windows\system32\giOUFfhk.ini c:\windows\system32\giOUFfhk.ini2 c:\windows\system32\jopiroka.dll c:\windows\system32\oatpuuyh.ini c:\windows\Tasks\iiubfcpf.job . ---- Previous Run ------- . c:\program files\webmediaplayer c:\program files\webmediaplayer\Conditions générales.url c:\program files\webmediaplayer\Confidentialité.url c:\program files\webmediaplayer\resources\languages.xml c:\program files\webmediaplayer\resources\webmedias c:\program files\webmediaplayer\skins\classic.skn c:\program files\webmediaplayer\sqlite3.dll c:\program files\webmediaplayer\uninst.exe c:\program files\webmediaplayer\Website.url c:\windows\pack.epk c:\windows\system32\nvs2.inf ----- BITS: Il y a peut-être des sites infectés ----- hxxp://77.74.48.105 . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\npf ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-02 au 2008-12-02 )))))))))))))))))))))))))))))))))))) . 2008-12-02 01:32 . 2008-12-02 01:42 d-------- C:\ToolBar SD 2008-12-02 01:18 . 2008-12-02 01:18 d-------- c:\program files\TeaTimer (Spybot - Search & Destroy) 2008-12-02 01:18 . 2008-12-02 01:18 d-------- c:\program files\SDHelper (Spybot - Search & Destroy) 2008-12-02 01:18 . 2008-12-02 01:18 d-------- c:\program files\Misc. Support Library (Spybot - Search & Destroy) 2008-12-02 01:18 . 2008-12-02 01:18 d-------- c:\program files\File Scanner Library (Spybot - Search & Destroy) 2008-12-02 00:16 . 2008-12-02 02:21 d-------- c:\program files\Crawler 2008-12-01 13:37 . 2008-12-01 13:37 d-------- C:\VundoFix Backups 2008-11-30 23:53 . 2008-12-02 01:47 3,418 --a------ c:\windows\system32\BIN_STRSBW.SPT 2008-11-30 22:58 . 2008-12-02 02:19 d-------- c:\program files\Spyware Terminator 2008-11-30 22:58 . 2008-12-02 02:01 d-------- c:\documents and settings\Nicolas\Application Data\Spyware Terminator 2008-11-30 22:58 . 2008-12-02 00:49 d-------- c:\documents and settings\All Users\Application Data\Spyware Terminator 2008-11-30 22:58 . 2008-11-30 22:58 142,592 --a------ c:\windows\system32\drivers\sp_rsdrv2.sys 2008-11-30 15:46 . 2008-11-30 23:53 d-------- c:\program files\SUPERAntiSpyware 2008-11-30 15:46 . 2008-11-30 23:53 d-------- c:\documents and settings\Nicolas\Application Data\SUPERAntiSpyware.com 2008-11-30 15:46 . 2008-11-30 15:46 d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2008-11-30 14:33 . 2008-11-30 14:33 d-------- c:\program files\CCleaner 2008-11-29 21:26 . 2008-11-29 21:26 d-------- c:\documents and settings\All Users\Application Data\n7-89-o9-3r-4t-r9 2008-11-29 21:10 . 2008-11-29 21:35 d-------- c:\documents and settings\Nicolas\Application Data\GameHouse 2008-11-29 13:49 . 2008-11-30 23:53 d-------- c:\program files\Fichiers communs\Wise Installation Wizard 2008-11-29 00:13 . 2008-11-29 00:13 d-------- c:\documents and settings\Nicolas\Application Data\Pogo Games 2008-11-29 00:02 . 2008-11-29 00:02 d-------- c:\program files\Pogo To Go 2008-11-28 23:57 . 2008-11-30 00:43 d-------- C:\Lop SD 2008-11-28 22:25 . 2008-11-28 22:25 0 --a------ c:\windows\LiveBilliards.INI 2008-11-28 22:08 . 2008-11-30 16:22 d-------- c:\program files\Live Billiards Deluxe 2008-11-27 21:18 . 2007-08-05 00:13 d-------- c:\program files\help 2008-11-27 21:18 . 2007-08-05 00:13 d-------- c:\program files\data 2008-11-27 21:18 . 2007-08-05 13:41 1,077,248 --a------ c:\program files\MiniGolfMayhem.exe 2008-11-27 21:18 . 2004-10-18 17:04 161,280 --a------ c:\program files\fmod.dll 2008-11-27 21:18 . 2008-11-27 21:21 8 --a------ c:\program files\temp.dat 2008-11-27 21:17 . 2008-09-15 14:37 196,608 --a------ c:\windows\system32\Graphic.exe 2008-11-27 20:18 . 2008-11-27 20:18 d-------- c:\documents and settings\All Users\Application Data\TEMP 2008-11-27 20:18 . 2008-11-27 20:18 d-------- c:\documents and settings\All Users\Application Data\MinigolfAdventures 2008-11-27 20:10 . 2008-11-30 23:50 d-------- c:\windows\3D Ultra Minigolf Adventures 2008-11-25 21:05 . 2008-11-25 21:06 d-------- c:\program files\uusee 2008-11-25 14:42 . 2008-11-25 14:42 d-------- c:\windows\Rocket Bowl 2008-11-25 14:40 . 2008-11-25 14:40 d-------- c:\windows\Gutterball 2 2008-11-25 14:30 . 2008-11-25 14:30 d-------- c:\windows\Saints & Sinners Bowling 2008-11-25 14:30 . 2008-11-25 14:43 d-------- c:\program files\Saints & Sinners Bowling 2008-11-23 15:26 . 2008-11-23 15:26 d-------- c:\documents and settings\All Users\Application Data\HipSoft 2008-11-23 15:24 . 2008-11-23 15:25 d-------- c:\program files\Flip Words 2 2008-11-23 00:44 . 2008-11-23 00:44 d-------- c:\windows\Elf Bowling - Hawaiian Vacation 2008-11-23 00:44 . 2008-11-23 00:44 d-------- c:\program files\Elf Bowling - Hawaiian Vacation 2008-11-23 00:44 . 2008-11-24 22:00 d-------- c:\documents and settings\All Users\Application Data\MumboJumbo 2008-11-22 20:49 . 2008-11-22 20:49 d-------- c:\program files\Veetle 2008-11-22 20:49 . 2008-11-22 20:49 48,396 --a------ c:\windows\UninstVeetleTVPlayer.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-02 01:21 14,317,600 --sha-w c:\windows\system32\drivers\fidbox.dat 2008-12-02 01:18 8,394,808 ----a-w c:\windows\Internet Logs\tvDebug.zip 2008-12-02 01:17 171,800 --sha-w c:\windows\system32\drivers\fidbox.idx 2008-12-02 00:27 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2008-12-02 00:23 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-12-01 21:46 2,334,720 ----a-w c:\windows\Internet Logs\xDB12.tmp 2008-12-01 14:05 --------- d-----w c:\documents and settings\Nicolas\Application Data\uTorrent 2008-11-30 22:51 --------- d-----w c:\program files\Navilog1 2008-11-29 22:25 --------- d-----w c:\program files\uTorrent 2008-11-29 20:35 --------- d-----w c:\program files\GameHouse 2008-11-29 13:55 --------- d-----w c:\program files\MagicISO 2008-11-29 12:55 --------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft 2008-11-29 12:53 --------- d-----w c:\program files\Lavasoft 2008-11-28 23:44 --------- d-----w c:\program files\eMule 2008-11-28 22:49 --------- d-----w c:\program files\Malwarebytes' Anti-Malware 2008-11-27 20:21 552 ----a-w c:\program files\saved.cfg 2008-11-27 20:21 3,902 ----a-w c:\program files\log.txt 2008-11-27 20:20 0 ----a-w c:\program files\Console.log 2008-11-27 20:20 --------- d-----w c:\program files\temp 2008-11-14 21:16 --------- d-----w c:\program files\Winamp 2008-11-14 15:39 --------- d-----w c:\program files\Ricochet Infinity 2008-11-10 11:02 --------- d--h--w c:\program files\InstallShield Installation Information 2008-10-27 19:45 2,097,664 ----a-w c:\windows\Internet Logs\xDB11.tmp 2008-10-27 17:59 --------- d-----w c:\program files\OpenOffice.org 3 2008-10-27 17:45 --------- d-----w c:\documents and settings\Nicolas\Application Data\OpenOffice.org 2008-10-22 15:10 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2008-10-22 15:10 15,504 ----a-w c:\windows\system32\drivers\mbam.sys 2008-10-19 23:39 --------- d-----w c:\program files\Informatik Inc 2008-10-19 23:39 --------- d-----w c:\documents and settings\Nicolas\Application Data\Infothek Scan 2008-10-19 22:27 --------- d-----w c:\program files\ma-config.com 2008-10-19 22:27 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-10-19 18:23 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2008-10-18 21:11 --------- d-----w c:\program files\Micro Application 2008-10-12 12:34 --------- d-----w c:\documents and settings\Nicolas\Application Data\Skyline 2008-10-12 00:54 --------- d-----w c:\program files\Skyline 2008-10-12 00:54 --------- d-----w c:\documents and settings\All Users\Application Data\Skyline 2008-10-11 15:19 --------- d-----w c:\program files\TVUPlayer 2008-10-11 15:19 --------- d-----w c:\documents and settings\All Users\Application Data\TVU Networks 2008-09-23 11:33 1,965,568 ----a-w c:\windows\Internet Logs\xDB10.tmp 2008-09-04 10:52 246,272 ----a-w c:\windows\system32\ConnAPI.dll 2008-01-13 01:14 19,864 ----a-w c:\documents and settings\Nicolas\Application Data\GDIPFONTCACHEV1.DAT 2005-05-06 13:30 75 ----a-w c:\program files\config.cfg 2002-08-27 16:40 55,313 ----a-w c:\program files\viewsonicinstruct_xp.pdf 2002-04-16 10:27 5 --sha-w c:\windows\system32\CdI5T.drv . ------- Sigcheck ------- 2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys 2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys 2004-08-05 13:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$\tcpip.sys 2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$\tcpip.sys 2007-10-30 18:20 360064 ef7834c1d9ddf4c7da697d8c24a03791 c:\windows\system32\dllcache\tcpip.sys 2007-10-30 18:20 360064 ef7834c1d9ddf4c7da697d8c24a03791 c:\windows\system32\drivers\tcpip.sys 2006-08-03 02:54 506368 86db0fdaf2591c86389d36cf44658cfe c:\windows\system32\winlogon.exe . ((((((((((((((((((((((((((((( snapshot@2007-11-28_ 0.57.51.95 ))))))))))))))))))))))))))))))))))))))))) . + 2007-10-29 22:36:31 1,293,824 ----a-w c:\windows\$hf_mig$\KB941568\SP2QFE\quartz.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941568\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941568\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941568\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941568\update\updspapi.dll + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll + 2008-03-20 07:56:50 1,846,016 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll + 2007-10-10 23:22:14 124,928 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll + 2007-10-10 23:22:14 214,528 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll + 2007-10-10 23:22:14 132,608 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll + 2007-10-10 23:22:14 63,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll + 2007-10-10 08:16:47 70,656 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe + 2007-10-10 23:22:14 153,088 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll + 2007-10-10 23:22:14 230,400 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll + 2007-10-10 05:47:20 161,792 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat + 2007-10-10 23:22:14 383,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll + 2007-10-10 23:22:15 388,096 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll + 2007-10-10 23:22:16 6,067,200 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll + 2007-10-10 23:22:16 44,544 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll + 2007-10-10 23:22:16 267,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll + 2007-10-10 08:16:47 13,824 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe + 2007-10-10 08:16:56 625,664 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe + 2007-10-10 23:22:16 27,648 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll + 2007-10-10 23:22:16 459,264 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll + 2007-10-10 23:22:16 52,224 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll + 2007-10-30 23:40:57 3,593,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll + 2007-10-10 23:22:18 478,208 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll + 2007-10-10 23:22:18 193,024 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll + 2007-10-10 23:22:18 671,232 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll + 2007-10-10 23:22:18 102,912 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll + 2007-10-10 23:22:18 105,984 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\url.dll + 2007-10-10 23:22:19 1,162,240 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll + 2007-10-10 23:22:19 233,472 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll + 2007-10-10 23:22:19 825,344 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\updspapi.dll + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE\tzchange.exe + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll + 2007-12-04 18:30:15 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll + 2007-11-07 09:50:06 733,696 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll + 2007-12-07 01:42:15 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll + 2007-12-19 22:20:28 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll + 2007-12-07 01:42:15 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll + 2007-12-07 01:42:15 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll + 2007-12-07 01:42:15 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe + 2007-12-07 01:42:15 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll + 2007-12-07 01:42:16 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat + 2007-12-07 01:42:16 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll + 2007-12-07 01:42:16 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll + 2007-12-07 01:42:19 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll + 2007-12-07 01:42:19 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll + 2007-12-07 01:42:19 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe + 2007-12-07 01:42:20 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll + 2007-12-07 01:42:20 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll + 2007-12-07 01:42:20 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll + 2007-12-07 01:42:21 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll + 2007-12-07 01:42:21 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll + 2007-12-07 01:42:21 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll + 2007-12-07 01:42:21 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll + 2007-12-07 01:42:21 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll + 2008-01-11 05:54:27 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll + 2007-12-07 01:42:21 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll + 2007-12-07 01:42:22 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll + 2007-12-07 01:42:22 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll + 2007-12-07 01:42:22 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll + 2008-02-20 05:20:23 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll + 2008-02-20 18:50:24 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll + 2008-03-01 12:34:26 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll + 2008-03-01 12:34:26 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll + 2008-03-01 12:34:26 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll + 2008-03-01 12:34:27 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll + 2008-03-01 12:34:27 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe + 2008-03-01 12:34:27 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll + 2008-03-01 12:34:27 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat + 2008-03-01 12:34:27 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll + 2008-03-01 12:34:27 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll + 2008-03-01 12:34:29 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll + 2008-03-01 12:34:29 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll + 2008-03-01 12:34:29 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe + 2008-03-01 12:34:30 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll + 2008-03-01 12:34:30 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll + 2008-03-01 12:34:30 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll + 2008-03-01 12:34:32 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll + 2008-03-01 12:34:32 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll + 2008-03-01 12:34:32 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll + 2008-03-01 12:34:32 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll + 2008-03-01 12:34:32 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll + 2008-03-01 12:34:32 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll + 2008-03-01 12:34:32 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll + 2008-03-01 12:34:33 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll + 2008-03-01 12:34:33 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll + 2008-03-01 12:34:33 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll + 2008-02-20 06:52:42 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-25 06:56:31 194,144 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-11-01 05:15:27 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll + 2008-04-23 07:19:26 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll + 2008-04-23 07:19:26 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll + 2008-04-23 07:19:26 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll + 2008-04-23 07:19:26 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll + 2008-04-23 07:19:26 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe + 2008-04-23 07:19:26 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll + 2008-04-23 07:19:26 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat + 2008-04-23 07:19:26 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll + 2008-04-23 07:19:26 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll + 2008-04-23 07:19:26 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll + 2008-04-23 07:19:26 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll + 2008-04-23 07:19:26 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe + 2008-04-23 07:19:26 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll + 2008-04-23 07:19:27 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll + 2008-04-23 07:19:27 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll + 2008-04-23 07:19:27 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll + 2008-04-23 07:19:27 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll + 2008-04-23 07:19:27 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll + 2008-04-23 07:19:27 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll + 2008-04-23 07:19:27 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll + 2008-04-23 07:19:27 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll + 2008-04-23 07:19:27 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll + 2008-04-23 07:19:27 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll + 2008-04-23 07:19:27 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll + 2008-04-23 07:19:27 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll + 2008-06-14 18:03:13 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys + 2008-06-14 17:33:37 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys + 2008-06-14 17:40:19 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll + 2008-04-14 16:17:04 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys + 2008-04-14 15:59:30 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys + 2008-04-14 16:22:05 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll + 2008-05-07 04:55:47 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:59 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll + 2005-08-30 03:55:43 1,293,312 -c----w c:\windows\$NtUninstallKB941568$\quartz.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941568$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941568$\spuninst\updspapi.dll + 2005-06-28 09:23:40 216,800 -c----w c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe + 2005-06-28 09:23:54 371,424 -c----w c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll + 2006-10-18 20:47:18 222,208 -c----w c:\windows\$NtUninstallKB941569$\wmasf.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941644$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941644$\spuninst\updspapi.dll + 2006-04-20 11:51:50 359,808 -c----w c:\windows\$NtUninstallKB941644$\tcpip.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB941693$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB941693$\spuninst\updspapi.dll + 2007-03-08 15:33:58 1,843,712 -c----w c:\windows\$NtUninstallKB941693$\win32k.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB942763$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB942763$\spuninst\updspapi.dll + 2007-07-18 12:42:22 60,416 -c----w c:\windows\$NtUninstallKB942763$\tzchange.exe + 2007-05-17 11:29:50 549,376 -c----w c:\windows\$NtUninstallKB943055$\oleaut32.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB943055$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB943055$\spuninst\updspapi.dll + 2006-08-17 12:29:49 728,576 -c----w c:\windows\$NtUninstallKB943485$\lsasrv.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB943485$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB943485$\spuninst\updspapi.dll + 2004-08-05 12:00:00 27,440 -c----w c:\windows\$NtUninstallKB944653$\secdrv.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB944653$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB944653$\spuninst\updspapi.dll + 2006-06-26 17:41:32 148,480 -c----w c:\windows\$NtUninstallKB945553$\dnsapi.dll + 2004-08-05 12:00:00 45,568 -c----w c:\windows\$NtUninstallKB945553$\dnsrslvr.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB945553$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB945553$\spuninst\updspapi.dll + 2004-08-05 12:00:00 181,248 -c----w c:\windows\$NtUninstallKB946026$\mrxdav.sys + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB946026$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB946026$\spuninst\updspapi.dll + 2007-06-19 13:32:25 282,112 -c----w c:\windows\$NtUninstallKB948590$\gdi32.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB948590$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB948590$\spuninst\updspapi.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB948881$\spuninst\spuninst.exe + 2007-03-06 01:35:47 394,976 -c----w c:\windows\$NtUninstallKB948881$\spuninst\updspapi.dll + 2004-08-05 12:00:00 561,179 -c----w c:\windows\$NtUninstallKB950749$\dao360.dll + 2004-08-05 12:00:00 512,029 -c----w c:\windows\$NtUninstallKB950749$\msexch40.dll + 2004-08-05 12:00:00 319,517 -c----w c:\windows\$NtUninstallKB950749$\msexcl40.dll + 2004-08-05 12:00:00 1,507,356 -c----w c:\windows\$NtUninstallKB950749$\msjet40.dll + 2004-08-05 12:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetol1.dll + 2004-08-05 12:00:00 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetoledb40.dll + 2004-08-05 12:00:00 184,351 -c----w c:\windows\$NtUninstallKB950749$\msjint40.dll + 2004-08-05 12:00:00 53,279 -c----w c:\windows\$NtUninstallKB950749$\msjter40.dll + 2004-08-05 12:00:00 241,693 -c----w c:\windows\$NtUninstallKB950749$\msjtes40.dll + 2004-08-05 12:00:00 213,023 -c----w c:\windows\$NtUninstallKB950749$\msltus40.dll + 2004-08-05 12:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\mspbde40.dll + 2004-08-05 12:00:00 421,919 -c----w c:\windows\$NtUninstallKB950749$\msrd2x40.dll + 2004-08-05 12:00:00 315,423 -c----w c:\windows\$NtUninstallKB950749$\msrd3x40.dll + 2004-08-05 12:00:00 552,989 -c----w c:\windows\$NtUninstallKB950749$\msrepl40.dll + 2004-08-05 12:00:00 258,077 -c----w c:\windows\$NtUninstallKB950749$\mstext40.dll + 2004-08-05 12:00:00 831,519 -c----w c:\windows\$NtUninstallKB950749$\mswdat10.dll + 2004-08-05 12:00:00 614,429 -c----w c:\windows\$NtUninstallKB950749$\mswstr10.dll + 2004-08-05 12:00:00 348,189 -c----w c:\windows\$NtUninstallKB950749$\msxbde40.dll + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB950749$\spuninst\updspapi.dll + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950762$\spuninst\updspapi.dll + 2008-04-14 15:52:45 272,768 -c----w c:\windows\$NtUninstallKB951376-v2$\bthport.sys + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\updspapi.dll + 2004-08-03 23:40:30 274,944 -c----w c:\windows\$NtUninstallKB951376$\bthport.sys + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951376$\spuninst\spuninst.exe + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB951376$\spuninst\updspapi.dll + 2007-10-29 22:43:32 1,293,824 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB951698$\spuninst\updspapi.dll + 2006-11-02 05:22:52 51,680 -c----w c:\windows\$NtUninstallWdf01005$\spuninst\Kmdfcustom.dll + 2006-10-08 19:51:14 221,488 -c----w c:\windows\$NtUninstallWdf01005$\spuninst\spuninst.exe + 2006-10-08 19:51:14 379,184 -c----w c:\windows\$NtUninstallWdf01005$\spuninst\updspapi.dll + 2008-11-27 19:10:54 472,576 ------w c:\windows\3D Ultra Minigolf Adventures\uninstall.exe + 2008-07-04 11:55:39 472,576 ----a-w c:\windows\Action Ball 2\uninstall.exe + 2008-03-18 21:25:11 110,592 ----a-w c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll + 2008-08-13 13:59:45 135,168 ----a-w c:\windows\assembly\GAC\AxInterop.MSComctlLib\2.0.0.0__90ba9c70f846762e\AxInterop.MSComctlLib.DLL + 2008-08-13 13:59:45 212,992 ----a-w c:\windows\assembly\GAC\AxInterop.MSForms\2.0.0.0__90ba9c70f846762e\AxInterop.MSForms.DLL + 2008-03-18 21:25:12 4,608 ----a-w c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll + 2008-08-13 13:59:41 143,360 ----a-w c:\windows\assembly\GAC\ICSharpCode.SharpZipLib\[u]0/u.84.0.0__1b03e6acf1164f73\ICSharpCode.SharpZipLib.DLL + 2008-08-13 13:59:45 225,280 ----a-w c:\windows\assembly\GAC\Interop.MSComctlLib\2.0.0.0__90ba9c70f846762e\Interop.MSComctlLib.DLL + 2008-08-13 13:59:46 360,448 ----a-w c:\windows\assembly\GAC\Interop.MSForms\2.0.0.0__90ba9c70f846762e\Interop.MSForms.DLL + 2008-08-13 13:59:46 49,152 ----a-w c:\windows\assembly\GAC\Interop.NewIWshRuntimeLibrary\1.0.0.0__90ba9c70f846762e\Interop.NewIWshRuntimeLibrary.DLL + 2008-08-13 13:59:41 13,312 ----a-w c:\windows\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.DLL + 2008-03-18 21:25:10 8,007,680 ----a-w c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll + 2008-03-18 21:24:45 80,696 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll + 2008-05-20 22:12:18 1,276,720 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll + 2008-03-18 21:24:54 248,632 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll + 2008-09-07 15:33:03 20,280 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Visio.SaveAsWeb\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Visio.SaveAsWeb.dll + 2008-09-07 15:33:03 871,216 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Visio\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Visio.dll + 2008-09-07 15:33:08 80,688 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.VisOcx\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.VisOcx.dll + 2008-03-18 21:24:54 781,104 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2008-03-18 21:25:10 13,312 ----a-w c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll + 2008-09-07 15:32:58 371,496 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll + 2008-03-18 21:24:54 64,288 ----a-w c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2008-03-18 21:25:10 229,376 ----a-w c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL + 2008-03-18 21:25:11 4,096 ----a-w c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll + 2008-03-18 21:24:53 416,544 ----a-w c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL + 2008-05-20 22:12:10 12,096 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll + 2008-03-18 21:25:02 12,112 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll + 2008-09-07 15:33:09 12,632 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Visio.SaveAsWeb.dll + 2008-09-07 15:33:09 12,096 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Visio\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Visio.dll + 2008-09-07 15:33:09 12,104 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.VisOcx\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.VisOcx.dll + 2008-03-18 21:25:06 12,096 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll + 2008-03-18 21:24:59 12,080 ----a-w c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll + 2008-03-18 21:24:59 11,544 ----a-w c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll + 2008-03-18 21:25:10 16,384 ----a-w c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll - 2007-07-11 22:17:03 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2008-01-23 13:37:36 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2007-07-11 22:17:14 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2008-01-23 13:37:46 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2007-07-11 22:17:15 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2008-01-23 13:37:12 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2007-07-11 22:17:17 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll + 2008-01-23 13:37:49 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll - 2007-07-11 22:17:11 2,902,016 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll + 2008-01-23 13:37:25 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - 2007-07-11 22:16:56 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2008-01-23 13:37:53 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2007-07-11 22:16:56 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2008-01-23 13:37:53 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2007-07-11 22:17:22 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll + 2008-01-23 13:37:46 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - 2007-07-11 22:17:06 5,156,864 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2008-01-23 13:37:22 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll - 2007-07-11 22:17:02 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-01-23 13:37:33 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2008-08-13 13:59:41 24,576 ----a-w c:\windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.DLL + 2008-08-13 13:59:47 20,480 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3091.17961__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL + 2008-08-13 13:59:46 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3091.18004__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL + 2008-08-13 13:59:47 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3091.17978__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL + 2008-08-13 13:59:46 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3091.18004__90ba9c70f846762e\AEM.Plugin.GD.Shared.DLL + 2008-08-13 13:59:47 20,480 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3091.17968__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL + 2008-08-13 13:59:46 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3091.17989__90ba9c70f846762e\AEM.Plugin.REG.Shared.DLL + 2008-08-13 13:59:46 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.EEU.Shared\2.0.3091.18003__90ba9c70f846762e\AEM.Plugin.Source.EEU.Shared.DLL + 2008-08-13 13:59:46 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.GD.Shared\2.0.3091.18003__90ba9c70f846762e\AEM.Plugin.Source.GD.Shared.DLL + 2008-08-13 13:59:41 45,056 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3106.38822__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.DLL + 2008-08-13 13:59:47 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3091.17980__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.DLL + 2008-08-13 13:59:41 16,384 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3091.17968__90ba9c70f846762e\AEM.Server.Shared.DLL + 2008-08-13 13:59:37 45,056 ----a-w c:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3106.38484__90ba9c70f846762e\AEM.Server.DLL + 2008-08-13 13:59:41 20,480 ----a-w c:\windows\assembly\GAC_MSIL\AEM.UI.Shared\2.0.3091.17999__90ba9c70f846762e\AEM.UI.Shared.DLL + 2008-08-13 13:59:38 61,440 ----a-w c:\windows\assembly\GAC_MSIL\AEM.UI\2.0.3106.38784__90ba9c70f846762e\AEM.UI.DLL + 2008-08-13 13:59:41 20,480 ----a-w c:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3091.17977__90ba9c70f846762e\APM.Foundation.DLL + 2008-08-13 13:59:37 57,344 ----a-w c:\windows\assembly\GAC_MSIL\APM.Server\2.0.3106.38482__90ba9c70f846762e\APM.Server.DLL - 2007-07-11 22:16:55 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-01-23 13:37:23 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll + 2008-08-13 13:59:38 32,768 ----a-w c:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.DLL + 2008-08-13 13:59:38 69,632 ----a-w c:\windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3106.38486__90ba9c70f846762e\ATIDEMOS.DLL + 2008-08-13 13:59:46 6,656 ----a-w c:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.DLL + 2008-08-13 13:59:45 45,056 ----a-w c:\windows\assembly\GAC_MSIL\AxInterop.SHDocVw\1.1.0.0__90ba9c70f846762e\AxInterop.SHDocVw.DLL + 2008-08-13 13:59:41 14,848 ----a-w c:\windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.DLL + 2008-08-13 13:59:38 28,672 ----a-w c:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3106.38784__90ba9c70f846762e\CCC.Implementation.DLL + 2008-08-13 13:59:45 49,152 ----a-w c:\windows\assembly\GAC_MSIL\CCC\2.0.0.0__90ba9c70f846762e\CCC.EXE + 2008-08-13 13:59:37 262,144 ----a-w c:\windows\assembly\GAC_MSIL\CLI.AIB.TutorialInfoCentre.Tutorial.Dashboard\1.2.2600.29179__90ba9c70f846762e\CLI.AIB.TutorialInfoCentre.Tutorial.Dashboard.DLL + 2008-08-13 13:59:47 90,112 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Dashboard\2.0.3106.38821__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Dashboard.DLL + 2008-08-13 13:59:47 12,288 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Runtime\2.0.3106.38821__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Runtime.DLL + 2008-08-13 13:59:41 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.AForce.Graphics.Shared\2.0.3091.18004__90ba9c70f846762e\CLI.Aspect.AForce.Graphics.Shared.DLL + 2008-08-13 13:59:41 28,672 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3091.17979__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.DLL + 2008-08-13 13:59:38 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private\2.0.3091.17980__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.Shared.Private.DLL + 2008-08-13 13:59:47 98,304 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard\2.0.3106.38647__90ba9c70f846762e\CLI.Aspect.CustomFormatSelection.Graphics.Dashboard.DLL + 2008-08-13 13:59:47 376,832 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3106.38666__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.DLL + 2008-08-13 13:59:47 40,960 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3106.38667__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.DLL + 2008-08-13 13:59:41 53,248 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3091.17990__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.DLL + 2008-08-13 13:59:47 663,552 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.3106.38717__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.DLL + 2008-08-13 13:59:53 65,536 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3106.38714__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.DLL + 2008-08-13 13:59:41 40,960 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3091.17992__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.DLL + 2008-08-13 13:59:53 688,128 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.3106.38739__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.DLL + 2008-08-13 13:59:47 450,560 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3106.38657__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.DLL + 2008-08-13 13:59:47 61,440 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3106.38665__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.DLL + 2008-08-13 13:59:42 49,152 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3091.17990__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.DLL + 2008-08-13 13:59:48 401,408 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3106.38706__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.DLL + 2008-08-13 13:59:47 32,768 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3106.38704__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.DLL + 2008-08-13 13:59:42 28,672 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3091.17982__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.DLL + 2008-08-13 13:59:48 307,200 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3106.38579__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.DLL + 2008-08-13 13:59:48 282,624 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared\2.0.3106.38648__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Dashboard.Shared.DLL + 2008-08-13 13:59:53 36,864 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3106.38664__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.DLL + 2008-08-13 13:59:42 32,768 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3091.17976__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.DLL + 2008-08-13 13:59:48 794,624 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3106.38758__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.DLL + 2008-08-13 13:59:53 77,824 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3106.38756__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.DLL + 2008-08-13 13:59:42 65,536 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3091.17993__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.DLL + 2008-08-13 13:59:53 364,544 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3106.38766__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.DLL + 2008-08-13 13:59:48 585,728 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3106.38573__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.DLL + 2008-08-13 13:59:48 40,960 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3106.38578__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.DLL + 2008-08-13 13:59:42 28,672 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3091.17988__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.DLL + 2008-08-13 13:59:48 438,272 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3106.38519__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.DLL + 2008-08-13 13:59:53 1,687,552 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3106.38542__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.DLL + 2008-08-13 13:59:49 118,784 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3106.38689__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.DLL + 2008-08-13 13:59:48 36,864 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3106.38687__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.DLL + 2008-08-13 13:59:42 24,576 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3091.17991__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.DLL + 2008-08-13 13:59:53 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3106.38517__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.DLL + 2008-08-13 13:59:42 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3091.17983__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.DLL + 2008-08-13 13:59:49 225,280 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3106.38565__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.DLL + 2008-08-13 13:59:53 204,800 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3106.38558__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.DLL + 2008-08-13 13:59:49 249,856 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard\2.0.3106.38594__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.DLL + 2008-08-13 13:59:49 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime\2.0.3106.38600__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.DLL + 2008-08-13 13:59:42 20,480 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared\2.0.3091.17988__90ba9c70f846762e\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.DLL + 2008-08-13 13:59:49 806,912 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3106.38668__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.DLL + 2008-08-13 13:59:49 77,824 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3106.38667__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.DLL + 2008-08-13 13:59:42 53,248 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3091.17990__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.DLL + 2008-08-13 13:59:49 401,408 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3106.38746__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.DLL + 2008-08-13 13:59:49 204,800 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Dashboard\2.0.3106.38672__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Dashboard.DLL + 2008-08-13 13:59:49 40,960 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Runtime\2.0.3106.38669__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Runtime.DLL + 2008-08-13 13:59:42 24,576 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU.Graphics.Shared\2.0.3091.17989__90ba9c70f846762e\CLI.Aspect.MultiVPU.Graphics.Shared.DLL + 2008-08-13 13:59:49 204,800 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Dashboard\2.0.3106.38681__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Dashboard.DLL + 2008-08-13 13:59:49 40,960 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Runtime\2.0.3106.38679__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Runtime.DLL + 2008-08-13 13:59:42 24,576 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU2.Graphics.Shared\2.0.3091.17990__90ba9c70f846762e\CLI.Aspect.MultiVPU2.Graphics.Shared.DLL + 2008-08-13 13:59:50 208,896 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Dashboard\2.0.3106.38789__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Dashboard.DLL + 2008-08-13 13:59:49 45,056 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Runtime\2.0.3106.38786__90ba9c70f846762e\CLI.Aspect.MultiVPU3.Graphics.Runtime.DLL + 2008-08-13 13:59:42 24,576 ----a-w c:\windows\assembly\GAC_MSIL\CLI.Aspect.MultiVPU3.Graphics.Shared\2.0.3091.18000__90ba9c

lousticvoyager · Answer

-----------\  ToolBar S&D 1.2.5   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3200+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Nicolas ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
   Firewall  : ZoneAlarm Firewall 7.0.483.000 (Activated)
   C:\ (Local Disk) - NTFS - Total:73 Go (Free:40 Go)
   D:\ (Local Disk) - NTFS - Total:79 Go (Free:28 Go)
   E:\ (CD or DVD)
   F:\ (CD or DVD)
   I:\ (USB)
   J:\ (USB)
   K:\ (USB)
   L:\ (USB)

   "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
   Option : [1] ( 2008-12-02| 1:34 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\Crawler
   C:\Program Files\Crawler\adrkeys.dat
   C:\Program Files\Crawler\COMMON_FF.dat
   C:\Program Files\Crawler\confirm.dat
   C:\Program Files\Crawler\ctbcomm.dll
   C:\Program Files\Crawler\ctbr.dll
   C:\Program Files\Crawler\CTConf.dat
   C:\Program Files\Crawler\CTipsDef.dll
   C:\Program Files\Crawler\CToolbar.exe
   C:\Program Files\Crawler\CUpdate.exe
   C:\Program Files\Crawler\Download
   C:\Program Files\Crawler\firefox
   C:\Program Files\Crawler\Languages
   C:\Program Files\Crawler\lookfor.dat
   C:\Program Files\Crawler\majorse.dat
   C:\Program Files\Crawlerootmenu.dat
   C:\Program Files\Crawler\services.dat
   C:\Program Files\Crawler\STWSGLanguageAct
   C:\Program Files\Crawler\STWSG_FF.dat
   C:\Program Files\Crawler\TBR5LanguageAct
   C:\Program Files\Crawler\Update
   C:\Program Files\Crawler\WebSecurityGuard.dll
   C:\Program Files\Crawler\WSGData
   C:\Program Files\Crawler\firefox\chrome
   C:\Program Files\Crawler\firefox\chrome.manifest
   C:\Program Files\Crawler\firefox\components
   C:\Program Files\Crawler\firefox\install.ini
   C:\Program Files\Crawler\firefox\install.rdf
   C:\Program Files\Crawler\firefox\stwsg_ff.ini
   C:\Program Files\Crawler\firefox\chrome\common.jar
   C:\Program Files\Crawler\firefox\chrome\stwsg.jar
   C:\Program Files\Crawler\firefox\components\xcomm.dll
   C:\Program Files\Crawler\firefox\components\xplugin.xpt
   C:\Program Files\Crawler\firefox\components\xshared.dll
   C:\Program Files\Crawler\firefox\components\xshared.xpt
   C:\Program Files\Crawler\firefox\components\xsupport.dll
   C:\Program Files\Crawler\firefox\components\xsupport.xpt
   C:\Program Files\Crawler\firefox\components\xwsg.dll
   C:\Program Files\Crawler\Languages\STWSG_CS.cab
   C:\Program Files\Crawler\Languages\STWSG_DE.cab
   C:\Program Files\Crawler\Languages\STWSG_EN.cab
   C:\Program Files\Crawler\Languages\STWSG_ES.cab
   C:\Program Files\Crawler\Languages\STWSG_FF.cab
   C:\Program Files\Crawler\Languages\STWSG_FR.cab
   C:\Program Files\Crawler\Languages\STWSG_IT.cab
   C:\Program Files\Crawler\Languages\STWSG_PT-BR.cab
   C:\Program Files\Crawler\Languages\STWSG_PT.cab
   C:\Program Files\Crawler\Languages\TBR5_CS.cab
   C:\Program Files\Crawler\Languages\TBR5_DE.cab
   C:\Program Files\Crawler\Languages\TBR5_EN.cab
   C:\Program Files\Crawler\Languages\TBR5_ES.cab
   C:\Program Files\Crawler\Languages\TBR5_FR.cab
   C:\Program Files\Crawler\Languages\TBR5_IT.cab
   C:\Program Files\Crawler\Languages\TBR5_NL.cab
   C:\Program Files\Crawler\Languages\TBR5_PL.cab
   C:\Program Files\Crawler\Languages\TBR5_PT-BR.cab
   C:\Program Files\Crawler\Languages\TBR5_PT.cab
   C:\Program Files\Crawler\Languages\TBR5_RU.cab
   C:\Program Files\Crawler\STWSGLanguageAct\info.ini
   C:\Program Files\Crawler\STWSGLanguageAct\language.ini
   C:\Program Files\Crawler\TBR5LanguageAct\info.ini
   C:\Program Files\Crawler\TBR5LanguageAct\language.ini
   C:\Program Files\Crawler\Update\domains.cab
   C:\Program Files\Crawler\WSGData\domains
   C:\Program Files\Crawler\WSGData\g_S-1-5-18.dat
   C:\Program Files\Crawler\WSGData\g_S-1-5-21-3365956167-916729715-2914436963-1005.dat
   C:\Program Files\Crawler\WSGData\p_S-1-5-18.dat
   C:\Program Files\Crawler\WSGData\p_S-1-5-21-3365956167-916729715-2914436963-1005.dat
   C:\Program Files\Crawler\WSGData\wfilter.dat
   C:\Program Files\Crawler\WSGData\w_S-1-5-18.dat
   C:\Program Files\Crawler\WSGData\w_S-1-5-21-3365956167-916729715-2914436963-1005.dat
   C:\Program Files\Crawler\WSGData\domains\domains_000.dat
   C:\Program Files\Crawler\WSGData\domains\domains_000_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_001.dat
   C:\Program Files\Crawler\WSGData\domains\domains_001_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_002.dat
   C:\Program Files\Crawler\WSGData\domains\domains_002_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_003.dat
   C:\Program Files\Crawler\WSGData\domains\domains_003_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_004.dat
   C:\Program Files\Crawler\WSGData\domains\domains_004_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_005.dat
   C:\Program Files\Crawler\WSGData\domains\domains_005_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_006.dat
   C:\Program Files\Crawler\WSGData\domains\domains_006_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_007.dat
   C:\Program Files\Crawler\WSGData\domains\domains_007_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_008.dat
   C:\Program Files\Crawler\WSGData\domains\domains_008_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_009.dat
   C:\Program Files\Crawler\WSGData\domains\domains_009_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_010.dat
   C:\Program Files\Crawler\WSGData\domains\domains_010_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_011.dat
   C:\Program Files\Crawler\WSGData\domains\domains_011_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_012.dat
   C:\Program Files\Crawler\WSGData\domains\domains_012_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_013.dat
   C:\Program Files\Crawler\WSGData\domains\domains_013_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_014.dat
   C:\Program Files\Crawler\WSGData\domains\domains_014_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_015.dat
   C:\Program Files\Crawler\WSGData\domains\domains_015_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_016.dat
   C:\Program Files\Crawler\WSGData\domains\domains_016_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_017.dat
   C:\Program Files\Crawler\WSGData\domains\domains_017_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_018.dat
   C:\Program Files\Crawler\WSGData\domains\domains_018_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_019.dat
   C:\Program Files\Crawler\WSGData\domains\domains_019_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_020.dat
   C:\Program Files\Crawler\WSGData\domains\domains_020_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_021.dat
   C:\Program Files\Crawler\WSGData\domains\domains_021_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_022.dat
   C:\Program Files\Crawler\WSGData\domains\domains_022_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_023.dat
   C:\Program Files\Crawler\WSGData\domains\domains_023_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_024.dat
   C:\Program Files\Crawler\WSGData\domains\domains_024_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_025.dat
   C:\Program Files\Crawler\WSGData\domains\domains_025_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_026.dat
   C:\Program Files\Crawler\WSGData\domains\domains_026_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_027.dat
   C:\Program Files\Crawler\WSGData\domains\domains_027_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_028.dat
   C:\Program Files\Crawler\WSGData\domains\domains_028_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_029.dat
   C:\Program Files\Crawler\WSGData\domains\domains_029_diff.dat
   C:\Program Files\Crawler\WSGData\domains\index.dat
   C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Barre d'outils Crawler
   C:\WINDOWS\iun6002.exe

lousticvoyager · Answer

Fichier suzeyiji.dll reçu le 2008.12.02 01:37:34 (CET)
Situation actuelle:     terminé   
Résultat: 6/37 (16.22%)

	
	
Antivirus	Version	Dernière mise à jour	Résultat

AhnLab-V3	2008.12.2.0	2008.12.01	-
AntiVir		7.9.0.36	2008.12.01	-
Authentium	5.1.0.4		2008.12.01	-
Avast		4.8.1281.0	2008.12.01	-
AVG		8.0.0.199	2008.12.02	Vundo.BC
BitDefender	7.2		2008.12.02	-
CAT-QuickHeal	10.00		2008.12.01	-
ClamAV		0.94.1		2008.12.02	-
DrWeb		4.44.0.09170	2008.12.02	-
eSafe		7.0.17.0	2008.11.30	Suspicious File
eTrust-Vet	31.6.6236	2008.12.01	-
Ewido		4.0		2008.12.01	-
F-Prot		4.4.4.56	2008.12.01	-
F-Secure	8.0.14332.0	2008.12.02	-
Fortinet	3.117.0.0	2008.12.01	-
GData		19		2008.12.02	-
Ikarus		T3.1.1.45.0	2008.12.01	-
K7AntiVirus	7.10.539	2008.12.01	-
Kaspersky	7.0.0.125	2008.12.02	-
McAfee		5451		2008.12.01	-
McAfee+Artemis	5451		2008.12.01	-
Microsoft	1.4104		2008.12.02	Trojan:Win32/Vundo.JD.dll
NOD32		3655		2008.12.01	-
Norman		5.80.02		2008.12.01	-
Panda		9.0.0.4		2008.12.02	Suspicious file
PCTools		4.4.2.0		2008.12.01	-
Prevx1		V2		2008.12.02	-
Rising		21.06.02.00	2008.12.01	-
SecureWeb-Gateway6.7.6		2008.12.01	-
Sophos		4.36.0		2008.12.02	Troj/Virtum-Gen
Sunbelt		3.1.1832.2	2008.12.01	-
Symantec	10		2008.12.02	Trojan.Vundo
TheHacker	6.3.1.2.171	2008.12.02	-
TrendMicro	8.700.0.1004	2008.12.01	-
VBA32		3.12.8.9	2008.12.01	-
ViRobot		2008.12.1.1494	2008.12.01	-
VirusBuster	4.5.11.0	2008.12.01	-

Information additionnelle

File size: 95798 bytes

MD5...: 4f75cdad392d1cc404eca7ff340e4ef8
SHA1..: b93d251f7b889cbc429f9ce51ae507700ca9d54a
SHA256: f505b80bea589a0dddc95f163074bcead82e2f4e6640730a71dce162f4f8dbc7
SHA512: 823340d2ffceff596c00efb8f001fac50b62b580b1d20c419639862ff7da8e4a
8211b1644dd4bbf66864a2ca017e9e8eedf704489f16c1b4fcb3dd16ad0565ef
ssdeep: 1536:P2IZPXwiP+t+yCEObFifScPO8bZ4U5sf+Dc0+i5bjokh6RIuk7PMALVPoFQ
:ndXwRDClITPO8x57Db5bj9h6RVkYAL4Q

PEiD..: -
TrID..: File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1000121c
timedatestamp.....: 0x0 (Thu Jan 01 00:00:00 1970)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
text 0x1000 0x5964 0x5a00 7.87 20286129fc326de937af5bdae97cf1e0
.rdata 0x7000 0x5c6f 0x5e00 7.87 70dbe552c27e366f176e5464c5a8b5d3
.data 0xd000 0xa735 0xa800 7.99 ed092962460a72c8b60a91cb9ff9b6ff
.idata 0x18000 0x44a 0x600 0.00 53e979547d8c2ea86560ac45de08ae25
.rsrc 0x19000 0x410 0x600 2.53 d60234bbd68a2cba494e639696fdecc5
.reloc 0x1a000 0x737c 0x600 2.48 99f605bd1a1af54d556502a8b69390d9

( 4 imports ) 
> user32.dll: ShowCursor, GetWindowTextA, DrawMenuBar, DispatchMessageA, CreateDialogParamA, CopyRect, CloseWindow, CharNextA
> KERNEL32.dll: RtlUnwind, SetEnvironmentVariableA, IsDebuggerPresent, GetTimeZoneInformation, ExitProcess, SetLastError
> advapi32.dll: RegQueryValueExA, RegSetValueExA, RegCloseKey, RegEnumValueA
> comdlg32.dll: GetOpenFileNameW, GetFileTitleW

( 0 exports )

Lyonnais92 · Answer

Re,


Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.
===============

Démarrer, Exécuter, tape combofix /u dans la zone de saisie puis OK. (il y a un espace avant /u)

===============
 télécharge combofix (par sUBs) ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et enregistre le sur le Bureau.

déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)


double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

lousticvoyager · Answer

Apparemment la déselection de fenêtres venait de graphic.exe dans le gestionnaire de tâches, depuis que j'ai terminé son processus je peux garder la sélection de la fenêtre que j'utilise.

lousticvoyager · Answer

Ca marche beaucoup mieux maintenant mais IE ne se connecte plus du tout.....

Lyonnais92 · Answer

Re,
Fais redémarrer l'ordi.

Remets un rapport Hikackthis.

Ta connexion est toujours HS ?

Lyonnais92 · Answer

Re,

comment tu communiques ? par firefox ?

Ouvre Internet Explorer.

Clique sur Outils et Options Internet

dans sécurité, clique sur Rétablir toutes les zones ...
dans confidentialité clique sur moyenne
dans avancés, clique sur rétablir les paramètres avancés

=================


si tu n'a pas volontairement ajouté ces ActiveX et/ou que tu ne connais pas le site, tu cocheras aussi les lignes suivantes :

O16 - DPF: {377FF862-62E0-4F33-B6E5-F58E0BC0F209} (NlsComm Component Class) - https://www.hanbiton.com/home/error.aspx  
O16 - DPF: {987ECFCE-E607-4D52-B2C5-2EA1F6F303C4} (WinlessActiveX Control) - http://www.pangya.com/PangyaLauncher/PangyaLauncher.cab

O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} (RockYou Image Uploader Control) - http://www.rockyou.com/RockYouImageUploader.cab


Relance HijackThis.

Choisis Do a scan only

Coche la case devant les lignes suivantes

O20 - Winlogon Notify: ssqRHYrS - C:\WINDOWS\ 
O20 - Winlogon Notify: yayaWnom - C:\WINDOWS\ 
O23 - Service: {crel0ntrcsa - Unknown owner - (no file)

Ferme toutes les fenêtres (hormis HijackThis), y compris ton navigateur.

Clique sur fix checked.

Ferme Hijackthis.

Lyonnais92 · Answer

Re,

j'aime bien finir en nettoyant (nettoyage général et nettoyage des outils) 

Lis bien et exécute cette manip dans l’ordre.

#Télécharge et installe ces logiciels (si tu ne les as pas) pour les 3 premiers
mets les à jour, comme indiqué dans les démos ou tutos.

Ne les utilise pas tout de suite.


Antispywares et autres :
 
Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :

https://www.malwarebytes.com/

A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.


Nettoyeurs (de fichiers inutiles) et autres :

*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

========================================
->Affiche tous les fichiers et dossiers :
clique sur démarrer/panneau de configuration (en affichage classique)/option des dossiers/affichage

[Coche] « afficher les dossiers et fichiers cachés »

[Décoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

[Décoche] « masquer les extensions dont le type est connu »

Puis fais [appliquer] pour valider les changements.

Et [Ok]
.

=======================================

->Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec
puis tape « entrée ».
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).

========================================
->Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche.
Décoche "Avancé"
Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur [Analyse]
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur [Lancer le Nettoyage]



========================================
Lance Malwarebytes AntiMalware

Dans l'onglet analyse, vérifie que "Exécuter un scan rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

Ferme MBAM en cliquant sur Quitter. 

Poste le rapport dans ta réponse.
========================================

->Relance CCleaner.
Suppression des incohérences du registre

• Clique sur l'icône [Registre] situés dans la marge à gauche
• Puis clique sur [Analyser les erreurs]
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur [Corriger les erreurs].

Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement.
========================================
->Vide ta Corbeille.
========================================
->Redémarre en mode normal,


 
[Recoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

poste le rapport de MBAM

==============
pour nettoyer les outils :

* Télécharge ToolsCleaner par A.Rothstein & dj QUIOU sur ton Bureau.

http://pc-system.fr/
hxxp://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe
hxxp://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe

* Clique sur Recherche et laisse le scan se terminer.

* Clique, sur Suppression pour finaliser.

* Tu peux, si tu le souhaites, te servir des Options facultatives.

* Clique sur Quitter, pour que le rapport puisse se créer.

* Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

Lyonnais92 · Answer

Bonjour,

1) comment as tu essayer de booter en mode sans échec ? en modifiant config.sys ?

2) tu as attendu assez longtemps avec le tiret blanc qui clignote ?

3) essaye de démarrer sur "dernière bonne configuration connue" sur la page noire où on choisit le mode sans échec.

Lyonnais92 · Answer

Re,

oui, on peut récupérer le boot.ini et MSConfig à la Console.

Si ton type peut te faire ça très bien.

Sinon on le fera.

=============================

Remarque générale  pour les internautes qui liront ce post 


si j'ai écris ça  

Faites ce que l'on vous demande, ni plus, ni moins

dans ma signature, c'est qu'il y a de bonnes raisons.

Ce qui vient d'arriver en est l'illustration

Lyonnais92 · Answer

Re,

si tu peux, tu récupères l'UC et on essaye ce soir.

Si on y arrive pas, tu la lui ramènes demain.

La réparation de boot.ini :

https://www.pcastuces.com/pratique/windows/xp/console_recuperation/page10.htm

une autre version  :

http://www.inforumatique.fr/...

Lyonnais92 · Answer

Re,

si on peut éliminer les symptômes matos, on y verra plus clair.

lousticvoyager · Answer

Bon ça va l'ordi est revenu à la maison ça démarre impec. Il m'a dit que rien ne marchait depuis la console de récup mais qu'il s'est débrouillé pour atteindre le boot.ini backup ou qq chose comme ça je n'ai pas tout compris comme souvent quand il tente de me donner des explications, peu importe du moment que l'ordi démarre normalement!

Lyonnais92 · Answer

Bonsoir,

tu refais tourner MBAM, après mise à jour et tu postes le rapport.

Lyonnais92 · Answer

Re,

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt .

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

Lyonnais92 · Answer

Re,

tu as une version dépassée de Adobe Reader, la 7.0. Cette version présente des failles de sécurité qui sint exploitées par des malwares.

Il est urgent que tu le mettes à jour :

ouvre ce lien  http://www.commentcamarche.net/faq/sujet 10190 comment utiliser le lecteur adobe acrobat reader

et clique sur le lien d'accès au site d'Adobe pour télécharger la dernière version.

=============

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau :

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)

Lyonnais92 · Answer

Bonsoir,

on fait désinstaller systématiquement la Crawler toolbar qui surveille et transmet les informations sur le comportement de l'internaute.

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.
==========

Relance Hijackthis (fais un double clic sur C:\Documents and Settings\Nicolas\Bureau\Removal tools\Nicolas.exe)

Choisis Do a scan only

Coche la case devant les lignes suivantes

O16 - DPF: {377FF862-62E0-4F33-B6E5-F58E0BC0F209} -  
O16 - DPF: {987ECFCE-E607-4D52-B2C5-2EA1F6F303C4} -     
O16 - DPF: {D1D98C0F-A339-42AB-BD5F-EA0FF5D0E65F} -   
O20 - Winlogon Notify: ssqRHYrS - C:\WINDOWS\
O20 - Winlogon Notify: yayaWnom - C:\WINDOWS\    

Ferme toutes les fenêtres (hormis HijackThis), y compris ton navigateur.

Clique sur fix checked.

Ferme Hijackthis.

==========================
--> Télécharge UsbFix (de Chiquitine29) sur ton Bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

--> Lance l'installation avec les paramètres par défaut.

--> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, etc...) sans les ouvrir.

en particulier celle du lecteur H

--> Double-clique sur le raccourci UsbFix sur ton Bureau.

--> Le PC va redémarrer.

--> Après redémarrage, poste le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)

==================
Fais redémarrer l'ordi et remets un rapport RSIT

Lyonnais92 · Answer

Bonjour,

pourUSBFix, choisis Nettoyage.

Lyonnais92 · Answer

Re,

OK,

On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix


* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.

Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.

Popups adultfriendfinder casino antivirus2009

21 réponses

Discussions similaires

Newsletters