Analyse de navipromo

Résolu
mater -  
Bonjour,

Quoi faire la fin de cette analyse

Merci par avance

C:\WINDOWS\system32\jvkcyxfg.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\PsBJmUtv.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\rcyoqlfp.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !

Clean Navipromo version 3.7.2 commencé le 07/02/2009 à 18:41:09.57

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 07.02.2009 à 10h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2200+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Admin ( Administrator )
BOOT : Normal boot

Antivirus : ESET Smart Security 3.0 3.0 (Not Activated)
Firewall : Pare-feu personnel d'ESET 3.0.669.0 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:55 Go (Free:34 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)

Mode suppression automatique
avec prise en charge résultats Catchme et GNS

Nettoyage exécuté au redémarrage de l'ordinateur

*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

* Suppression dans "C:\Documents and Settings\Admin\locals~1\applic~1" *

*** Suppression dossiers dans "C:\WINDOWS" ***

*** Suppression dossiers dans "C:\Program Files" ***

...\Live-Player ...suppression...
...\Live-Player supprimé !

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

...\Live-Player ...suppression...
...\Live-Player supprimé !

*** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Admin\applic~1" ***

...\Live-Player ...suppression...
...\Live-Player supprimé !

*** Suppression dossiers dans "C:\Documents and Settings\Admin\locals~1\applic~1" ***

*** Suppression dossiers dans "C:\Documents and Settings\Admin\menudm~1\progra~1" ***

*** Suppression fichiers ***

c:\docume~1\alluse~1\bureau\Live-Player.lnk supprimé !
C:\WINDOWS\LIVE-PLAYER_SETUP.EXE-00547F6A.pf supprimé !
C:\WINDOWS\LIVE-PLAYER.EXE-21A6817A.pf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Admin\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :

* Dans "C:\WINDOWS\system32" *

* Dans "C:\Documents and Settings\Admin\locals~1\applic~1" *

qmqmsqy.exe trouvé !
Copie qmqmsqy.exe réalisée avec succès !
qmqmsqy.exe supprimé !

qmqmsqy.dat trouvé !
Copie qmqmsqy.dat réalisée avec succès !
qmqmsqy.dat supprimé !

qmqmsqy_nav.dat trouvé !
Copie qmqmsqy_nav.dat réalisée avec succès !
qmqmsqy_nav.dat supprimé !

qmqmsqy_navps.dat trouvé !
Copie qmqmsqy_navps.dat réalisée avec succès !
qmqmsqy_navps.dat supprimé !

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group supprimé !
Certificat Montorgueil absent !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***

C:\WINDOWS\system32\jvkcyxfg.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\PsBJmUtv.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !
C:\WINDOWS\system32\rcyoqlfp.ini2 trouvé ! Infection Vundo possible non traitée par cet outil !

*** Nettoyage terminé le 07/02/2009 à 18:46:15.29 ***
Configuration: Windows XP
Internet Explorer 7.0

8 réponses

  2. jlpjlp Contributeur sécurité
    ok

    vire combofix manuellement de ton bureau
    C:\Documents and Settings\Admin\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!

    ______________

    tu diras si nod 32 trouve encore des infections : si rien c'est bon!!!
    1. mater
      Parfait.... j'ai refait un scan avec Malwarebytes, puisque Nod n'avait pas bloqué le virus!
      aucun élément nuisible n'a été detecté!!!!

      Merci beaucoup.....
  4. jlpjlp Contributeur sécurité
    Désactive ta restauration systeme puis redemarre ton ordi puis réactive là comme ceci:
    https://www.informatruc.com

    ________________

    installe
    SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

    http://www.commentcamarche.net/telecharger/telecharger 226 spyware blaster

    ____________________

    mettre à jour adobe reader
    https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

    Mettre a jour java:

    Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.
    Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
    Double-clique sur le répertoire JavaRa obtenu.
    Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
    Clique sur Search For Updates.
    Sélectionne Update Using jucheck.exe puis clique sur Search.
    Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
    Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
    Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
    Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
    Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
    (c:\JavaRa.log)
    Ferme l'application.

    si cela ne fonctionne pas

    https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80

    tu peux désinstaller les vieilles versions.
    _____________________________

    Télécharge ToolsCleaner sur ton bureau.
    --> http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
    # Clique sur Recherche et laisse le scan agir ...
    # Clique sur Suppression pour finaliser.
    # Tu peux, si tu le souhaites, te servir des Options facultatives.
    # Clique sur Quitter pour obtenir le rapport.
    # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    ______________________________

    encore des soucis? nod 32 trouve des infections?

    rq: garde malwarebyte et spywareblaster en complement de nod32
    1. mater
      bonjour,

      alors là.... pourtant c'est le plus simple ;j'avais un icone de Java ds la barre des taches à droite. "mise à jour" , ce que j'ai fait.. mais impossible de le trouver!

      et pour adobe , j'avais la version 5.. j'ai beau faire telecharger la nouvelle version... ca me dit que c'est fait.. mais rien n'a changé!
    2. mater
      ouf!
      ok pour Java , voilà le rapport

      avaRa 1.13 Removal Log.

      Report follows after line.

      ------------------------------------

      The JavaRa removal process was started on Sun Feb 08 18:50:48 2009

      Found and removed: C:\Program Files\Java\jre1.6.0_02

      Found and removed: C:\Program Files\Java\jre1.6.0_03

      Found and removed: C:\Program Files\Java\jre1.6.0_07

      Found and removed: Software\JavaSoft\Java2D\1.5.0_06

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_02

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_03

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030}

      Found and removed: Software\Classes\JavaPlugin.160_02

      Found and removed: Software\Classes\JavaPlugin.160_03

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_03

      Found and removed: Software\JavaSoft\Java2D\1.6.0_01

      Found and removed: Software\JavaSoft\Java2D\1.6.0_02

      Found and removed: Software\JavaSoft\Java2D\1.6.0_03

      Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_03

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\bin\

      ------------------------------------

      Finished reporting.
    3. mater
      Ok aussi pour adobe!

      j'ai voulu aller trop vite toute à lhre!

      bon dc voilà le rapport cleaner:

      En tous cas depuis un moment deja ,je n'ai plus de fenetres intempestives

      Merci pour le conseil de garder les deux en plus de Nod 32.
      Je vais refaire un scan...

      Merci encore pour tout!

      [ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

      -->- Recherche:

      C:\Combofix.txt: trouvé !
      C:\fixnavi.txt: trouvé !
      C:\cleannavi.txt: trouvé !
      C:\SDFIX: trouvé !
      C:\Qoobox: trouvé !
      C:\_OtMoveIt: trouvé !
      C:\Rsit: trouvé !
      C:\Documents and Settings\Admin\Bureau\ComboFix.exe: trouvé !
      C:\Documents and Settings\Admin\Bureau\Rsit.exe: trouvé !
      C:\Documents and Settings\Admin\Bureau\SmitFraudfix: trouvé !
      C:\Documents and Settings\Admin\Bureau\Navilog1: trouvé !
      C:\Documents and Settings\Admin\Bureau\Navilog1\Navilog1.exe: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
      C:\Program Files\Navilog1: trouvé !
      C:\Program Files\Navilog1\Navilog1.bat: trouvé !
      C:\Program Files\Trend Micro\HijackThis.exe: trouvé !
      C:\Program Files\Trend Micro\hijackthis.log: trouvé !
      C:\Program Files\Trend Micro\HijackThis: trouvé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\Admin\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
      C:\Documents and Settings\Admin\Bureau\Navilog1\Navilog1.exe: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
      C:\Program Files\Navilog1\Navilog1.bat: supprimé !
      C:\Program Files\Trend Micro\HijackThis.exe: supprimé !
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
      C:\Combofix.txt: supprimé !
      C:\fixnavi.txt: supprimé !
      C:\cleannavi.txt: supprimé !
      C:\Documents and Settings\Admin\Bureau\Rsit.exe: supprimé !
      C:\Program Files\Trend Micro\hijackthis.log: supprimé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
      C:\SDFIX: supprimé !
      C:\Qoobox: supprimé !
      C:\_OtMoveIt: supprimé !
      C:\Rsit: supprimé !
      C:\Documents and Settings\Admin\Bureau\SmitFraudfix: supprimé !
      C:\Documents and Settings\Admin\Bureau\Navilog1: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
      C:\Program Files\Navilog1: supprimé !
      C:\Program Files\Trend Micro\HijackThis: supprimé !
  6. mater
    rapport RSIT

    Logfile of random's system information tool 1.05 (written by random/random)
    Run by Admin at 2009-02-08 10:42:50
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 35 GB (61%) free of 57 GB
    Total RAM: 511 MB (21% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:42:52, on 08/02/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\a-squared Anti-Malware\a2service.exe
    C:\Program Files\ESET\ESET Smart Security\ekrn.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
    C:\WINDOWS\vVX1000.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\ESET\ESET Smart Security\egui.exe
    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\OLITEC - Moniteur réseau 802.11g\WlanUtil.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
    C:\Documents and Settings\Admin\Bureau\RSIT.exe
    C:\Program Files\trend micro\Admin.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
    O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
    O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Lancer l'utilitaire Olitec.lnk = ?
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
    O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
    O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    1. jlpjlp Contributeur sécurité
      il manque la fin du rapport combofix!

      ________________

      analyse ces deux fichiers sur virus total et colle les rapport:

      c:\windows\system32\cpljkeax.tmp
      c:\windows\system32\nxvgwvqy.tmp

      _________________

      remets un rapport RSIT
      1. mater
        1ere analyse sur virus total

        Fichier cpljkeax.tmp_ reçu le 2009.02.08 10:23:33 (CET)

        Résultat: 3/39 (7.7%)

        Antivirus Version Dernière mise à jour Résultat
        a-squared 4.0.0.93 2009.02.08 -
        AhnLab-V3 5.0.0.2 2009.02.07 -
        AntiVir 7.9.0.76 2009.02.07 -
        Authentium 5.1.0.4 2009.02.07 -
        Avast 4.8.1335.0 2009.02.07 -
        AVG 8.0.0.229 2009.02.07 -
        BitDefender 7.2 2009.02.08 -
        CAT-QuickHeal 10.00 2009.02.07 -
        ClamAV 0.94.1 2009.02.08 -
        Comodo 971 2009.02.08 -
        DrWeb 4.44.0.09170 2009.02.08 -
        eSafe 7.0.17.0 2009.02.05 -
        eTrust-Vet 31.6.6346 2009.02.07 -
        F-Prot 4.4.4.56 2009.02.07 -
        F-Secure 8.0.14470.0 2009.02.08 Vundo.FBW
        Fortinet 3.117.0.0 2009.02.08 -
        GData 19 2009.02.08 -
        Ikarus T3.1.1.45.0 2009.02.08 -
        K7AntiVirus 7.10.623 2009.02.07 -
        Kaspersky 7.0.0.125 2009.02.08 -
        McAfee 5518 2009.02.07 Vundo!grb
        McAfee+Artemis 5519 2009.02.07 Vundo!grb
        Microsoft 1.4306 2009.02.08 -
        NOD32 3836 2009.02.07 -
        Norman 6.00.02 2009.02.06 -
        nProtect 2009.1.8.0 2009.02.08 -
        Panda 9.5.1.2 2009.02.07 -
        PCTools 4.4.2.0 2009.02.07 -
        Prevx1 V2 2009.02.08 -
        Rising 21.15.50.00 2009.02.07 -
        SecureWeb-Gateway 6.7.6 2009.02.08 -
        Sophos 4.38.0 2009.02.08 -
        Sunbelt 3.2.1847.2 2009.02.07 -
        Symantec 10 2009.02.08 -
        TheHacker 6.3.1.5.249 2009.02.08 -
        TrendMicro 8.700.0.1004 2009.02.06 -
        VBA32 3.12.8.12 2009.02.08 -
        ViRobot 2009.2.6.1594 2009.02.06 -
        VirusBuster 4.5.11.0 2009.02.07 -
        Information additionnelle
        File size: 1658069 bytes
        MD5...: de416abbbb98f86f0f8081454fc1daec
        SHA1..: cad02ed996ad44c3e3d2aea9401128ecbd1f8ead
        SHA256: 06750b21ab58f6981de4706b2116813229c487eb7cdabfd130fb960ffaee35b3
        SHA512: 6f44e58e0c83cc591e6019dcbf0f237aeea647d3eb40e909e5f0dfc1cc497afc
        69cf47a6f2876951da5eb0f261ed82d40491dee397f054f6f442dd36dfe3d9df

        ssdeep: 12288:79qBdDon2qzrWUTf214tXMtcZQu3aCt9Ti0PhGiBENhd76OmSiFwDvYpuG
        g3:ZqBdDon2qzrWUTf214tXMtcZeoEdT

        PEiD..: -
        TrID..: File type identification
        Unknown!
      2. mater
        2eme fichier

        Fichier nxvgwvqy.tmp_ reçu le 2009.02.08 10:28:20 (CET)

        Résultat: 3/39 (7.7%)

        Antivirus Version Dernière mise à jour Résultat
        a-squared 4.0.0.93 2009.02.08 -
        AhnLab-V3 5.0.0.2 2009.02.07 -
        AntiVir 7.9.0.76 2009.02.07 -
        Authentium 5.1.0.4 2009.02.07 -
        Avast 4.8.1335.0 2009.02.07 -
        AVG 8.0.0.229 2009.02.07 -
        BitDefender 7.2 2009.02.08 -
        CAT-QuickHeal 10.00 2009.02.07 -
        ClamAV 0.94.1 2009.02.08 -
        Comodo 971 2009.02.08 -
        DrWeb 4.44.0.09170 2009.02.08 -
        eSafe 7.0.17.0 2009.02.05 -
        eTrust-Vet 31.6.6346 2009.02.07 -
        F-Prot 4.4.4.56 2009.02.07 -
        F-Secure 8.0.14470.0 2009.02.08 Vundo.FBW
        Fortinet 3.117.0.0 2009.02.08 -
        GData 19 2009.02.08 -
        Ikarus T3.1.1.45.0 2009.02.08 -
        K7AntiVirus 7.10.623 2009.02.07 -
        Kaspersky 7.0.0.125 2009.02.08 -
        McAfee 5518 2009.02.07 Vundo!grb
        McAfee+Artemis 5519 2009.02.07 Vundo!grb
        Microsoft 1.4306 2009.02.08 -
        NOD32 3836 2009.02.07 -
        Norman 6.00.02 2009.02.06 -
        nProtect 2009.1.8.0 2009.02.08 -
        Panda 9.5.1.2 2009.02.07 -
        PCTools 4.4.2.0 2009.02.07 -
        Prevx1 V2 2009.02.08 -
        Rising 21.15.50.00 2009.02.07 -
        SecureWeb-Gateway 6.7.6 2009.02.08 -
        Sophos 4.38.0 2009.02.08 -
        Sunbelt 3.2.1847.2 2009.02.06 -
        Symantec 10 2009.02.08 -
        TheHacker 6.3.1.5.249 2009.02.08 -
        TrendMicro 8.700.0.1004 2009.02.06 -
        VBA32 3.12.8.12 2009.02.08 -
        ViRobot 2009.2.6.1594 2009.02.06 -
        VirusBuster 4.5.11.0 2009.02.07 -
        Information additionnelle
        File size: 1563866 bytes
        MD5...: 01b8b73aa20002b55fbccef829a95910
        SHA1..: ff5278f8a456d3ff7c0c190873fd4ad1532f1370
        SHA256: f4fc4633818629fa3d8f98ebe70f40a832bc071f5de70f61a82bf8c2af064ab5
        SHA512: 80328be2da095c96e93b240338f6f2b972dc87491d61603450e231c1fc021efc
        1720ed70fa4d4063d47c0a9eff601ff997a0b733690231b1dc5bc013937c3860

        ssdeep: 12288:0RJpDeNKEmoDs2d4aIA0XxRjfucMDg2s0YCfLSuNC0542FsMTNz+iV5KAH
        KrFTdF:qLDeNKEmoDs2d4aIA8xRjuKrFP

        PEiD..: -
        TrID..: File type identification
        Unknown!
      3. mater
        la fin du rapport combo fix... désolée :!

        + 2007-08-13 16:54:10 765,952 -c----w c:\windows\ie7updates\KB938127-IE7\vgx.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:47 394,976 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\updspapi.dll
        + 2007-07-12 23:30:52 765,952 -c----w c:\windows\ie7updates\KB938127-v2-IE7\vgx.dll
        + 2007-08-13 16:39:00 123,904 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
        + 2007-08-13 16:39:00 123,904 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll.000
        + 2007-08-13 16:35:46 346,624 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
        + 2007-08-13 16:35:38 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
        + 2007-08-13 16:54:10 131,584 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
        + 2007-08-13 16:36:26 61,952 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
        + 2007-08-13 16:39:06 54,784 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
        + 2007-08-13 16:39:06 54,784 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe.000
        + 2007-08-13 16:39:26 152,064 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
        + 2007-08-13 16:39:26 152,064 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll.000
        + 2007-08-13 16:39:54 229,376 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
        + 2007-08-13 16:39:54 229,376 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll.000
        + 2007-08-13 15:56:54 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
        + 2007-08-13 15:56:54 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll.000
        + 2007-02-12 14:10:12 2,451,312 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dat
        + 2007-07-11 10:27:48 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
        + 2007-08-13 16:39:50 382,976 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
        + 2007-08-13 16:39:50 382,976 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll.000
        + 2007-08-13 16:54:10 6,049,280 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
        + 2007-08-13 16:39:10 43,008 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
        + 2007-08-13 16:39:10 43,008 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll.000
        + 2007-08-13 16:34:04 266,752 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
        + 2007-08-13 16:39:10 13,312 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
        + 2007-08-13 16:43:56 622,080 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
        + 2007-08-13 16:43:56 622,080 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe.000
        + 2007-08-13 16:54:10 27,136 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
        + 2007-08-13 16:54:10 458,752 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
        + 2007-08-13 16:54:10 50,688 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
        + 2007-08-13 16:54:12 3,578,368 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
        + 2007-08-13 16:54:10 475,648 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
        + 2007-08-13 16:44:26 192,000 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
        + 2007-08-13 16:54:10 670,720 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
        + 2007-08-13 16:44:06 101,376 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
        + 2007-08-13 16:44:06 101,376 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll.000
        + 2007-08-13 16:36:12 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
        + 2007-08-13 16:44:30 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
        + 2007-08-13 16:44:30 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll.000
        + 2007-08-13 16:54:10 1,162,240 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
        + 2007-08-13 16:54:10 231,424 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
        + 2007-08-13 16:54:10 231,424 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll.000
        + 2007-08-13 16:54:10 818,688 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
        + 2008-06-23 16:28:17 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
        + 2008-06-23 16:28:17 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
        + 2008-06-23 16:28:17 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
        + 2008-06-23 16:28:17 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
        + 2008-06-23 16:28:17 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
        + 2008-06-23 09:21:30 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
        + 2008-06-23 16:28:18 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
        + 2008-06-23 16:28:18 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
        + 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
        + 2008-06-23 16:28:18 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
        + 2008-06-23 16:28:18 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
        + 2008-06-23 16:28:19 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
        + 2008-06-23 16:28:19 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
        + 2008-06-23 16:28:20 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
        + 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
        + 2008-06-23 09:21:49 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
        + 2008-06-23 16:28:20 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
        + 2008-06-23 16:28:20 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
        + 2008-06-23 16:28:20 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
        + 2008-06-24 08:28:24 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
        + 2008-06-23 16:28:22 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
        + 2008-06-23 16:28:22 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
        + 2008-06-23 16:28:22 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
        + 2008-06-23 16:28:22 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
        + 2008-06-23 16:28:22 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
        + 2008-06-23 16:28:22 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
        + 2008-06-23 16:28:23 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
        + 2008-06-23 16:28:23 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
        + 2008-06-23 16:28:23 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
        + 2008-08-26 08:11:45 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
        + 2008-08-26 08:11:45 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
        + 2008-08-26 08:11:45 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
        + 2008-08-26 08:11:45 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
        + 2008-08-26 08:11:45 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
        + 2008-08-25 08:39:40 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
        + 2008-08-26 08:11:45 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
        + 2008-08-26 08:11:45 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
        + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
        + 2008-08-26 08:11:46 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
        + 2008-08-26 08:11:46 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
        + 2008-10-03 17:12:27 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
        + 2008-08-26 08:11:48 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
        + 2008-08-26 08:11:48 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
        + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
        + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
        + 2008-08-26 08:11:49 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
        + 2008-08-26 08:11:49 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
        + 2008-08-26 08:11:49 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
        + 2008-08-27 09:11:52 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
        + 2008-08-26 08:11:52 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
        + 2008-08-26 08:11:52 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
        + 2008-08-26 08:11:52 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
        + 2008-08-26 08:11:52 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
        + 2008-08-26 08:11:52 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
        + 2008-08-26 08:11:52 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
        + 2008-08-26 08:11:53 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
        + 2008-08-26 08:11:53 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
        + 2008-08-26 08:11:54 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
        + 2008-10-17 00:48:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:47 394,976 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
        + 2006-10-26 19:12:56 396,592 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\MOC.EXE
        + 2007-05-08 10:10:18 16,874,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\MSO.DLL
        + 2007-03-21 17:56:50 8,425,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\OARTCONV.DLL
        + 2006-10-27 14:18:34 1,658,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\OGL.DLL
        + 2007-05-10 08:04:28 846,248 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\OICE.EXE
        + 2007-05-10 09:11:42 1,767,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\PPCNV.DLL
        + 2007-03-21 18:00:06 72,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\PXBCOM.EXE
        + 2007-03-21 17:58:40 4,145,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\WRD12CNV.DLL
        + 2007-03-21 17:58:46 24,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\WRD12EXE.EXE
        + 2007-05-10 09:25:40 14,677,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6021\XL12CNV.EXE
        + 2007-09-14 20:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6215\MSO.DLL
        + 2007-08-28 23:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6215\OGL.DLL
        + 2007-08-24 04:00:34 1,767,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6215\PPCNV.DLL
        + 2007-08-24 04:00:48 72,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6215\PXBCOM.EXE
        + 2007-10-02 19:00:06 14,708,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\[u]0/u00021090200C0400000000000F01FEC\12.0.6215\XL12CNV.EXE
        + 2008-02-04 08:10:10 208,928 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\ImagingDevice.dll
        + 2008-02-04 08:06:54 417,312 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\ImagingServices.dll
        + 2008-02-04 08:08:42 83,488 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\LiveAlbumXCtrl.dll
        + 2008-02-04 08:07:46 1,779,744 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\MicrosoftEffects.dll
        + 2008-02-04 08:05:04 46,112 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\PhotoViewerShim.dll
        + 2008-02-04 08:06:46 372,256 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXAlbumDownloadWizard.exe
        + 2008-02-01 09:23:12 279,680 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\wlxclip.dll
        + 2008-02-01 09:13:40 191,104 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXDSPA.dll
        + 2008-02-04 08:10:02 130,592 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXGrinderScheduler.dll
        + 2008-02-04 08:06:00 59,424 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXImageTranscode.dll
        + 2008-02-04 08:08:26 712,224 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXMediaPublishSubscribe.dll
        + 2008-02-01 09:17:40 587,264 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPGSS.SCR
        + 2008-02-04 08:07:22 1,565,728 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoAcq.dll
        + 2008-02-01 09:13:40 227,456 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoAcquireWizard.exe
        + 2008-02-04 08:08:38 86,560 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoCinematic.dll
        + 2008-02-04 08:08:32 83,488 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoClassic.dll
        + 2008-02-04 08:09:08 125,472 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoGallery.exe
        + 2008-02-01 09:13:42 16,000 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoGalleryRepair.exe
        + 2008-02-04 08:06:54 394,272 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoLibraryDatabase.dll
        + 2008-02-04 08:06:20 1,515,040 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoViewer.dll
        + 2008-02-04 08:06:20 1,250,336 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPhotoVoyager.dll
        + 2008-02-04 08:06:18 752,672 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPipeline.dll
        + 2008-02-04 08:06:14 734,752 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXPipetran.dll
        + 2008-02-01 09:13:42 101,504 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeControlHost.exe
        + 2008-02-04 08:05:00 20,512 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeControlHostPS.dll
        + 2008-02-04 08:05:04 53,792 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXQuickTimeShellExt.dll
        + 2008-02-04 08:08:42 85,024 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXThumbCache.dll
        + 2008-02-04 08:10:04 144,416 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVAFilt.dll
        + 2008-02-04 08:07:40 675,360 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoAcquireWizard.exe
        + 2008-02-04 08:07:10 69,152 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoCameraAutoPlayManager.exe
        + 2008-02-04 08:10:10 165,408 -c--a-r c:\windows\Installer\$PatchCache$\Managed\812AF07A89569CA418D33695C7D50D86\12.0.1329\WLXVideoTrim.dll
        + 2003-07-15 09:13:58 166,456 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\ACCWIZ.DLL
        + 2003-07-15 04:57:34 38,968 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
        + 2003-07-15 04:53:06 94,768 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
        + 2003-07-14 20:53:24 60,984 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\BLNMGR.DLL
        + 2003-07-14 20:53:22 46,144 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL
        + 2003-07-15 01:14:28 350,264 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\CDLMSO.DLL
        + 2003-07-15 09:18:12 47,160 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DFUICOM.EXE
        + 2003-07-15 04:56:54 14,904 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
        + 2003-07-15 04:57:14 98,360 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
        + 2003-08-13 08:34:38 10,073,144 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\EXCEL.EXE
        + 2003-08-03 16:56:16 1,146,184 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FM20.DLL
        + 2002-10-07 15:49:36 192,573 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FORM.DLL
        + 2003-07-24 05:01:40 1,949,240 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPCUTL.DLL
        + 2003-07-15 05:36:14 186,424 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPDTC.DLL
        + 2003-07-15 04:40:12 179,768 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
        + 2003-07-26 01:00:16 1,157,696 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPSRVUTL.DLL
        + 2003-07-26 01:14:50 799,288 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPWEC.DLL
        + 2003-07-15 05:11:42 2,139,192 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\GRAPH.EXE
        + 2003-07-14 20:57:44 87,096 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\IEAWSDC.DLL
        + 2003-07-15 04:53:50 161,336 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\IETAG.DLL
        + 2003-05-28 21:42:48 514,680 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\INTLNAME.DLL
        + 2003-06-18 23:31:44 758,784 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIGRAPH.DLL
        + 2003-06-18 23:31:10 252,928 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
        + 2003-06-18 23:31:48 17,920 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIMON.DLL
        + 2003-06-18 23:31:48 18,944 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIPPR.DLL
        + 2003-06-18 23:31:46 35,328 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIUI.DLL
        + 2003-06-18 23:31:34 443,904 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIVWCTL.DLL
        + 2003-05-28 21:42:50 342,616 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\METCONV.DLL
        + 2003-07-15 05:01:44 445,496 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MODHELP.DLL
        + 2003-08-15 06:54:08 6,627,392 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSACCESS.EXE
        + 2003-07-15 09:13:58 130,112 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSAEXP30.DLL
        + 2003-07-15 04:57:14 124,480 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL
        + 2003-07-15 05:12:22 47,872 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL
        + 2003-07-14 20:58:04 230,968 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSCDM.DLL
        + 2003-07-15 04:51:50 116,288 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSCONV97.DLL
        + 2002-12-18 01:08:50 359,600 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSDMENG.DLL
        + 2002-12-18 01:08:54 1,383,592 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSDMINE.DLL
        + 2003-07-15 04:56:14 40,504 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSE7.EXE
        + 2003-07-15 04:51:44 87,104 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
        + 2003-07-15 09:14:00 139,328 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSJSPP40.DLL
        + 2002-04-10 02:14:36 187,560 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSMDUN80.DLL
        + 2003-07-15 04:52:52 17,464 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
        + 2003-08-08 06:23:16 12,172,336 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSO.DLL
        + 2003-07-14 20:57:16 120,888 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
        + 2003-07-15 01:14:18 106,552 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOCF.DLL
        + 2003-07-23 20:35:26 127,032 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOCFU.DLL
        + 2003-07-15 04:52:52 27,704 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
        + 2003-07-15 04:44:06 25,144 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOEURO.DLL
        + 2003-07-15 04:52:56 55,360 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
        + 2002-12-18 01:09:24 2,071,752 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOLAP80.DLL
        + 2003-07-15 04:56:16 54,328 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOMSE.DLL
        + 2003-07-11 08:15:48 1,292,872 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
        + 2003-07-15 09:18:52 376,888 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
        + 2003-07-14 20:52:54 28,224 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
        + 2003-07-15 04:52:52 35,896 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
        + 2003-07-15 04:46:16 42,040 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
        + 2003-07-15 04:45:12 55,360 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
        + 2003-07-15 04:45:12 39,488 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
        + 2003-06-18 23:31:24 1,033,216 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPCORE.DLL
        + 2003-06-18 23:31:54 788,480 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPFILT.DLL
        + 2003-06-18 23:31:50 16,384 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
        + 2003-06-19 22:05:52 128,104 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPSCAN.EXE
        + 2003-07-28 18:24:40 5,677,112 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPUB.EXE
        + 2003-06-19 22:05:50 364,648 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
        + 2003-07-15 05:02:42 637,496 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSQRY32.EXE
        + 2003-07-15 04:52:58 41,528 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
        + 2003-07-15 05:02:14 627,256 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORDB.EXE
        + 2003-07-15 04:56:24 124,984 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORE.EXE
        + 2003-07-24 04:40:00 482,872 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORES.DLL
        + 2003-07-15 05:00:54 145,984 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
        + 2003-07-15 04:57:10 56,888 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
        + 2003-07-15 04:56:52 13,888 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
        + 2003-06-18 23:31:58 6,144 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OCRPS.DLL
        + 2003-07-15 09:14:26 283,696 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OIS.EXE
        + 2003-07-15 09:14:26 828,472 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISAPP.DLL
        + 2003-07-15 09:14:26 27,192 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISCTRL.DLL
        + 2003-07-15 09:14:26 242,240 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
        + 2003-07-15 05:05:24 1,054,264 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
        + 2003-07-15 05:05:24 1,054,264 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL_0002
        + 2003-07-14 20:53:08 95,792 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OSA.EXE
        + 2003-08-04 19:19:34 7,330,360 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OWC10.DLL
        + 2003-08-01 21:09:04 8,086,072 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OWC11.DLL
        + 2003-07-30 18:40:40 6,133,312 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\POWERPNT.EXE
        + 2003-07-15 09:18:54 430,136 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PP4X322.DLL
        + 2003-07-15 09:18:44 93,752 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
        + 2003-07-31 21:21:08 1,782,840 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PPTVIEW.EXE
        + 2003-07-15 04:40:26 130,104 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PRTF9.DLL
        + 2002-10-07 16:11:00 167,997 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PSOM.DLL
        + 2003-07-15 04:51:12 604,728 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PTXT9.DLL
        + 2003-07-15 04:50:26 551,480 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBCONV.DLL
        + 2003-07-15 04:40:16 51,256 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
        + 2003-05-09 03:54:00 77,824 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
        + 2003-07-15 04:57:08 40,512 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
        + 2002-10-07 15:49:42 81,984 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REVERSE.DLL
        + 2003-07-15 04:57:18 349,248 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SELFCERT.EXE
        + 2003-07-14 20:57:08 58,944 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
        + 2003-08-06 19:31:22 362,552 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SETLANG.EXE
        + 2003-07-15 04:53:14 11,848 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
        + 2003-08-06 19:26:18 445,488 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SOA.DLL
        + 2003-08-03 16:52:32 2,808,376 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\STSLIST.DLL
        + 2002-10-07 15:53:04 106,561 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\THOCRAPI.DLL
        + 2002-10-07 15:50:44 241,729 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWCUTCHR.DLL
        + 2002-10-07 15:51:04 180,289 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWCUTLIN.DLL
        + 2002-10-07 15:51:14 147,520 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWLAY32.DLL
        + 2002-10-07 15:51:20 102,467 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWORIENT.DLL
        + 2002-10-07 15:50:04 118,847 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWRECE.DLL
        + 2002-10-07 15:49:56 81,983 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWRECS.DLL
        + 2002-10-07 15:51:44 221,252 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWSTRUCT.DLL
        + 2003-07-15 04:57:40 59,960 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\UNBIND.EXE
        + 2003-07-03 21:19:36 2,502,656 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\VBE6.DLL
        + 2003-08-06 19:24:20 12,037,688 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\WINWORD.EXE
        + 2002-10-07 16:03:34 1,794,113 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XIMAGE3B.DLL
        + 2003-04-30 17:52:32 1,581,120 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XPAGE3C.DLL
        + 2003-01-17 20:03:34 59,466 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XSCAN32.DAT
        + 2007-05-31 11:41:06 10,352,472 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\EXCEL.EXE
        + 2007-04-19 12:09:30 167,256 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
        + 2007-06-18 15:16:32 12,259,160 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSO.DLL
        + 2007-05-10 11:35:04 6,747,480 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSPUB.EXE
        + 2007-05-31 11:35:22 6,420,320 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
        + 2007-05-31 11:35:46 133,976 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PRTF9.DLL
        + 2007-05-31 11:36:08 612,184 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PTXT9.DLL
        + 2007-05-10 11:34:48 562,528 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PUBCONV.DLL
        + 2007-05-09 15:19:48 2,585,936 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\VBE6.DLL
        + 2007-05-31 11:37:40 12,310,368 -c--a-r c:\windows\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\WINWORD.EXE
        + 2008-10-08 12:04:01 10,134 -c--a-r c:\windows\Installer\{1930504B-5236-4B43-B8FA-DB4CCFD73C0E}\callmsi.exe
        + 2008-10-08 12:04:01 140,544 -c--a-r c:\windows\Installer\{1930504B-5236-4B43-B8FA-DB4CCFD73C0E}\egui.exe
        - 2006-05-06 08:02:48 593,920 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
        + 2009-01-14 23:09:24 593,920 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
        - 2006-05-06 08:02:48 12,288 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
        + 2009-01-14 23:09:25 12,288 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
        - 2006-05-06 08:02:48 86,016 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
        + 2009-01-14 23:09:25 86,016 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
        - 2006-05-06 08:02:48 135,168 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
        + 2009-01-14 23:09:24 135,168 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
        - 2006-05-06 08:02:48 11,264 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
        + 2009-01-14 23:09:25 11,264 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
        - 2006-05-06 08:02:48 27,136 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
        + 2009-01-14 23:09:25 27,136 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
        - 2006-05-06 08:02:48 4,096 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
        + 2009-01-14 23:09:25 4,096 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
        - 2006-05-06 08:02:48 794,624 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
        + 2009-01-14 23:09:26 794,624 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
        - 2006-05-06 08:02:48 249,856 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
        + 2009-01-14 23:09:24 249,856 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
        - 2006-05-06 08:02:48 61,440 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
        + 2009-01-14 23:09:24 61,440 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
        - 2006-05-06 08:02:48 23,040 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
        + 2009-01-14 23:09:26 23,040 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
        - 2006-05-06 08:02:48 286,720 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
        + 2009-01-14 23:09:23 286,720 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
        - 2006-05-06 08:02:48 409,600 -c--a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
        + 2009-01-14 23:09:23 409,600 ----a-r c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
        + 2009-01-03 23:26:02 38,240 ----a-r c:\windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
        + 2008-09-05 21:15:52 123,008 -c--a-r c:\windows\Installer\{A70FA218-6598-4AC9-813D-63597C5DD068}\WLXPhotoGalleryIcon.exe
        + 2008-09-01 08:02:41 29,926 -c--a-r c:\windows\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
        - 2004-07-14 23:49:16 258,048 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
        + 2007-04-13 19:30:52 258,048 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
        - 2004-07-14 23:49:22 32,768 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
        + 2007-04-13 19:30:52 32,768 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
        - 2004-07-14 22:32:22 81,920 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
        + 2007-04-13 18:57:52 81,920 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
        - 2003-02-20 18:09:14 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
        + 2007-04-13 18:57:58 86,016 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
        - 2004-07-14 22:25:06 315,392 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
        + 2007-04-13 18:56:30 315,392 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
        - 2004-07-14 22:33:04 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
        + 2007-04-13 18:58:00 102,400 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
        - 2004-07-15 12:29:02 2,138,112 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
        + 2007-04-13 18:50:46 2,142,208 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
        - 2003-02-20 18:09:18 77,824 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
        + 2007-04-13 18:58:02 77,824 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
        - 2004-07-14 22:26:52 2,510,848 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
        + 2007-04-13 18:57:00 2,523,136 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
        - 2004-07-14 22:28:34 2,502,656 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
        + 2007-04-13 18:57:28 2,514,944 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
        - 2004-08-10 14:20:00 106,496 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
        + 2007-01-15 14:11:26 73,728 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
        + 2004-07-14 23:49:16 258,048 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_aspnet_isapi.dll
        + 2004-07-14 22:32:22 81,920 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_CORPerfMonExt.dll
        + 2004-07-14 22:24:30 282,624 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_fusion.dll
        + 2004-07-14 22:25:06 315,392 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_mscorjit.dll
        + 2004-07-15 12:29:02 2,138,112 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_mscorlib.dll
        + 2003-02-20 18:09:18 77,824 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_mscorsn.dll
        + 2004-07-14 22:26:52 2,510,848 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_mscorsvr.dll
        + 2004-07-14 22:28:34 2,502,656 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_mscorwks.dll
        + 2003-02-21 03:42:22 348,160 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_msvcr71.dll
        + 2004-07-14 22:34:50 94,208 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2552\_PerfCounter.dll
        - 2004-07-15 12:31:16 1,224,704 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
        + 2007-04-13 19:35:38 1,232,896 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
        - 2004-07-15 12:29:00 1,257,472 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
        + 2007-04-13 19:35:46 1,265,664 -c--a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
        + 2006-06-02 19:32:20 33,792 -c----w c:\windows\network diagnostic\custsat.dll
        + 2006-10-10 12:44:50 557,568 -c----w c:\windows\network diagnostic\xpnetdiag.exe
        - 2000-08-31 06:00:00 28,672 ----a-w c:\windows\Nircmd.exe
        + 2000-08-31 07:00:00 29,696 -c--a-w c:\windows\Nircmd.exe
        - 2000-08-31 06:00:00 161,792 ----a-w c:\windows\swreg.exe
        + 2000-08-31 07:00:00 161,792 -c--a-w c:\windows\swreg.exe
        - 2004-08-19 14:09:20 61,440 -c--a-w c:\windows\system32\admparse.dll
        + 2007-08-13 16:39:20 71,680 -c--a-w c:\windows\system32\admparse.dll
        - 2004-08-19 14:09:20 101,888 -c--a-w c:\windows\system32\advpack.dll
        + 2008-10-16 20:18:31 124,928 ----a-w c:\windows\system32\advpack.dll
        - 2008-02-16 09:02:34 1,024,000 ----a-w c:\windows\system32\browseui.dll
        + 2008-06-23 15:39:58 1,024,000 ----a-w c:\windows\system32\browseui.dll
        - 2008-02-16 09:02:34 152,064 -c--a-w c:\windows\system32\cdfview.dll
        + 2008-06-23 15:39:58 152,064 -c--a-w c:\windows\system32\cdfview.dll
        - 2007-07-30 17:19:20 92,504 -c--a-w c:\windows\system32\cdm.dll
        + 2008-10-16 13:09:44 92,696 -c--a-w c:\windows\system32\cdm.dll
        + 2006-11-29 11:06:18 3,426,072 -c--a-w c:\windows\system32\d3dx9_32.dll
        - 2008-02-16 09:02:34 1,056,768 -c--a-w c:\windows\system32\danim.dll
        + 2008-06-23 15:39:59 1,056,768 -c--a-w c:\windows\system32\danim.dll
        + 2007-08-13 16:39:20 71,680 -c--a-w c:\windows\system32\dllcache\admparse.dll
        + 2008-10-16 20:18:31 124,928 -c----w c:\windows\system32\dllcache\advpack.dll
        + 2008-08-14 09:51:43 138,368 -c--a-w c:\windows\system32\dllcache\afd.sys
        - 2008-02-16 09:02:34 1,024,000 -c----w c:\windows\system32\dllcache\browseui.dll
        + 2008-06-23 15:39:58 1,024,000 -c----w c:\windows\system32\dllcache\browseui.dll
        + 2008-06-14 17:59:52 272,768 -c--a-w c:\windows\system32\dllcache\bthport.sys
        - 2008-02-16 09:02:34 152,064 -c--a-w c:\windows\system32\dllcache\cdfview.dll
        + 2008-06-23 15:39:58 152,064 -c--a-w c:\windows\system32\dllcache\cdfview.dll
        + 2007-08-13 16:42:54 17,408 -c----w c:\windows\system32\dllcache\corpol.dll
        + 2007-08-13 16:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
        - 2008-02-16 09:02:34 1,056,768 -c--a-w c:\windows\system32\dllcache\danim.dll
        + 2008-06-23 15:39:59 1,056,768 -c--a-w c:\windows\system32\dllcache\danim.dll
        + 2008-03-25 04:50:25 554,008 -c--a-w c:\windows\system32\dllcache\dao360.dll
        - 2008-02-20 05:35:05 148,992 -c----w c:\windows\system32\dllcache\dnsapi.dll
        + 2008-06-20 17:41:06 148,992 -c--a-w c:\windows\system32\dllcache\dnsapi.dll
        - 2008-02-16 09:02:34 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
        + 2008-10-16 20:18:31 347,136 -c----w c:\windows\system32\dllcache\dxtmsft.dll
        - 2008-02-16 09:02:35 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
        + 2008-10-16 20:18:31 214,528 -c----w c:\windows\system32\dllcache\dxtrans.dll
        + 2008-07-07 20:31:48 253,952 -c----w c:\windows\system32\dllcache\es.dll
        - 2008-02-16 09:02:35 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
        + 2008-10-16 20:18:31 133,120 -c----w c:\windows\system32\dllcache\extmgr.dll
        - 2008-02-20 06:51:00 282,624 -c----w c:\windows\system32\dllcache\gdi32.dll
        + 2008-10-23 13:00:15 283,648 -c----w c:\windows\system32\dllcache\gdi32.dll
        + 2007-08-13 16:18:02 60,416 -c--a-w c:\windows\system32\dllcache\hmmapi.dll
        + 2008-10-16 20:18:32 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
        + 2008-10-16 13:12:20 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
        + 2008-10-16 20:18:32 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
        + 2008-10-16 20:18:32 230,400 -c----w c:\windows\system32\dllcache\ieaksie.dll
        + 2008-10-15 07:04:53 161,792 -c----w c:\windows\system32\dllcache\ieakui.dll
        + 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\system32\dllcache\ieapfltr.dat
        + 2008-10-16 20:18:32 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
        + 2008-10-16 20:18:32 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
        - 2008-02-15 09:23:37 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
        + 2007-08-13 16:44:02 69,120 -c--a-w c:\windows\system32\dllcache\iedw.exe
        + 2007-08-13 16:45:18 78,336 -c--a-w c:\windows\system32\dllcache\ieencode.dll
        + 2008-10-16 20:18:35 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
        - 2008-02-16 09:02:35 251,392 -c----w c:\windows\system32\dllcache\iepeers.dll
        + 2007-08-13 16:54:10 191,488 -c--a-w c:\windows\system32\dllcache\iepeers.dll
        + 2008-10-16 20:18:35 44,544 -c----w c:\windows\system32\dllcache\iernonce.dll
        + 2008-10-16 20:18:35 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
        + 2007-08-13 16:39:12 55,296 -c--a-w c:\windows\system32\dllcache\iesetup.dll
        + 2008-10-16 13:11:09 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
        + 2008-10-15 07:06:26 633,632 -c----w c:\windows\system32\dllcache\iexplore.exe
        + 2007-08-13 16:36:06 36,352 -c--a-w c:\windows\system32\dllcache\imgutil.dll
        - 2007-08-21 06:17:23 683,520 -c----w c:\windows\system32\dllcache\inetcomm.dll
        + 2008-04-11 18:51:06 683,520 -c----w c:\windows\system32\dllcache\inetcomm.dll
        - 2008-02-16 09:02:35 96,768 -c--a-w c:\windows\system32\dllcache\inseng.dll
        + 2007-08-13 16:39:02 92,672 -c--a-w c:\windows\system32\dllcache\inseng.dll
        - 2007-12-18 14:41:58 450,560 -c----w c:\windows\system32\dllcache\jscript.dll
        + 2007-08-13 16:38:04 491,520 -c--a-w c:\windows\system32\dllcache\jscript.dll
        - 2008-02-16 09:02:35 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
        + 2008-10-16 20:18:36 27,648 -c----w c:\windows\system32\dllcache\jsproxy.dll
        + 2007-08-13 16:44:18 40,960 -c--a-w c:\windows\system32\dllcache\licmgr10.dll
        - 2006-05-05 09:41:45 453,120 -c--a-w c:\windows\system32\dllcache\mrxsmb.sys
        + 2008-10-24 11:10:42 453,632 -c--a-w c:\windows\system32\dllcache\mrxsmb.sys
        + 2008-05-01 14:31:48 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
        + 2008-06-24 16:23:56 74,240 -c----w c:\windows\system32\dllcache\mscms.dll
        + 2008-02-26 11:49:32 297,984 -c----w c:\windows\system32\dllcache\msctf.dll
        + 2008-03-25 04:50:28 518,944 -c--a-w c:\windows\system32\dllcache\msexch40.dll
        + 2008-03-25 04:50:30 326,432 -c--a-w c:\windows\system32\dllcache\msexcl40.dll
        + 2008-10-16 20:18:37 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
        + 2008-10-16 20:18:37 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
        + 2007-08-13 16:32:30 45,568 -c--a-w c:\windows\system32\dllcache\mshta.exe
        - 2008-02-16 22:32:38 3,080,704 -c----w c:\windows\system32\dllcache\mshtml.dll
        + 2008-12-13 06:37:56 3,593,216 -c----w c:\windows\system32\dllcache\mshtml.dll
        - 2008-02-16 09:02:36 449,024 -c----w c:\windows\system32\dllcache\mshtmled.dll
        + 2008-10-16 20:18:40 477,696 -c----w c:\windows\system32\dllcache\mshtmled.dll
        + 2007-08-13 16:01:12 48,128 -c--a-w c:\windows\system32\dllcache\mshtmler.dll
        + 2008-03-25 04:50:34 1,516,568 -c--a-w c:\windows\system32\dllcache\msjet40.dll
        + 2008-03-25 04:50:40 355,112 -c--a-w c:\windows\system32\dllcache\msjetol1.dll
        + 2008-03-25 04:51:08 194,144 -c--a-w c:\windows\system32\dllcache\msjint40.dll
        + 2008-03-25 04:50:42 60,192 -c--a-w c:\windows\system32\dllcache\msjter40.dll
        + 2008-03-25 04:50:42 248,608 -c--a-w c:\windows\system32\dllcache\msjtes40.dll
        + 2007-08-13 16:54:10 156,160 -c----w c:\windows\system32\dllcache\msls31.dll
        + 2008-03-25 04:50:44 219,936 -c--a-w c:\windows\system32\dllcache\msltus40.dll
        + 2008-03-25 04:50:45 355,104 -c--a-w c:\windows\system32\dllcache\mspbde40.dll
        - 2008-02-16 09:02:37 146,432 -c----w c:\windows\system32\dllcache\msrating.dll
        + 2008-10-16 20:18:40 193,024 -c----w c:\windows\system32\dllcache\msrating.dll
        + 2008-03-25 04:50:47 432,928 -c--a-w c:\windows\system32\dllcache\msrd2x40.dll
        + 2008-03-25 04:50:49 322,336 -c--a-w c:\windows\system32\dllcache\msrd3x40.dll
        + 2008-03-25 04:50:52 559,904 -c--a-w c:\windows\system32\dllcache\msrepl40.dll
        + 2008-03-25 04:50:55 264,992 -c--a-w c:\windows\system32\dllcache\mstext40.dll
        - 2008-02-16 09:02:37 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
        + 2008-10-16 20:18:41 671,232 -c----w c:\windows\system32\dllcache\mstime.dll
        + 2008-03-25 04:50:57 838,432 -c--a-w c:\windows\system32\dllcache\mswdat10.dll
        + 2008-06-20 17:41:06 247,808 -c----w c:\windows\system32\dllcache\mswsock.dll
        + 2008-03-25 04:51:09 621,344 -c--a-w c:\windows\system32\dllcache\mswstr10.dll
        + 2008-03-25 04:50:58 355,104 -c--a-w c:\windows\system32\dllcache\msxbde40.dll
        - 2007-06-26 06:09:14 1,104,896 -c----w c:\windows\system32\dllcache\msxml3.dll
        + 2008-09-04 16:45:11 1,106,944 -c----w c:\windows\system32\dllcache\msxml3.dll
        - 2006-08-17 12:29:49 332,288 -c----w c:\windows\system32\dllcache\netapi32.dll
        + 2008-10-15 16:59:28 332,800 -c----w c:\windows\system32\dllcache\netapi32.dll
        - 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
        + 2008-08-14 13:44:35 2,138,112 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
        - 2007-02-28 16:02:36 2,059,648 -c--a-w c:\windows\system32\dllcache\ntkrnlpa.exe
        + 2008-08-14 13:44:39 2,059,776 -c--a-w c:\windows\system32\dllcache\ntkrnlpa.exe
        - 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
        + 2008-08-14 13:44:33 2,017,792 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
        - 2007-02-28 16:02:36 2,182,400 -c--a-w c:\windows\system32\dllcache\ntoskrnl.exe
        + 2008-08-14 13:44:37 2,182,400 -c--a-w c:\windows\system32\dllcache\ntoskrnl.exe
        + 2008-10-16 20:18:41 102,912 -c----w c:\windows\system32\dllcache\occache.dll
        - 2008-02-16 09:02:37 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
        + 2008-10-16 20:18:41 44,544 -c----w c:\windows\system32\dllcache\pngfilt.dll
        - 2007-10-29 22:43:32 1,293,824 -c--a-w c:\windows\system32\dllcache\quartz.dll
        + 2008-05-07 05:15:36 1,293,824 -c--a-w c:\windows\system32\dllcache\quartz.dll
        - 2006-07-13 08:48:58 202,240 -c--a-w c:\windows\system32\dllcache\rmcast.sys
        + 2008-05-08 12:28:49 202,752 -c--a-w c:\windows\system32\dllcache\rmcast.sys
        - 2008-02-16 09:02:38 1,495,040 -c----w c:\windows\system32\dllcache\shdocvw.dll
        + 2008-06-23 15:40:05 1,495,040 -c----w c:\windows\system32\dllcache\shdocvw.dll
        - 2008-02-16 09:02:38 474,624 -c----w c:\windows\system32\dllcache\shlwapi.dll
        + 2008-06-23 15:40:06 474,624 -c----w c:\windows\system32\dllcache\shlwapi.dll
        - 2006-08-14 10:34:41 332,928 -c--a-w c:\windows\system32\dllcache\srv.sys
        + 2008-12-11 11:57:21 333,184 -c--a-w c:\windows\system32\dllcache\srv.sys
        - 2006-08-24 11:19:40 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
        + 2008-10-03 10:17:02 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll
        - 2007-10-30 17:20:55 360,064 -c--a-w c:\windows\system32\dllcache\tcpip.sys
        + 2008-06-20 10:45:13 360,320 -c--a-w c:\windows\system32\dllcache\tcpip.sys
        - 2006-08-16 09:37:30 225,664 -c--a-w c:\windows\system32\dllcache\tcpip6.sys
        + 2008-06-20 09:52:06 225,920 -c--a-w c:\windows\system32\dllcache\tcpip6.sys
        + 2008-10-16 20:18:41 105,984 -c----w c:\windows\system32\dllcache\url.dll
        - 2008-02-16 09:02:39 617,984 -c----w c:\windows\system32\dllcache\urlmon.dll
        + 2008-10-16 20:18:42 1,160,192 -c----w c:\windows\system32\dllcache\urlmon.dll
        - 2007-12-18 14:41:59 417,792 -c----w c:\windows\system32\dllcache\vbscript.dll
        + 2007-08-13 16:54:10 413,696 -c--a-w c:\windows\system32\dllcache\vbscript.dll
        - 2007-06-26 13:56:54 851,968 -c--a-w c:\windows\system32\dllcache\vgx.dll
        + 2008-05-27 17:25:06 765,952 -c--a-w c:\windows\system32\dllcache\vgx.dll
        + 2008-10-16 20:18:42 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
        + 2007-04-10 12:00:52 236,928 -c----w c:\windows\system32\dllcache\WgaLogon.dll
        + 2007-04-10 12:01:40 337,280 -c----w c:\windows\system32\dllcache\WgaTray.exe
        - 2008-03-20 08:09:22 1,845,376 -c----w c:\windows\system32\dllcache\win32k.sys
        + 2008-09-15 15:39:16 1,846,144 -c----w c:\windows\system32\dllcache\win32k.sys
        - 2008-02-16 09:02:39 663,552 -c----w c:\windows\system32\dllcache\wininet.dll
        + 2008-10-16 20:18:43 826,368 -c----w c:\windows\system32\dllcache\wininet.dll
        - 2008-02-20 05:35:05 148,992 ----a-w c:\windows\system32\dnsapi.dll
        + 2008-06-20 17:41:06 148,992 ----a-w c:\windows\system32\dnsapi.dll
        - 2004-08-03 21:14:16 138,496 -c--a-w c:\windows\system32\drivers\afd.sys
        + 2008-08-14 09:51:43 138,368 -c--a-w c:\windows\system32\drivers\afd.sys
        + 2008-06-14 17:59:52 272,768 -c----w c:\windows\system32\drivers\bthport.sys
        + 2008-07-01 06:56:22 39,944 -c--a-w c:\windows\system32\drivers\eamon.sys
        + 2008-07-01 06:57:14 53,256 -c--a-w c:\windows\system32\drivers\easdrv.sys
        + 2008-07-01 07:04:34 71,688 -c--a-w c:\windows\system32\drivers\epfw.sys
        + 2008-07-01 07:04:36 30,728 -c--a-w c:\windows\system32\drivers\epfwndis.sys
        + 2008-07-01 07:04:38 54,280 -c--a-w c:\windows\system32\drivers\epfwtdi.sys
        - 2006-05-05 09:41:45 453,120 -c--a-w c:\windows\system32\drivers\mrxsmb.sys
        + 2008-10-24 11:10:42 453,632 -c--a-w c:\windows\system32\drivers\mrxsmb.sys
        - 2006-07-13 08:48:58 202,240 -c--a-w c:\windows\system32\drivers\rmcast.sys
        + 2008-05-08 12:28:49 202,752 -c--a-w c:\windows\system32\drivers\rmcast.sys
        - 2007-10-30 17:20:55 360,064 -c--a-w c:\windows\system32\drivers\tcpip.sys
        + 2008-06-20 10:45:13 360,320 -c--a-w c:\windows\system32\drivers\tcpip.sys
        - 2006-08-16 09:37:30 225,664 -c--a-w c:\windows\system32\drivers\tcpip6.sys
        + 2008-06-20 09:52:06 225,920 -c--a-w c:\windows\system32\drivers\tcpip6.sys
        + 2004-09-29 10:00:42 247,296 ----a-w c:\windows\system32\drivers\ZD1211U.sys
        - 2008-02-16 09:02:34 357,888 -c--a-w c:\windows\system32\dxtmsft.dll
        + 2008-10-16 20:18:31 347,136 ----a-w c:\windows\system32\dxtmsft.dll
        - 2008-02-16 09:02:35 205,312 -c--a-w c:\windows\system32\dxtrans.dll
        + 2008-10-16 20:18:31 214,528 ----a-w c:\windows\system32\dxtrans.dll
        - 2005-10-12 08:25:28 243,200 ----a-w c:\windows\system32\es.dll
        + 2008-07-07 20:31:48 253,952 ----a-w c:\windows\system32\es.dll
        - 2008-02-16 09:02:35 55,808 -c--a-w c:\windows\system32\extmgr.dll
        + 2008-10-16 20:18:31 133,120 ------w c:\windows\system32\extmgr.dll
        - 2003-08-03 16:56:16 1,146,184 -c--a-w c:\windows\system32\FM20.DLL
        + 2007-06-06 08:53:34 1,195,888 -c--a-w c:\windows\system32\FM20.DLL
        + 2007-03-22 17:17:04 35,440 -c--a-w c:\windows\system32\FM20ENU.DLL
        - 2003-07-31 17:46:08 42,128 -c--a-w c:\windows\system32\FM20FRA.DLL
        + 2007-04-05 09:56:36 47,840 -c--a-w c:\windows\system32\FM20FRA.DLL
        - 2008-04-18 15:30:02 329,888 -c--a-w c:\windows\system32\FNTCACHE.DAT
        + 2009-01-04 07:24:37 348,992 -c--a-w c:\windows\system32\FNTCACHE.DAT
        - 2008-02-20 06:51:00 282,624 ----a-w c:\windows\system32\gdi32.dll
        + 2008-10-23 13:00:15 283,648 ----a-w c:\windows\system32\gdi32.dll
        - 2004-09-29 10:14:36 69,632 -c--a-w c:\windows\system32\HPZipm12.exe
        + 2007-08-09 07:27:52 73,728 -c--a-w c:\windows\system32\HPZipm12.exe
        + 2008-10-16 20:18:32 63,488 ----a-w c:\windows\system32\icardie.dll
        + 2006-06-29 06:05:44 26,112 -c----w c:\windows\system32\idndl.dll
        - 2004-08-19 14:09:56 34,304 -c--a-w c:\windows\system32\ie4uinit.exe
        + 2008-10-16 13:12:20 70,656 ------w c:\windows\system32\ie4uinit.exe
        - 2004-08-19 14:09:28 139,264 -c--a-w c:\windows\system32\ieakeng.dll
        + 2008-10-16 20:18:32 153,088 ------w c:\windows\system32\ieakeng.dll
        - 2004-08-19 14:09:28 221,696 -c--a-w c:\windows\system32\ieaksie.dll
        + 2008-10-16 20:18:32 230,400 ------w c:\windows\system32\ieaksie.dll
        - 2001-10-02 16:16:30 245,760 -c--a-w c:\windows\system32\ieakui.dll
        + 2008-10-15 07:04:53 161,792 ------w c:\windows\system32\ieakui.dll
        + 2007-04-17 09:32:38 2,455,488 -c--a-w c:\windows\system32\ieapfltr.dat
        + 2008-10-16 20:18:32 383,488 ----a-w c:\windows\system32\ieapfltr.dll
        - 2004-08-19 14:09:28 323,584 -c--a-w c:\windows\system32\iedkcs32.dll
        + 2008-10-16 20:18:32 384,512 ------w c:\windows\system32\iedkcs32.dll
        - 2004-08-19 14:09:28 81,920 -c--a-w c:\windows\system32\ieencode.dll
        + 2007-08-13 16:45:18 78,336 -c--a-w c:\windows\system32\ieencode.dll
        + 2008-10-16 20:18:35 6,066,176 ----a-w c:\windows\system32\ieframe.dll
        - 2008-02-16 09:02:35 251,392 ----a-w c:\windows\system32\iepeers.dll
        + 2007-08-13 16:54:10 191,488 -c--a-w c:\windows\system32\iepeers.dll
        - 2004-08-19 14:09:28 49,152 -c--a-w c:\windows\system32\iernonce.dll
        + 2008-10-16 20:18:35 44,544 ------w c:\windows\system32\iernonce.dll
        + 2008-10-16 20:18:35 267,776 ----a-w c:\windows\system32\iertutil.dll
        - 2004-08-19 14:09:28 63,488 -c--a-w c:\windows\system32\iesetup.dll
        + 2007-08-13 16:39:12 55,296 -c--a-w c:\windows\system32\iesetup.dll
        + 2008-10-16 13:11:09 13,824 ----a-w c:\windows\system32\ieudinit.exe
        + 2007-08-13 16:54:10 180,736 -c----w c:\windows\system32\ieui.dll
        - 2004-08-19 14:09:30 35,840 ----a-w c:\windows\system32\imgutil.dll
        + 2007-08-13 16:36:06 36,352 -c--a-w c:\windows\system32\imgutil.dll
        - 2007-08-21 06:17:23 683,520 ----a-w c:\windows\system32\inetcomm.dll
        + 2008-04-11 18:51:06 683,520 ----a-w c:\windows\system32\inetcomm.dll
        + 2004-03-23 15:38:00 28,672 ----a-w c:\windows\system32\InsDrvZD.DLL
        - 2008-02-16 09:02:35 96,768 -c--a-w c:\windows\system32\inseng.dll
        + 2007-08-13 16:39:02 92,672 -c--a-w c:\windows\system32\inseng.dll
        - 2007-12-18 14:41:58 450,560 ----a-w c:\windows\system32\jscript.dll
        + 2007-08-13 16:38:04 491,520 -c--a-w c:\windows\system32\jscript.dll
        - 2008-02-16 09:02:35 16,384 -c--a-w c:\windows\system32\jsproxy.dll
        + 2008-10-16 20:18:36 27,648 ------w c:\windows\system32\jsproxy.dll
        - 2006-04-06 18:11:34 1,044,480 -c--a-w c:\windows\system32\libdivx.dll
        + 2008-09-19 21:55:58 1,044,480 -c--a-w c:\windows\system32\libdivx.dll
        - 2004-08-19 14:09:32 22,528 -c--a-w c:\windows\system32\licmgr10.dll
        + 2007-08-13 16:44:18 40,960 -c--a-w c:\windows\system32\licmgr10.dll
        + 2008-03-25 02:32:44 218,496 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil9f.exe
        - 2007-08-15 18:05:10 48,749 -c--a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
        + 2008-08-12 20:00:22 74,137 -c--a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
        - 2003-06-18 23:31:48 17,920 ----a-w c:\windows\system32\mdimon.dll
        + 2007-04-09 11:23:54 28,040 ----a-w c:\windows\system32\mdimon.dll
        - 2008-04-05 20:56:22 19,836,024 -c--a-w c:\windows\system32\MRT.exe
        + 2009-01-10 01:35:28 20,853,704 -c--a-w c:\windows\system32\MRT.exe
        - 2005-08-10 10:15:07 74,240 ----a-w c:\windows\system32\mscms.dll
        + 2008-06-24 16:23:56 74,240 ----a-w c:\windows\system32\mscms.dll
        - 2004-07-14 22:24:50 155,648 ----a-w c:\windows\system32\mscoree.dll
        + 2006-12-22 10:28:14 271,360 -c--a-w c:\windows\system32\mscoree.dll
        - 2005-07-26 13:01:33 297,472 ----a-w c:\windows\system32\msctf.dll
        + 2008-02-26 11:49:32 297,984 ----a-w c:\windows\system32\msctf.dll
        - 2004-08-19 14:09:34 512,029 -c--a-w c:\windows\system32\msexch40.dll
        + 2008-03-25 04:50:28 518,944 -c--a-w c:\windows\system32\msexch40.dll
        - 2004-08-19 14:09:34 319,517 -c--a-w c:\windows\system32\msexcl40.dll
        + 2008-03-25 04:50:30 326,432 -c--a-w c:\windows\system32\msexcl40.dll
        + 2008-10-16 20:18:37 459,264 ----a-w c:\windows\system32\msfeeds.dll
        + 2008-10-16 20:18:37 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
        + 2007-08-13 16:36:40 12,288 -c----w c:\windows\system32\msfeedssync.exe
        - 2004-08-19 14:10:00 29,184 -c--a-w c:\windows\system32\mshta.exe
        + 2007-08-13 16:32:30 45,568 -c--a-w c:\windows\system32\mshta.exe
        - 2008-02-16 22:32:38 3,080,704 ----a-w c:\windows\system32\mshtml.dll
        + 2008-12-13 06:37:56 3,593,216 ----a-w c:\windows\system32\mshtml.dll
        - 2008-02-16 09:02:36 449,024 ----a-w c:\windows\system32\mshtmled.dll
        + 2008-10-16 20:18:40 477,696 ----a-w c:\windows\system32\mshtmled.dll
        - 2004-08-19 14:08:28 57,344 -c--a-w c:\windows\system32\mshtmler.dll
        + 2007-08-13 16:01:12 48,128 -c--a-w c:\windows\system32\mshtmler.dll
        - 2004-08-19 14:09:34 1,507,356 -c--a-w c:\windows\system32\msjet40.dll
        + 2008-03-25 04:50:34 1,516,568 -c--a-w c:\windows\system32\msjet40.dll
        - 2004-07-17 09:34:48 358,976 -c--a-w c:\windows\system32\msjetoledb40.dll
        + 2008-03-25 04:50:40 355,112 -c--a-w c:\windows\system32\msjetoledb40.dll
        - 2004-08-19 14:09:34 184,351 -c--a-w c:\windows\system32\msjint40.dll
        + 2008-03-25 04:51:08 194,144 -c--a-w c:\windows\system32\msjint40.dll
        - 2004-08-19 14:09:34 53,279 -c--a-w c:\windows\system32\msjter40.dll
        + 2008-03-25 04:50:42 60,192 -c--a-w c:\windows\system32\msjter40.dll
        - 2004-08-19 14:09:34 241,693 -c--a-w c:\windows\system32\msjtes40.dll
        + 2008-03-25 04:50:42 248,608 -c--a-w c:\windows\system32\msjtes40.dll
        - 2001-10-02 16:16:44 146,432 ----a-w c:\windows\system32\msls31.dll
        + 2007-08-13 16:54:10 156,160 ----a-w c:\windows\system32\msls31.dll
        - 2004-08-19 14:09:34 213,023 -c--a-w c:\windows\system32\msltus40.dll
        + 2008-03-25 04:50:44 219,936 -c--a-w c:\windows\system32\msltus40.dll
        - 2004-08-19 14:09:34 348,189 -c--a-w c:\windows\system32\mspbde40.dll
        + 2008-03-25 04:50:45 355,104 -c--a-w c:\windows\system32\mspbde40.dll
        - 2008-02-16 09:02:37 146,432 ----a-w c:\windows\system32\msrating.dll
        + 2008-10-16 20:18:40 193,024 ------w c:\windows\system32\msrating.dll
        - 2004-08-19 14:09:34 421,919 -c--a-w c:\windows\system32\msrd2x40.dll
        + 2008-03-25 04:50:
    2. jlpjlp Contributeur sécurité
      le rapport malwarebyte? je vois pas

      ____________

      puis

      télécharge combofix (par sUBs) ici :

      http://download.bleepingcomputer.com/sUBs/ComboFix.exe

      et enregistre le sur le bureau.

      déconnecte toi d'internet et ferme toutes tes applications.

      désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

      double-clique sur combofix.exe et suis les instructions

      à la fin, il va produire un rapport C:\ComboFix.txt

      réactive ton parefeu, ton antivirus, la garde de ton antispyware

      copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

      Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

      Tu as un tutoriel complet ici :

      https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
      1. mater
        voilà le rapport de malwarebyte
        je m'occupe de combofix

        Malwarebytes' Anti-Malware 1.33
        Version de la base de données: 1654
        Windows 5.1.2600 Service Pack 2

        07/02/2009 22:07:57
        mbam-log-2009-02-07 (22-07-57).txt

        Type de recherche: Examen complet (A:\|C:\|D:\|E:\|)
        Eléments examinés: 113113
        Temps écoulé: 1 hour(s), 13 minute(s), 58 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 2
        Clé(s) du Registre infectée(s): 17
        Valeur(s) du Registre infectée(s): 1
        Elément(s) de données du Registre infecté(s): 3
        Dossier(s) infecté(s): 0
        Fichier(s) infecté(s): 7

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        C:\WINDOWS\system32\vtUmJBsP.dll (Trojan.Vundo.H) -> Delete on reboot.
        C:\WINDOWS\system32\rqRHyXrS.dll (Trojan.Vundo) -> Delete on reboot.

        Clé(s) du Registre infectée(s):
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3c035b36-f901-461e-abbb-1e3a45610334} (Trojan.Vundo.H) -> Delete on reboot.
        HKEY_CLASSES_ROOT\CLSID\{3c035b36-f901-461e-abbb-1e3a45610334} (Trojan.Vundo.H) -> Delete on reboot.
        HKEY_CLASSES_ROOT\CLSID\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rqrhyxrs (Trojan.Vundo) -> Delete on reboot.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7545d8c8-f53c-4e2f-8fa0-d248ef4a6e61} (Rogue.Installer) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3ba4271e-5c1e-48e2-b432-d8bf420dd31d} (Rogue.DeusCleaner) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b4a78d29-52b1-4a7b-bac0-1471bedf9836} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3c035b36-f901-461e-abbb-1e3a45610334} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

        Valeur(s) du Registre infectée(s):
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot.

        Elément(s) de données du Registre infecté(s):
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\vtumjbsp -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\vtumjbsp -> Delete on reboot.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

        Dossier(s) infecté(s):
        (Aucun élément nuisible détecté)

        Fichier(s) infecté(s):
        C:\WINDOWS\system32\vtUmJBsP.dll (Trojan.Vundo.H) -> Delete on reboot.
        C:\WINDOWS\system32\PsBJmUtv.ini (Trojan.Vundo.H) -> Delete on reboot.
        C:\WINDOWS\system32\PsBJmUtv.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\mafebqxx.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\xxqbefam.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\rqRHyXrS.dll (Trojan.Vundo) -> Delete on reboot.
        C:\WINDOWS\system32\vtUmJBsP.dll.vir (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      2. mater
        voilà le rapport de combofix

        ComboFix 09-02-06.04 - Admin 2009-02-07 23:19:29.2 - NTFSx86
        Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.511.203 [GMT 1:00]
        Lancé depuis: c:\documents and settings\Admin\Bureau\ComboFix.exe
        AV: ESET Smart Security 3.0 *On-access scanning disabled* (Updated)
        FW: Pare-feu personnel d'ESET *disabled*
        * Un nouveau point de restauration a été créé
        .

        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
        .

        c:\windows\IE4 Error Log.txt
        c:\windows\system32\404Fix.exe
        c:\windows\system32\Agent.OMZ.Fix.exe
        c:\windows\system32\CfLmTvut.ini
        c:\windows\system32\cpljkeax.ini
        c:\windows\system32\dumphive.exe
        c:\windows\system32\efcARJaa.dll
        c:\windows\system32\IEDFix.C.exe
        c:\windows\system32\IEDFix.exe
        c:\windows\system32\josbjtit.ini
        c:\windows\system32\jvkcyxfg.ini2
        c:\windows\system32\jvkcyxfg.tmp
        c:\windows\system32\kkbvvhqw.ini
        c:\windows\system32\lmjiwwjb.ini
        c:\windows\system32\o4Patch.exe
        c:\windows\system32\rcyoqlfp.ini2
        c:\windows\system32\rcyoqlfp.tmp
        c:\windows\system32\rjnjybri.ini
        c:\windows\system32\SrchSTS.exe
        c:\windows\system32\tmp.reg
        c:\windows\system32\VACFix.exe
        c:\windows\system32\VCCLSID.exe
        c:\windows\system32\WS2Fix.exe

        .
        ((((((((((((((((((((((((((((( Fichiers créés du 2009-01-07 au 2009-02-07 ))))))))))))))))))))))))))))))))))))
        .

        2009-02-07 20:35 . 2009-02-07 20:36 <REP> d-------- C:\rsit
        2009-02-07 20:34 . 2009-02-07 20:34 685,056 --a------ c:\windows\isRS-000.tmp
        2009-02-06 12:47 . 2009-02-06 12:47 1,658,069 ---hs---- c:\windows\system32\cpljkeax.tmp
        2009-02-04 06:33 . 2009-02-04 06:33 825 --a------ c:\windows\ST6UNST.005
        2009-02-04 06:30 . 2009-02-04 06:30 825 --a------ c:\windows\ST6UNST.004
        2009-01-30 18:54 . 2009-01-30 18:54 1,563,866 ---hs---- c:\windows\system32\nxvgwvqy.tmp
        2009-01-30 17:22 . 2009-01-30 19:19 <REP> d-------- c:\program files\Babylon
        2009-01-29 21:16 . 2009-01-29 21:16 <REP> d-------- c:\documents and settings\All Users\Application Data\PlayFirst
        2009-01-29 21:16 . 2009-01-29 21:16 <REP> d-------- c:\documents and settings\Admin\Application Data\Zylom
        2009-01-29 21:16 . 2009-01-29 21:16 <REP> d-------- c:\documents and settings\Admin\Application Data\PlayFirst
        2009-01-29 21:15 . 2009-01-30 17:40 <REP> d-------- c:\program files\Zylom Games
        2009-01-29 21:15 . 2009-01-29 21:15 <REP> d-------- c:\documents and settings\All Users\Application Data\Zylom
        2009-01-20 10:31 . 2009-01-20 10:31 362 --a------ c:\windows\ST6UNST.003
        2009-01-20 10:27 . 2009-01-20 10:27 825 --a------ c:\windows\ST6UNST.002
        2009-01-20 10:26 . 2009-01-20 10:26 825 --a------ c:\windows\ST6UNST.001
        2009-01-20 10:23 . 2009-01-03 03:29 4,777,559 --------- c:\windows\Loto1N2.CAB
        2009-01-20 10:23 . 2009-01-20 10:23 941 --a------ c:\windows\ST6UNST.000
        2009-01-18 15:49 . 2009-01-18 15:50 <REP> d-------- c:\program files\SopCast
        2009-01-18 15:44 . 2009-01-18 15:44 <REP> d-------- c:\program files\TVUPlayer
        2009-01-18 15:44 . 2009-01-18 15:44 <REP> d-------- c:\documents and settings\All Users\Application Data\TVU Networks
        2009-01-18 15:44 . 2009-01-18 15:44 <REP> d-------- c:\documents and settings\Admin\LocalLow

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2009-02-07 22:22 --------- d-----w c:\documents and settings\Admin\Application Data\Skype
        2009-02-07 19:39 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
        2009-02-07 19:36 --------- d-----w c:\program files\Trend Micro
        2009-02-07 17:46 --------- d-----w c:\program files\Navilog1
        2009-02-07 16:33 --------- d-----w c:\documents and settings\Admin\Application Data\skypePM
        2009-02-04 05:33 74,752 ----a-w c:\windows\ST6UNST.EXE
        2009-02-04 05:33 --------- d-----w c:\program files\Loto1N2
        2009-02-02 12:02 --------- d-----w c:\program files\eMule
        2009-01-14 15:11 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
        2009-01-14 15:11 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
        2009-01-05 19:45 --------- d-----w c:\program files\Web Media Player
        2009-01-02 20:45 --------- d-----w c:\program files\MSECache
        2008-12-18 20:01 --------- d-----w c:\documents and settings\Admin\Application Data\PIFreePC
        2008-12-18 19:32 --------- d-----w c:\program files\HomePlayer
        2008-12-11 11:57 333,184 ----a-w c:\windows\system32\drivers\srv.sys
        2008-12-09 21:03 --------- d--h--w c:\program files\InstallShield Installation Information
        2008-12-09 21:03 --------- d-----w c:\program files\OLITEC - Moniteur réseau 802.11g
        2008-12-09 20:50 --------- d-----w c:\program files\Fichiers communs\Adaptec Shared
        2008-03-24 19:19 32 -c--a-w c:\documents and settings\All Users\Application Data\ezsid.dat
        .

        ((((((((((((((((((((((((((((( snapshot@2008-07-21_19.02.23.62 )))))))))))))))))))))))))))))))))))))))))
        .
        + 2006-03-24 04:49:05 49,152 -c--a-w c:\windows\$hf_mig$\KB904942\SP2QFE\wdigest.dll
        + 2005-10-12 23:15:25 15,072 -c--a-w c:\windows\$hf_mig$\KB904942\spmsg.dll
        + 2005-10-12 23:15:26 216,800 -c--a-w c:\windows\$hf_mig$\KB904942\spuninst.exe
        + 2005-10-12 23:15:25 22,752 -c--a-w c:\windows\$hf_mig$\KB904942\update\spcustom.dll
        + 2005-10-12 23:15:28 727,776 -c--a-w c:\windows\$hf_mig$\KB904942\update\update.exe
        + 2005-10-12 23:15:45 394,976 -c--a-w c:\windows\$hf_mig$\KB904942\update\updspapi.dll
        + 2006-07-14 15:52:22 121,856 -c--a-w c:\windows\$hf_mig$\KB915865\SP2QFE\xmllite.dll
        + 2005-10-12 23:12:25 14,048 -c--a-w c:\windows\$hf_mig$\KB915865\spmsg.dll
        + 2005-10-12 23:12:26 213,216 -c--a-w c:\windows\$hf_mig$\KB915865\spuninst.exe
        + 2005-10-12 23:12:25 22,752 -c--a-w c:\windows\$hf_mig$\KB915865\update\spcustom.dll
        + 2005-10-12 23:12:28 716,000 -c--a-w c:\windows\$hf_mig$\KB915865\update\update.exe
        + 2005-10-12 23:12:33 371,424 -c--a-w c:\windows\$hf_mig$\KB915865\update\updspapi.dll
        + 2007-07-12 23:28:38 765,952 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\SP2QFE\vgx.dll
        + 2007-03-06 01:34:33 15,072 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\update\update.exe
        + 2007-03-06 01:35:48 394,976 -c--a-w c:\windows\$hf_mig$\KB938127-IE7\update\updspapi.dll
        + 2008-05-27 17:31:29 765,952 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\SP2QFE\vgx.dll
        + 2007-03-06 01:34:33 15,072 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\update\update.exe
        + 2007-03-06 01:35:47 394,976 -c--a-w c:\windows\$hf_mig$\KB938127-v2-IE7\update\updspapi.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB938464\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
        + 2008-01-23 04:56:21 554,008 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll
        + 2007-12-10 12:41:11 518,944 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll
        + 2007-12-10 12:41:11 326,432 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
        + 2007-12-10 12:41:11 1,516,568 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll
        + 2007-12-10 12:41:11 355,112 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
        + 2008-03-25 06:56:31 194,144 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll
        + 2007-12-10 12:41:12 60,192 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll
        + 2007-12-10 12:41:12 248,608 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
        + 2007-12-10 12:41:12 219,936 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll
        + 2007-12-10 12:41:12 355,104 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
        + 2007-12-10 12:41:13 432,928 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
        + 2007-12-10 12:41:13 322,336 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
        + 2007-12-10 12:41:13 559,904 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
        + 2007-12-10 12:41:13 264,992 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll
        + 2007-12-10 12:41:13 838,432 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
        + 2007-11-01 05:15:27 621,344 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
        + 2007-12-10 12:41:14 355,104 -c--a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
        + 2007-03-06 01:34:33 15,072 -c--a-w c:\windows\$hf_mig$\KB950749\spmsg.dll
        + 2007-03-06 01:34:38 216,800 -c--a-w c:\windows\$hf_mig$\KB950749\spuninst.exe
        + 2007-03-06 01:34:31 22,752 -c--a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 -c--a-w c:\windows\$hf_mig$\KB950749\update\update.exe
        + 2007-03-06 01:35:48 394,976 -c--a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll
        + 2008-04-21 06:57:16 1,024,512 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\browseui.dll
        + 2008-04-21 06:57:16 152,064 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\cdfview.dll
        + 2008-04-21 06:57:17 1,056,768 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\danim.dll
        + 2008-04-21 06:57:17 357,888 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\dxtmsft.dll
        + 2008-04-21 06:57:18 205,312 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\dxtrans.dll
        + 2008-04-21 06:57:18 55,808 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\extmgr.dll
        + 2008-04-17 10:46:59 18,432 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\iedw.exe
        + 2008-04-21 06:57:18 251,904 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\iepeers.dll
        + 2008-04-21 06:57:18 96,768 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\inseng.dll
        + 2008-04-21 06:57:18 16,384 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\jsproxy.dll
        + 2008-04-21 06:57:22 3,087,872 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\mshtml.dll
        + 2008-04-21 06:57:22 449,024 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\mshtmled.dll
        + 2008-04-21 06:57:23 146,432 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\msrating.dll
        + 2008-04-21 06:57:23 532,480 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\mstime.dll
        + 2008-04-21 06:57:23 39,424 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\pngfilt.dll
        + 2008-04-21 06:57:25 1,499,648 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\shdocvw.dll
        + 2008-04-21 06:57:26 474,624 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\shlwapi.dll
        + 2008-04-17 11:03:45 370,176 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\spru040c.dll
        + 2008-04-21 06:57:26 620,544 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\urlmon.dll
        + 2008-04-21 06:57:27 670,720 -c--a-w c:\windows\$hf_mig$\KB950759\SP2QFE\wininet.dll
        + 2008-04-21 06:43:36 3,087,872 -c--a-w c:\windows\$hf_mig$\KB950759\SP3GDR\mshtml.dll
        + 2008-04-21 06:43:36 670,208 -c--a-w c:\windows\$hf_mig$\KB950759\SP3GDR\wininet.dll
        + 2008-04-21 06:30:24 3,088,384 -c--a-w c:\windows\$hf_mig$\KB950759\SP3QFE\mshtml.dll
        + 2008-04-21 06:30:24 670,720 -c--a-w c:\windows\$hf_mig$\KB950759\SP3QFE\wininet.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB950759\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB950759\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB950759\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB950759\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB950759\update\updspapi.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB950760\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB950760\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB950760\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll
        + 2008-05-08 12:14:51 203,008 -c--a-w c:\windows\$hf_mig$\KB950762\SP2QFE\rmcast.sys
        + 2008-05-08 14:02:52 203,136 -c--a-w c:\windows\$hf_mig$\KB950762\SP3GDR\rmcast.sys
        + 2008-05-08 13:58:17 203,136 -c--a-w c:\windows\$hf_mig$\KB950762\SP3QFE\rmcast.sys
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB950762\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB950762\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB950762\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll
        + 2008-07-07 20:18:27 253,952 -c--a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
        + 2008-07-07 20:28:20 253,952 -c--a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
        + 2008-07-07 20:24:11 253,952 -c--a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
        + 2007-11-30 12:39:26 767,352 -c--a-w c:\windows\$hf_mig$\KB950974\update\update.exe
        + 2007-11-30 12:39:29 406,392 -c--a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
        + 2008-04-11 18:40:33 683,520 -c--a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
        + 2008-04-11 19:05:22 691,712 -c--a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
        + 2008-04-11 22:23:04 691,712 -c--a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
        + 2007-12-03 15:25:43 767,352 -c--a-w c:\windows\$hf_mig$\KB951066\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
        + 2008-07-14 11:03:00 62,976 -c--a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
        + 2008-07-11 12:42:28 62,976 -c--a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
        + 2008-07-11 12:51:51 62,976 -c--a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
        + 2008-06-14 18:03:13 272,768 -c--a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
        + 2008-06-14 17:33:37 272,768 -c--a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
        + 2008-06-14 17:40:19 272,768 -c--a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll
        + 2008-05-07 04:55:47 1,294,336 -c--a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll
        + 2008-05-07 05:11:24 1,294,336 -c--a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll
        + 2008-05-07 05:04:59 1,294,336 -c--a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB951698\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB951698\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB951698\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll
        + 2006-08-16 12:13:24 100,352 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
        + 2008-06-20 10:44:08 138,368 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
        + 2008-06-20 17:37:01 147,968 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
        + 2008-06-20 17:37:01 247,808 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
        + 2008-06-20 10:44:42 360,960 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
        + 2008-06-20 09:32:39 225,920 -c--a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
        + 2008-06-20 11:40:08 138,496 -c--a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
        + 2008-06-20 17:47:22 147,968 -c--a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
        + 2008-06-20 17:47:22 247,808 -c--a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
        + 2008-06-20 11:51:12 361,600 -c--a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
        + 2008-06-20 11:08:27 225,856 -c--a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
        + 2008-06-20 11:48:03 138,496 -c--a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
        + 2008-06-20 17:44:02 147,968 -c--a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
        + 2008-06-20 17:44:02 247,808 -c--a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
        + 2008-06-20 11:59:02 361,600 -c--a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
        + 2008-06-20 11:16:44 225,856 -c--a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
        + 2007-11-30 12:39:26 767,352 -c--a-w c:\windows\$hf_mig$\KB951748\update\update.exe
        + 2007-11-30 12:39:29 406,392 -c--a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
        + 2008-05-01 15:04:51 331,776 -c--a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
        + 2008-05-01 14:36:26 331,776 -c--a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
        + 2008-05-01 14:39:23 331,776 -c--a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB952287\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
        + 2008-06-24 16:30:27 74,240 -c--a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
        + 2008-06-24 16:44:02 74,240 -c--a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
        + 2008-06-24 16:53:52 74,240 -c--a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB952954\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
        + 2008-06-23 15:40:01 124,928 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
        + 2008-06-23 15:40:01 347,136 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
        + 2008-06-23 15:40:01 214,528 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
        + 2008-06-23 15:40:01 132,608 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
        + 2008-06-23 15:40:01 63,488 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
        + 2008-06-23 08:23:18 70,656 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
        + 2008-06-23 15:40:01 153,088 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
        + 2008-06-23 15:40:01 230,400 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
        + 2008-06-21 05:23:53 161,792 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
        + 2007-04-17 09:32:38 2,455,488 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
        + 2008-06-23 15:40:02 383,488 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
        + 2008-06-23 15:40:02 388,608 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
        + 2008-06-23 15:40:04 6,068,736 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
        + 2008-06-23 15:40:04 44,544 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
        + 2008-06-23 15:40:04 267,776 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
        + 2008-06-23 08:23:18 13,824 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
        + 2008-06-23 08:23:52 625,664 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
        + 2008-06-23 15:40:05 27,648 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
        + 2008-06-23 15:40:05 459,264 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
        + 2008-06-23 15:40:05 52,224 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
        + 2008-06-23 15:40:07 3,594,240 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
        + 2008-06-23 15:40:07 477,696 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
        + 2008-06-23 15:40:07 193,024 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
        + 2008-06-23 15:40:07 671,232 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
        + 2008-06-23 15:40:07 102,912 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
        + 2008-06-23 15:40:07 44,544 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
        + 2008-06-23 15:40:07 105,984 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
        + 2008-06-23 15:40:08 1,162,752 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
        + 2008-06-23 15:40:08 233,472 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
        + 2008-06-23 15:40:08 827,904 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
        + 2007-03-06 01:34:33 15,072 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
        + 2007-03-06 01:35:48 394,976 -c--a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
        + 2008-06-23 16:15:33 1,024,512 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\browseui.dll
        + 2008-06-23 16:15:34 152,064 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\cdfview.dll
        + 2008-06-23 16:15:35 1,056,768 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\danim.dll
        + 2008-06-23 16:15:35 357,888 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll
        + 2008-06-23 16:15:35 205,312 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\dxtrans.dll
        + 2008-06-23 16:15:35 55,808 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\extmgr.dll
        + 2008-06-23 09:53:58 18,432 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\iedw.exe
        + 2008-06-23 16:15:36 251,904 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\iepeers.dll
        + 2008-06-23 16:15:36 96,768 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\inseng.dll
        + 2008-06-23 16:15:36 16,384 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\jsproxy.dll
        + 2008-06-23 16:15:39 3,088,384 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mshtml.dll
        + 2008-06-23 16:15:40 449,024 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mshtmled.dll
        + 2008-06-23 16:15:40 146,432 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\msrating.dll
        + 2008-06-23 16:15:41 532,480 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mstime.dll
        + 2008-06-23 16:15:41 39,424 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\pngfilt.dll
        + 2008-06-23 16:15:42 1,499,648 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\shdocvw.dll
        + 2008-06-23 16:15:43 474,624 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\shlwapi.dll
        + 2008-07-03 09:42:35 370,176 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\spru040c.dll
        + 2008-06-23 16:15:43 620,544 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\urlmon.dll
        + 2008-06-23 16:15:44 671,232 -c--a-w c:\windows\$hf_mig$\KB953838\SP2QFE\wininet.dll
        + 2008-06-23 15:10:27 3,088,384 -c--a-w c:\windows\$hf_mig$\KB953838\SP3GDR\mshtml.dll
        + 2008-06-26 08:13:32 1,499,648 -c--a-w c:\windows\$hf_mig$\KB953838\SP3GDR\shdocvw.dll
        + 2008-06-26 08:13:32 620,544 -c--a-w c:\windows\$hf_mig$\KB953838\SP3GDR\urlmon.dll
        + 2008-06-23 15:10:27 670,208 -c--a-w c:\windows\$hf_mig$\KB953838\SP3GDR\wininet.dll
        + 2008-06-25 04:26:28 3,088,896 -c--a-w c:\windows\$hf_mig$\KB953838\SP3QFE\mshtml.dll
        + 2008-06-26 08:00:28 1,499,648 -c--a-w c:\windows\$hf_mig$\KB953838\SP3QFE\shdocvw.dll
        + 2008-06-26 08:00:28 620,544 -c--a-w c:\windows\$hf_mig$\KB953838\SP3QFE\urlmon.dll
        + 2008-06-23 14:56:26 670,720 -c--a-w c:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB953838\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB953838\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB953838\update\spcustom.dll
        + 2007-11-30 12:39:26 767,352 -c--a-w c:\windows\$hf_mig$\KB953838\update\update.exe
        + 2007-11-30 12:39:29 406,392 -c--a-w c:\windows\$hf_mig$\KB953838\update\updspapi.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB953839\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
        + 2008-09-15 15:14:42 1,847,040 -c--a-w c:\windows\$hf_mig$\KB954211\SP2QFE\win32k.sys
        + 2008-09-15 15:26:07 1,846,528 -c--a-w c:\windows\$hf_mig$\KB954211\SP3GDR\win32k.sys
        + 2008-09-15 15:20:39 1,847,040 -c--a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
        + 2008-07-09 07:40:26 767,352 -c--a-w c:\windows\$hf_mig$\KB954211\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
        + 2008-10-03 10:00:40 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP2QFE\strmdll.dll
        + 2008-10-03 10:03:53 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3GDR\strmdll.dll
        + 2008-10-03 09:50:27 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
        + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
        + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
        + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
        + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
        + 2008-09-04 16:34:21 1,106,944 -c--a-w c:\windows\$hf_mig$\KB955069\SP2QFE\msxml3.dll
        + 2008-09-04 17:16:10 1,106,944 -c--a-w c:\windows\$hf_mig$\KB955069\SP3GDR\msxml3.dll
        + 2008-09-04 17:12:47 1,106,944 -c--a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB955069\update\update.exe
        + 2008-07-09 12:10:36 406,392 -c--a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
        + 2008-10-22 09:47:25 62,976 -c--a-w c:\windows\$hf_mig$\KB955839\SP2QFE\tzchange.exe
        + 2008-10-23 10:06:59 62,976 -c--a-w c:\windows\$hf_mig$\KB955839\SP3GDR\tzchange.exe
        + 2008-10-23 10:17:49 62,976 -c--a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
        + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
        + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
        + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
        + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
        + 2008-08-26 09:10:25 124,928 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
        + 2008-08-26 09:10:25 347,136 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
        + 2008-08-26 09:10:25 214,528 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
        + 2008-08-26 09:10:25 132,608 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
        + 2008-08-26 09:10:25 63,488 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
        + 2008-08-25 08:43:21 70,656 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
        + 2008-08-26 09:10:26 153,088 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
        + 2008-08-26 09:10:26 230,400 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
        + 2008-08-23 05:54:50 161,792 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
        + 2007-04-17 09:32:38 2,455,488 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
        + 2008-08-26 09:10:26 380,928 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
        + 2008-08-26 09:10:26 388,608 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
        + 2008-10-03 16:22:30 6,068,224 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
        + 2008-08-26 09:10:27 44,544 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
        + 2008-08-26 09:10:27 267,776 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
        + 2008-08-25 08:43:21 13,824 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
        + 2008-08-23 05:56:16 635,848 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
        + 2008-08-26 09:10:27 27,648 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
        + 2008-08-26 09:10:27 459,264 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
        + 2008-08-26 09:10:27 52,224 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
        + 2008-08-26 09:10:28 3,594,752 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
        + 2008-08-26 09:10:28 477,696 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
        + 2008-08-26 09:10:28 193,024 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
        + 2008-08-26 09:10:29 671,232 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
        + 2008-08-26 09:10:29 102,912 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
        + 2008-08-26 09:10:29 44,544 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
        + 2008-08-26 09:10:29 105,984 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
        + 2008-08-26 09:10:29 1,162,752 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
        + 2008-08-26 09:10:29 233,472 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
        + 2008-08-26 09:10:29 827,904 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
        + 2007-03-06 01:34:33 15,072 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
        + 2007-03-06 01:35:48 394,976 -c--a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
        + 2007-11-30 12:39:29 18,296 -c--a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
        + 2007-11-30 12:39:29 234,872 -c--a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
        + 2007-11-30 12:39:29 26,488 -c--a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB956391\update\update.exe
        + 2007-11-30 12:39:31 406,392 -c--a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
        + 2008-10-23 12:51:46 284,160 -c--a-w c:\windows\$hf_mig$\KB956802\SP2QFE\gdi32.dll
        + 2008-10-23 12:36:51 286,720 -c--a-w c:\windows\$hf_mig$\KB956802\SP3GDR\gdi32.dll
        + 2008-10-23 12:44:51 286,720 -c--a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
        + 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
        + 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
        + 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
        + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
        + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
        + 2008-08-14 09:48:52 138,368 -c--a-w c:\windows\$hf_mig$\KB956803\SP2QFE\afd.sys
        + 2008-08-14 10:04:36 138,496 -c--a-w c:\windows\$hf_mig$\KB956803\SP3GDR\afd.sys
        + 2008-08-14 10:34:26 138,496 -c--a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB956803\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
        + 2008-08-14 13:39:07 2,144,768 -c--a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlmp.exe
        + 2008-08-14 13:39:12 2,065,024 -c--a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
        + 2008-08-14 13:39:03 2,022,912 -c--a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrpamp.exe
        + 2008-08-14 13:39:11 2,188,032 -c--a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
        + 2008-08-14 13:23:44 2,147,328 -c--a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlmp.exe
        + 2008-08-14 13:23:49 2,068,096 -c--a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
        + 2008-08-14 13:23:44 2,025,984 -c--a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrpamp.exe
        + 2008-08-14 13:23:49 2,191,232 -c--a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
        + 2008-08-14 13:55:54 2,147,328 -c--a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
        + 2008-08-14 17:26:00 2,068,096 -c--a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
        + 2008-08-14 13:55:47 2,025,984 -c--a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
        + 2008-08-14 17:26:02 2,191,232 -c--a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
        + 2007-11-30 12:39:29 767,352 -c--a-w c:\windows\$hf_mig$\KB956841\update\update.exe
        + 2008-07-09 07:40:35 406,392 -c--a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
        + 2008-08-28 10:35:33 333,056 -c--a-w c:\windows\$hf_mig$\KB957095\SP2QFE\srv.sys
        + 2008-09-08 10:41:42 333,824 -c--a-w c:\windows\$hf_mig$\KB957095\SP3GDR\srv.sys
        + 2008-09-08 11:37:19 333,824 -c--a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB957095\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
        + 2008-10-24 11:25:29 455,936 -c--a-w c:\windows\$hf_mig$\KB957097\SP2QFE\mrxsmb.sys
        + 2008-10-24 11:21:09 455,296 -c--a-w c:\windows\$hf_mig$\KB957097\SP3GDR\mrxsmb.sys
        + 2008-10-24 11:41:11 455,936 -c--a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
        + 2008-07-08 13:03:54 18,296 -c--a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
        + 2008-07-08 13:03:55 234,872 -c--a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
        + 2008-07-08 13:03:54 26,488 -c--a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
        + 2008-07-08 13:03:57 767,352 -c--a-w c:\windows\$hf_mig$\KB957097\update\update.exe
        + 2008-07-08 13:04:05 406,392 -c--a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
        + 2008-10-16 19:33:14 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
        + 2008-10-16 19:33:14 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
        + 2008-10-16 19:33:14 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
        + 2008-10-16 19:33:14 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
        + 2008-10-16 19:33:14 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
        + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
        + 2008-10-16 19:33:14 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
        + 2008-10-16 19:33:14 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
        + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
        + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
        + 2008-10-16 19:33:15 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
        + 2008-10-16 19:33:15 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
        + 2008-10-16 19:33:16 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
        + 2008-10-16 19:33:16 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
        + 2008-10-16 19:33:16 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
        + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
        + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
        + 2008-10-16 19:33:17 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
        + 2008-10-16 19:33:18 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
        + 2008-10-16 19:33:18 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
        + 2008-10-16 19:33:19 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
        + 2008-10-16 19:33:20 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
        + 2008-10-16 19:33:20 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
        + 2008-10-16 19:33:21 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
        + 2008-10-16 19:33:21 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
        + 2008-10-16 19:33:21 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
        + 2008-10-16 19:33:21 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
        + 2008-10-16 19:33:21 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
        + 2008-10-16 19:33:22 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
        + 2008-10-16 19:33:22 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
        + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
        + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
        + 2008-10-15 16:55:13 339,456 -c--a-w c:\windows\$hf_mig$\KB958644\SP2QFE\netapi32.dll
        + 2008-10-15 16:35:43 337,408 -c--a-w c:\windows\$hf_mig$\KB958644\SP3GDR\netapi32.dll
        + 2008-10-15 16:31:32 339,456 -c--a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
        + 2007-11-30 11:19:06 18,296 -c--a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
        + 2007-11-30 11:19:06 234,872 -c--a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
        + 2007-11-30 11:19:06 26,488 -c--a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
        + 2007-11-30 11:19:06 767,352 -c--a-w c:\windows\$hf_mig$\KB958644\update\update.exe
        + 2007-11-30 11:19:10 406,392 -c--a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
        + 2008-12-13 06:27:45 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
        + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
        + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
        + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
        + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
        + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
        + 2006-05-25 08:29:04 213,216 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe
        + 2006-05-25 08:29:04 371,424 -c----w c:\windows\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\updspapi.dll
        + 2006-05-24 10:32:48 213,216 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe
        + 2006-05-24 10:32:48 371,424 -c----w c:\windows\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\updspapi.dll
        + 2005-10-12 23:15:26 216,800 -c----w c:\windows\$NtUninstallKB904942$\spuninst\spuninst.exe
        + 2005-10-12 23:15:45 394,976 -c----w c:\windows\$NtUninstallKB904942$\spuninst\updspapi.dll
        + 2004-08-19 14:09:48 49,152 -c----w c:\windows\$NtUninstallKB904942$\wdigest.dll
        + 2005-10-12 23:15:24 216,800 -c----w c:\windows\$NtUninstallKB914440$\spuninst\spuninst.exe
        + 2005-10-12 23:15:43 394,976 -c----w c:\windows\$NtUninstallKB914440$\spuninst\updspapi.dll
        + 2005-10-12 23:12:26 213,216 -c----w c:\windows\$NtUninstallKB915865$\spuninst\spuninst.exe
        + 2005-10-12 23:12:33 371,424 -c----w c:\windows\$NtUninstallKB915865$\spuninst\updspapi.dll
        + 2005-07-26 13:01:33 297,472 -c----w c:\windows\$NtUninstallKB932823-v3$\msctf.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
        + 2004-08-19 14:09:24 561,179 -c----w c:\windows\$NtUninstallKB950749$\dao360.dll
        + 2004-08-19 14:09:34 512,029 -c----w c:\windows\$NtUninstallKB950749$\msexch40.dll
        + 2004-08-19 14:09:34 319,517 -c----w c:\windows\$NtUninstallKB950749$\msexcl40.dll
        + 2004-08-19 14:09:34 1,507,356 -c----w c:\windows\$NtUninstallKB950749$\msjet40.dll
        + 2004-07-17 09:34:48 358,976 -c----w c:\windows\$NtUninstallKB950749$\msjetoledb40.dll
        + 2004-08-19 14:09:34 184,351 -c----w c:\windows\$NtUninstallKB950749$\msjint40.dll
        + 2004-08-19 14:09:34 53,279 -c----w c:\windows\$NtUninstallKB950749$\msjter40.dll
        + 2004-08-19 14:09:34 241,693 -c----w c:\windows\$NtUninstallKB950749$\msjtes40.dll
        + 2004-08-19 14:09:34 213,023 -c----w c:\windows\$NtUninstallKB950749$\msltus40.dll
        + 2004-08-19 14:09:34 348,189 -c----w c:\windows\$NtUninstallKB950749$\mspbde40.dll
        + 2004-08-19 14:09:34 421,919 -c----w c:\windows\$NtUninstallKB950749$\msrd2x40.dll
        + 2004-08-19 14:09:34 315,423 -c----w c:\windows\$NtUninstallKB950749$\msrd3x40.dll
        + 2004-08-19 14:09:34 552,989 -c----w c:\windows\$NtUninstallKB950749$\msrepl40.dll
        + 2004-08-19 14:09:36 258,077 -c----w c:\windows\$NtUninstallKB950749$\mstext40.dll
        + 2004-08-19 14:09:36 831,519 -c----w c:\windows\$NtUninstallKB950749$\mswdat10.dll
        + 2004-08-19 14:09:36 614,429 -c----w c:\windows\$NtUninstallKB950749$\mswstr10.dll
        + 2004-08-19 14:09:36 348,189 -c----w c:\windows\$NtUninstallKB950749$\msxbde40.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\$NtUninstallKB950749$\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\$NtUninstallKB950749$\spuninst\updspapi.dll
        + 2008-02-16 09:02:34 1,024,000 -c----w c:\windows\$NtUninstallKB950759$\browseui.dll
        + 2008-02-16 09:02:34 152,064 -c----w c:\windows\$NtUninstallKB950759$\cdfview.dll
        + 2008-02-16 09:02:34 1,056,768 -c----w c:\windows\$NtUninstallKB950759$\danim.dll
        + 2008-02-16 09:02:34 357,888 -c----w c:\windows\$NtUninstallKB950759$\dxtmsft.dll
        + 2008-02-16 09:02:35 205,312 -c----w c:\windows\$NtUninstallKB950759$\dxtrans.dll
        + 2008-02-16 09:02:35 55,808 -c----w c:\windows\$NtUninstallKB950759$\extmgr.dll
        + 2008-02-15 09:23:37 18,432 -c----w c:\windows\$NtUninstallKB950759$\iedw.exe
        + 2008-02-16 09:02:35 251,392 -c----w c:\windows\$NtUninstallKB950759$\iepeers.dll
        + 2008-02-16 09:02:35 96,768 -c----w c:\windows\$NtUninstallKB950759$\inseng.dll
        + 2008-02-16 09:02:35 16,384 -c----w c:\windows\$NtUninstallKB950759$\jsproxy.dll
        + 2008-02-16 22:32:38 3,080,704 -c----w c:\windows\$NtUninstallKB950759$\mshtml.dll
        + 2008-02-16 09:02:36 449,024 -c----w c:\windows\$NtUninstallKB950759$\mshtmled.dll
        + 2008-02-16 09:02:37 146,432 -c----w c:\windows\$NtUninstallKB950759$\msrating.dll
        + 2008-02-16 09:02:37 532,480 -c----w c:\windows\$NtUninstallKB950759$\mstime.dll
        + 2008-02-16 09:02:37 39,424 -c----w c:\windows\$NtUninstallKB950759$\pngfilt.dll
        + 2008-02-16 09:02:38 1,495,040 -c----w c:\windows\$NtUninstallKB950759$\shdocvw.dll
        + 2008-02-16 09:02:38 474,624 -c----w c:\windows\$NtUninstallKB950759$\shlwapi.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB950759$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950759$\spuninst\updspapi.dll
        + 2008-02-16 09:02:39 617,984 -c----w c:\windows\$NtUninstallKB950759$\urlmon.dll
        + 2008-02-16 09:02:39 663,552 -c----w c:\windows\$NtUninstallKB950759$\wininet.dll
        + 2008-02-15 23:03:14 370,176 -c----w c:\windows\$NtUninstallKB950759$\xpsp3res.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950760$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950760$\spuninst\updspapi.dll
        + 2006-07-13 08:48:58 202,240 -c----w c:\windows\$NtUninstallKB950762$\rmcast.sys
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950762$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB950762$\spuninst\updspapi.dll
        + 2005-10-12 08:25:28 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
        + 2007-11-30 12:39:29 406,392 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
        + 2007-08-21 06:17:23 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
        + 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
        + 2007-10-29 22:43:32 1,293,824 -c----w c:\windows\$NtUninstallKB951698$\quartz.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB951698$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB951698$\spuninst\updspapi.dll
        + 2004-08-03 21:14:16 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
        + 2008-02-20 05:35:05 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
        + 2004-08-19 14:09:36 247,808 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe
        + 2007-11-30 12:39:29 406,392 -c----w c:\windows\$NtUninstallKB951748$\spuninst\updspapi.dll
        + 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
        + 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
        + 2004-08-19 14:09:34 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
        + 2005-08-10 10:15:07 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
        + 2008-04-21 07:02:27 1,024,000 -c----w c:\windows\$NtUninstallKB953838$\browseui.dll
        + 2008-04-21 07:02:27 152,064 -c----w c:\windows\$NtUninstallKB953838$\cdfview.dll
        + 2008-04-21 07:02:28 1,056,768 -c----w c:\windows\$NtUninstallKB953838$\danim.dll
        + 2008-04-21 07:02:28 357,888 -c----w c:\windows\$NtUninstallKB953838$\dxtmsft.dll
        + 2008-04-21 07:02:28 205,312 -c----w c:\windows\$NtUninstallKB953838$\dxtrans.dll
        + 2008-04-21 07:02:28 55,808 -c----w c:\windows\$NtUninstallKB953838$\extmgr.dll
        + 2008-04-17 10:52:54 18,432 -c----w c:\windows\$NtUninstallKB953838$\iedw.exe
        + 2008-04-21 07:02:29 251,392 -c----w c:\windows\$NtUninstallKB953838$\iepeers.dll
        + 2008-04-21 07:02:29 96,768 -c----w c:\windows\$NtUninstallKB953838$\inseng.dll
        + 2008-04-21 07:02:29 16,384 -c----w c:\windows\$NtUninstallKB953838$\jsproxy.dll
        + 2008-04-21 07:02:34 3,080,704 -c----w c:\windows\$NtUninstallKB953838$\mshtml.dll
        + 2008-04-21 07:02:34 449,024 -c----w c:\windows\$NtUninstallKB953838$\mshtmled.dll
        + 2008-04-21 07:02:34 146,432 -c----w c:\windows\$NtUninstallKB953838$\msrating.dll
        + 2008-04-21 07:02:35 532,480 -c----w c:\windows\$NtUninstallKB953838$\mstime.dll
        + 2008-04-21 07:02:35 39,424 -c----w c:\windows\$NtUninstallKB953838$\pngfilt.dll
        + 2008-04-21 07:02:37 1,495,040 -c----w c:\windows\$NtUninstallKB953838$\shdocvw.dll
        + 2008-04-21 07:02:38 474,624 -c----w c:\windows\$NtUninstallKB953838$\shlwapi.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB953838$\spuninst\spuninst.exe
        + 2007-11-30 12:39:29 406,392 -c----w c:\windows\$NtUninstallKB953838$\spuninst\updspapi.dll
        + 2008-04-21 07:02:39 617,984 -c----w c:\windows\$NtUninstallKB953838$\urlmon.dll
        + 2008-04-21 07:02:40 663,552 -c----w c:\windows\$NtUninstallKB953838$\wininet.dll
        + 2008-04-17 11:03:45 370,176 -c----w c:\windows\$NtUninstallKB953838$\xpsp3res.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll
        + 2008-03-20 08:09:22 1,845,376 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB954600$\spuninst\updspapi.dll
        + 2006-08-24 11:19:40 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
        + 2007-06-26 06:09:14 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst.exe
        + 2008-07-09 12:10:36 406,392 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB955839$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB955839$\spuninst\updspapi.dll
        + 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtUninstallKB955839$\tzchange.exe
        + 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe
        + 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll
        + 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
        + 2008-07-08 13:03:55 234,872 -c----w c:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe
        + 2008-07-09 07:40:35 406,392 -c----w c:\windows\$NtUninstallKB956802$\spuninst\updspapi.dll
        + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll
        + 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlmp.exe
        + 2007-02-28 16:02:36 2,059,648 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
        + 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\$NtUninstallKB956841$\ntkrpamp.exe
        + 2007-02-28 16:02:36 2,182,400 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe
        + 2008-07-09 07:40:35 406,392 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll
        + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
        + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
        + 2008-07-08 13:03:55 234,872 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst.exe
        + 2008-07-08 13:04:05 406,392 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi.dll
        + 2006-08-17 12:29:49 332,288 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
        + 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB958644$\spuninst\spuninst.exe
        + 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB958644$\spuninst\updspapi.dll
        + 2006-10-16 14:10:58 221,488 -c----w c:\windows\$NtUninstallWIC$\spuninst\spuninst.exe
        + 2006-10-16 14:10:58 379,184 -c----w c:\windows\$NtUninstallWIC$\spuninst\updspapi.dll
        - 2008-04-09 20:34:20 1,257,472 -c--a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
        + 2008-07-21 22:06:25 1,265,664 -c--a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
        - 2008-04-09 20:34:22 1,224,704 -c--a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
        + 2008-07-21 22:06:26 1,232,896 -c--a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
        + 2008-07-21 22:06:42 61,440 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_70f05c1b\CustomMarshalers.dll
        + 2008-07-22 04:32:09 3,391,488 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_267c9347\mscorlib.dll
        + 2008-07-21 22:07:08 1,470,464 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b5642c38\System.Design.dll
        + 2008-07-21 22:06:45 90,112 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a9f1ce7c\System.Drawing.Design.dll
        + 2008-07-21 22:07:14 835,584 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_19331276\System.Drawing.dll
        + 2008-07-21 22:06:54 3,018,752 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_78ee6e14\System.Windows.Forms.dll
        + 2008-07-21 22:07:02 2,088,960 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_c323a5e6\System.Xml.dll
        + 2008-07-21 22:06:40 1,966,080 -c--a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_7ab07c97\System.dll
        + 2008-07-21 20:24:05 45,056 -c--a-w c:\windows\BDOSCAN8\avxdisk.dll
        + 2008-07-21 20:24:05 10,240 -c--a-w c:\windows\BDOSCAN8\avxs.dll
        + 2008-07-21 20:24:05 27,136 -c--a-w c:\windows\BDOSCAN8\avxt.dll
        + 2008-07-21 20:24:07 181,760 -c--a-w c:\windows\BDOSCAN8\bdcore.dll
        + 2006-05-24 23:21:00 118,784 -c--a-w c:\windows\BDOSCAN8\bdupd.dll
        + 2006-05-24 23:21:14 53,248 -c--a-w c:\windows\BDOSCAN8\ipsupd.dll
        + 2008-07-21 20:24:07 142,848 -c--a-w c:\windows\BDOSCAN8\libfn.dll
        + 2008-07-21 20:24:05 86,016 -c--a-w c:\windows\BDOSCAN8\librtvr.dll
        + 2008-06-14 17:59:52 272,768 -c----w c:\windows\Driver Cache\i386\bthport.sys
        - 2006-05-05 09:41:45 453,120 -c----w c:\windows\Driver Cache\i386\mrxsmb.sys
        + 2008-10-24 11:10:42 453,632 -c----w c:\windows\Driver Cache\i386\mrxsmb.sys
        - 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\Driver Cache\i386\ntkrnlmp.exe
        + 2008-08-14 13:44:35 2,138,112 -c----w c:\windows\Driver Cache\i386\ntkrnlmp.exe
        - 2007-02-28 16:02:36 2,059,648 -c----w c:\windows\Driver Cache\i386\ntkrnlpa.exe
        + 2008-08-14 13:44:39 2,059,776 -c----w c:\windows\Driver Cache\i386\ntkrnlpa.exe
        - 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\Driver Cache\i386\ntkrpamp.exe
        + 2008-08-14 13:44:33 2,017,792 -c----w c:\windows\Driver Cache\i386\ntkrpamp.exe
        - 2007-02-28 16:02:36 2,182,400 -c----w c:\windows\Driver Cache\i386\ntoskrnl.exe
        + 2008-08-14 13:44:37 2,182,400 -c----w c:\windows\Driver Cache\i386\ntoskrnl.exe
        - 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
        + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
        - 2008-07-21 14:41:27 5,689,344 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000001\ntuser.dat
        + 2008-07-21 18:46:44 5,689,344 -c--a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000001\ntuser.dat
        - 2008-07-21 14:41:27 299,008 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
        + 2008-07-21 18:46:44 299,008 -c--a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
        + 2004-08-19 14:09:20 61,440 -c----w c:\windows\ie7\admparse.dll
        + 2004-08-19 14:09:20 101,888 -c----w c:\windows\ie7\advpack.dll
        + 2004-08-19 14:09:22 35,328 -c----w c:\windows\ie7\corpol.dll
        + 2006-06-02 19:32:20 33,792 -c----w c:\windows\ie7\custsat.dll
        + 2008-06-23 15:40:00 357,888 -c----w c:\windows\ie7\dxtmsft.dll
        + 2008-06-23 15:40:00 205,312 -c----w c:\windows\ie7\dxtrans.dll
        + 2008-06-23 15:40:00 55,808 -c----w c:\windows\ie7\extmgr.dll
        + 2004-08-19 14:09:28 38,912 -c----w c:\windows\ie7\hmmapi.dll
        + 2004-08-19 14:09:56 34,304 -c----w c:\windows\ie7\ie4uinit.exe
        + 2004-08-19 14:09:28 139,264 -c----w c:\windows\ie7\ieakeng.dll
        + 2004-08-19 14:09:28 221,696 -c----w c:\windows\ie7\ieaksie.dll
        + 2001-10-02 16:16:30 245,760 -c----w c:\windows\ie7\ieakui.dll
        + 2004-08-19 14:09:28 323,584 -c----w c:\windows\ie7\iedkcs32.dll
        + 2008-06-23 09:49:29 18,432 -c----w c:\windows\ie7\iedw.exe
        + 2004-08-19 14:09:28 81,920 -c----w c:\windows\ie7\ieencode.dll
        + 2008-06-23 15:40:00 251,392 -c----w c:\windows\ie7\iepeers.dll
        + 2004-08-19 14:09:28 49,152 -c----w c:\windows\ie7\iernonce.dll
        + 2004-08-19 14:09:28 63,488 -c----w c:\windows\ie7\iesetup.dll
        + 2004-08-19 14:09:56 93,184 -c----w c:\windows\ie7\iexplore.exe
        + 2004-08-19 14:09:30 35,840 -c----w c:\windows\ie7\imgutil.dll
        + 2008-06-23 15:40:00 96,768 -c----w c:\windows\ie7\inseng.dll
        + 2007-12-18 14:41:58 450,560 -c----w c:\windows\ie7\jscript.dll
        + 2008-06-23 15:40:00 16,384 -c----w c:\windows\ie7\jsproxy.dll
        + 2004-08-19 14:09:32 22,528 -c----w c:\windows\ie7\licmgr10.dll
        + 2004-08-19 14:10:00 29,184 -c----w c:\windows\ie7\mshta.exe
        + 2008-06-23 15:40:02 3,080,704 -c----w c:\windows\ie7\mshtml.dll
        + 2008-06-23 15:40:03 449,024 -c----w c:\windows\ie7\mshtmled.dll
        + 2004-08-19 14:08:28 57,344 -c----w c:\windows\ie7\mshtmler.dll
        + 2001-10-02 16:16:44 146,432 -c----w c:\windows\ie7\msls31.dll
        + 2008-06-23 15:40:03 146,432 -c----w c:\windows\ie7\msrating.dll
        + 2008-06-23 15:40:04 532,480 -c----w c:\windows\ie7\mstime.dll
        + 2004-08-19 14:09:38 97,280 -c----w c:\windows\ie7\occache.dll
        + 2008-06-23 15:40:04 39,424 -c----w c:\windows\ie7\pngfilt.dll
        + 2007-09-26 16:34:42 33,472 -c----w c:\windows\ie7\spuninst\iecustom.dll
        + 2007-09-26 16:32:30 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe
        + 2006-09-06 15:43:28 216,800 -c----w c:\windows\ie7\spuninst\spuninst.exe
        + 2006-09-06 15:43:30 394,976 -c----w c:\windows\ie7\spuninst\updspapi.dll
        + 2004-08-19 14:09:48 37,888 -c----w c:\windows\ie7\url.dll
        + 2008-06-23 15:40:06 617,984 -c----w c:\windows\ie7\urlmon.dll
        + 2007-12-18 14:41:59 417,792 -c----w c:\windows\ie7\vbscript.dll
        + 2007-06-26 13:56:54 851,968 -c----w c:\windows\ie7\vgx.dll
        + 2004-08-19 14:09:48 281,600 -c----w c:\windows\ie7\webcheck.dll
        + 2008-06-23 15:40:08 663,552 -c----w c:\windows\ie7\wininet.dll
        + 2007-03-06 01:34:38 216,800 -c----w c:\windows\ie7updates\KB938127-IE7\spuninst\spuninst.exe
        + 2007-03-06 01:35:48 394,976 -c----w c:\windows\ie7updates\KB938127-IE7\spuninst\updspapi.dll
        + 2007-08-13 16:54:10 765,952 -c----w c:\windows\ie7updates\KB938127
    3. jlpjlp Contributeur sécurité
      slt,

      scan rapide avec
      MalwareByte's Anti-Malware après mise a jour, en mode normal et vire ce qui est trouvé et colle le rapport

      https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

      _______________________

      Télécharge ici :

      http://images.malwareremoval.com/random/RSIT.exe

      random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

      Double-clique sur RSIT.exe afin de lancer RSIT.

      Clique Continue à l'écran Disclaimer.

      Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

      Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

      Poste le contenu de log.txt (<<qui sera affiché)
      ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

      NB : Les rapports sont sauvegardés dans le dossier C:\rsit
      1. mater
        voilà les trois rapports

        merci

        Logfile of random's system information tool 1.05 (written by random/random)
        Run by Admin at 2009-02-07 20:35:40
        Microsoft Windows XP Professionnel Service Pack 2
        System drive C: has 35 GB (61%) free of 57 GB
        Total RAM: 511 MB (30% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 20:36:04, on 07/02/2009
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16762)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\a-squared Anti-Malware\a2service.exe
        C:\Program Files\ESET\ESET Smart Security\ekrn.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\Program Files\Microsoft LifeCam\MSCamS32.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wscntfy.exe
        C:\WINDOWS\system32\WgaTray.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Multimedia Card Reader\shwicon2k.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
        C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        C:\WINDOWS\vVX1000.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\ESET\ESET Smart Security\egui.exe
        C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
        C:\Program Files\Skype\Phone\Skype.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\OLITEC - Moniteur réseau 802.11g\WlanUtil.exe
        C:\Program Files\Outlook Express\msimn.exe
        C:\Program Files\Skype\Plugin Manager\skypePM.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
        C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\GKPSGRPC\RSIT[1].exe
        C:\Program Files\trend micro\Admin.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: (no name) - {01FAB4EA-E1D9-4FE0-B92F-BD93185D3833} - C:\WINDOWS\system32\vtUmJBsP.dll
        O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
        O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\rqRHyXrS.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
        O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
        O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
        O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60
        O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
        O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
        O4 - HKLM\..\RunOnce: [InnoSetupRegFile.0000000001] "C:\WINDOWS\is-DVAG2.exe" /REG
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
        O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Lancer l'utilitaire Olitec.lnk = ?
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
        O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
        O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
        O20 - Winlogon Notify: rqRHyXrS - C:\WINDOWS\SYSTEM32\rqRHyXrS.dll
        O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
        O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
        O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    Discussions similaires

    Nouveau tag ajouté | Nouvelle option activé sans permission?
    BountyFullChest

    1 réponse
    Huawei P8 Lite "nouveau tag ajouté"
    ArianeKathleen

    25 réponses
    Nouveau tag ajouté - Utilité
    Eerfers

    1 réponse
    Google Chrome "  Échec de l'analyse antivirus "
    jmpower

    18 réponses
    " Échec de l'analyse antivirus " la solution.
    bazfile

    0 réponse