Virtumonde ! SOS !!

le rapport est ok: il faut cependant installer internet explorer 7 à la place du 6 et mettre la version 9 d'adobe reader et ensuite virer via le panneau de configuration l'ancienne version

verifier avec antivir qu'il n'y a rien

si aucun souci et rien dans antivir c'est bon

Salut MiSSZ24, le faite d’installer un anti-virus c’est déjà préinstaller une M de, en effet les problèmes d’infection commencent quelques temps avant la fin de l’abonnement de ces programmes !!!
Pour ce qui me concerne en place j’ai Norton 360 qui n’a pas arrivé virdumonde je leur ai posé la question pas de réponse!!! « Tu parles Charles »
En parallèle j’ai installé Spywarefiger un logiciel en évaluation pour trente jours que je supprimerai le 20 jour de fonctionnement
Le plus efficace concernant les infections sous DOS reste WindowsDéfender qui est gratuit mais qui ne voie pas tous!
A constater que chacun des anti-virus conçus, a sa propre spécialité le tout étant d’avoir des programmes différents compatibles entre-eux, qu’il est souhaitable d’installer dans un dossier spécifique de manière à les sortir rapidement
Pas d’état d’âme tous les concepteurs de logiciels anti virus sont mercantiles ils ne pensent qu’aux pognions
Dès que tu allumes ta bécane, si tu as un fournisseur d’accès illimité, ton modem ou routeur travaille en sous main, donc si tu n’as pas besoin de surfer il faut les déconnecter avant, cela n’est qu’un conseil
Bon courage à plus pimpom

antivir est tres bien!

pour protéger gratos ton ordi

http://www.commentcamarche.net/telecharger/logiciel 4 securite

mettre un antivirus

ANTIVIR (en anglais mais très efficace)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
MAWAREBYTE + SPYBOT

+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

Rq : spybot et ad-aware on sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
--------
un pare feu :
celui de Windows ou mieux COMODO ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

-----------

CCLEANER pour effacer les traces de surf

À jlpjlp
Non tout à l'air de bien aller maintenant merci !
J'aimerais savoir d'apres toi quelle est le meilleur anti-virus ? Moi j'ai Avira Antivir ...
Ya l'ordi de mes parents qui est très lente comtrairement à avant, elle a p-t un bobo, mais Antivir ne me dit rien et Spybot non plus ... J'attends ton avis !

il suffit de télécharger chez microsoft WindowsDefender c'est gratuit Un premier scan puis arret complte de la bécanne puis de nouveau relancer le programme en ayant soin de télécharger les mises à jour enfin supprimer le virus c'est tous simple bon courage

désactive ta resauration systeme puis redemarre ton ordi puis réactive là
http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

________________

encore des soucis???

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1045
Windows 5.1.2600 Service Pack 2

16:25:22 2008-08-12
mbam-log-8-12-2008 (16-25-22).txt

Type de recherche: Examen complet (C:\|D:\|F:\|)
Eléments examinés: 131538
Temps écoulé: 40 minute(s), 59 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{840F8D40-D2B2-4CA1-A56C-AE9B7E3B083F}\RP123\A0023909.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{840F8D40-D2B2-4CA1-A56C-AE9B7E3B083F}\RP183\A0033285.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{840F8D40-D2B2-4CA1-A56C-AE9B7E3B083F}\RP183\A0033286.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\qoobox\Quarantine\C\WINDOWS\system32\xingiuix.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\qoobox\Quarantine\C\WINDOWS\system32\hjdzaa.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
F:\System Volume Information\_restore{840F8D40-D2B2-4CA1-A56C-AE9B7E3B083F}\RP180\A0033115.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\n.bat (Malware.Trace) -> Quarantined and deleted successfully.

Fichier analysé avec Virus Total:

Fichier VMSnap3.EXE reçu le 2008.08.13 00:31:54 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 0/36 (0%)

Fichier Domino.EXE reçu le 2008.08.13 00:34:58 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 1/36 (2.78%) Worm.Win32.Anilogo.i

Fichier acc.exe reçu le 2008.08.13 06:15:54 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 0/35 (0%)

RAPPORT HIJACKTHIS:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:19:52, on 2008-08-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Owner\Desktop\sanner.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.us.acer.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BOOTSKIN.EXE" /StartupJobs
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fr/win/QuickTimeInstaller.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: intu-ir2007 - {52BAEC6B-9405-46F9-A131-6D50720A3CC4} - C:\Program Files\ImpotRapide 2007\ic2007pp.dll (file missing)
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)

Merci mille fois ! Je fais tout cela et je te revient avec les rapports ! Merci encore !

pour ad aware il est dépassé vire le (si tu y tiens vraiment mais au moins la version 2008)

et mets a la place malwarebyte's antimalware et colle un rapport et vires ce qui est trouvé

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

______________
mets a jour internet explorer ici:

https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

______________

analyse ces fichiers sur virus total et si inféctés tu les vires avec otmovit comme tu l'as déjà fait

C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\PROGRA~1\acc\acc.exe

_______________

recolles un rapport hijackthis et dis tes soucis actuels

Voici:

Avira AntiVir Personal
Report file date: Monday, August 11, 2008 19:35

Scanning for 1547103 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: ACER-1424F82190

Version information:
BUILD.DAT : 8.1.0.326 16933 Bytes 2008-07-11 12:57:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 2008-07-25 15:17:08
AVSCAN.DLL : 8.1.4.0 40705 Bytes 2008-07-25 15:17:08
LUKE.DLL : 8.1.4.5 164097 Bytes 2008-07-25 15:17:08
LUKERES.DLL : 8.1.4.0 12033 Bytes 2008-07-25 15:17:08
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 19:27:16
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 2008-06-24 00:45:24
ANTIVIR2.VDF : 7.0.5.207 2316800 Bytes 2008-08-04 22:15:26
ANTIVIR3.VDF : 7.0.5.240 229376 Bytes 2008-08-11 19:24:16
Engineversion : 8.1.1.19
AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-04-16 00:01:22
AESCRIPT.DLL : 8.1.0.63 311673 Bytes 2008-08-06 22:15:22
AESCN.DLL : 8.1.0.23 119156 Bytes 2008-07-15 21:25:00
AERDL.DLL : 8.1.0.20 418165 Bytes 2008-04-28 12:20:20
AEPACK.DLL : 8.1.2.1 364917 Bytes 2008-07-15 21:24:58
AEOFFICE.DLL : 8.1.0.21 192891 Bytes 2008-07-25 15:17:10
AEHEUR.DLL : 8.1.0.47 1368437 Bytes 2008-08-06 22:15:20
AEHELP.DLL : 8.1.0.15 115063 Bytes 2008-05-29 23:33:30
AEGEN.DLL : 8.1.0.35 315764 Bytes 2008-08-06 22:15:14
AEEMU.DLL : 8.1.0.7 430452 Bytes 2008-08-01 20:22:38
AECORE.DLL : 8.1.1.8 172406 Bytes 2008-08-01 20:22:36
AEBB.DLL : 8.1.0.1 53617 Bytes 2008-07-25 15:17:10
AVWINLL.DLL : 1.0.0.12 15105 Bytes 2008-07-25 15:17:08
AVPREF.DLL : 8.0.2.0 38657 Bytes 2008-07-25 15:17:08
AVREP.DLL : 8.0.0.2 98344 Bytes 2008-08-01 20:22:36
AVREG.DLL : 8.0.0.1 33537 Bytes 2008-07-25 15:17:08
AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-04-16 00:01:20
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 2008-07-25 15:17:08
SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-04-16 00:01:22
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 2008-07-25 15:17:08
NETNT.DLL : 8.0.0.1 7937 Bytes 2008-04-16 00:01:22
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 2008-07-25 15:16:58
RCTEXT.DLL : 8.0.52.0 86273 Bytes 2008-07-25 15:16:58

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Monday, August 11, 2008 19:35

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'CLI.EXE' - '1' Module(s) have been scanned
Scan process 'CLI.EXE' - '1' Module(s) have been scanned
Scan process 'RtkBtMnt.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'Acer.Empowering.Framework.Launcher.exe' - '1' Module(s) have been scanned
Scan process 'acc.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'WeatherEye.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'MSMSGS.EXE' - '1' Module(s) have been scanned
Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned
Scan process 'OpWareSE4.exe' - '1' Module(s) have been scanned
Scan process 'BJMyPrt.exe' - '1' Module(s) have been scanned
Scan process 'WMIPRVSE.EXE' - '1' Module(s) have been scanned
Scan process 'EHMSAS.EXE' - '1' Module(s) have been scanned
Scan process 'AVGNT.EXE' - '1' Module(s) have been scanned
Scan process 'Domino.EXE' - '1' Module(s) have been scanned
Scan process 'VMSnap3.EXE' - '1' Module(s) have been scanned
Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'JUSCHED.EXE' - '1' Module(s) have been scanned
Scan process 'eRAgent.exe' - '1' Module(s) have been scanned
Scan process 'QtZgAcer.EXE' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'ePower_DMC.exe' - '1' Module(s) have been scanned
Scan process 'ePresentation.exe' - '1' Module(s) have been scanned
Scan process 'eDSloader.exe' - '1' Module(s) have been scanned
Scan process 'CLI.EXE' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'EHTRAY.EXE' - '1' Module(s) have been scanned
Scan process 'WMIPRVSE.EXE' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'WSCNTFY.EXE' - '1' Module(s) have been scanned
Scan process 'ALG.EXE' - '1' Module(s) have been scanned
Scan process 'DLLHOST.EXE' - '1' Module(s) have been scanned
Scan process 'eLockServ.exe' - '1' Module(s) have been scanned
Scan process 'WMIAPSRV.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'PIFSvc.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehRecvr.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'AluSchedulerSvc.exe' - '1' Module(s) have been scanned
Scan process 'SCHED.EXE' - '1' Module(s) have been scanned
Scan process 'MemCheck.exe' - '1' Module(s) have been scanned
Scan process 'AVGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'ATI2EVXX.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'ATI2EVXX.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
67 processes with 67 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'F:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '80' files ).

Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\hiberfil.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <ACERDATA>
Begin scan in 'F:\' <Cynthia Disc Externe>

End of the scan: Monday, August 11, 2008 20:12
Used time: 37:19 Minute(s)

The scan has been done completely.

8130 Scanning directories
318898 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
318896 Files not concerned
9685 Archives were scanned
2 Warnings
0 Notes

colles un rapport avec antivir que tu as

Mon ordi colle, je pers le bureau et la barre des taches et tout revient. Quand je suis sur internet, ya toujours une fenêtre qui souvre m'offrant a downloader un anti-virus bizarre ...

Je recolle le rapport Hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:37:11, on 2008-08-12
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\acc\acc.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\Desktop\sanner.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.us.acer.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BOOTSKIN.EXE" /StartupJobs
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [acc] C:\PROGRA~1\acc\acc.exe
O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fr/win/QuickTimeInstaller.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{51882884-9552-439B-99FF-2F81B62E8B2E}: NameServer = 142.169.1.16 199.84.242.22
O18 - Protocol: intu-ir2007 - {52BAEC6B-9405-46F9-A131-6D50720A3CC4} - C:\Program Files\ImpotRapide 2007\ic2007pp.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)

recolles hijakthis et surtout dis tes problemes

Rapport CombiFix:

ComboFix 08-08-11.01 - Owner 2008-08-12 1:58:39.5 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.373 [GMT -4:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
* Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\#SharedObjects\SJ4B454P\interclick.com
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\#SharedObjects\SJ4B454P\interclick.com\ud.sol
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
C:\WINDOWS\system32\aGQWaJjl.ini
C:\WINDOWS\system32\aGQWaJjl.ini2
C:\WINDOWS\system32\ddcyVnMG.dll
C:\WINDOWS\system32\egdsgvvq.ini
C:\WINDOWS\system32\eqodqptl.dll
C:\WINDOWS\system32\hjdzaa.dll
C:\WINDOWS\system32\knastbuf.ini
C:\WINDOWS\system32\kpbphsbu.ini
C:\WINDOWS\system32\ljJaWQGa.dll
C:\WINDOWS\system32\ltpqdoqe.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\pmnkhGaX.dll
C:\WINDOWS\system32\rmasrtwm.ini
C:\WINDOWS\system32\xingiuix.dll
C:\x.dat
C:\z.dat

.
((((((((((((((((((((((((( Files Created from 2008-07-12 to 2008-08-12 )))))))))))))))))))))))))))))))
.

2008-08-11 17:34 . 2008-08-11 17:34 <DIR> d-------- C:\Program Files\acc
2008-08-09 13:24 . 2008-08-09 13:24 1,071 --a------ C:\WINDOWS\AWMODEM.INF
2008-08-02 20:16 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-08-02 20:16 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\dllcache\usbscan.sys
2008-08-02 20:15 . 2008-08-02 20:15 <DIR> d-------- C:\Program Files\ScanSoft
2008-08-02 20:15 . 2008-08-02 20:15 <DIR> d-------- C:\Program Files\Common Files\ScanSoft Shared
2008-08-02 20:15 . 2008-08-02 20:15 <DIR> d-------- C:\Documents and Settings\Owner\Application Data\ScanSoft
2008-08-02 20:15 . 2008-08-02 20:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ScanSoft
2008-08-02 20:15 . 2008-08-02 20:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-08-02 20:15 . 2008-08-02 20:15 412 --a------ C:\WINDOWS\MAXLINK.INI
2008-08-02 20:13 . 2008-08-02 20:13 <DIR> d-------- C:\Program Files\Common Files\CANON
2008-08-02 20:10 . 2008-08-02 20:10 <DIR> d--h----- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2008-08-02 20:10 . 2008-08-02 20:10 <DIR> d--h----- C:\Program Files\CanonBJ
2008-08-02 20:10 . 2008-08-02 20:11 <DIR> d--h----- C:\Documents and Settings\All Users\Application Data\CanonBJ
2008-08-02 20:10 . 2007-03-23 03:30 1,400,832 --a------ C:\WINDOWS\system32\CNC210C.DLL
2008-08-02 20:10 . 2007-03-18 16:00 215,040 --a------ C:\WINDOWS\system32\CNMLM8S.DLL
2008-08-02 20:10 . 2007-03-18 21:16 200,704 --a------ C:\WINDOWS\system32\CNC210L.DLL
2008-08-02 20:10 . 2007-03-15 01:12 188,416 --a------ C:\WINDOWS\system32\CNC210O.DLL
2008-08-02 20:10 . 2007-03-23 03:29 98,304 --a------ C:\WINDOWS\system32\CNC210I.DLL
2008-08-02 20:09 . 2008-08-02 20:09 <DIR> d-------- C:\Program Files\Canon
2008-07-27 20:10 . 2008-07-27 20:10 <DIR> d-------- C:\Program Files\Real
2008-07-27 20:10 . 2008-07-27 20:10 <DIR> d-------- C:\Program Files\Common Files\Real

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-28 00:10 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 17:41 245,248 ----a-w C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-13 13:10 272,128 ----a-w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-13 13:10 272,128 ----a-w C:\WINDOWS\system32\dllcache\bthport.sys
2007-07-23 00:39 47,360 ----a-w C:\Documents and Settings\Owner\Application Data\pcouffin.sys
2007-10-12 02:40 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-10-12 02:40 56 --sh--r C:\WINDOWS\system32\75F2130F9C.sys
.

((((((((((((((((((((((((((((( snapshot@2007-11-27_17.41.57.43 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-11-17 18:31:32 347,136 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
+ 2004-11-17 17:31:32 347,136 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
- 2004-10-14 15:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
+ 2004-10-14 14:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
- 2004-10-14 15:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
+ 2004-10-14 14:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
- 2004-10-14 15:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
+ 2004-10-14 14:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
- 2004-10-14 15:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
+ 2004-10-14 14:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
- 2004-10-28 02:28:18 721,920 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
+ 2004-10-28 01:28:18 721,920 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
- 2004-10-28 02:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
+ 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
- 2004-10-28 02:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
+ 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
- 2004-10-14 16:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
+ 2004-10-14 15:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
- 2004-10-14 16:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
+ 2004-10-14 15:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
- 2004-10-14 16:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
+ 2004-10-14 15:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
- 2004-10-14 16:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
+ 2004-10-14 15:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
- 2004-10-14 16:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
+ 2004-10-14 15:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
- 2004-10-14 16:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
+ 2004-10-14 15:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
- 2004-10-14 16:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
+ 2004-10-14 15:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
- 2004-10-14 16:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
+ 2004-10-14 15:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
- 2004-09-29 23:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
+ 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
- 2004-10-14 19:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
+ 2004-10-14 18:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
- 2004-10-14 19:36:16 169,984 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
+ 2004-10-14 18:36:16 169,984 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
- 2004-10-14 19:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
+ 2004-10-14 18:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
- 2004-10-14 19:34:52 654,848 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
+ 2004-10-14 18:34:52 654,848 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
- 2004-10-13 17:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
+ 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
- 2004-10-14 16:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
+ 2004-10-14 15:34:52 7,168 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
- 2004-10-14 16:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
+ 2004-10-14 15:36:18 169,984 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
- 2004-10-14 16:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
+ 2004-10-14 15:36:16 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
- 2004-10-14 16:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
+ 2004-10-14 15:34:54 654,848 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
- 2004-12-07 20:29:20 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
+ 2004-12-07 19:29:20 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
- 2004-11-30 19:46:38 7,168 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
+ 2004-11-30 18:46:38 7,168 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
- 2004-12-01 01:22:42 169,984 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
+ 2004-12-01 00:22:42 169,984 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
- 2004-12-01 01:22:40 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
+ 2004-12-01 00:22:40 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
- 2004-11-30 19:46:40 654,848 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
+ 2004-11-30 18:46:40 654,848 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
- 2005-04-22 06:18:52 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
+ 2005-04-22 05:18:52 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
- 2005-05-17 01:26:30 17,920 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\xpsp3res.dll
+ 2005-05-17 00:26:30 17,920 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\xpsp3res.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
- 2005-03-02 19:19:56 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
+ 2005-03-02 18:19:56 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
- 2005-03-02 02:02:14 2,135,552 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
+ 2005-03-02 01:02:14 2,135,552 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
- 2005-03-02 01:36:40 2,056,832 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
+ 2005-03-02 00:36:40 2,056,832 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
- 2005-03-02 01:36:42 2,015,232 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
+ 2005-03-02 00:36:42 2,015,232 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
- 2005-03-02 02:04:22 2,179,456 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
+ 2005-03-02 01:04:22 2,179,456 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
- 2005-03-02 19:19:56 577,024 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
+ 2005-03-02 18:19:56 577,024 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
- 2005-03-02 02:11:26 1,836,160 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
+ 2005-03-02 01:11:26 1,836,160 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
- 2005-03-02 19:19:56 291,328 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
+ 2005-03-02 18:19:56 291,328 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
- 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
+ 2005-02-24 23:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
- 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
+ 2005-02-24 23:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
- 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
+ 2005-02-24 23:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
- 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
+ 2005-02-24 23:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
- 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
+ 2005-02-24 23:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
- 2004-11-30 19:46:38 7,168 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
+ 2004-11-30 18:46:38 7,168 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
- 2004-12-01 01:22:42 169,984 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
+ 2004-12-01 00:22:42 169,984 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
- 2004-12-01 01:22:40 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
+ 2004-12-01 00:22:40 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
- 2004-11-30 19:46:40 654,848 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
+ 2004-11-30 18:46:40 654,848 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
- 2005-07-08 17:28:58 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
+ 2005-07-08 16:28:58 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
- 2005-07-08 00:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
+ 2005-07-07 23:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
- 2005-04-28 20:35:02 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
+ 2005-04-28 19:35:02 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
- 2005-04-28 20:35:02 74,752 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
+ 2005-04-28 19:35:02 74,752 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
- 2005-04-28 20:35:02 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
+ 2005-04-28 19:35:02 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
- 2005-04-28 20:35:02 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
+ 2005-04-28 19:35:02 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
- 2005-05-27 00:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
+ 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
- 2005-05-27 03:09:00 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
+ 2005-05-27 02:09:00 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
- 2005-05-27 03:09:00 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
+ 2005-05-27 02:09:00 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
- 2005-05-27 03:09:00 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
+ 2005-05-27 02:09:00 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
- 2005-06-11 01:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
+ 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
- 2005-06-29 21:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
+ 2005-06-29 20:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
- 2005-05-11 00:51:10 75,776 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
+ 2005-05-10 23:51:10 75,776 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
- 2005-02-25 04:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
+ 2005-02-25 03:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
- 2005-02-25 04:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
+ 2005-02-25 03:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
- 2005-02-25 04:35:06 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
+ 2005-02-25 03:35:06 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
- 2005-02-25 04:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
+ 2005-02-25 03:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
- 2005-02-25 04:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
+ 2005-02-25 03:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
- 2005-02-25 04:35:06 371,936 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
+ 2005-02-25 03:35:06 371,936 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
- 2005-06-15 18:42:36 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
+ 2005-06-15 17:42:36 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
- 2005-06-29 21:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
+ 2005-06-29 20:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
- 2005-06-10 05:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
+ 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
- 2005-06-29 21:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
+ 2005-06-29 20:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
- 2006-02-15 01:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
+ 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
- 2005-09-01 02:44:04 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
+ 2005-09-01 01:44:04 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
- 2005-09-23 04:18:20 8,452,608 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
+ 2005-09-23 03:18:20 8,452,608 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
- 2005-09-03 00:53:42 474,112 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
+ 2005-09-02 23:53:42 474,112 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
- 2005-09-01 02:44:06 291,840 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
+ 2005-09-01 01:44:06 291,840 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
- 2005-09-27 01:29:46 21,504 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll
+ 2005-09-27 00:29:46 21,504 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
- 2005-09-26 22:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
+ 2005-09-26 21:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
- 2005-09-10 02:48:48 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
+ 2005-09-10 01:48:48 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
- 2005-09-09 21:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
+ 2005-09-09 20:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB901190\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB901190\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901190\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901190\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB901190\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB901190\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB901190\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB901190\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB901190\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB901190\update\updspapi.dll
- 2005-06-29 02:49:56 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
+ 2005-06-29 01:49:56 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
- 2005-06-29 02:49:56 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
+ 2005-06-29 01:49:56 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
- 2005-07-26 05:20:24 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
+ 2005-07-26 04:20:24 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
- 2005-07-26 05:20:24 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
+ 2005-07-26 04:20:24 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
- 2005-07-26 05:20:24 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
+ 2005-07-26 04:20:24 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
- 2005-07-26 05:20:24 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
+ 2005-07-26 04:20:24 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
- 2005-07-26 05:20:24 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
+ 2005-07-26 04:20:24 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
- 2005-07-26 05:20:24 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
+ 2005-07-26 04:20:24 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
- 2005-07-26 05:20:26 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
+ 2005-07-26 04:20:26 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
- 2005-07-26 05:20:28 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
+ 2005-07-26 04:20:28 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
- 2005-07-26 05:20:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
+ 2005-07-26 04:20:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
- 2005-07-26 05:20:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
+ 2005-07-26 04:20:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
- 2005-07-26 00:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
+ 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
- 2005-07-26 05:20:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
+ 2005-07-26 04:20:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
- 2005-07-26 05:20:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
+ 2005-07-26 04:20:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
- 2005-07-26 05:20:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
+ 2005-07-26 04:20:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
- 2005-07-26 05:20:40 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
+ 2005-07-26 04:20:40 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
- 2005-07-26 05:20:40 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
+ 2005-07-26 04:20:40 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
- 2005-07-26 05:20:40 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
+ 2005-07-26 04:20:40 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
- 2005-07-26 05:20:40 74,752 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
+ 2005-07-26 04:20:40 74,752 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
- 2005-07-26 05:20:40 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
+ 2005-07-26 04:20:40 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
- 2005-07-26 05:20:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
+ 2005-07-26 04:20:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
- 2005-07-26 05:20:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
+ 2005-07-26 04:20:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
- 2005-07-26 05:20:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
+ 2005-07-26 04:20:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
- 2005-07-26 00:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
+ 2005-07-25 23:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
- 2005-08-22 19:24:56 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
+ 2005-08-22 18:24:56 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
- 2005-02-25 04:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
+ 2005-02-25 03:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
- 2005-02-25 04:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
+ 2005-02-25 03:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
- 2005-08-20 00:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
+ 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
- 2005-02-25 04:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
+ 2005-02-25 03:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
- 2005-02-25 04:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
+ 2005-02-25 03:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
- 2005-02-25 04:35:06 371,936 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
+ 2005-02-25 03:35:06 371,936 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
- 2005-08-23 04:39:54 123,392 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
+ 2005-08-23 03:39:54 123,392 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
- 2005-02-25 01:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
+ 2005-02-25 00:35:06 14,048 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
- 2005-02-25 01:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
+ 2005-02-25 00:35:06 209,632 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
- 2005-08-22 23:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
+ 2005-08-22 22:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
- 2005-02-25 01:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
+ 2005-02-25 00:35:06 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
- 2005-02-25 01:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
+ 2005-02-25 00:35:06 718,048 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
- 2005-02-25 01:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
+ 2005-02-25 00:35:08 371,936 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
- 2005-10-17 22:21:20 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
+ 2005-10-17 21:21:20 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
- 2005-10-17 22:21:20 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
+ 2005-10-17 21:21:20 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
- 2006-03-17 05:46:32 8,454,656 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
+ 2006-03-17 04:46:32 8,454,656 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
- 2006-03-17 02:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
+ 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
- 2006-03-22 02:29:44 23,040 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll
+ 2006-03-22 01:29:44 23,040 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
- 2005-10-20 23:26:40 1,082,368 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
+ 2005-10-20 22:26:40 1,082,368 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
- 2005-10-13 00:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
+ 2005-10-12 23:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
- 2006-06-22 11:36:52 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
+ 2006-06-22 10:36:52 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
- 2006-03-23 06:53:08 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
+ 2006-03-23 05:53:08 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
- 2006-01-04 05:18:34 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
+ 2006-01-04 04:18:34 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
- 2006-03-01 20:34:20 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
+ 2006-03-01 19:34:20 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
- 2006-03-01 20:34:20 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
+ 2006-03-01 19:34:20 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
- 2006-03-01 20:34:20 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
+ 2006-03-01 19:34:20 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
- 2006-03-01 20:34:20 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
+ 2006-03-01 19:34:20 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
- 2006-03-01 20:34:20 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
+ 2006-03-01 19:34:20 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
- 2006-03-01 20:34:20 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
+ 2006-03-01 19:34:20 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
- 2006-05-19 14:46:40 112,128 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
+ 2006-05-19 13:46:40 112,128 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
- 2006-05-19 14:46:40 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
+ 2006-05-19 13:46:40 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
- 2006-05-19 14:46:40 94,720 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
+ 2006-05-19 13:46:40 94,720 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
- 2006-05-05 11:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
+ 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
- 2006-05-05 11:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
+ 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
- 2006-03-17 02:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
+ 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
- 2005-10-13 00:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
+ 2005-10-12 23:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
- 2005-10-13 00:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
+ 2005-10-12 23:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
- 2005-10-13 00:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
+ 2005-10-12 23:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
- 2005-10-13 00:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
+ 2005-10-12 23:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
- 2005-10-13 00:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
+ 2005-10-12 23:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
- 2006-05-18 06:37:44 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
+ 2006-05-18 05:37:44 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
- 2005-10-13 00:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
+ 2005-10-12 23:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
- 2005-10-13 00:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
+ 2005-10-12 23:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
- 2005-10-13 00:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
+ 2005-10-12 23:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
- 2005-10-13 00:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
+ 2005-10-12 23:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
- 2005-10-13 00:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
+ 2005-10-12 23:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
- 2006-04-20 13:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
+ 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
- 2006-11-27 16:17:10 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
+ 2006-11-27 15:17:10 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
- 2006-11-27 16:17:10 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
+ 2006-11-27 15:17:10 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
- 2006-06-01 20:39:42 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
+ 2006-06-01 19:39:42 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
- 2006-06-01 20:39:42 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
+ 2006-06-01 19:39:42 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
- 2006-07-13 12:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
+ 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
- 2006-07-21 09:26:50 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
+ 2006-07-21 08:26:50 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
- 2005-10-13 00:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
+ 2005-10-12 23:16:50 14,048 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
- 2005-10-13 00:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
+ 2005-10-12 23:16:50 213,216 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
- 2005-10-13 00:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
+ 2005-10-12 23:16:50 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
- 2005-10-13 00:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
+ 2005-10-12 23:16:52 716,000 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
- 2005-10-13 00:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
+ 2005-10-12 23:16:56 371,424 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
- 2006-06-26 18:45:20 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
+ 2006-06-26 17:45:20 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
- 2006-06-26 18:45:20 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
+ 2006-06-26 17:45:20 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
- 2006-06-22 06:22:04 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
+ 2006-06-22 05:22:04 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
- 2006-06-22 06:22:06 1,435,648 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
+ 2006-06-22 05:22:06 1,435,648 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll
- 2006-06-14 09:50:20 172,416 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
+ 2006-06-14 08:50:20 172,416 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys
- 2006-06-14 09:50:20 6,272 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
+ 2006-06-14 08:50:20 6,272 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys
- 2006-06-14 10:17:04 82,944 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
+ 2006-06-14 09:17:04 82,944 ------w C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll
- 2007-05-17 12:25:22 549,888 ------w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
+ 2007-05-17 11:25:22 549,888 ------w C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll
- 2005-10-13 00:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll
+ 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll
- 2005-10-13 00:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe
+ 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe
- 2005-10-13 00:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll
+ 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll
- 2005-10-13 00:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
+ 2005-10-12 23:12:30 716,000 ------w C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
- 2005-10-13 00:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll
+ 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll
- 2006-08-21 13:26:44 16,896 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll
+ 2006-08-21 12:26:44 16,896 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll
- 2006-08-21 10:43:32 23,040 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe
+ 2006-08-21 09:43:32 23,040 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe
- 2006-08-21 10:43:32 128,768 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys
+ 2006-08-21 09:43:32 128,768 ------w C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.

SVP JLPJLP !
Encore pogner ce maudit virus !!! VIRTUMONDE détecter avec Spybot:

Rapport Hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:29:39, on 2008-08-12
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\acc\acc.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Owner\Desktop\sanner.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.us.acer.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7BFAEB8E-7545-4524-A927-B6C9F3C32B18} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {c8767520-8a74-b5c8-39a4-d8b01a800da9} - {9ad008a1-0b8d-4a93-8c5b-47a80257678c} - C:\WINDOWS\system32\hjdzaa.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {E482A951-26ED-4898-A1EB-09A942D95A52} - C:\WINDOWS\system32\pmnkhGaX.dll
*O2 - BHO: (no name) - {FFA69C76-13CA-4C7E-A7E0-822917C8066E} - C:\WINDOWS\system32\ljJaWQGa.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [VMSnap3] C:\WINDOWS\VMSnap3.EXE
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.EXE
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BOOTSKIN.EXE" /StartupJobs
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /idle
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [acc] C:\PROGRA~1\acc\acc.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fr/win/QuickTimeInstaller.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: intu-ir2007 - {52BAEC6B-9405-46F9-A131-6D50720A3CC4} - C:\Program Files\ImpotRapide 2007\ic2007pp.dll (file missing)
O20 - Winlogon Notify: pmnkhGaX - C:\WINDOWS\SYSTEM32\pmnkhGaX.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)

-
End of file - 12279 bytes
D'après moi le problème serais en gras ... Aidez-moi SVP !

parfait mais as tu fais le message 7 et analysé les fichiers pour voir si il faut les virer?

J'ai suivi les procédures plus haut et sa fonctionner avec l'aide de jlpjlp ! Merci

vous avez un virus tres puissant

slt,

si tu as avast et norton vire un des deux

_________________

lance hijackthis, selectionne ces lignes puis fais fix cheked

O2 - BHO: {aa8975fb-d894-7ef9-6a54-d3d88ef8d873} - {378d8fe8-8d3d-45a6-9fe7-498dbf5798aa} - C:\WINDOWS\system32\qrkaxven.dll

O2 - BHO: (no name) - {C1F78710-EEDB-4E63-B180-23ABC0366671} - (no file)
O2 - BHO: (no name) - {d8f3f1e0-ce64-467f-a1bb-b1bed85f6e23} - (no file)

O4 - HKLM\..\Run: [0fbc282b] rundll32.exe "C:\WINDOWS\system32\qvvgsdge.dll",b
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
____________

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

Citation :

C:\WINDOWS\system32\qvvgsdge.dll
C:\WINDOWS\system32\qrkaxven.dll
C:\WINDOWS\system32\mljjgef.dll.vir

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
http://img137.imageshack.us/img137/3558/refaitjk8.th.jpg

________________________

analyse ces fichiers sur virus total : https://www.virustotal.com/gui/

ceux qui sont inféctés tu les vires avec otmovit: comme precedement

C:\WINDOWS\system32\egdsgvvq.ini
C:\WINDOWS\system32\ccekwryk.dll
C:\WINDOWS\system32\kpbphsbu.ini
C:\WINDOWS\system32\ubshpbpk.dll
C:\WINDOWS\system32\rmasrtwm.ini
C:\WINDOWS\system32\jnmfsopx.dll
C:\WINDOWS\system32\cnmenqst.dll
C:\WINDOWS\system32\knastbuf.ini
C:\WINDOWS\system32\fubtsank.dll
C:\WINDOWS\system32\eqexkaad.dll
C:\WINDOWS\system32\ssggoeem.ini
C:\WINDOWS\system32\meeoggss.dll
C:\WINDOWS\system32\vbzip10.dll
C:\WINDOWS\system32\fccyxxx.dll

______________________

nettoie ton registre avec regcleaner:

http://manuelsdaide.com/RegCleaner/RegCleaner.htm

_______________________

installe
SPYWAREBLASTER pour immuniser le système contre vundo que tu avais mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

_______________________

recolle un rapport combofix, hijakthis et surtout dis tes problemes

Scan VundiFix:

Beginning removal...

Performing Repairs to the registry.
Done!

VundoFix V6.6.2

Checking Java version...

Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.

Scan started at 01:09:32 2007-11-28

Listing files found while scanning....

No infected files were found.

Scan VirtumondeBeGone:

[11/28/2007, 15:42:10] - VirtumundoBeGone v1.5 ( "D:\VirtumundoBeGone.exe" )
[11/28/2007, 15:42:46] - Detected System Information:
[11/28/2007, 15:42:46] - Windows Version: 5.1.2600, Service Pack 2
[11/28/2007, 15:42:46] - Current Username: Owner (Admin)
[11/28/2007, 15:42:46] - Windows is in NORMAL mode.
[11/28/2007, 15:42:46] - Searching for Browser Helper Objects:
[11/28/2007, 15:42:46] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[11/28/2007, 15:42:46] - BHO 2: {378d8fe8-8d3d-45a6-9fe7-498dbf5798aa} ()
[11/28/2007, 15:42:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/28/2007, 15:42:46] - Checking for HKLM\...\Winlogon\Notify\qrkaxven
[11/28/2007, 15:42:46] - Key not found: HKLM\...\Winlogon\Notify\qrkaxven, continuing.
[11/28/2007, 15:42:46] - BHO 3: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[11/28/2007, 15:42:46] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[11/28/2007, 15:42:46] - BHO 5: {7BFAEB8E-7545-4524-A927-B6C9F3C32B18} ()
[11/28/2007, 15:42:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/28/2007, 15:42:46] - No filename found. Continuing.
[11/28/2007, 15:42:46] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Programme d'aide de l'Assistant de connexion Windows Live)
[11/28/2007, 15:42:46] - BHO 7: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[11/28/2007, 15:42:46] - BHO 8: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[11/28/2007, 15:42:46] - BHO 9: {C1F78710-EEDB-4E63-B180-23ABC0366671} ()
[11/28/2007, 15:42:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/28/2007, 15:42:46] - No filename found. Continuing.
[11/28/2007, 15:42:46] - BHO 10: {d8f3f1e0-ce64-467f-a1bb-b1bed85f6e23} ()
[11/28/2007, 15:42:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
[11/28/2007, 15:42:46] - No filename found. Continuing.
[11/28/2007, 15:42:46] - Finished Searching Browser Helper Objects
[11/28/2007, 15:42:46] - Finishing up...
[11/28/2007, 15:42:46] - Nothing found! Exiting...

Scan avec Panda TotalSCan:
Résultats
Félicitations !
Aucun virus, logiciel espion, cheval de Troie ou aucune autre menace ACTIVE ou LATENTE n'a été détecté(e) sur votre PC.
Nous avons détecté que avast! antivirus 4.7.1074 [VPS 071128-0] est activé(e) et à jour.
El texto que corresponda en cada momento
Après l'analyse complète de votre PC, aucun logiciel malveillant ACTIF ou LATENT n'a été détecté.

Rapport Hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:11:50, on 2007-11-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Fonts\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Fonts\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\RtkBtMnt.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Owner\My Documents\Mes fichiers reçus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.us.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.us.acer.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: {aa8975fb-d894-7ef9-6a54-d3d88ef8d873} - {378d8fe8-8d3d-45a6-9fe7-498dbf5798aa} - C:\WINDOWS\system32\qrkaxven.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7BFAEB8E-7545-4524-A927-B6C9F3C32B18} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {C1F78710-EEDB-4E63-B180-23ABC0366671} - (no file)
O2 - BHO: (no name) - {d8f3f1e0-ce64-467f-a1bb-b1bed85f6e23} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Host Process] C:\WINDOWS\Fonts\svchost.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [0fbc282b] rundll32.exe "C:\WINDOWS\system32\qvvgsdge.dll",b
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MétéoIMédia] C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040105/qtinstall.info.apple.com/mickey/fr/win/QuickTimeInstaller.exe
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe