Rapport Hijackthis

Résolu
Bonjour,
Comme beaucoup ici j'ai été infestée par le "virus" em.pc-internet, qui me fait bénéficier de publicités intempestives et d'un considérable ralentissement de mon ordinateur, sans parler de mon système de protection qui s'affole.
J'ai donc téléchargé HijackThis comme conseillé, et je vous poste donc le rapport, en espérant que quelqu'un pourra m'aider et me dire quoi faire ensuite. Merci beaucoup.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:55:47, on 02/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\system32\DllHost.exe
C:\Users\Serleena\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RegPowerClean] "C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 7748 bytes
Configuration: Windows Vista
Internet Explorer 7.0

7 réponses

  • Votes
  • Date
  • Date décroissante
  1. Au fait, la place sur le disque dur n'avait rien à voir avec ça! ><
    Quant aux problèmes de clavier, ils se sont résolus en même temps que je me suis débarassée du spyware!
    1. Non, c'était plus récent, il y 4-5 jours... mais c'est bon, c'est réglé, j'ai utilisé navilog pour me débarasser du spyware. C'était du au logiciel Internet Game Box. Merci!
      1. bon telecharge ToolsCleaner sur ton bureau

        http://www.commentcamarche.net/tel [...] nions.php3

        Click dessus et click sur rechercher
        ensuite effacer.
        Ce programme va detecter et enlever SDfix de ton pc

        ensuite telecharge combofix sur ton bureau et pas ailleur.

        http://download.bleepingcomputer.com/sUBs/ComboFix.exe

        En mode sans echec lance combofix et poste moi le rapport

        Pour ton probleme d espace disque on verra apres l elimination de ton petit virus.
        Sur le rapport de sdfix que tu me poste je ne trouve pas le type de virus.
        1. En démarrage normal, j'ai pu obtenir ça, si ça peut aider:

          [b]System Report[/b]
          *************

          Run on 02/04/2008 at 17:25

          Microsoft Windows [version 6.0.6000]

          Current user is an administrator

          [b]Running Processes[/b]:

          \SystemRoot\System32\smss.exe [412]
          C:\Windows\system32\csrss.exe [480]
          C:\Windows\system32\wininit.exe [520]
          C:\Windows\system32\csrss.exe [528]
          C:\Windows\system32\winlogon.exe [580]
          C:\Windows\system32\services.exe [616]
          C:\Windows\system32\lsass.exe [632]
          C:\Windows\system32\lsm.exe [640]
          C:\Windows\system32\svchost.exe [788]
          C:\Windows\system32\svchost.exe [848]
          C:\Windows\System32\svchost.exe [876]
          C:\Windows\System32\svchost.exe [944]
          C:\Windows\System32\svchost.exe [1032]
          C:\Windows\system32\svchost.exe [1048]
          C:\Windows\system32\SLsvc.exe [1148]
          C:\Windows\system32\svchost.exe [1180]
          C:\Windows\system32\svchost.exe [1328]
          C:\Windows\System32\spoolsv.exe [1484]
          C:\Windows\system32\svchost.exe [1508]
          C:\Windows\system32\taskeng.exe [1872]
          C:\Windows\system32\Dwm.exe [1920]
          C:\Windows\Explorer.EXE [1972]
          C:\Program Files\Windows Defender\MSASCui.exe [272]
          C:\Windows\System32\igfxtray.exe [280]
          C:\Windows\System32\hkcmd.exe [292]
          C:\Windows\System32\igfxpers.exe [344]
          C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [352]
          C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [424]
          C:\Program Files\Grisoft\AVG7\avgcc.exe [432]
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [444]
          C:\Program Files\Winamp\winampa.exe [456]
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [484]
          C:\Program Files\Microsoft Money\System\mnyexpr.exe [468]
          C:\Program Files\MSN Messenger\msnmsgr.exe [556]
          C:\Windows\ehome\ehtray.exe [532]
          C:\Program Files\Windows Media Player\wmpnscfg.exe [512]
          C:\Users\Serleena\AppData\Local\trxvcgm.exe [396]
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe [832]
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2496]
          C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe [2524]
          C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe [2540]
          C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe [2576]
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2620]
          C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe [2644]
          C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2972]
          C:\Windows\system32\svchost.exe [3092]
          C:\Windows\system32\svchost.exe [3200]
          C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [3252]
          C:\Windows\System32\svchost.exe [3280]
          C:\Windows\system32\SearchIndexer.exe [3324]
          C:\Program Files\Windows Media Player\wmpnetwk.exe [3528]
          C:\Windows\system32\taskeng.exe [3604]
          C:\Program Files\Internet Explorer\iexplore.exe [2876]
          C:\Program Files\MSN Messenger\usnsvc.exe [3932]
          C:\Windows\system32\wbem\wmiprvse.exe [2204]
          C:\Windows\system32\conime.exe [2244]
          C:\Windows\system32\SearchProtocolHost.exe [976]
          C:\Windows\system32\SearchFilterHost.exe [2992]
          C:\Windows\system32\msfeedssync.exe [2240]

          [b]Drivers - Running[/b]:

          ACPI
          AFD
          atapi
          AVG
          AvgAsCln
          AvgClean
          AvgMfx86
          Beep
          bowser
          cdfs
          cdrom
          CLFS
          CmBatt
          Compbatt
          crcdisk
          DfsC
          disk
          DXGKrnl
          Ecache
          FileInfo
          FltMgr
          HDAudBus
          HTTP
          i8042prt
          iaStor
          igfx
          IntcAzAudAddService
          intelide
          intelppm
          iScsiPrt
          kbdclass
          KSecDD
          lltdio
          luafv
          Modem
          monitor
          mouclass
          MountMgr
          mpsdrv
          MRxDAV
          mrxsmb
          mrxsmb10
          mrxsmb20
          Msfs
          msisadrv
          mssmbios
          Mup
          NativeWifiP
          NDIS
          NdisTapi
          Ndisuio
          NdisWan
          NDProxy
          NetBIOS
          netbt
          Npfs
          nsiproxy
          Ntfs
          Null
          partmgr
          pci
          PEAUTH
          PptpMiniport
          PSched
          RasAcd
          Rasl2tp
          RasPppoe
          rdbss
          RDPCDD
          RDPENCDD
          rspndr
          RTL8023xp
          secdrv
          SIS163u
          Smb
          smserial
          spldr
          srv
          srv2
          srvnet
          swenum
          Tcpip
          tcpipreg
          tdx
          TermDD
          tunmp
          tunnel
          umbus
          usbehci
          usbhub
          usbuhci
          VgaSave
          volmgr
          volmgrx
          volsnap
          Wanarpv6
          Wdf01000

          [b]Drivers - Stopped[/b]:

          adp94xx
          adpahci
          adpu160m
          adpu320
          agp440
          aic78xx
          aliide
          amdagp
          amdide
          AmdK7
          AmdK8
          arc
          arcsas
          AsyncMac
          blbdrive
          BrFiltLo
          BrFiltUp
          Brserid
          BrSerWdm
          BrUsbMdm
          BrUsbSer
          BTHMODEM
          circlass
          cmdide
          Crusoe
          drmkaud
          E1G60
          elxstor
          fastfat
          fdc
          Filetrace
          flpydisk
          gagp30kx
          HidBth
          HidIr
          HidUsb
          HpCISSs
          i2omp
          iaStorV
          iirsp
          IpFilterDriver
          IpInIp
          IPMIDRV
          IPNAT
          IRENUM
          isapnp
          iteatapi
          iteraid
          kbdhid
          LSI_FC
          LSI_SAS
          LSI_SCSI
          LVUSBSta
          megasas
          mouhid
          mpio
          Mraid35x
          msahci
          msdsm
          MSKSSRV
          MSPCLOCK
          MSPQM
          MsRPC
          MSTEE
          nfrd960
          ntrigdigi
          nvatabus
          nvraid
          nvstor
          nv_agp
          NwlnkFlt
          NwlnkFwd
          ohci1394
          Parport
          Parvdm
          PCAMp50
          PCASp50
          pciide
          pcmcia
          PID_0928
          Processor
          ql2300
          ql40xx
          QWAVEdrv
          rdpdr
          RDPWD
          sbp2port
          Serenum
          Serial
          sermouse
          sffdisk
          sffp_mmc
          sffp_sd
          sfloppy
          sisagp
          SiSRaid2
          SiSRaid4
          Symc8xx
          Sym_hi
          Sym_u3
          Tcpip6
          TDPIPE
          TDTCP
          tssecsrv
          uagp35
          udfs
          uliagpkx
          uliahci
          UlSata
          ulsata2
          usbccgp
          usbcir
          usbohci
          usbprint
          USBSTOR
          vga
          viaagp
          ViaC7
          viaide
          viamraid
          vsmraid
          WacomPen
          Wanarp
          Wd
          WmiAcpi
          WpdUsb
          ws2ifsl
          WUDFRd

          [b]Services - Running[/b]:

          AeLookupSvc
          AudioEndpointBuilder
          Audiosrv
          AVG
          Avg7Alrt
          Avg7UpdSvc
          AvgCoreSvc
          BFE
          BITS
          Browser
          CryptSvc
          DcomLaunch
          Dhcp
          Dnscache
          DPS
          EapHost
          EMDMgmt
          Eventlog
          EventSystem
          fdPHost
          FDResPub
          gpsvc
          gusvc
          IAANTMON
          IKEEXT
          iphlpsvc
          KeyIso
          KtmRm
          LanmanServer
          LanmanWorkstation
          lmhosts
          MMCSS
          MpsSvc
          Netman
          netprofm
          NlaSvc
          nsi
          PcaSvc
          PlugPlay
          PolicyAgent
          ProfSvc
          RasMan
          RpcSs
          SamSs
          Schedule
          seclogon
          SENS
          ShellHWDetection
          slsvc
          Spooler
          SSDPSRV
          stisvc
          SysMain
          TabletInputService
          TapiSrv
          TermService
          TestHandler
          Themes
          TrkWks
          upnphost
          usnjsvc
          UxSms
          W32Time
          WdiSystemHost
          WebClient
          WerSvc
          WinDefend
          WinHttpAutoProxySvc
          Winmgmt
          Wlansvc
          WMPNetworkSvc
          WPDBusEnum
          wscsvc
          WSearch
          wuauserv
          wudfsvc

          [b]Services - Stopped[/b]:

          ALG
          Appinfo
          CertPropSvc
          clr_optimization_v2.0.50727_32
          COMSysApp
          DFSR
          dot3svc
          ehRecvr
          ehSched
          ehstart
          FontCache3.0.0.0
          hidserv
          hkmsvc
          idsvc
          IPBusEnum
          lltdsvc
          Mcx2Svc
          MSDTC
          MSiSCSI
          msiserver
          napagent
          Netlogon
          NetTcpPortSharing
          NMIndexingService
          ose
          p2pimsvc
          p2psvc
          pla
          PNRPAutoReg
          PNRPsvc
          ProtectedStorage
          QWAVE
          RasAuto
          RemoteAccess
          RemoteRegistry
          RpcLocator
          SCardSvr
          SCPolicySvc
          SDRSVC
          SessionEnv
          SharedAccess
          SLUINotify
          SNMPTRAP
          swprv
          TBS
          THREADORDER
          TrustedInstaller
          UI0Detect
          vds
          VSS
          wcncsvc
          WcsPlugInService
          WdiServiceHost
          Wecsvc
          wercplsupport
          WinRM
          wmiApSrv
          WPCSvc

          [b]Files Created/Modified - 60 Days[/b]:

          C:\

          2 Apr 2008 17:11:56 0 A.SHR "C:\IO.SYS"
          2 Apr 2008 17:11:56 0 A.SHR "C:\MSDOS.SYS"
          2 Apr 2008 17:11:10 1 377 370 112 A.SH. "C:\pagefile.sys"

          C:\Windows\

          2 Apr 2008 17:11:16 67 584 A.S.. "C:\Windows\bootstat.dat"
          12 Mar 2008 10:32:22 45 ...H. "C:\Windows\dsys9610.dat"
          2 Apr 2008 17:10:14 255 598 A.... "C:\Windows\ntbtlog.txt"
          2 Apr 2008 16:27:56 13 820 A.... "C:\Windows\PFRO.log"
          13 Mar 2008 9:47:54 0 A.... "C:\Windows\setupact.log"
          13 Mar 2008 9:47:54 0 A.... "C:\Windows\setuperr.log"
          2 Apr 2008 17:15:54 2 038 776 A.... "C:\Windows\WindowsUpdate.log"
          14 Feb 2008 8:58:06 2 144 256 A.... "C:\Windows\AppPatch\AcGenral.dll"
          14 Feb 2008 8:58:04 537 600 A.... "C:\Windows\AppPatch\AcLayers.dll"
          14 Feb 2008 8:58:06 2 560 A.... "C:\Windows\AppPatch\AcRes.dll"
          14 Feb 2008 8:58:04 449 536 A.... "C:\Windows\AppPatch\AcSpecfc.dll"
          14 Feb 2008 8:58:04 173 056 A.... "C:\Windows\AppPatch\AcXtrnal.dll"
          14 Feb 2008 8:58:04 82 194 A.... "C:\Windows\AppPatch\drvmain.sdb"
          14 Feb 2008 8:55:28 52 736 A.... "C:\Windows\AppPatch\iebrshim.dll"
          14 Feb 2008 8:58:06 1 534 322 A.... "C:\Windows\AppPatch\msimain.sdb"
          14 Feb 2008 8:58:04 22 618 A.... "C:\Windows\AppPatch\pcamain.sdb"
          14 Feb 2008 8:58:06 3 217 016 A.... "C:\Windows\AppPatch\sysmain.sdb"
          13 Mar 2008 9:06:24 9 358 A.... "C:\Windows\Debug\mrt.log"
          13 Mar 2008 9:06:24 4 662 A.... "C:\Windows\Debug\mrteng.log"
          2 Apr 2008 17:11:16 0 A.... "C:\Windows\Debug\PASSWD.LOG"
          13 Mar 2008 9:47:52 665 600 A.... "C:\Windows\inf\drvindex.dat"
          22 Feb 2008 0:19:42 9 856 A.... "C:\Windows\inf\flpydisk.PNF"
          13 Mar 2008 9:47:52 1 673 824 A.... "C:\Windows\inf\INFCACHE.1"
          13 Mar 2008 9:47:54 51 200 A.... "C:\Windows\inf\infpub.dat"
          13 Mar 2008 9:47:52 86 016 A.... "C:\Windows\inf\infstor.dat"
          13 Mar 2008 9:47:52 86 016 A.... "C:\Windows\inf\infstrng.dat"
          14 Feb 2008 9:51:14 65 966 A.... "C:\Windows\inf\keyboard.inf"
          14 Feb 2008 9:57:32 96 504 A.... "C:\Windows\inf\keyboard.PNF"
          13 Mar 2008 9:47:52 789 490 A.... "C:\Windows\inf\monitor.inf"
          13 Mar 2008 9:47:54 1 163 660 A.... "C:\Windows\inf\monitor.PNF"
          14 Feb 2008 9:51:08 47 458 A.... "C:\Windows\inf\mshdc.inf"
          14 Feb 2008 9:51:10 82 344 A.... "C:\Windows\inf\mshdc.PNF"
          14 Feb 2008 9:51:16 56 342 A.... "C:\Windows\inf\msmouse.inf"
          14 Feb 2008 9:51:18 99 376 A.... "C:\Windows\inf\msmouse.PNF"
          13 Mar 2008 9:47:54 12 176 A.... "C:\Windows\inf\setupapi.ev1"
          13 Mar 2008 9:47:54 20 248 A.... "C:\Windows\inf\setupapi.ev2"
          13 Mar 2008 9:47:54 86 016 A.... "C:\Windows\inf\setupapi.ev3"
          2 Apr 2008 17:14:58 1 708 226 A.... "C:\Windows\inf\setupapi.app.log"
          13 Mar 2008 9:47:56 7 240 048 A.... "C:\Windows\inf\setupapi.dev.log"
          14 Feb 2008 9:57:34 98 088 A.... "C:\Windows\inf\usbport.PNF"
          14 Feb 2008 9:55:28 682 072 A.... "C:\Windows\rescache\ResCache.mni"
          14 Feb 2008 9:05:00 18 432 A.... "C:\Windows\servicing\CbsMsg.dll"
          2 Apr 2008 17:11:28 3 456 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0"
          2 Apr 2008 17:11:28 3 456 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0"
          14 Feb 2008 8:55:34 124 928 A.... "C:\Windows\System32\advpack.dll"
          14 Feb 2008 9:04:56 12 800 A.... "C:\Windows\System32\batt.dll"
          14 Feb 2008 9:05:02 19 456 A.... "C:\Windows\System32\cfgmgr32.dll"
          14 Feb 2008 9:05:02 224 824 A.... "C:\Windows\System32\clfs.sys"
          14 Feb 2008 9:04:56 35 328 A.... "C:\Windows\System32\dispci.dll"
          14 Feb 2008 9:05:00 260 096 A.... "C:\Windows\System32\dpx.dll"
          14 Feb 2008 9:05:02 101 888 A.... "C:\Windows\System32\drvinst.exe"
          14 Feb 2008 8:55:26 347 136 A.... "C:\Windows\System32\dxtmsft.dll"
          14 Feb 2008 8:55:26 214 528 A.... "C:\Windows\System32\dxtrans.dll"
          14 Feb 2008 9:04:58 7 168 A.... "C:\Windows\System32\f3ahvoas.dll"
          18 Feb 2008 21:20:28 423 056 A.... "C:\Windows\System32\FNTCACHE.DAT"
          14 Feb 2008 8:58:04 1 686 528 A.... "C:\Windows\System32\gameux.dll"
          14 Feb 2008 8:55:22 63 488 A.... "C:\Windows\System32\icardie.dll"
          14 Feb 2008 8:55:10 70 656 A.... "C:\Windows\System32\ie4uinit.exe"
          14 Feb 2008 8:55:28 383 488 A.... "C:\Windows\System32\ieapfltr.dll"
          14 Feb 2008 8:55:40 6 066 176 A.... "C:\Windows\System32\ieframe.dll"
          14 Feb 2008 8:55:10 44 544 A.... "C:\Windows\System32\iernonce.dll"
          14 Feb 2008 8:55:10 56 320 A.... "C:\Windows\System32\iesetup.dll"
          14 Feb 2008 8:55:42 180 736 A.... "C:\Windows\System32\ieui.dll"
          14 Feb 2008 8:55:12 26 624 A.... "C:\Windows\System32\ieUnatt.exe"
          14 Feb 2008 8:55:16 1 831 424 A.... "C:\Windows\System32\inetcpl.cpl"
          22 Feb 2008 2:23:36 135 168 A.... "C:\Windows\System32\java.exe"
          22 Feb 2008 2:23:40 135 168 A.... "C:\Windows\System32\javaw.exe"
          22 Feb 2008 3:33:32 139 264 A.... "C:\Windows\System32\javaws.exe"
          14 Feb 2008 8:55:34 27 648 A.... "C:\Windows\System32\jsproxy.dll"
          12 Mar 2008 10:33:40 6 408 A.... "C:\Windows\System32\jupdate-1.6.0_05-b13.log"
          14 Feb 2008 9:05:00 6 656 A.... "C:\Windows\System32\kbd106n.dll"
          14 Feb 2008 9:04:52 115 200 A.... "C:\Windows\System32\loadperf.dll"
          14 Feb 2008 9:04:52 39 424 A.... "C:\Windows\System32\lodctr.exe"
          5 Mar 2008 18:30:54 19 148 408 A.... "C:\Windows\System32\mrt.exe"
          14 Feb 2008 8:55:38 3 592 192 A.... "C:\Windows\System32\mshtml.dll"
          14 Feb 2008 8:55:36 1 383 424 A.... "C:\Windows\System32\mshtml.tlb"
          14 Feb 2008 8:55:38 478 208 A.... "C:\Windows\System32\mshtmled.dll"
          14 Feb 2008 8:55:24 671 232 A.... "C:\Windows\System32\mstime.dll"
          14 Feb 2008 8:58:28 24 064 A.... "C:\Windows\System32\netcfg.exe"
          14 Feb 2008 8:58:28 22 016 A.... "C:\Windows\System32\netiougc.exe"
          14 Feb 2008 9:04:52 23 552 A.... "C:\Windows\System32\nshhttp.dll"
          14 Feb 2008 8:58:46 3 504 696 A.... "C:\Windows\System32\ntkrnlpa.exe"
          14 Feb 2008 8:58:46 3 470 392 A.... "C:\Windows\System32\ntoskrnl.exe"
          25 Mar 2008 21:33:50 22 A.... "C:\Windows\System32\nvs2.inf"
          14 Feb 2008 9:05:00 558 080 A.... "C:\Windows\System32\oleaut32.dll"
          2 Apr 2008 17:16:50 103 924 A.... "C:\Windows\System32\perfc009.dat"
          2 Apr 2008 17:16:50 117 572 A.... "C:\Windows\System32\perfc00C.dat"
          2 Apr 2008 17:16:50 610 142 A.... "C:\Windows\System32\perfh009.dat"
          2 Apr 2008 17:16:50 690 832 A.... "C:\Windows\System32\perfh00C.dat"
          2 Apr 2008 17:16:50 1 512 256 A.... "C:\Windows\System32\PerfStringBackup.INI"
          14 Feb 2008 8:55:34 44 544 A.... "C:\Windows\System32\pngfilt.dll"
          14 Feb 2008 9:04:52 17 408 A.... "C:\Windows\System32\prflbmsg.dll"
          14 Feb 2008 9:04:50 595 456 A.... "C:\Windows\System32\schedsvc.dll"
          14 Feb 2008 9:04:58 1 585 664 A.... "C:\Windows\System32\setupapi.dll"
          14 Feb 2008 8:58:28 167 424 A.... "C:\Windows\System32\tcpipcfg.dll"
          14 Feb 2008 9:05:02 221 696 A.... "C:\Windows\System32\umpnpmgr.dll"
          14 Feb 2008 9:04:52 32 256 A.... "C:\Windows\System32\unlodctr.exe"
          14 Feb 2008 8:55:32 1 159 680 A.... "C:\Windows\System32\urlmon.dll"
          14 Feb 2008 9:07:36 194 560 A.... "C:\Windows\System32\WebClnt.dll"
          14 Feb 2008 8:55:34 824 832 A.... "C:\Windows\System32\wininet.dll"
          14 Feb 2008 9:04:54 943 800 A.... "C:\Windows\System32\winload.exe"
          14 Feb 2008 9:05:04 613 888 A.... "C:\Windows\System32\wpd_ci.dll"
          25 Mar 2008 10:00:02 386 A.... "C:\Windows\Tasks\rpc.job"
          2 Apr 2008 17:11:22 6 A..H. "C:\Windows\Tasks\SA.DAT"
          2 Apr 2008 17:08:18 32 592 A.... "C:\Windows\Tasks\SCHEDLGU.TXT"
          2 Apr 2008 17:20:20 424 A..H. "C:\Windows\Tasks\User_Feed_Synchronization-{D33C3C54-64BC-4C4B-8E03-1058671110AE}.job"
          20 Mar 2008 22:43:16 120 A.... "C:\Windows\Temp\fwtsqmfile13.sqm"
          20 Mar 2008 23:04:18 120 A.... "C:\Windows\Temp\fwtsqmfile14.sqm"
          20 Mar 2008 22:31:08 608 A.... "C:\Windows\Temp\fwtsqmfile11.sqm"
          20 Mar 2008 22:31:08 120 A.... "C:\Windows\Temp\fwtsqmfile12.sqm"
          25 Mar 2008 17:50:48 120 A.... "C:\Windows\Temp\fwtsqmfile04.sqm"
          21 Mar 2008 0:01:22 120 A.... "C:\Windows\Temp\fwtsqmfile17.sqm"
          21 Mar 2008 20:33:16 608 A.... "C:\Windows\Temp\fwtsqmfile18.sqm"
          20 Mar 2008 23:20:02 120 A.... "C:\Windows\Temp\fwtsqmfile15.sqm"
          20 Mar 2008 23:41:40 120 A.... "C:\Windows\Temp\fwtsqmfile16.sqm"
          28 Mar 2008 2:17:48 120 A.... "C:\Windows\Temp\fwtsqmfile07.sqm"
          28 Mar 2008 2:19:04 120 A.... "C:\Windows\Temp\fwtsqmfile08.sqm"
          26 Mar 2008 16:33:16 608 A.... "C:\Windows\Temp\fwtsqmfile05.sqm"
          28 Mar 2008 2:17:48 608 A.... "C:\Windows\Temp\fwtsqmfile06.sqm"
          21 Mar 2008 20:33:18 120 A.... "C:\Windows\Temp\fwtsqmfile19.sqm"
          29 Mar 2008 3:12:40 120 A.... "C:\Windows\Temp\fwtsqmfile09.sqm"
          19 Mar 2008 21:20:52 120 A.... "C:\Windows\Temp\fwtsqmfile10.sqm"
          25 Mar 2008 17:05:16 608 A.... "C:\Windows\Temp\fwtsqmfile00.sqm"
          25 Mar 2008 17:05:16 120 A.... "C:\Windows\Temp\fwtsqmfile01.sqm"
          25 Mar 2008 17:16:58 120 A.... "C:\Windows\Temp\fwtsqmfile02.sqm"
          25 Mar 2008 17:33:38 120 A.... "C:\Windows\Temp\fwtsqmfile03.sqm"
          6 Feb 2008 10:00:02 622 A.... "C:\Windows\Temp\lpksetup-20080206-085959-0.log"
          4 Mar 2008 16:12:28 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-151211-0.log"
          10 Mar 2008 13:39:12 622 A.... "C:\Windows\Temp\lpksetup-20080310-123910-0.log"
          6 Mar 2008 9:20:28 11 522 A.... "C:\Windows\Temp\lpksetup-20080306-082010-0.log"
          18 Mar 2008 13:19:24 622 A.... "C:\Windows\Temp\lpksetup-20080318-121921-0.log"
          14 Mar 2008 16:01:34 622 A.... "C:\Windows\Temp\lpksetup-20080314-150130-0.log"
          12 Mar 2008 21:04:50 11 522 A.... "C:\Windows\Temp\lpksetup-20080312-200440-0.log"
          30 Mar 2008 14:54:00 11 672 A.... "C:\Windows\Temp\lpksetup-20080330-145242-0.log"
          4 Mar 2008 19:51:46 622 A.... "C:\Windows\Temp\lpksetup-20080304-185143-0.log"
          4 Mar 2008 12:59:02 622 A.... "C:\Windows\Temp\lpksetup-20080304-115859-0.log"
          14 Mar 2008 16:01:32 11 672 A.... "C:\Windows\Temp\lpksetup-20080314-150105-0.log"
          18 Mar 2008 13:19:22 11 672 A.... "C:\Windows\Temp\lpksetup-20080318-121905-0.log"
          26 Mar 2008 10:36:10 622 A.... "C:\Windows\Temp\lpksetup-20080326-093608-0.log"
          4 Mar 2008 16:12:28 622 A.... "C:\Windows\Temp\lpksetup-20080304-151226-0.log"
          23 Mar 2008 0:29:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080322-232921-0.log"
          6 Mar 2008 9:20:30 622 A.... "C:\Windows\Temp\lpksetup-20080306-082027-0.log"
          8 Mar 2008 18:56:14 11 522 A.... "C:\Windows\Temp\lpksetup-20080308-175602-0.log"
          23 Mar 2008 0:29:34 622 A.... "C:\Windows\Temp\lpksetup-20080322-232932-0.log"
          12 Mar 2008 21:04:50 622 A.... "C:\Windows\Temp\lpksetup-20080312-200449-0.log"
          8 Mar 2008 18:56:16 622 A.... "C:\Windows\Temp\lpksetup-20080308-175613-0.log"
          4 Mar 2008 19:51:44 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-185134-0.log"
          10 Mar 2008 13:39:12 11 522 A.... "C:\Windows\Temp\lpksetup-20080310-123855-0.log"
          12 Mar 2008 10:37:00 622 A.... "C:\Windows\Temp\lpksetup-20080312-093654-0.log"
          26 Mar 2008 10:36:08 11 672 A.... "C:\Windows\Temp\lpksetup-20080326-093553-0.log"
          4 Mar 2008 12:59:00 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-115846-0.log"
          30 Mar 2008 14:54:02 622 A.... "C:\Windows\Temp\lpksetup-20080330-145359-0.log"
          21 Feb 2008 16:30:18 11 522 A.... "C:\Windows\Temp\lpksetup-20080221-153004-0.log"
          12 Mar 2008 10:36:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080312-092919-0.log"
          7 Feb 2008 9:13:26 622 A.... "C:\Windows\Temp\lpksetup-20080207-081321-0.log"
          17 Feb 2008 21:14:54 11 218 A.... "C:\Windows\Temp\lpksetup-20080217-201323-0.log"
          17 Feb 2008 21:14:56 622 A.... "C:\Windows\Temp\lpksetup-20080217-201453-0.log"
          25 Feb 2008 17:55:58 622 A.... "C:\Windows\Temp\lpksetup-20080225-165555-0.log"
          11 Feb 2008 17:37:12 622 A.... "C:\Windows\Temp\lpksetup-20080211-163708-0.log"
          19 Feb 2008 13:09:26 11 522 A.... "C:\Windows\Temp\lpksetup-20080219-120912-0.log"
          21 Feb 2008 16:30:20 622 A.... "C:\Windows\Temp\lpksetup-20080221-153018-0.log"
          19 Feb 2008 13:09:26 622 A.... "C:\Windows\Temp\lpksetup-20080219-120925-0.log"
          3 Feb 2008 21:35:28 10 130 A.... "C:\Windows\Temp\lpksetup-20080203-203515-0.log"
          29 Feb 2008 15:29:36 11 522 A.... "C:\Windows\Temp\lpksetup-20080229-142918-0.log"
          13 Feb 2008 10:38:30 622 A.... "C:\Windows\Temp\lpksetup-20080213-093826-0.log"
          13 Feb 2008 10:38:28 10 306 A.... "C:\Windows\Temp\lpksetup-20080213-093721-0.log"
          3 Feb 2008 21:35:28 622 A.... "C:\Windows\Temp\lpksetup-20080203-203526-0.log"
          23 Feb 2008 23:57:20 622 A.... "C:\Windows\Temp\lpksetup-20080223-225717-0.log"
          9 Feb 2008 18:21:12 10 306 A.... "C:\Windows\Temp\lpksetup-20080209-171732-0.log"
          7 Feb 2008 9:13:22 10 306 A.... "C:\Windows\Temp\lpksetup-20080207-081046-0.log"
          29 Feb 2008 15:29:38 622 A.... "C:\Windows\Temp\lpksetup-20080229-142934-0.log"
          11 Feb 2008 17:37:10 10 306 A.... "C:\Windows\Temp\lpksetup-20080211-163644-0.log"
          25 Feb 2008 17:55:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080225-165535-0.log"
          9 Feb 2008 18:22:28 622 A.... "C:\Windows\Temp\lpksetup-20080209-172147-0.log"
          23 Feb 2008 23:57:18 11 522 A.... "C:\Windows\Temp\lpksetup-20080223-225649-0.log"
          1 Mar 2008 19:00:14 622 A.... "C:\Windows\Temp\lpksetup-20080301-180011-0.log"
          15 Mar 2008 13:36:14 11 672 A.... "C:\Windows\Temp\lpksetup-20080315-123601-0.log"
          29 Mar 2008 18:22:26 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-172213-0.log"
          15 Mar 2008 13:36:14 622 A.... "C:\Windows\Temp\lpksetup-20080315-123612-0.log"
          13 Mar 2008 10:04:50 11 672 A.... "C:\Windows\Temp\lpksetup-20080313-090430-0.log"
          9 Mar 2008 20:52:34 11 522 A.... "C:\Windows\Temp\lpksetup-20080309-195222-0.log"
          9 Mar 2008 20:52:34 622 A.... "C:\Windows\Temp\lpksetup-20080309-195232-0.log"
          29 Mar 2008 14:44:46 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-134359-0.log"
          13 Mar 2008 9:14:18 622 A.... "C:\Windows\Temp\lpksetup-20080313-081415-0.log"
          29 Mar 2008 17:24:08 622 A.... "C:\Windows\Temp\lpksetup-20080329-162407-0.log"
          31 Mar 2008 14:07:50 11 672 A.... "C:\Windows\Temp\lpksetup-20080331-140736-0.log"
          7 Mar 2008 21:37:30 11 522 A.... "C:\Windows\Temp\lpksetup-20080307-203716-0.log"
          29 Mar 2008 18:22:26 622 A.... "C:\Windows\Temp\lpksetup-20080329-172224-0.log"
          13 Mar 2008 10:04:52 622 A.... "C:\Windows\Temp\lpksetup-20080313-090449-0.log"
          31 Mar 2008 14:07:52 622 A.... "C:\Windows\Temp\lpksetup-20080331-140749-0.log"
          7 Mar 2008 21:37:30 622 A.... "C:\Windows\Temp\lpksetup-20080307-203728-0.log"
          11 Mar 2008 12:58:48 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-115827-0.log"
          11 Mar 2008 18:49:52 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-174934-0.log"
          13 Mar 2008 9:14:16 11 672 A.... "C:\Windows\Temp\lpksetup-20080313-081359-0.log"
          27 Mar 2008 10:38:52 11 496 A.... "C:\Windows\Temp\lpksetup-20080327-093840-0.log"
          11 Mar 2008 12:58:48 622 A.... "C:\Windows\Temp\lpksetup-20080311-115847-0.log"
          29 Mar 2008 14:44:48 622 A.... "C:\Windows\Temp\lpksetup-20080329-134445-0.log"
          27 Mar 2008 10:38:52 622 A.... "C:\Windows\Temp\lpksetup-20080327-093850-0.log"
          29 Mar 2008 17:24:08 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-162357-0.log"
          11 Mar 2008 18:49:54 622 A.... "C:\Windows\Temp\lpksetup-20080311-174951-0.log"
          1 Mar 2008 19:00:12 11 522 A.... "C:\Windows\Temp\lpksetup-20080301-175953-0.log"
          20 Feb 2008 10:51:06 622 A.... "C:\Windows\Temp\lpksetup-20080220-095101-0.log"
          12 Feb 2008 13:04:04 622 A.... "C:\Windows\Temp\lpksetup-20080212-120321-0.log"
          22 Feb 2008 13:13:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080222-121221-0.log"
          24 Feb 2008 23:18:26 622 A.... "C:\Windows\Temp\lpksetup-20080224-221821-0.log"
          12 Feb 2008 19:11:44 10 306 A.... "C:\Windows\Temp\lpksetup-20080212-181131-0.log"
          1 Apr 2008 13:58:12 622 A.... "C:\Windows\Temp\lpksetup-20080401-135810-0.log"
          12 Feb 2008 19:11:44 622 A.... "C:\Windows\Temp\lpksetup-20080212-181143-0.log"
          2 Feb 2008 18:34:54 622 A.... "C:\Windows\Temp\lpksetup-20080202-173452-0.log"
          14 Feb 2008 10:09:08 622 A.... "C:\Windows\Temp\lpksetup-20080214-090906-0.log"
          26 Feb 2008 13:18:08 622 A.... "C:\Windows\Temp\lpksetup-20080226-121805-0.log"
          14 Feb 2008 10:09:08 11 068 A.... "C:\Windows\Temp\lpksetup-20080214-090832-0.log"
          20 Feb 2008 10:51:02 11 522 A.... "C:\Windows\Temp\lpksetup-20080220-095028-0.log"
          14 Feb 2008 9:08:18 10 764 A.... "C:\Windows\Temp\lpksetup-20080214-080449-0.log"
          24 Feb 2008 23:18:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080224-221739-0.log"
          18 Feb 2008 21:35:38 11 522 A.... "C:\Windows\Temp\lpksetup-20080218-203524-0.log"
          22 Feb 2008 13:13:58 622 A.... "C:\Windows\Temp\lpksetup-20080222-121347-0.log"
          16 Feb 2008 18:28:58 11 068 A.... "C:\Windows\Temp\lpksetup-20080216-172833-0.log"
          2 Feb 2008 18:34:54 10 306 A.... "C:\Windows\Temp\lpksetup-20080202-173437-0.log"
          12 Feb 2008 13:03:18 10 306 A.... "C:\Windows\Temp\lpksetup-20080212-120059-0.log"
          26 Feb 2008 13:18:06 11 522 A.... "C:\Windows\Temp\lpksetup-20080226-121749-0.log"
          18 Feb 2008 21:35:40 622 A.... "C:\Windows\Temp\lpksetup-20080218-203537-0.log"
          16 Feb 2008 18:28:58 622 A.... "C:\Windows\Temp\lpksetup-20080216-172856-0.log"
          1 Apr 2008 13:58:12 11 672 A.... "C:\Windows\Temp\lpksetup-20080401-135756-0.log"
          21 Mar 2008 0:33:02 622 A.... "C:\Windows\Temp\lpksetup-20080320-233300-0.log"
          16 Mar 2008 13:13:54 11 672 A.... "C:\Windows\Temp\lpksetup-20080316-121210-0.log"
          14 Feb 2008 9:09:08 622 A.... "C:\Windows\Temp\lpksetup-20080214-080829-0.log"
          24 Mar 2008 22:36:14 622 A.... "C:\Windows\Temp\lpksetup-20080324-213611-0.log"
          14 Mar 2008 1:34:36 11 672 A.... "C:\Windows\Temp\lpksetup-20080314-003423-0.log"
          14 Mar 2008 1:34:36 622 A.... "C:\Windows\Temp\lpksetup-20080314-003434-0.log"
          22 Mar 2008 19:33:54 11 672 A.... "C:\Windows\Temp\lpksetup-20080322-183342-0.log"
          16 Mar 2008 13:14:02 622 A.... "C:\Windows\Temp\lpksetup-20080316-121354-0.log"
          4 Mar 2008 22:17:20 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-211705-0.log"
          20 Mar 2008 9:26:30 11 672 A.... "C:\Windows\Temp\lpksetup-20080320-082612-0.log"
          2 Mar 2008 15:43:08 622 A.... "C:\Windows\Temp\lpksetup-20080302-144305-0.log"
          4 Mar 2008 22:17:20 622 A.... "C:\Windows\Temp\lpksetup-20080304-211718-0.log"
          20 Mar 2008 9:26:30 622 A.... "C:\Windows\Temp\lpksetup-20080320-082628-0.log"
          6 Mar 2008 20:09:32 11 522 A.... "C:\Windows\Temp\lpksetup-20080306-190920-0.log"
          5 Mar 2008 0:36:30 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-233617-0.log"
          6 Mar 2008 20:09:32 622 A.... "C:\Windows\Temp\lpksetup-20080306-190930-0.log"
          5 Mar 2008 0:36:32 622 A.... "C:\Windows\Temp\lpksetup-20080304-233629-0.log"
          21 Mar 2008 0:33:02 11 672 A.... "C:\Windows\Temp\lpksetup-20080320-233248-0.log"
          22 Mar 2008 19:33:56 622 A.... "C:\Windows\Temp\lpksetup-20080322-183353-0.log"
          24 Mar 2008 22:36:12 11 672 A.... "C:\Windows\Temp\lpksetup-20080324-213556-0.log"
          2 Mar 2008 15:43:06 11 522 A.... "C:\Windows\Temp\lpksetup-20080302-144255-0.log"
          2 Apr 2008 16:05:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080402-160510-0.log"
          27 Feb 2008 14:28:28 622 A.... "C:\Windows\Temp\lpksetup-20080227-132820-0.log"
          3 Feb 2008 15:43:10 10 306 A.... "C:\Windows\Temp\lpksetup-20080203-144252-0.log"
          2 Apr 2008 14:09:52 622 A.... "C:\Windows\Temp\lpksetup-20080402-140928-0.log"
          3 Feb 2008 15:43:10 622 A.... "C:\Windows\Temp\lpksetup-20080203-144308-0.log"
          2 Apr 2008 14:09:24 11 672 A.... "C:\Windows\Temp\lpksetup-20080402-140625-0.log"
          5 Feb 2008 8:49:14 10 306 A.... "C:\Windows\Temp\lpksetup-20080205-074904-0.log"
          27 Feb 2008 14:28:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080227-132713-0.log"
          21 Feb 2008 9:23:38 11 522 A.... "C:\Windows\Temp\lpksetup-20080221-082323-0.log"
          2 Apr 2008 16:05:36 622 A.... "C:\Windows\Temp\lpksetup-20080402-160533-0.log"
          23 Feb 2008 15:42:18 622 A.... "C:\Windows\Temp\lpksetup-20080223-144215-0.log"
          5 Feb 2008 8:49:14 622 A.... "C:\Windows\Temp\lpksetup-20080205-074913-0.log"
          21 Feb 2008 9:23:38 622 A.... "C:\Windows\Temp\lpksetup-20080221-082336-0.log"
          23 Feb 2008 15:42:16 11 522 A.... "C:\Windows\Temp\lpksetup-20080223-144125-0.log"
          3 Mar 2008 16:00:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080303-150014-0.log"
          29 Mar 2008 21:20:06 622 A.... "C:\Windows\Temp\lpksetup-20080329-202004-0.log"
          17 Mar 2008 16:45:52 11 672 A.... "C:\Windows\Temp\lpksetup-20080317-154311-0.log"
          3 Mar 2008 16:00:50 622 A.... "C:\Windows\Temp\lpksetup-20080303-150041-0.log"
          7 Mar 2008 15:53:24 622 A.... "C:\Windows\Temp\lpksetup-20080307-145321-0.log"
          7 Mar 2008 15:53:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080307-145224-0.log"
          19 Mar 2008 21:38:46 11 672 A.... "C:\Windows\Temp\lpksetup-20080319-203832-0.log"
          23 Mar 2008 16:04:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080323-150419-0.log"
          19 Mar 2008 10:38:18 11 672 A.... "C:\Windows\Temp\lpksetup-20080319-093804-0.log"
          23 Mar 2008 16:04:36 622 A.... "C:\Windows\Temp\lpksetup-20080323-150433-0.log"
          19 Mar 2008 10:38:18 622 A.... "C:\Windows\Temp\lpksetup-20080319-093816-0.log"
          20 Mar 2008 0:39:24 622 A.... "C:\Windows\Temp\lpksetup-20080319-233921-0.log"
          5 Mar 2008 10:35:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080305-093539-0.log"
          11 Mar 2008 23:46:48 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-224636-0.log"
          11 Mar 2008 23:46:50 622 A.... "C:\Windows\Temp\lpksetup-20080311-224647-0.log"
          19 Mar 2008 21:38:46 622 A.... "C:\Windows\Temp\lpksetup-20080319-203844-0.log"
          29 Mar 2008 21:20:06 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-201952-0.log"
          5 Mar 2008 10:35:56 622 A.... "C:\Windows\Temp\lpksetup-20080305-093554-0.log"
          17 Mar 2008 16:46:00 622 A.... "C:\Windows\Temp\lpksetup-20080317-154556-0.log"
          28 Feb 2008 17:04:26 11 522 A.... "C:\Windows\Temp\lpksetup-20080228-160213-0.log"
          2 Feb 2008 22:46:14 10 306 A.... "C:\Windows\Temp\lpksetup-20080202-214600-0.log"
          20 Mar 2008 0:39:22 11 496 A.... "C:\Windows\Temp\lpksetup-20080319-233909-0.log"
          2 Feb 2008 22:46:14 622 A.... "C:\Windows\Temp\lpksetup-20080202-214612-0.log"
          1 Apr 2008 21:24:42 11 672 A.... "C:\Windows\Temp\lpksetup-20080401-212330-0.log"
          1 Apr 2008 21:24:42 622 A.... "C:\Windows\Temp\lpksetup-20080401-212440-0.log"
          18 Feb 2008 17:24:44 622 A.... "C:\Windows\Temp\lpksetup-20080218-162441-0.log"
          4 Feb 2008 17:33:44 622 A.... "C:\Windows\Temp\lpksetup-20080204-163340-0.log"
          8 Feb 2008 18:06:50 10 306 A.... "C:\Windows\Temp\lpksetup-20080208-170204-0.log"
          18 Feb 2008 17:24:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080218-162419-0.log"
          28 Feb 2008 17:05:02 622 A.... "C:\Windows\Temp\lpksetup-20080228-160437-0.log"
          4 Feb 2008 17:33:42 10 306 A.... "C:\Windows\Temp\lpksetup-20080204-163139-0.log"
          8 Feb 2008 18:06:54 622 A.... "C:\Windows\Temp\lpksetup-20080208-170649-0.log"
          6 Feb 2008 10:00:00 10 306 A.... "C:\Windows\Temp\lpksetup-20080206-085945-0.log"
          1 Apr 2008 21:29:24 266 666 A.... "C:\Windows\Temp\MpCmdRun.log"
          2 Apr 2008 14:03:40 253 498 A.... "C:\Windows\Temp\MpSigStub.log"
          25 Mar 2008 21:33:50 7 A.... "C:\Windows\Temp\msksetup.log"
          2 Apr 2008 15:18:18 524 288 A.... "C:\Windows\Temp\TMP0000000A5C550E75DCF0B11B"
          14 Feb 2008 9:51:42 2 720 A.... "C:\Windows\winsxs\cleanup.xml"
          13 Mar 2008 9:47:58 526 A.... "C:\Windows\winsxs\poqexec.log"
          2 Apr 2008 17:01:18 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.bak"
          2 Apr 2008 17:11:20 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
          28 Mar 2008 18:43:00 57 683 A.... "C:\Windows\Debug\WIA\wiatrace.log"
          2 Apr 2008 17:16:34 3 953 A.... "C:\Windows\inf\WmiApRpl\WmiApRpl.h"
          2 Apr 2008 17:08:18 19 327 424 A.... "C:\Windows\Logs\CBS\CBS.log"
          16 Feb 2008 1:44:52 56 682 186 A.... "C:\Windows\Logs\CBS\CBS.persist.log"
          12 Mar 2008 10:26:44 30 458 A.... "C:\Windows\Logs\DPX\setupact.log"
          12 Mar 2008 10:26:44 30 458 A.... "C:\Windows\Logs\DPX\setuperr.log"
          14 Feb 2008 9:55:28 946 532 A.... "C:\Windows\rescache\rc0005\Segment0.cmf"
          14 Feb 2008 9:55:28 48 064 A.... "C:\Windows\rescache\rc0005\Segment0.toc"
          14 Feb 2008 9:55:28 1 240 652 A.... "C:\Windows\rescache\rc0005\Segment1.cmf"
          14 Feb 2008 9:55:28 48 064 A.... "C:\Windows\rescache\rc0005\Segment1.toc"
          14 Feb 2008 9:55:30 927 186 A.... "C:\Windows\rescache\rc0005\Segment2.cmf"
          14 Feb 2008 9:55:30 48 064 A.... "C:\Windows\rescache\rc0005\Segment2.toc"
          14 Feb 2008 9:55:30 1 141 823 A.... "C:\Windows\rescache\rc0005\Segment3.cmf"
          14 Feb 2008 9:55:30 48 064 A.... "C:\Windows\rescache\rc0005\Segment3.toc"
          14 Feb 2008 9:55:32 766 206 A.... "C:\Windows\rescache\rc0005\Segment4.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment4.toc"
          14 Feb 2008 9:55:32 855 554 A.... "C:\Windows\rescache\rc0005\Segment5.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment5.toc"
          14 Feb 2008 9:55:32 1 313 717 A.... "C:\Windows\rescache\rc0005\Segment6.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment6.toc"
          14 Feb 2008 9:55:32 924 827 A.... "C:\Windows\rescache\rc0005\Segment7.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment7.toc"
          14 Feb 2008 9:55:32 1 163 209 A.... "C:\Windows\rescache\rc0005\Segment8.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment8.toc"
          14 Feb 2008 9:55:32 446 934 A.... "C:\Windows\rescache\rc0005\Segment9.cmf"
          14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment9.toc"
          25 Feb 2008 23:17:42 2 408 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.17.0.mum"
          25 Feb 2008 23:18:14 12 686 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.17.0.cat"
          2 Apr 2008 17:13:44 262 144 A.SH. "C:\Windows\ServiceProfiles\LocalService\ntuser.dat"
          2 Apr 2008 17:13:44 262 144 A..H. "C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1"
          2 Apr 2008 17:13:38 262 144 A.SH. "C:\Windows\ServiceProfiles\NetworkService\ntuser.dat"
          2 Apr 2008 17:13:38 262 144 A..H. "C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1"
          30 Mar 2008 14:47:22 3 561 333 A.... "C:\Windows\System32\CodeIntegrity\bootcat.cache"
          14 Feb 2008 8:58:46 21 560 A.... "C:\Windows\System32\drivers\atapi.sys"
          14 Feb 2008 8:58:46 109 624 A.... "C:\Windows\System32\drivers\ataport.sys"
          14 Feb 2008 9:04:56 54 784 A.... "C:\Windows\System32\drivers\i8042prt.sys"
          14 Feb 2008 8:58:44 17 464 A.... "C:\Windows\System32\drivers\intelide.sys"
          14 Feb 2008 9:04:56 35 384 A.... "C:\Windows\System32\drivers\kbdclass.sys"
          14 Feb 2008 9:04:56 34 360 A.... "C:\Windows\System32\drivers\mouclass.sys"
          14 Feb 2008 9:07:36 110 080 A.... "C:\Windows\System32\drivers\mrxdav.sys"
          14 Feb 2008 8:58:28 216 632 A.... "C:\Windows\System32\drivers\netio.sys"
          14 Feb 2008 8:58:44 154 624 A.... "C:\Windows\System32\drivers\nwifi.sys"
          14 Feb 2008 8:58:46 45 112 A.... "C:\Windows\System32\drivers\pciidex.sys"
          14 Feb 2008 9:04:56 19 968 A.... "C:\Windows\System32\drivers\sermouse.sys"
          14 Feb 2008 8:58:28 803 328 A.... "C:\Windows\System32\drivers\tcpip.sys"
          14 Feb 2008 9:04:58 495 160 A.... "C:\Windows\System32\drivers\Wdf01000.sys"
          14 Feb 2008 9:04:58 35 384 A.... "C:\Windows\System32\drivers\WdfLdr.sys"
          14 Feb 2008 8:58:28 49 152 A.... "C:\Windows\System32\migration\netiomig.dll"
          9 Mar 2008 0:21:52 131 072 A.... "C:\Windows\System32\NDF\eventlog.etl"
          2 Apr 2008 17:13:24 10 965 A.... "C:\Windows\System32\spool\spooler.xml"
          2 Apr 2008 17:11:22 4 096 ..... "C:\Windows\System32\spool\SpoolerETW.etl"
          2 Apr 2008 17:14:06 48 626 A.... "C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin"
          21 Feb 2008 12:27:52 4 A.... "C:\Windows\System32\WDI\ERCQueuedResolutions.dat"
          2 Apr 2008 17:14:04 43 106 A.... "C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin"
          2 Apr 2008 17:12:22 16 384 ..... "C:\Windows\System32\wfp\wfpdiag.etl"
          15 Feb 2008 10:17:44 690 A.... "C:\Windows\Temp\MPTelemetrySubmit\client_manifest.txt"
          15 Feb 2008 10:17:44 716 A.... "C:\Windows\Temp\MPTelemetrySubmit\watson_manifest.txt"
          14 Feb 2008 9:06:54 101 888 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.exe_6593e92a"
          14 Feb 2008 9:06:54 3 692 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.mof_112f9e6c"
          14 Feb 2008 9:06:56 39 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_lodctr.exe_b02cefba"
          14 Feb 2008 8:57:04 195 203 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_6.0.6000.16609_none_1592313b129ab58c.manifest"
          14 Feb 2008 9:06:52 3 726 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198.manifest"
          14 Feb 2008 9:06:54 53 248 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1_setupapi.dll.mui_bcc172a4"
          14 Feb 2008 9:06:54 88 936 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646.manifest"
          14 Feb 2008 8:58:30 22 016 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiougc.exe_94123cfe"
          13 Mar 2008 9:04:20 1 060 920 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346_ntfs.sys_e80dca04"
          14 Feb 2008 9:06:56 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfd.dat_f1e3dfd2"
          14 Feb 2008 8:58:50 3 470 392 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntoskrnl.exe_0fb0ab79"
          14 Feb 2008 8:58:30 167 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpipcfg.dll_e3a99e8a"
          13 Mar 2008 9:04:20 14 737 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346.manifest"
          14 Feb 2008 9:06:52 3 472 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.mof_04dfde60"
          14 Feb 2008 8:57:06 3 592 192 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.dll_fab8f891"
          14 Feb 2008 8:58:50 3 504 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntkrnlpa.exe_165c312a"
          14 Feb 2008 9:06:56 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfi.dat_e3a35ecf"
          14 Feb 2008 8:58:30 216 632 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1_netio.sys_a06e75d0"
          14 Feb 2008 8:57:08 64 512 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininetplugin.dll_f2ff35f9"
          14 Feb 2008 8:57:06 6 066 176 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieframe.dll_c6cbe33f"
          14 Feb 2008 8:57:08 824 832 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininet.dll_790e2e3a"
          14 Feb 2008 9:06:54 17 524 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23.manifest"
          14 Feb 2008 9:06:52 8 279 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913.manifest"
          14 Feb 2008 9:06:54 3 685 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.mof_6593cf80"
          14 Feb 2008 8:57:06 829 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67.manifest"
          14 Feb 2008 9:06:54 3 689 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.mof_8d9de59f"
          14 Feb 2008 8:57:08 347 136 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtmsft.dll_4b67eac6"
          14 Feb 2008 9:06:54 120 320 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_cntrtextmig.dll_08675f2d"
          14 Feb 2008 8:57:06 1 383 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.tlb_fab8f577"
          18 Feb 2008 17:16:46 2 027 008 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16551_none_b6d829dc9d87e0b4_win32k.sys_0d7a6fb3"
          18 Feb 2008 17:16:46 88 300 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d_wbemcomn.tmf_e233833d"
          14 Feb 2008 9:06:56 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfh.dat_e67d1236"
          14 Feb 2008 8:57:28 124 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e_advpack.dll_8c6ea088"
          14 Feb 2008 8:57:12 283 492 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71.manifest"
          18 Feb 2008 17:16:46 6 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16551_none_b6d829dc9d87e0b4.manifest"
          14 Feb 2008 8:58:30 28 871 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a.manifest"
          14 Feb 2008 8:57:08 463 701 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585.manifest"
          18 Feb 2008 17:16:46 7 520 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d.manifest"
          14 Feb 2008 9:06:54 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_prflbmsg.dll_2e46e937"
          14 Feb 2008 9:06:54 558 080 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646_oleaut32.dll_730e3d41"
          14 Feb 2008 8:57:28 7 571 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e.manifest"
          14 Feb 2008 9:06:52 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winresume.exe.mui_ff8b5358"
          14 Feb 2008 8:58:50 18 778 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934.manifest"
          14 Feb 2008 9:06:54 19 532 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73.manifest"
          14 Feb 2008 8:57:04 42 229 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_6.0.6000.16609_none_3ad26ff6d96b5938.manifest"
          14 Feb 2008 8:58:30 3 908 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1.manifest"
          18 Feb 2008 17:16:46 356 352 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d_wbemcomn.dll_e2337e3c"
          14 Feb 2008 8:57:06 180 736 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieui.dll_f0fcf806"
          14 Feb 2008 9:06:56 32 256 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_unlodctr.exe_69df45bb"
          14 Feb 2008 9:06:56 943 800 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winload.exe_75835076"
          14 Feb 2008 9:06:56 115 200 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_loadperf.dll_3a569bab"
          14 Feb 2008 9:06:52 28 672 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winload.exe.mui_3bc5b827"
          14 Feb 2008 9:06:52 123 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfsuninstall.mof_d0605990"
          14 Feb 2008 9:06:52 224 824 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.sys_04dfdff9"
          14 Feb 2008 8:57:06 928 494 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a.manifest"
          14 Feb 2008 8:57:08 27 648 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_jsproxy.dll_3cc8d651"
          18 Feb 2008 17:16:46 5 868 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd.manifest"
          14 Feb 2008 8:58:30 803 328 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpip.sys_3339bd51"
          14 Feb 2008 9:06:54 1 585 664 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.dll_8d9de2e7"
          14 Feb 2008 9:06:54 20 589 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f.manifest"
          14 Feb 2008 8:57:12 1 159 680 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71_urlmon.dll_95c89473"
          14 Feb 2008 8:57:08 56 602 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504.manifest"
          14 Feb 2008 9:06:56 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfc.dat_f4bd9339"
          14 Feb 2008 9:06:54 19 456 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_cfgmgr32.dll_7bc7e545"
          14 Feb 2008 8:58:30 49 152 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiomig.dll_917b9a36"
          14 Feb 2008 9:06:54 221 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.dll_112f9bb4"
          14 Feb 2008 8:57:08 214 528 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtrans.dll_814d2aee"
          14 Feb 2008 9:06:54 3 034 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1.manifest"
          14 Feb 2008 9:06:56 5 227 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366.manifest"
          18 Feb 2008 17:16:46 24 064 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd_wtsapi32.dll_470d4d41"
          14 Feb 2008 9:06:56 905 400 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winresume.exe_85cd1215"
          13 Feb 2008 15:30:22 23 834 A.... "C:\Windows\winsxs\Catalogs\050b2a0163102501b05d9e43ac4c53e538cd93c9907b91c69907b04c365369b4.cat"
          13 Feb 2008 15:30:10 26 186 A.... "C:\Windows\winsxs\Catalogs\0ad6f09f2b2b39e5e7cfc19103cb31b78ead81597edba64691c6a502ae1f996d.cat"
          14 Feb 2008 9:16:40 24 195 A.... "C:\Windows\winsxs\Catalogs\10338debac71ca966896e544f26291a99bf38cc4b87e69c1798037b49a292a3d.cat"
          13 Feb 2008 15:33:36 43 345 A.... "C:\Windows\winsxs\Catalogs\1418952aacdf47d43eff052dd144e84b0acf1e45aa1af266830a59fcd6a881da.cat"
          13 Feb 2008 15:29:42 23 834 A.... "C:\Windows\winsxs\Catalogs\19c7a4321d55036bd0f9aa87035a15ad62ec65e1d2d9c17978a81ef9ad0ea40f.cat"
          13 Feb 2008 15:33:04 14 740 A.... "C:\Windows\winsxs\Catalogs\1a3194f88073e6c03595db376a21306107a54b38fed11cf525c81d285871cd2f.cat"
          13 Feb 2008 15:29:54 23 834 A.... "C:\Windows\winsxs\Catalogs\1d6ebd3202f0931663348dc7328a614a25f513295a47a6ad3a50c4d64d4bab0f.cat"
          13 Feb 2008 15:29:44 14 442 A.... "C:\Windows\winsxs\Catalogs\37ae5936ba24fa473a5cbf11576ea349e1104dd54e48677cd2f844436c5633c1.cat"
          13 Feb 2008 15:30:00 23 834 A.... "C:\Windows\winsxs\Catalogs\3c6df958a8804ac9c1ad4af40edf97584f03fd8c1e911630f2ccbd82efea2704.cat"
          13 Feb 2008 15:30:06 23 834 A.... "C:\Windows\winsxs\Catalogs\417ad390502bf43875823bf5f549ab2031ac7531b518a2c50999f9e6b7735ce7.cat"
          13 Feb 2008 15:29:28 14 442 A.... "C:\Windows\winsxs\Catalogs\42820e7ec5f40412f525313282e3275550b72cda5621575a2fa437ad0849bbde.cat"
          13 Feb 2008 15:29:56 23 834 A.... "C:\Windows\winsxs\Catalogs\4548a2d79a4c9b0b9c97427ef50d1dec446548527929bf413532f9b5b0f70b39.cat"
          13 Feb 2008 15:30:34 14 442 A.... "C:\Windows\winsxs\Catalogs\45693e0f2c4ab93267df6ea67e58f33aaee6d12f796be1d26e196d7ba2f419fd.cat"
          13 Feb 2008 15:30:36 14 442 A.... "C:\Windows\winsxs\Catalogs\4600288784bed7de0849a49ca0c3e2569b02a27c1e54f448a61f3ea736f3c442.cat"
          13 Feb 2008 15:30:28 23 834 A.... "C:\Windows\winsxs\Catalogs\5658d911f1157c47dc0eec0603e9cff03918bdbcde0f5d6cee0a501a1c7d60d2.cat"
          13 Feb 2008 15:29:48 26 186 A.... "C:\Windows\winsxs\Catalogs\5a7b34dcbe7ba738719fa5c490ed3c0f863becc4844a8be011b0732be3678c34.cat"
          13 Feb 2008 15:30:12 26 186 A.... "C:\Windows\winsxs\Catalogs\64b20eb1d2e76ffad87d8824e80145679bfc0ef3a93bfcc5c70a688fad06aef0.cat"
          13 Feb 2008 15:33:34 37 850 A.... "C:\Windows\winsxs\Catalogs\6d88c5f3d266b8fa19190a8adae6f1729d1b8d51b9e698e9d358c4551bbce86e.cat"
          13 Feb 2008 15:30:44 23 834 A.... "C:\Windows\winsxs\Catalogs\6eb7ed514cde77a2b0b27813ebb2e1db09baa5c81e84869d5a16681d77cfe733.cat"
          13 Feb 2008 15:29:26 23 834 A.... "C:\Windows\winsxs\Catalogs\6ef00608b280e84f38da471beccf79ecd2613cbcc5b10d869ef11b83445afcfe.cat"
          13 Feb 2008 15:29:40 26 186 A.... "C:\Windows\winsxs\Catalogs\7329a042cd17487bca411bd79b935eff81009162f092c3775e1c4a995eb24837.cat"
          13 Feb 2008 15:30:30 23 834 A.... "C:\Windows\winsxs\Catalogs\74c0aef9ec661126070eb1e01c25a94f7477f36dd92f4fde5f53fa4fbf8087c6.cat"
          13 Feb 2008 15:30:38 23 834 A.... "C:\Windows\winsxs\Catalogs\7c34856c5ef792d12929068d0871b07a0451fbe6d33b6dbca3d9e90b71c37db9.cat"
          13 Feb 2008 15:27:10 12 686 A.... "C:\Windows\winsxs\Catalogs\8272c03d107e462deb7a0bed70335833781b7e27bc6bbd24470701f9e4facde2.cat"
          13 Feb 2008 15:27:12 33 241 A.... "C:\Windows\winsxs\Cata
          1. Je suis désolée ça ne marche pas! La première fois en cliquant sur runthis, une fenêtre a écran noir s'est ouvert une seconde puis s'est refermé, rien de plus. Idem en insistant.
            Au second redémarrage, les icones de sdfix avaient disparus, sauf read me!
            Est-ce que les problèmes de clavier (touches qui ne répondent qu'une fois sur deux) et les problèmes de mémoire (passer de 12Go à 3Go en une aprem) peuvent être liés à ça?
            1. telecharge sdfix

              SDFix Download Link

              decompresse le sur ton bureau

              demarre ton pc en mode safe

              ouvre le dossier sdfix

              click sur RunThis.bat

              repond Y

              et poste moi le rapport