VIRUS NETTOYER MON PC

pamela -  
benurrr Messages postés 9766 Statut Contributeur sécurité -
Bonjour,j'ai été infecté par des virus win 32 j'ai fait un scan avec hijackthis merci de m'aider.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:16:15, on 12/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\rundll32.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Orange HSS\Systray\SystrayApp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Orange HSS\Launcher\Launcher.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange HSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: ujditw.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

--
End of file - 9625 bytes
Configuration: Windows XP
Firefox 3.0.4

13 réponses

  1.
    benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    salut ,

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
  2. jorginho67 Messages postés 15447 Statut Contributeur sécurité 1 169
     
    Salut !

    Bennur, pourquoi ToolbarSD ?

    Pas de 02/020, c'est du Vundo...
    0
  3. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    salut joe

    toolbarsd pour vérifier si y'a des crack sa sert a rien a désinfecter si y'a des crack

    si j'on voit je les fait supprimer pour continuer la désinfection
    0
  4. jorginho67 Messages postés 15447 Statut Contributeur sécurité 1 169
     
    Ah..... ok
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. pamela
     
    merci de ton aide benurr mais impossible de le télécharger car au démarrage j'ai un message qui me dit que l'ordinateur doit fermé le système d'exploitation et j'ai un sablier et je ne peux plus rien faire je ne peux m'en servir qu'en mode sans échec (je suis sur l'ordinateur à mon frère) merci de me répondre.
    0
  7. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    ok c'est beaucoup plus serieux

    tu peut essayer de démarrer en mode sans échec avec prise en charge réseau

    a se moment là tu commence par combofix; les grand maux =grand moyen

    tu suit bien les instructions

    Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    -Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi

    - En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    !\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet)

    ::Si combofix demande a faire mise a jour tu refuse
    ::Si combofix detecte quelque chose et de demande a redemarer tu accepte

    0
  8. pamela
     
    voici le rapport comme tu me l'as demandé:

    ComboFix 08-12-12.02 - HP_Propriétaire 2008-12-12 23:17:45.2 - NTFSx86 NETWORK
    Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.958.695 [GMT 1:00]
    Lancé depuis: c:\documents and settings\HP_Propriétaire\Bureau\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\adadix16.dll
    c:\windows\system32\coclassfast.dll
    c:\windows\system32\ggqmcgnu.dll
    c:\windows\system32\lfnjpp.dll
    c:\windows\system32\mcaosufy.dll
    c:\windows\system32\tmooim.dll
    c:\windows\Tasks\mxnyrdeg.job
    D:\Autorun.inf

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-12 au 2008-12-12 ))))))))))))))))))))))))))))))))))))
    .

    2008-12-12 19:58 . 2008-12-12 19:58 <REP> d-------- C:\killbagle
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\documents and settings\HP_Propriétaire\Application Data\Malwarebytes
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2008-12-12 01:45 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-12-12 01:45 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-12-09 21:24 . 2008-12-09 21:24 12,288 --a------ C:\mpsn.MSNFix
    2008-12-08 22:56 . 2008-12-09 12:16 0 --a------ c:\windows\system32\mcrh.MSNFix
    2008-12-08 22:06 . 2008-12-08 22:06 <REP> dr-hs---- C:\CONFIG
    2008-12-07 17:47 . 2008-04-13 20:45 60,032 --a------ c:\windows\system32\drivers\USBAUDIO.sys
    2008-12-07 17:47 . 2008-04-13 20:45 60,032 --a------ c:\windows\system32\dllcache\usbaudio.sys
    2008-12-07 17:47 . 2004-08-23 14:50 32,768 --a------ c:\windows\system32\WooDial2000.dll
    2008-12-07 17:43 . 2008-12-07 17:43 <REP> d-------- c:\windows\system32\AlertModule
    2008-12-07 17:43 . 2008-12-07 17:43 <REP> d-------- c:\program files\Wanadoo Messager
    2008-12-07 17:43 . 2004-11-08 15:03 32,768 --a------ c:\windows\system32\ffJmpWeb.dll
    2008-12-07 17:42 . 2008-12-12 22:27 <REP> d-------- c:\program files\Wanadoo
    2008-12-04 22:28 . 2007-07-18 09:40 264,576 -ra------ c:\windows\system32\drivers\RTL8187B.sys
    2008-12-04 22:25 . 2008-12-04 22:25 <REP> d-------- c:\windows\OEM_ICPLUS
    2008-12-04 22:25 . 2008-12-04 22:25 0 --a------ c:\windows\reboot.icp
    2008-12-04 22:21 . 2006-11-15 16:23 38,144 --a------ c:\windows\system32\drivers\EAPPkt.sys
    2008-12-04 22:21 . 2008-12-04 22:21 21,035 --a------ c:\windows\system32\drivers\AegisP.sys
    2008-12-02 00:05 . 2008-12-02 00:04 410,976 --a------ c:\windows\system32\deploytk.dll
    2008-11-30 01:05 . 2008-11-30 01:10 <REP> d-------- c:\windows\system32\NtmsData
    2008-11-30 00:24 . 2008-11-30 00:24 268 --ah----- C:\sqmdata05.sqm
    2008-11-30 00:24 . 2008-11-30 00:24 244 --ah----- C:\sqmnoopt05.sqm
    2008-11-22 00:22 . 2008-11-22 00:22 <REP> d-------- c:\program files\iPod
    2008-11-22 00:22 . 2008-11-22 00:24 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2008-11-22 00:14 . 2008-11-22 00:15 <REP> d-------- c:\program files\QuickTime
    2008-11-12 22:40 . 2008-10-24 12:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys
    2008-11-12 22:39 . 2008-09-04 18:16 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-12-12 01:00 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\Orbit
    2008-12-09 21:38 --------- d-----w c:\program files\Orbitdownloader
    2008-12-07 16:44 23 ----a-w c:\windows\system32\drivers\adidsl.cfg
    2008-12-07 16:44 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-12-07 16:44 --------- d-----w c:\program files\SAGEM
    2008-12-07 14:51 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2008-12-01 23:04 --------- d-----w c:\program files\Java
    2008-11-30 01:10 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\BitTorrent
    2008-11-21 23:24 --------- d-----w c:\program files\iTunes
    2008-11-21 23:22 --------- d-----w c:\program files\Fichiers communs\Apple
    2008-11-12 21:59 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
    2008-11-02 23:03 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\Icone
    2008-10-26 15:31 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\LimeWire
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-22 11:49 --------- d-----w c:\program files\Microsoft Silverlight
    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
    2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
    2008-10-15 16:35 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
    2008-10-03 17:12 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
    2008-09-15 15:26 1,846,528 ------w c:\windows\system32\dllcache\win32k.sys
    2008-06-19 21:35 4,895,718 ----a-w c:\program files\[u]0/u54-milk_and_honey_-_didi-ministry.mp3
    2008-06-19 15:32 5,571,082 ----a-w c:\program files\Jessy Matador - Décalé Gwada (Remix).mp3
    2008-02-10 16:25 86,048 ----a-w c:\documents and settings\HP_Propriétaire\Application Data\GDIPFONTCACHEV1.DAT
    2007-10-05 16:18 52 ----a-w c:\documents and settings\HP_Propriétaire\Application Data\wklnhst.dat
    2007-10-05 10:01 22 --sha-w c:\windows\SMINST\HPCD.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-04-03_18.28.27.71 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-02-26 11:49:32 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2008-03-20 07:56:50 1,846,016 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll
    + 2008-02-20 05:20:23 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:50:24 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll
    + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-03-01 12:34:26 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 12:34:26 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 12:34:26 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 12:34:27 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 12:34:27 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 12:34:27 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 12:34:27 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 12:34:27 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 12:34:27 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 12:34:29 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 12:34:29 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 12:34:29 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 12:34:30 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 12:34:30 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 12:34:30 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 12:34:32 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 12:34:32 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 12:34:32 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 12:34:32 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 12:34:32 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 12:34:32 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 12:34:32 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 12:34:33 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 12:34:33 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 12:34:33 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:42 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-25 06:56:31 194,144 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-11-01 05:15:27 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 07:19:26 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 07:19:26 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 07:19:26 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 07:19:26 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 07:19:26 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 07:19:26 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 07:19:26 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 07:19:26 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 07:19:26 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 07:19:26 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 07:19:26 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 07:19:26 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 07:19:26 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 07:19:27 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 07:19:27 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 07:19:27 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 07:19:27 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 07:19:27 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 07:19:27 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 07:19:27 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 07:19:27 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 07:19:27 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 07:19:27 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 07:19:27 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 07:19:27 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-07-07 20:18:27 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-06-14 18:03:13 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-14 17:33:37 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-14 17:40:19 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 16:17:04 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 15:59:30 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 16:22:05 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 04:55:47 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
    + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:59 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:13:24 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:37:01 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:37:01 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:47:22 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:47:22 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:44:02 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:44:02 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953356\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953356\spuninst.exe
    + 2008-05-28 12:01:41 26,624 ----a-w c:\windows\$hf_mig$\KB953356\update\ippmcust.dll
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953356\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB953356\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB953356\update\updspapi.dll
    + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-15 16:31:32 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2004-08-05 18:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-05 18:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-05 18:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-05 18:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-05 18:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-05 18:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-05 18:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-05 18:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-05 18:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-05 18:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-05 18:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-05 18:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-05 18:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-05 18:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-05 18:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-05 18:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-05 18:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    + 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    + 2004-08-05 18:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-05 18:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-05 18:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-05 18:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-05 18:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-05 18:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 14:04:13 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:48:06 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-05 18:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-05 18:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:09:53 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-05 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-05 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-05 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
    + 2004-08-05 12:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-05 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-05 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-05 18:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-05 18:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-05 18:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-05 18:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-05 18:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-05 18:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-05 18:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-05 18:00:00 334,336 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
    + 2004-08-05 18:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2004-08-05 18:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-05 18:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 04:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-05 18:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-05 18:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-05 18:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-05 18:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-05 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-05 18:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-05 18:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    + 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-05 18:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-05 18:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-05 18:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-05 18:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-05 18:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-05 18:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-05 18:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-05 18:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-05 18:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-05 18:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-05 18:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-05 18:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-05 18:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2007-10-11 06:13:38 1,024,000 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-05 18:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-05 18:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-05 12:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-05 18:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-05 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:39:54 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:39:54 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-05 18:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2007-10-11 06:13:38 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-05 18:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-05 18:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-05 18:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-05 18:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-05 18:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2003-03-24 20:52:04 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-05 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-05 18:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-05 18:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-05 18:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:39:55 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:55 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-05 18:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-05 18:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-05 18:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-05 18:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-05 18:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-05 18:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-05 18:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-05 18:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-05 18:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-05 18:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-05 18:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-05 18:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-05 18:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-05 18:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-05 18:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:39:55 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-05 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:39:56 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-05 18:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-05 18:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-05 18:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:56 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-05 18:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-05 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-05 18:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-05 12:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-05 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:39:57 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:57 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-05 18:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-05 18:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-05 12:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-05 18:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2004-08-05 18:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-05 18:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-05 18:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-05 18:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-05 18:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-05 18:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-05 18:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-05 18:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-05 18:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-05 18:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-05 18:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-05 18:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-05 18:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-05 18:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-05 18:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-05 18:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2006-06-02 19:32:20 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-05 18:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-05 18:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-05 18:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-05 18:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2007-10-11 06:13:38 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-05 18:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-05 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-05 18:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-05 18:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-05 18:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-05 18:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-05 18:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-05 18:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-05 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-05 18:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-05 18:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-05 18:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-05 18:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-05 18:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-05 18:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-05 18:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-05 18:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-05 18:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-05 12:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-05 18:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-05 18:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-05 18:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-05 18:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-05 18:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-05 12:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-05 18:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-05 18:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-05 12:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-05 18:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-05 18:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-05 18:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-05 18:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-05 12:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-05 18:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-05 18:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-05 18:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-05 18:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-05 18:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-05 18:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-05 18:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-05 18:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-05 18:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-05 18:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 05:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-05 18:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-05 18:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-05 18:00:00 97,792 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-05 18:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-05 18:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-05 18:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-05 18:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-05 18:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-05 18:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-05 18:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpn
    0
  9. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    la suite du rapport il en manque y'a pas la fin stp

    +un hijackthis
    0
  10. pamela
     
    excuse-moi benurr je ne sais pas ou j'avais la tête voila le rapport en entier:

    ComboFix 08-12-12.02 - HP_Propriétaire 2008-12-12 23:17:45.2 - NTFSx86 NETWORK
    Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.958.695 [GMT 1:00]
    Lancé depuis: c:\documents and settings\HP_Propriétaire\Bureau\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\adadix16.dll
    c:\windows\system32\coclassfast.dll
    c:\windows\system32\ggqmcgnu.dll
    c:\windows\system32\lfnjpp.dll
    c:\windows\system32\mcaosufy.dll
    c:\windows\system32\tmooim.dll
    c:\windows\Tasks\mxnyrdeg.job
    D:\Autorun.inf

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-12 au 2008-12-12 ))))))))))))))))))))))))))))))))))))
    .

    2008-12-12 19:58 . 2008-12-12 19:58 <REP> d-------- C:\killbagle
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\documents and settings\HP_Propriétaire\Application Data\Malwarebytes
    2008-12-12 01:45 . 2008-12-12 01:45 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2008-12-12 01:45 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-12-12 01:45 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-12-09 21:24 . 2008-12-09 21:24 12,288 --a------ C:\mpsn.MSNFix
    2008-12-08 22:56 . 2008-12-09 12:16 0 --a------ c:\windows\system32\mcrh.MSNFix
    2008-12-08 22:06 . 2008-12-08 22:06 <REP> dr-hs---- C:\CONFIG
    2008-12-07 17:47 . 2008-04-13 20:45 60,032 --a------ c:\windows\system32\drivers\USBAUDIO.sys
    2008-12-07 17:47 . 2008-04-13 20:45 60,032 --a------ c:\windows\system32\dllcache\usbaudio.sys
    2008-12-07 17:47 . 2004-08-23 14:50 32,768 --a------ c:\windows\system32\WooDial2000.dll
    2008-12-07 17:43 . 2008-12-07 17:43 <REP> d-------- c:\windows\system32\AlertModule
    2008-12-07 17:43 . 2008-12-07 17:43 <REP> d-------- c:\program files\Wanadoo Messager
    2008-12-07 17:43 . 2004-11-08 15:03 32,768 --a------ c:\windows\system32\ffJmpWeb.dll
    2008-12-07 17:42 . 2008-12-12 22:27 <REP> d-------- c:\program files\Wanadoo
    2008-12-04 22:28 . 2007-07-18 09:40 264,576 -ra------ c:\windows\system32\drivers\RTL8187B.sys
    2008-12-04 22:25 . 2008-12-04 22:25 <REP> d-------- c:\windows\OEM_ICPLUS
    2008-12-04 22:25 . 2008-12-04 22:25 0 --a------ c:\windows\reboot.icp
    2008-12-04 22:21 . 2006-11-15 16:23 38,144 --a------ c:\windows\system32\drivers\EAPPkt.sys
    2008-12-04 22:21 . 2008-12-04 22:21 21,035 --a------ c:\windows\system32\drivers\AegisP.sys
    2008-12-02 00:05 . 2008-12-02 00:04 410,976 --a------ c:\windows\system32\deploytk.dll
    2008-11-30 01:05 . 2008-11-30 01:10 <REP> d-------- c:\windows\system32\NtmsData
    2008-11-30 00:24 . 2008-11-30 00:24 268 --ah----- C:\sqmdata05.sqm
    2008-11-30 00:24 . 2008-11-30 00:24 244 --ah----- C:\sqmnoopt05.sqm
    2008-11-22 00:22 . 2008-11-22 00:22 <REP> d-------- c:\program files\iPod
    2008-11-22 00:22 . 2008-11-22 00:24 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2008-11-22 00:14 . 2008-11-22 00:15 <REP> d-------- c:\program files\QuickTime
    2008-11-12 22:40 . 2008-10-24 12:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys
    2008-11-12 22:39 . 2008-09-04 18:16 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-12-12 01:00 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\Orbit
    2008-12-09 21:38 --------- d-----w c:\program files\Orbitdownloader
    2008-12-07 16:44 23 ----a-w c:\windows\system32\drivers\adidsl.cfg
    2008-12-07 16:44 --------- d--h--w c:\program files\InstallShield Installation Information
    2008-12-07 16:44 --------- d-----w c:\program files\SAGEM
    2008-12-07 14:51 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
    2008-12-01 23:04 --------- d-----w c:\program files\Java
    2008-11-30 01:10 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\BitTorrent
    2008-11-21 23:24 --------- d-----w c:\program files\iTunes
    2008-11-21 23:22 --------- d-----w c:\program files\Fichiers communs\Apple
    2008-11-12 21:59 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
    2008-11-02 23:03 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\Icone
    2008-10-26 15:31 --------- d-----w c:\documents and settings\HP_Propriétaire\Application Data\LimeWire
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-22 11:49 --------- d-----w c:\program files\Microsoft Silverlight
    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
    2008-10-16 13:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
    2008-10-16 13:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
    2008-10-16 13:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
    2008-10-16 13:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
    2008-10-16 13:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
    2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
    2008-10-15 16:35 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
    2008-10-03 17:12 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
    2008-09-15 15:26 1,846,528 ------w c:\windows\system32\dllcache\win32k.sys
    2008-06-19 21:35 4,895,718 ----a-w c:\program files\[u]0/u54-milk_and_honey_-_didi-ministry.mp3
    2008-06-19 15:32 5,571,082 ----a-w c:\program files\Jessy Matador - Décalé Gwada (Remix).mp3
    2008-02-10 16:25 86,048 ----a-w c:\documents and settings\HP_Propriétaire\Application Data\GDIPFONTCACHEV1.DAT
    2007-10-05 16:18 52 ----a-w c:\documents and settings\HP_Propriétaire\Application Data\wklnhst.dat
    2007-10-05 10:01 22 --sha-w c:\windows\SMINST\HPCD.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-04-03_18.28.27.71 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-02-26 11:49:32 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2008-03-20 07:56:50 1,846,016 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll
    + 2008-02-20 05:20:23 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:50:24 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll
    + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-03-01 12:34:26 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 12:34:26 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 12:34:26 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 12:34:27 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 12:34:27 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 12:34:27 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 12:34:27 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 12:34:27 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 12:34:27 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 12:34:29 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 12:34:29 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 12:34:29 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 12:34:30 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 12:34:30 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 12:34:30 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 12:34:32 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 12:34:32 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 12:34:32 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 12:34:32 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 12:34:32 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 12:34:32 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 12:34:32 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 12:34:33 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 12:34:33 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 12:34:33 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:42 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-25 06:56:31 194,144 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-11-01 05:15:27 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 07:19:26 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 07:19:26 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 07:19:26 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 07:19:26 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 07:19:26 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 07:19:26 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 07:19:26 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 07:19:26 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 07:19:26 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 07:19:26 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 07:19:26 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 07:19:26 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 07:19:26 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 07:19:27 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 07:19:27 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 07:19:27 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 07:19:27 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 07:19:27 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 07:19:27 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 07:19:27 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 07:19:27 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 07:19:27 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 07:19:27 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 07:19:27 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 07:19:27 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-07-07 20:18:27 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-06-14 18:03:13 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-14 17:33:37 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-14 17:40:19 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 16:17:04 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 15:59:30 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 16:22:05 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 04:55:47 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
    + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:59 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:13:24 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:37:01 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:37:01 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:47:22 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:47:22 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:44:02 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:44:02 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
    + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
    + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
    + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
    + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
    + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
    + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB953356\spmsg.dll
    + 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB953356\spuninst.exe
    + 2008-05-28 12:01:41 26,624 ----a-w c:\windows\$hf_mig$\KB953356\update\ippmcust.dll
    + 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB953356\update\spcustom.dll
    + 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB953356\update\update.exe
    + 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB953356\update\updspapi.dll
    + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-15 16:31:32 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2004-08-05 18:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
    + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
    + 2004-08-05 18:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
    + 2004-08-05 18:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
    + 2004-08-05 18:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
    + 2004-08-05 18:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
    + 2004-08-05 18:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
    + 2004-08-05 18:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
    + 2004-08-05 18:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
    + 2004-08-05 18:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
    + 2004-08-05 18:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
    + 2004-08-05 18:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
    + 2004-08-05 18:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
    + 2004-08-05 18:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
    + 2004-08-05 18:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
    + 2004-08-05 18:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
    + 2004-08-05 18:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
    + 2004-08-05 18:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
    + 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\admin.dll
    + 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\admin.exe
    + 2004-08-05 18:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
    + 2004-08-05 18:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
    + 2004-08-05 18:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
    + 2004-08-05 18:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
    + 2004-08-05 18:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
    + 2004-08-05 18:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
    + 2006-10-12 14:04:13 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
    + 2007-03-09 13:48:06 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
    + 2004-08-05 18:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
    + 2004-08-05 18:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
    + 2006-10-12 11:09:53 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0401.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0404.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
    + 2004-08-05 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
    + 2004-08-05 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
    + 2004-08-05 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040d.dll
    + 2004-08-05 12:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0411.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0412.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
    + 2004-08-05 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0804.dll
    + 2004-08-05 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
    + 2004-08-05 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
    + 2004-08-05 18:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
    + 2004-08-05 18:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
    + 2004-08-05 18:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
    + 2004-08-05 18:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
    + 2004-08-05 18:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
    + 2004-08-05 18:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
    + 2004-08-05 18:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
    + 2004-08-05 18:00:00 334,336 -c----w c:\windows\$NtServicePackUninstall$\aqueue.dll
    + 2004-08-05 18:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
    + 2004-08-05 18:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
    + 2004-08-05 18:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
    + 2004-08-04 04:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
    + 2004-08-05 18:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
    + 2004-08-05 18:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
    + 2004-08-05 18:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
    + 2004-08-05 18:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
    + 2004-08-05 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
    + 2004-08-05 18:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
    + 2004-08-05 18:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
    + 2003-03-24 20:52:04 20,540 -c----w c:\windows\$NtServicePackUninstall$\author.dll
    + 2003-03-24 20:52:04 16,439 -c----w c:\windows\$NtServicePackUninstall$\author.exe
    + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
    + 2004-08-05 18:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
    + 2004-08-05 18:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
    + 2004-08-05 18:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
    + 2004-08-05 18:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
    + 2004-08-05 18:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
    + 2004-08-05 18:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
    + 2004-08-05 18:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
    + 2004-08-05 18:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
    + 2004-08-05 18:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
    + 2004-08-05 18:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
    + 2004-08-05 18:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
    + 2004-08-05 18:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
    + 2004-08-05 18:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
    + 2007-10-11 06:13:38 1,024,000 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
    + 2004-08-05 18:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
    + 2004-08-05 18:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
    + 2004-08-05 12:00:00 218,112 -c----w c:\windows\$NtServicePackUninstall$\c_g18030.dll
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
    + 2004-08-05 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
    + 2004-08-05 18:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
    + 2004-08-05 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
    + 2005-07-26 04:39:54 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
    + 2005-07-26 04:39:54 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
    + 2004-08-05 18:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
    + 2007-10-11 06:13:38 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
    + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
    + 2004-08-05 18:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
    + 2004-08-05 18:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
    + 2004-08-05 18:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
    + 2004-08-05 18:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
    + 2004-08-05 18:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
    + 2003-03-24 20:52:04 188,480 -c----w c:\windows\$NtServicePackUninstall$\cfgwiz.exe
    + 2004-08-05 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
    + 2004-08-05 18:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
    + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
    + 2004-08-05 18:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
    + 2004-08-05 18:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
    + 2005-07-26 04:39:55 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
    + 2005-07-26 04:39:55 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
    + 2004-08-05 18:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
    + 2004-08-05 18:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
    + 2004-08-05 18:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
    + 2004-08-05 18:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
    + 2004-08-05 18:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
    + 2004-08-05 18:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
    + 2004-08-05 18:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
    + 2004-08-05 18:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
    + 2004-08-05 18:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
    + 2004-08-05 18:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
    + 2004-08-05 18:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
    + 2004-08-05 18:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
    + 2004-08-05 18:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
    + 2004-08-05 18:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
    + 2004-08-05 18:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
    + 2004-08-05 18:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
    + 2005-07-26 04:39:55 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
    + 2004-08-05 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
    + 2005-07-26 04:39:56 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
    + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
    + 2004-08-05 18:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
    + 2004-08-05 18:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
    + 2004-08-05 18:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
    + 2005-07-26 04:39:56 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
    + 2004-08-05 18:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
    + 2004-08-05 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
    + 2004-08-05 18:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
    + 2004-08-05 12:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
    + 2004-08-05 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
    + 2005-07-26 04:39:57 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
    + 2005-07-26 04:39:57 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
    + 2004-08-05 18:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
    + 2004-08-05 18:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
    + 2004-08-05 12:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
    + 2004-08-05 18:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
    + 2004-08-05 18:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
    + 2004-08-05 18:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
    + 2004-08-05 18:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
    + 2004-08-05 18:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
    + 2004-08-05 18:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
    + 2004-08-05 18:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
    + 2004-08-05 18:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
    + 2004-08-05 18:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
    + 2004-08-05 18:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
    + 2004-08-05 18:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
    + 2004-08-05 18:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
    + 2004-08-05 18:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
    + 2004-08-05 18:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
    + 2004-08-05 18:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
    + 2004-08-05 18:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
    + 2004-08-05 18:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
    + 2006-06-02 19:32:20 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
    + 2004-08-05 18:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
    + 2004-08-05 18:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
    + 2004-08-05 18:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
    + 2004-08-05 18:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
    + 2007-10-11 06:13:38 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
    + 2004-08-05 18:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
    + 2004-08-05 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
    + 2004-08-05 18:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
    + 2004-08-05 18:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
    + 2004-08-05 18:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
    + 2004-08-05 18:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
    + 2004-08-05 18:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
    + 2004-08-05 18:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
    + 2004-08-05 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
    + 2004-08-05 18:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
    + 2004-08-05 18:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
    + 2004-08-05 18:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
    + 2004-08-05 18:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
    + 2004-08-05 18:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
    + 2004-08-05 18:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
    + 2004-08-05 18:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
    + 2004-08-05 18:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
    + 2004-08-05 18:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
    + 2004-08-05 18:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
    + 2004-08-05 18:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
    + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
    + 2004-08-05 12:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
    + 2004-08-05 18:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
    + 2004-08-05 18:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
    + 2004-08-05 18:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
    + 2004-08-05 18:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
    + 2004-08-05 18:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
    + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
    + 2004-08-05 18:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
    + 2004-08-05 12:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
    + 2004-08-05 18:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
    + 2004-08-05 18:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
    + 2004-08-05 12:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
    + 2004-08-05 18:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
    + 2004-08-05 18:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
    + 2004-08-05 18:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
    + 2004-08-05 18:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
    + 2004-08-05 18:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
    + 2004-08-05 12:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
    + 2004-08-05 18:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
    + 2004-08-05 18:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
    + 2004-08-05 18:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
    + 2004-08-05 18:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
    + 2004-08-05 18:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
    + 2004-08-05 18:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
    + 2004-08-05 18:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
    + 2004-08-05 18:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
    + 2004-08-05 18:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
    + 2004-08-05 18:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
    + 2004-08-04 05:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
    + 2004-08-05 18:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
    + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
    + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
    + 2004-08-05 18:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
    + 2004-08-05 18:00:00 97,792 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
    + 2004-08-05 18:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
    + 2004-08-05 18:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
    + 2004-08-05 18:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
    + 2004-08-05 18:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
    + 2004-08-05 18:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
    + 2004-08-05 18:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
    + 2004-08-05 18:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
    + 2004-08-05 18:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
    + 2004-08-05 18:00:00 18,432 -c----w c:
    0
  11. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    toujours pas entier comme il est trop long il passe pas

    il faut envoyer en 2 fois le debut je l'ai maintenant envoie la fin

    0
  12. pamela
     
    dsl y a pas de place pour tou poster voici la fin qu'il manquait

    -- Instantané actualisé --
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
    "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 2097488]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
    "Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472]
    "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
    "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
    "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-08 344064]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-02 136600]
    "SystrayORAHSS"="c:\program files\Orange HSS\Systray\SystrayApp.exe" [2007-09-25 94208]
    "ORAHSSSessionManager"="c:\program files\Orange HSS\SessionManager\SessionManager.exe" [2007-09-25 102400]
    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
    "AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-09-03 111936]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
    "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
    "ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]

    c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2008-12-07 962661]
    Orbit.lnk - c:\program files\Orbitdownloader\orbitdm.exe [2008-09-11 1707208]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=ujditw.dll

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
    path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk
    backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk]
    path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk
    backup=c:\windows\pss\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
    --a------ 2008-04-01 10:39 486856 c:\program files\DAEMON Tools Lite\daemon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    --a------ 2007-08-24 06:00 33648 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
    --a------ 2005-05-12 06:12 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD08]
    --a------ 2005-06-02 07:35 49152 c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    --a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    --a------ 2007-10-18 11:34 5724184 c:\program files\Windows Live\Messenger\msnmsgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "c:\\Program Files\\Limewire\\LimeWire.exe"=
    "c:\\Program Files\\DNA\\btdna.exe"=
    "c:\\Program Files\\BitTorrent\\bittorrent.exe"=
    "c:\\Program Files\\eChanblard\\emule.exe"=
    "c:\\Program Files\\Orange HSS\\Connectivity\\ConnectivityManager.exe"=
    "c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
    "c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=

    R3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\DRIVERS\WlanBZXP.sys [2008-01-27 450560]
    S1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-04-19 111184]
    S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-04-19 20560]
    S2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\DRIVERS\EAPPkt.sys [2008-12-04 38144]
    S3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2008-12-04 264576]
    S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS []

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{28ABC5C0-4FCB-11CF-AAX5-21CX5C574571}]
    c:\config\S-1-5-21-1482476501-1644491937-682003330-1013\Cfg.exe
    .
    Contenu du dossier 'Tâches planifiées'

    2008-12-06 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    BHO-{28E258FA-4C73-4FAA-AC86-59DC1BE7649C} - (no file)
    BHO-{6901EC1F-71AF-4E5A-B165-BA3C1831A3CE} - (no file)
    BHO-{D6BA7C2E-46B6-4FCA-A565-04BF68BBBA6A} - (no file)
    BHO-{F5CE94C3-FFDA-4874-B5A1-DCB8CB2F029D} - (no file)
    HKCU-Run-WOOKIT - c:\progra~1\Wanadoo\GestMaj.exe
    HKLM-Run-PCDrProfiler - (no file)
    Notify-vtUOigeD - (no file)
    MSConfigStartUp-updateMgr - c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

    .
    ------- Examen supplémentaire -------
    .
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
    uStart Page = hxxp://www.wanadoo.fr
    mStart Page = hxxp://www.ustart.org
    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\c4f7upoa.default\
    FF - prefs.js: browser.search.selectedEngine - uStart
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    FF - plugin: c:\program files\DNA\plugins\npbtdna.dll
    FF - plugin: c:\program files\iTunes\Mozilla Plugins\npitunes.dll
    FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeploytk.dll
    FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npjp2.dll
    FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.1.0.30716.0.dll
    FF - plugin: c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeploytk.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-12-12 23:20:53
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'winlogon.exe'(412)
    c:\windows\system32\Ati2evxx.dll
    .
    Heure de fin: 2008-12-12 23:22:00
    ComboFix-quarantined-files.txt 2008-12-12 22:21:41
    ComboFix2.txt 2008-04-03 16:28:42

    Avant-CF: 152 396 361 728 octets libres
    Après-CF: 152,509,071,360 octets libres

    7829 --- E O F --- 2008-11-12 21:59:28
    0
    1. benurrr Messages postés 9766 Statut Contributeur sécurité 107
       
      + un nouveau rapport hijackthis stp

      j'analyse le tout et je te tient au courant demain matin

      bonne nuit


      Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
      Mais C.. de penser que ­tu es libre...Merci a australe13
      0
  13. pamela
     
    merci de benurr en tout cas de ton aide précieux voici le nouveau rapport hijackthis bonne nuit à toi aussi!

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 00:19:47, on 13/12/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\windows\system\hpsysdrv.exe
    C:\HP\KBD\KBD.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Orange HSS\Systray\SystrayApp.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Orange HSS\Launcher\Launcher.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    C:\Program Files\Orbitdownloader\orbitdm.exe
    C:\Program Files\Orbitdownloader\orbitnet.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {28E258FA-4C73-4FAA-AC86-59DC1BE7649C} - (no file)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {6901EC1F-71AF-4E5A-B165-BA3C1831A3CE} - (no file)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {D6BA7C2E-46B6-4FCA-A565-04BF68BBBA6A} - (no file)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: (no name) - {F5CE94C3-FFDA-4874-B5A1-DCB8CB2F029D} - (no file)
    O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange HSS\SessionManager\SessionManager.exe
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
    O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
    O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
    O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
    O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O20 - AppInit_DLLs: ujditw.dll
    O20 - Winlogon Notify: vtUOigeD - C:\WINDOWS\
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    0