Viruses war

Résolu
Bonjour,
Voilà quelques jours que je lutte contre virus persistent, bien que j'en connaissent que peu en la matière. C'est un ordinateur neuf et le voilà malade et virulent. Au début, je n'avais que Avast, spyware blaster, et le pare-feu microsoft. Tout à commencer avec un spyware, qui me redirigeait à une page de pub d'anti-spyware en affichant de notification en forme de triangle jaune et de bouclier d'alerte. Voyant spyware blaster impuissant malgré les régulière mise à jour, je me suis mis en quête d'un nouvel anti-spyware gratuit et suis tombé sur stopzilla version d'essai. Au début ça semblait fonctionner mais ça n'a fait que dégénérer davantage. Je suis aller un antivirus dont j'avais déjà bonne confiance, AVG ainsi que hijackthis, puis désinstallé stopzilla, ce qui a ms fin a mes problème de spyware, mais entre-temps, en me risquant a fouiner pour une serial key trainant sur le web, pour l'installation complète d'un anti-spyware, j'ai contracter un virus, avec tout ses petit bébé, dont j'ai éliminer une partie mais il continu toujours de me lancer de nouvelles infection, variant de quelque minute a quelque heures d'intervalle.
AVG décèle quelques infections qu'il répare mais le problème est toujours là.
J'ai peu d'expérience avec hijackthis mais un certain C:\WINDOWS\SYSTEM32\efccyyvs.dll qui n'était pas là au début me rend perplexe et il ne fix pas le problème..
Avast détecte parfois la présence d'un rootkit qu'il essaie de supprimer mais perd sa trace aussitôt et ne corrige pas le problème non plus mais réussi a contenir le virus qui semble vouloir se propager( je supprime ou envoie l'infection dans la virus vault mais un nouveau au même emplacement(windows\system32) sous un nom différent.
Configuration: Windows XP
Firefox 2.0.0.13

32 réponses

Résumé de la discussion

Plusieurs infections persister sur un ordinateur Windows XP malgré l'utilisation simultanée d'AVG, Avast et Spyware Blaster, accompagnées de redirections publicitaires, de messages d'alerte et de tentatives d'installation d'anti-spyware douteux. Des conseils privilégient un nettoyage approfondi via des outils fiables et l’élimination des fichiers suspects repérés, tout en s’appuyant sur Avast pour contenir le rootkit et éviter les redémarrages répétitifs. En parallèle, l’analyse des rapports révèle des DLL suspectes et des téléchargements agressifs, avec des nettoyages répétés qui éliminent certaines traces et isolent les infections. En cas de persistance, il peut être nécessaire de sauvegarder les données importantes et de réinstaller proprement le système, car les rootkits et chargeurs persistants résistent au nettoyage.

Bobot (l’IA à votre service)
  1. Salut,

    J'ouvre mozilla firefox et on me lance c'est ce que ca me fais parfois au lieu du chargement de la page habituelle. Depuis un moment ca a stoppé.,

    je ne comprends pas ce que tu veux dire...

    Bon supprime Kério et installe Zone Alarm stp...

    Puis,
    > Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau : http://www.techsupportforum.com/sectools/Deckard/dss.exe
    - Choisis <enregistrer> et <Bureau> pour l'emplacement.
    - Ferme toutes les applications en cours (même internet). C'est important car sinon le PC peut planter.
    - Double-clique sur dss.exe pour lancer l'outil.
    - S'il ne trouve pas HijackThis, clique sur Oui.
    - Clique sur OK à chaque fois que cela te sera demandé.
    - Une fois l'analyse finie un rapport s'affichera. Poste son contenu dans ta réponse stp.
    NB : Le rapport se trouve aussi ici : C:\Deckard\System Scanner\main.txt
    PS : Si tu obtiens deux rapports (main.txt + extra.txt) alors poste les deux stp.
    Attention : les rapports peuvent être long donc envoie chacun d'eux dans un poste différent (sinon il risque de manquer la fin).

    Bon courage,

    A+

    PS : Pourquoi virus war comme titre ? Récapitule tes problèmes aussi stp.
    1. Re!

      <ital>"Peux tu me donner le nom complet et le lien si possible ? "</ital

      Je peux pas donner beaucoup plus d'info que cet image: http://img81.imageshack.us/img81/4959/sanstitre3jx9.png

      J'ouvre mozilla firefox et on me lance c'est ce que ca me fais parfois au lieu du chargement de la page habituelle. Depuis un moment ca a stoppé.

      On m'a aussi conseiller un truc, G DATA internet security, qui fait office d'antivirus, antispyware, de firewall et de filtre web à la fois. C'est une version professionnel qu'un ami m'a refilé, et je me demandais si ce serais meilleur qu'avast et kerio sunbelt.

      Pour le rapport smitfraudfix:

      SmitFraudFix v2.314

      Rapport fait à 20:25:29,04, 2008-04-23
      Executé à partir de C:\Documents and Settings\MSI\Bureau\Security\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      127.0.0.1 localhost

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

      S!Ri's WS2Fix: LSP not Found.
      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      HKLM\SYSTEM\CS2\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
      HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

      »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

      Nettoyage terminé.

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      1. Bonjour,
        Il est long le rapport combo...

        Alors pour le smitfraud :
        > Démarre en mode sans échec : (image). Si problème : tuto ici
        - Dans le dossier "SmitfraudFix" ouvre "Smitfraudfix.cmd" puis choisit l 'option 2 et tape "oui" pour toutes les questions.
        - Enregistre le rapport puis envoie le dans ton prochain poste.

        Pour ce qui est du pare feu Kério c'est dans le configurations. Regarde le lien ci dessous :
        tuto : https://kerio.probb.fr/
        - Si tu as des difficultés avec les configuration de Kerio, alors installe Zone Alarme : /telecharger/telecharger-157-zonealarm, en cas de problème : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm
        - Installe le nouveau pare-feu, puis désactive le pare-feu windows.

        Ensuite,
        Aussi parfois, quand j'ouvre une nouvelle page, on me demande pour télécharger, comme firefox me le demande toujours quand je clic sur un lien de téléchargement, avec un truc comprenant "octet" et "stream" ou steam" dans le nom du fichier, lequel je refuse toujours.,

        Peux tu me donner le nom complet et le lien si possible ?

        Comment va le PC à part le lien steam ?
        Après on termine.

        A+
        1. J'ai pu recevoir un combo des 2 erreurs mentionné un peu plus tôt et je m'essaie a montrer la screenshot dans ce lien : http://img81.imageshack.us/img81/4959/sanstitre3jx9.png
          1. + 2004-08-04 01:29:32 28,672 ------w C:\WINDOWS\system32\drivers\atinsnxx.sys
            + 2004-08-04 01:29:32 13,824 ------w C:\WINDOWS\system32\drivers\atinttxx.sys
            + 2004-08-04 01:29:32 73,216 ------w C:\WINDOWS\system32\drivers\atintuxx.sys
            + 2004-08-04 01:29:32 31,744 ------w C:\WINDOWS\system32\drivers\atinxbxx.sys
            + 2004-08-04 01:29:32 63,488 ------w C:\WINDOWS\system32\drivers\atinxsxx.sys
            + 2004-08-19 19:09:22 21,183 ------w C:\WINDOWS\system32\drivers\atv01nt5.dll
            + 2004-08-19 19:09:22 11,359 ------w C:\WINDOWS\system32\drivers\atv02nt5.dll
            + 2004-08-19 19:09:22 25,471 ------w C:\WINDOWS\system32\drivers\atv04nt5.dll
            + 2004-08-19 19:09:22 14,143 ------w C:\WINDOWS\system32\drivers\atv06nt5.dll
            + 2004-08-19 19:09:22 17,279 ------w C:\WINDOWS\system32\drivers\atv10nt5.dll
            + 2004-08-04 02:10:40 38,016 ------w C:\WINDOWS\system32\drivers\bthmodem.sys
            + 2004-08-04 02:10:38 35,456 ------w C:\WINDOWS\system32\drivers\bthprint.sys
            + 2004-08-19 19:09:22 15,423 ------w C:\WINDOWS\system32\drivers\ch7xxnt5.dll
            + 2007-03-16 12:56:06 302,000 ----a-w C:\WINDOWS\system32\drivers\fwdrv.sys
            + 2004-08-04 02:07:44 46,464 ------w C:\WINDOWS\system32\drivers\gagp30kx.sys
            + 2004-08-19 18:55:52 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys
            + 2004-08-04 02:08:20 15,104 ------w C:\WINDOWS\system32\drivers\hidir.sys
            + 2004-08-04 01:41:48 220,032 ------w C:\WINDOWS\system32\drivers\hsfbs2s2.sys
            + 2004-08-04 01:41:50 685,056 ------w C:\WINDOWS\system32\drivers\hsfcxts2.sys
            + 2004-08-04 01:41:56 1,041,536 ------w C:\WINDOWS\system32\drivers\hsfdpsp2.sys
            + 2004-08-04 02:08:34 40,832 ------w C:\WINDOWS\system32\drivers\irbus.sys
            + 2007-03-16 12:56:10 72,496 ----a-w C:\WINDOWS\system32\drivers\khips.sys
            + 2004-08-04 01:41:56 11,868 ------w C:\WINDOWS\system32\drivers\mdmxsdk.sys
            + 2004-08-04 01:41:40 126,686 ------w C:\WINDOWS\system32\drivers\mtlmnt5.sys
            + 2004-08-04 01:41:38 1,309,184 ------w C:\WINDOWS\system32\drivers\mtlstrm.sys
            + 2004-08-04 01:29:38 452,736 ------w C:\WINDOWS\system32\drivers\mtxparhm.sys
            + 2004-08-04 02:04:52 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys
            + 2004-08-04 01:41:40 180,360 ------w C:\WINDOWS\system32\drivers\ntmtlfax.sys
            - 2004-03-16 14:58:20 136,960 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
            + 2004-08-04 02:15:50 145,792 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
            + 2004-08-04 01:41:40 13,776 ------w C:\WINDOWS\system32\drivers\recagent.sys
            + 2004-08-04 02:04:32 30,080 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
            + 2004-08-04 01:29:52 166,912 ------w C:\WINDOWS\system32\drivers\s3gnbm.sys
            + 2004-08-19 19:09:42 3,901 ------w C:\WINDOWS\system32\drivers\siint5.dll
            + 2004-08-04 02:07:44 41,088 ------w C:\WINDOWS\system32\drivers\sisagp.sys
            + 2004-08-04 01:41:42 129,535 ------w C:\WINDOWS\system32\drivers\slnt7554.sys
            + 2004-08-04 01:41:44 404,990 ------w C:\WINDOWS\system32\drivers\slntamr.sys
            + 2004-08-04 01:41:46 95,424 ------w C:\WINDOWS\system32\drivers\slnthal.sys
            + 2004-08-04 01:41:46 13,240 ------w C:\WINDOWS\system32\drivers\slwdmsup.sys
            + 2004-08-04 02:07:38 6,016 ------w C:\WINDOWS\system32\drivers\smbali.sys
            + 2004-08-04 02:07:44 44,672 ------w C:\WINDOWS\system32\drivers\uagp35.sys
            + 2004-08-04 02:04:34 12,672 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
            + 2004-08-19 19:09:48 11,325 ------w C:\WINDOWS\system32\drivers\vchnt5.dll
            + 2004-08-04 02:07:44 42,240 ------w C:\WINDOWS\system32\drivers\viaagp.sys
            + 2004-08-04 02:04:54 13,568 ------w C:\WINDOWS\system32\drivers\wacompen.sys
            + 2004-08-04 01:29:40 11,807 ------w C:\WINDOWS\system32\drivers\wadv07nt.sys
            + 2004-08-04 01:29:40 11,295 ------w C:\WINDOWS\system32\drivers\wadv08nt.sys
            + 2004-08-04 01:29:42 11,871 ------w C:\WINDOWS\system32\drivers\wadv09nt.sys
            + 2004-08-04 01:29:42 11,935 ------w C:\WINDOWS\system32\drivers\wadv11nt.sys
            + 2004-08-04 01:29:46 22,271 ------w C:\WINDOWS\system32\drivers\watv06nt.sys
            + 2004-08-04 01:29:46 25,471 ------w C:\WINDOWS\system32\drivers\watv10nt.sys
            - 2007-12-07 01:07:03 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
            + 2008-02-16 09:02:34 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
            - 2007-12-07 01:07:03 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
            + 2008-02-16 09:02:35 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
            - 2007-12-07 01:07:04 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
            + 2008-02-16 09:02:35 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
            + 2004-08-19 19:09:54 20,992 ------w C:\WINDOWS\system32\faxpatch.exe
            - 2008-04-02 20:18:46 458,840 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
            + 2008-04-15 04:53:08 460,432 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
            + 2004-08-19 19:09:28 32,285 ------w C:\WINDOWS\system32\hsfcisp2.dll
            + 2006-06-29 11:05:44 26,112 ------w C:\WINDOWS\system32\idndl.dll
            - 2007-12-07 01:07:04 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll
            + 2008-02-16 09:02:35 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll
            + 2004-08-04 01:31:54 198,656 ----a-w C:\WINDOWS\system32\IME\CINTLGNT\CINTIME.DLL
            + 2004-08-04 01:31:56 480,256 ----a-w C:\WINDOWS\system32\IME\CINTLGNT\CINTSETP.EXE
            + 2004-08-04 01:31:50 59,392 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE
            + 2004-08-04 01:31:50 70,144 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\PINTLPHR.EXE
            + 2004-08-04 01:31:50 67,584 ----a-w C:\WINDOWS\system32\IME\PINTLGNT\PMIGRATE.DLL
            + 2004-08-04 01:32:16 44,032 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TINTLPHR.EXE
            + 2004-08-04 01:32:16 455,168 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
            + 2004-08-04 01:32:14 10,240 ----a-w C:\WINDOWS\system32\IME\TINTLGNT\TMIGRATE.DLL
            + 2004-08-04 01:31:50 811,064 ----a-w C:\WINDOWS\system32\imjp81k.dll
            + 2004-08-19 19:09:42 221,696 ------w C:\WINDOWS\system32\inetsrv\seo.dll
            + 2004-08-19 19:09:42 189,440 ------w C:\WINDOWS\system32\inetsrv\smtpadm.dll
            + 2004-08-19 19:09:44 2,134,528 ------w C:\WINDOWS\system32\inetsrv\smtpsnap.dll
            - 2007-12-07 01:07:04 96,768 ----a-w C:\WINDOWS\system32\inseng.dll
            + 2008-02-16 09:02:35 96,768 ----a-w C:\WINDOWS\system32\inseng.dll
            - 2007-11-14 07:28:02 450,560 ------w C:\WINDOWS\system32\jscript.dll
            + 2007-12-18 14:41:58 450,560 ----a-w C:\WINDOWS\system32\jscript.dll
            - 2007-12-07 01:07:04 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
            + 2008-02-16 09:02:35 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
            + 2005-05-16 22:34:48 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
            + 2006-03-20 16:17:24 65,536 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
            + 2006-03-20 16:17:20 798,720 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
            + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd101b.dll
            + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd101c.dll
            + 2001-08-18 01:55:56 5,632 ----a-w C:\WINDOWS\system32\kbd103.dll
            + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd106.dll
            + 2001-08-23 20:47:06 8,704 ----a-w C:\WINDOWS\system32\kbdjpn.dll
            + 2001-08-23 20:47:06 8,192 ----a-w C:\WINDOWS\system32\kbdkor.dll
            + 2008-03-25 02:32:44 218,496 ----a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
            - 2007-11-20 19:52:00 2,884,992 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
            + 2008-03-25 03:21:18 2,889,088 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
            - 2007-11-20 19:52:00 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
            + 2008-03-25 03:21:20 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
            - 2008-03-30 01:18:03 74,649 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
            + 2008-04-13 17:23:00 74,649 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
            + 2008-04-13 18:12:37 70,264 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
            + 2004-08-19 19:09:32 86,016 ------w C:\WINDOWS\system32\mdmxsdk.dll
            + 2003-03-19 00:12:12 1,047,552 ----a-w C:\WINDOWS\system32\mfc71u.dll
            - 2008-03-05 11:30:56 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
            + 2008-04-06 05:56:20 19,836,024 ----a-w C:\WINDOWS\system32\MRT.exe
            - 2005-09-23 10:28:52 270,848 ----a-w C:\WINDOWS\system32\mscoree.dll
            + 2007-10-24 04:47:38 282,112 ----a-w C:\WINDOWS\system32\mscoree.dll
            - 2005-09-23 10:28:52 150,016 ----a-w C:\WINDOWS\system32\mscorier.dll
            + 2007-10-24 04:47:38 158,720 ----a-w C:\WINDOWS\system32\mscorier.dll
            - 2005-09-23 10:28:52 74,240 ----a-w C:\WINDOWS\system32\mscories.dll
            + 2007-10-24 04:47:38 84,480 ----a-w C:\WINDOWS\system32\mscories.dll
            - 2007-12-07 14:37:06 3,080,192 ----a-w C:\WINDOWS\system32\mshtml.dll
            + 2008-02-16 22:32:38 3,080,704 ----a-w C:\WINDOWS\system32\mshtml.dll
            - 2007-12-07 01:07:04 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
            + 2008-02-16 09:02:36 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
            - 2007-12-07 01:07:04 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
            + 2008-02-16 09:02:37 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
            - 2007-12-07 01:07:04 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
            + 2008-02-16 09:02:37 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
            - 2003-03-18 20:14:52 499,712 ----a-w C:\WINDOWS\system32\MSVCP71.dll
            + 2006-01-05 02:03:56 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
            - 2003-02-21 17:42:22 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
            + 2006-01-05 02:03:56 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
            + 2004-08-19 19:09:36 1,737,856 ------w C:\WINDOWS\system32\mtxparhd.dll
            - 2005-09-23 10:29:00 6,144 ----a-w C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
            + 2007-10-24 04:47:44 15,360 ----a-w C:\WINDOWS\system32\mui\[u]0/u409\mscorees.dll
            + 2006-06-28 20:59:26 24,576 ------w C:\WINDOWS\system32\nlsdl.dll
            + 2006-06-29 11:05:44 23,552 ------w C:\WINDOWS\system32\normaliz.dll
            - 2008-04-03 03:57:39 41,161 ----a-w C:\WINDOWS\system32\nvModes.dat
            + 2008-04-14 23:29:31 41,161 ----a-w C:\WINDOWS\system32\nvModes.dat
            - 2008-03-30 04:51:56 66,710 ----a-w C:\WINDOWS\system32\perfc009.dat
            + 2008-04-11 06:02:33 67,894 ----a-w C:\WINDOWS\system32\perfc009.dat
            - 2008-03-30 04:51:56 79,466 ----a-w C:\WINDOWS\system32\perfc00C.dat
            + 2008-04-11 06:02:33 81,238 ----a-w C:\WINDOWS\system32\perfc00C.dat
            - 2008-03-30 04:51:56 427,926 ----a-w C:\WINDOWS\system32\perfh009.dat
            + 2008-04-11 06:02:33 433,190 ----a-w C:\WINDOWS\system32\perfh009.dat
            - 2008-03-30 04:51:56 495,306 ----a-w C:\WINDOWS\system32\perfh00C.dat
            + 2008-04-11 06:02:33 501,550 ----a-w C:\WINDOWS\system32\perfh00C.dat
            - 2007-12-07 01:07:04 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
            + 2008-02-16 09:02:37 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
            + 2007-06-01 14:33:10 684,032 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4c32.dll
            + 2007-06-01 14:33:42 2,772,992 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4r32.dll
            + 2007-06-21 08:43:26 2,208,512 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0/u007\DriverFiles\NETw4x32.sys
            + 2004-08-19 19:09:40 9,728 ------w C:\WINDOWS\system32\rwnh.dll
            + 2004-08-19 19:09:40 397,056 ------w C:\WINDOWS\system32\s3gnb.dll
            - 2007-12-07 01:07:05 1,495,040 ----a-w C:\WINDOWS\system32\shdocvw.dll
            + 2008-02-16 09:02:38 1,495,040 ----a-w C:\WINDOWS\system32\shdocvw.dll
            - 2007-12-07 01:07:05 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dll
            + 2008-02-16 09:02:38 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dll
            + 2004-08-19 19:09:42 73,832 ------w C:\WINDOWS\system32\slcoinst.dll
            + 2004-08-19 19:09:42 286,792 ------w C:\WINDOWS\system32\slextspk.dll
            + 2004-08-19 19:09:42 188,508 ------w C:\WINDOWS\system32\slgen.dll
            + 2004-08-19 19:10:04 32,866 ------w C:\WINDOWS\system32\slrundll.exe
            + 2004-08-19 19:10:04 73,796 ------w C:\WINDOWS\system32\slserv.exe
            + 2004-08-19 19:09:42 10,752 ------w C:\WINDOWS\system32\smtpapi.dll
            + 2004-08-19 19:10:04 8,192 ----a-w C:\WINDOWS\system32\spdwnwxp.exe
            + 2004-08-19 19:10:04 21,504 ------w C:\WINDOWS\system32\spupdwxp.exe
            + 2004-08-04 02:04:12 76,288 ----a-w C:\WINDOWS\system32\uniime.dll
            - 2007-12-07 01:07:05 617,472 ----a-w C:\WINDOWS\system32\urlmon.dll
            + 2008-02-16 09:02:39 617,984 ----a-w C:\WINDOWS\system32\urlmon.dll
            - 2004-08-19 21:09:48 417,792 ------w C:\WINDOWS\system32\vbscript.dll
            + 2007-12-18 14:41:59 417,792 ------w C:\WINDOWS\system32\vbscript.dll
            - 2004-08-19 21:09:48 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll
            + 2006-03-24 04:37:52 49,152 ----a-w C:\WINDOWS\system32\wdigest.dll
            + 2006-07-14 15:51:51 121,856 ------w C:\WINDOWS\system32\xmllite.dll
            - 2007-12-06 23:40:30 369,152 ----a-w C:\WINDOWS\system32\xpsp3res.dll
            + 2008-02-15 23:03:14 370,176 ----a-w C:\WINDOWS\system32\xpsp3res.dll
            + 2008-04-18 20:15:40 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_330.dat
            + 2004-08-19 21:07:58 1,712,128 ----a-w C:\WINDOWS\WinSxS\InstallTemp\14268632\GdiPlus.dll
            + 2008-04-11 06:02:13 8,192 ----a-w C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
            + 2007-10-24 04:47:56 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
            + 2007-10-24 04:47:56 558,080 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
            + 2007-10-24 04:47:56 635,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
            - 2004-08-19 21:07:58 1,050,624 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
            + 2004-08-19 19:07:58 1,050,624 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
            - 2004-08-19 21:07:58 54,784 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
            + 2004-08-19 19:07:58 54,784 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
            - 2004-08-19 21:07:58 343,040 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
            + 2004-08-19 19:07:58 343,040 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
            - 2004-08-19 21:07:58 1,712,128 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
            + 2004-08-19 19:07:58 1,712,128 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
            - 2004-08-19 21:07:58 852,992 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
            + 2004-08-19 19:07:58 852,992 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
            - 2004-08-19 21:07:58 994,816 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
            + 2004-08-19 19:07:58 994,816 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
            - 2004-08-19 21:07:58 137,728 ----a-r C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d\rtcres.dll
            + 2004-08-19 19:07:58 137,728 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_fr_457ebf3d\rtcres.dll
            - 2008-03-28 02:15:41 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
            + 2008-04-11 06:02:22 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
            - 2008-03-28 02:15:41 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
            + 2008-04-11 06:02:22 113,664 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
            .
            -- Snapshot reset to current date --
            .
            ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
            .
            .
            REGEDIT4
            *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "BitComet"="C:\Program Files\BitLord\BitLord.exe" [2005-05-06 21:47 2224128]
            "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 13:24 1694208]

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-05-18 16:53 8433664]
            "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-19 17:10 110592 C:\WINDOWS\system32\bthprops.cpl]
            "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-09-15 16:50 815104]
            "ACU"="C:\Program Files\Atheros\ACU.exe" [2007-05-03 18:42 376921]
            "IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-06-01 11:51 823296]
            "IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-06-01 11:49 974848]
            "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 16:10 56928]
            "LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 23:55 54832]
            "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40 155648]
            "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 07:48 157592]
            "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
            "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
            "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
            "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 06:25 6731312]
            "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]

            [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\cmw23.sys]
            @="Driver"

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
            "EnableFirewall"= 0 (0x0)

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
            "C:\\Program Files\\BitLord\\BitLord.exe"=
            "C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
            "C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
            "C:\\Program Files\\Microsoft Games\\Impossible Creatures\\IC.exe"=
            "C:\\Softimage\\XSI_6_Mod_Tool\\Application\\bin\\XSI.exe"=
            "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
            "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
            "C:\\Program Files\\Messenger\\msmsgs.exe"=
            "C:\\Program Files\\iTunes\\iTunes.exe"=
            "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
            "C:\\WINDOWS\\system32\\sessmgr.exe"=
            "%windir%\\system32\\sessmgr.exe"=
            "C:\\Documents and Settings\\MSI\\Bureau\\MTGOIII_Helper.exe"=

            [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
            "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

            R0 O2MDRDR;O2MDRDR;C:\WINDOWS\system32\DRIVERS\o2media.sys [2007-04-03 11:04]
            R0 O2SDRDR;O2SDRDR;C:\WINDOWS\system32\DRIVERS\o2sd.sys [2007-04-02 17:11]
            R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 15:31]
            R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2007-03-16 09:56]
            R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2007-03-16 09:56]
            R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 15:35]
            R3 WSIMD;wsimd Service;C:\WINDOWS\system32\DRIVERS\wsimd.sys [2007-03-28 20:52]
            S3 MBAMCatchMe;MBAMCatchMe;C:\Program Files\Malwarebytes' Anti-Malware\catchme.sys [2008-04-07 20:17]
            S3 XDva121;XDva121;C:\WINDOWS\system32\XDva121.sys []
            S3 XDva134;XDva134;C:\WINDOWS\system32\XDva134.sys []

            [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
            \Shell\AutoRun\command - E:\Setup.exe

            .
            Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
            "2008-04-14 18:54:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
            - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
            .
            **************************************************************************

            catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
            Rootkit scan 2008-04-18 19:18:37
            Windows 5.1.2600 Service Pack 2 NTFS

            Balayage processus cachés ...

            Balayage caché autostart entries ...

            Balayage des fichiers cachés ...

            Scan terminé avec succès
            Les fichiers cachés: 0

            **************************************************************************
            .
            Temps d'accomplissement: 2008-04-18 19:20:08
            ComboFix-quarantined-files.txt 2008-04-18 22:20:03
            ComboFix2.txt 2008-04-08 18:49:28
            Pre-Run: 72,487,452,672 octets libres
            Post-Run: 72,469,749,760 octets libres
            .
            2008-04-16 04:38:35 --- E O F ---

            -----------------------------------------------------------------------------------

            Je rajouterai aussi que le firewall (sunbelt kerio) plante souvent, surtout quand j'ouvre un navigateur(mozilla firefox et surtout ie), en me poppant un message "cannot connect the service" et fini par faire planter toute la connection pendant un instant.
            Aussi parfois, quand j'ouvre une nouvelle page, on me demande pour télécharger, comme firefox me le demande toujours quand je clic sur un lien de téléchargement, avec un truc comprenant "octet" et "stream" ou steam" dans le nom du fichier, lequel je refuse toujours. Tout ça m'a l'air que davantage suspect, j'espère que ces infos seront utiles.

            Sur ce, à bientôt!
            1. + 2004-08-19 19:09:40 49,664 ------w C:\WINDOWS\ServicePackFiles\i386\regapi.dll
              + 2004-07-19 21:54:16 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\regasm.exe
              + 2004-07-19 21:54:16 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\regcode.dll
              + 2004-08-19 19:10:04 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\regedit.exe
              + 2004-08-19 19:09:40 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\regsvc.dll
              + 2004-07-19 21:54:16 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\regsvcs.exe
              + 2004-08-19 19:10:04 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\regsvr32.exe
              + 2004-08-19 19:09:40 405,504 ------w C:\WINDOWS\ServicePackFiles\i386\regwizc.dll
              + 2004-08-19 19:09:40 61,952 ------w C:\WINDOWS\ServicePackFiles\i386\remotepg.dll
              + 2004-08-19 19:09:40 177,152 ------w C:\WINDOWS\ServicePackFiles\i386\repdrvfs.dll
              + 2004-08-19 19:09:40 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\resutils.dll
              + 2004-08-19 19:10:04 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\rexec.exe
              + 2004-08-04 02:10:40 59,648 ------w C:\WINDOWS\ServicePackFiles\i386\rfcomm.sys
              + 2004-08-19 19:09:40 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\riafres.dll
              + 2004-08-19 19:09:40 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\riafui1.dll
              + 2004-08-19 19:09:40 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\riafui2.dll
              + 2004-08-19 19:09:40 431,616 ------w C:\WINDOWS\ServicePackFiles\i386\riched20.dll
              + 2004-08-04 02:04:32 30,080 ------w C:\WINDOWS\ServicePackFiles\i386\rndismp.sys
              + 2004-08-04 02:04:32 30,080 ------w C:\WINDOWS\ServicePackFiles\i386\rndismpx.sys
              + 2004-08-19 18:55:34 79,360 ------w C:\WINDOWS\ServicePackFiles\i386\rocket.sys
              + 2004-08-19 19:09:40 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\rpcref.dll
              + 2004-08-19 19:09:40 581,120 ------w C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll
              + 2004-08-19 19:09:40 395,776 ------w C:\WINDOWS\ServicePackFiles\i386\rpcss.dll
              + 2004-08-19 19:09:40 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\rrcm.dll
              + 2004-08-04 01:31:44 152,576 ------w C:\WINDOWS\ServicePackFiles\i386\rsaenh.dll
              + 2004-08-19 19:10:04 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\rsh.exe
              + 2004-08-19 19:09:40 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\rshx32.dll
              + 2004-08-19 19:09:40 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\rsmps.dll
              + 2004-08-19 19:10:04 107,520 ------w C:\WINDOWS\ServicePackFiles\i386\rsnotify.exe
              + 2004-08-19 19:10:04 384,512 ------w C:\WINDOWS\ServicePackFiles\i386\rstrui.exe
              + 2004-08-19 19:10:04 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\rtcshare.exe
              + 2004-08-19 19:09:40 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\rtipxmib.dll
              + 2004-08-04 01:31:34 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\rtl8139.sys
              + 2004-08-19 19:09:40 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\rtutils.dll
              + 2004-08-19 19:10:04 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\rundll32.exe
              + 2004-08-19 19:10:04 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\runonce.exe
              + 2004-08-19 19:09:40 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\rwnh.dll
              + 2004-08-19 19:09:40 397,056 ------w C:\WINDOWS\ServicePackFiles\i386\s3gnb.dll
              + 2004-08-04 01:29:52 166,912 ------w C:\WINDOWS\ServicePackFiles\i386\s3gnbm.sys
              + 2004-08-19 19:09:40 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\safrcdlg.dll
              + 2004-08-19 19:09:40 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\safrdm.dll
              + 2004-08-19 19:09:40 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\safrslv.dll
              + 2004-08-19 19:09:40 64,000 ------w C:\WINDOWS\ServicePackFiles\i386\samlib.dll
              + 2004-08-19 19:09:40 431,104 ------w C:\WINDOWS\ServicePackFiles\i386\samsrv.dll
              + 2004-08-19 19:09:40 741,376 ------w C:\WINDOWS\ServicePackFiles\i386\sapi.dll
              + 2004-08-19 19:10:04 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\savedump.exe
              + 2004-08-19 19:09:40 270,848 ------w C:\WINDOWS\ServicePackFiles\i386\sbe.dll
              + 2004-08-19 19:09:40 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\sbeio.dll
              + 2004-08-04 01:59:58 43,136 ------w C:\WINDOWS\ServicePackFiles\i386\sbp2port.sys
              + 2004-08-19 19:09:40 71,168 ------w C:\WINDOWS\ServicePackFiles\i386\scarddlg.dll
              + 2004-08-19 19:10:04 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\scardsvr.exe
              + 2004-08-04 01:31:44 169,984 ------w C:\WINDOWS\ServicePackFiles\i386\sccbase.dll
              + 2004-08-19 19:09:40 171,520 ------w C:\WINDOWS\ServicePackFiles\i386\sccsccp.dll
              + 2004-08-19 19:09:40 186,368 ------w C:\WINDOWS\ServicePackFiles\i386\scecli.dll
              + 2004-08-19 19:09:40 328,704 ------w C:\WINDOWS\ServicePackFiles\i386\scesrv.dll
              + 2004-08-19 19:09:40 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\schannel.dll
              + 2004-08-19 19:09:40 193,024 ------w C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll
              + 2004-08-19 19:09:40 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\sclgntfy.dll
              + 2004-08-19 19:10:04 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\scrcons.exe
              + 2004-08-19 19:09:40 204,800 ------w C:\WINDOWS\ServicePackFiles\i386\script.dll
              + 2004-08-19 19:09:40 189,440 ------w C:\WINDOWS\ServicePackFiles\i386\script_a.dll
              + 2004-08-19 19:10:08 9,216 ------w C:\WINDOWS\ServicePackFiles\i386\scrnsave.scr
              + 2004-08-19 19:09:40 159,744 ------w C:\WINDOWS\ServicePackFiles\i386\scrobj.dll
              + 2004-08-19 19:09:40 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\scrrun.dll
              + 2004-08-04 01:59:42 96,256 ------w C:\WINDOWS\ServicePackFiles\i386\scsiport.sys
              + 2004-08-19 19:10:04 130,560 ------w C:\WINDOWS\ServicePackFiles\i386\sctasks.exe
              + 2004-08-19 19:10:04 78,848 ------w C:\WINDOWS\ServicePackFiles\i386\sdbinst.exe
              + 2004-08-04 02:07:48 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\sdbus.sys
              + 2004-08-19 19:09:40 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\sdhcinst.dll
              + 2004-07-17 14:36:38 27,440 ------w C:\WINDOWS\ServicePackFiles\i386\secdrv.sys
              + 2004-08-19 19:10:04 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\secedit.exe
              + 2004-08-19 19:09:40 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\seclogon.dll
              + 2004-08-02 17:20:40 4,569 ------w C:\WINDOWS\ServicePackFiles\i386\secupd.dat
              + 2004-08-19 19:09:40 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\secur32.dll
              + 2004-08-19 19:09:40 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\security.dll
              + 2004-08-19 19:09:40 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\sendcmsg.dll
              + 2004-08-19 19:09:40 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\sendmail.dll
              + 2004-08-19 19:09:42 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\sens.dll
              + 2004-08-19 19:09:42 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\sensapi.dll
              + 2004-08-19 19:09:42 221,696 ------w C:\WINDOWS\ServicePackFiles\i386\seo.dll
              + 2004-08-04 01:59:08 15,488 ------w C:\WINDOWS\ServicePackFiles\i386\serenum.sys
              + 2004-08-19 18:56:40 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\serial.sys
              + 2004-08-19 19:09:42 56,320 ------w C:\WINDOWS\ServicePackFiles\i386\servdeps.dll
              + 2004-08-19 19:10:04 108,544 ------w C:\WINDOWS\ServicePackFiles\i386\services.exe
              + 2004-08-19 19:10:04 142,336 ------w C:\WINDOWS\ServicePackFiles\i386\sessmgr.exe
              + 2004-08-19 19:10:04 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\sethc.exe
              + 2004-08-04 01:12:22 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\setregni.exe
              + 2004-08-19 19:10:04 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\setup.exe
              + 2004-08-19 19:10:04 778,240 ------w C:\WINDOWS\ServicePackFiles\i386\setup_wm.exe
              + 2004-08-19 19:10:04 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\setup50.exe
              + 2004-08-19 19:09:42 1,003,520 ------w C:\WINDOWS\ServicePackFiles\i386\setupapi.dll
              + 2004-08-19 19:09:42 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\setupqry.dll
              + 2004-08-19 19:09:42 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\sfc.dll
              + 2004-08-19 19:09:42 142,336 ------w C:\WINDOWS\ServicePackFiles\i386\sfc_os.dll
              + 2004-08-19 19:09:42 1,548,288 ------w C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll
              + 2004-08-04 01:59:56 11,136 ------w C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys
              + 2004-08-04 01:59:56 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys
              + 2004-08-04 01:59:56 11,392 ------w C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys
              + 2004-08-19 19:08:52 572,416 ------w C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll
              + 2004-08-19 19:09:42 1,483,776 ------w C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll
              + 2004-08-19 19:09:42 8,440,320 ------w C:\WINDOWS\ServicePackFiles\i386\shell32.dll
              + 2004-08-19 19:09:42 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\shfolder.dll
              + 2004-08-19 19:09:42 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\shgina.dll
              + 2004-08-19 19:09:42 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\shimeng.dll
              + 2004-08-19 19:09:42 440,320 ------w C:\WINDOWS\ServicePackFiles\i386\shimgvw.dll
              + 2004-08-19 19:09:42 474,112 ------w C:\WINDOWS\ServicePackFiles\i386\shlwapi.dll
              + 2004-08-19 19:09:42 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\shmedia.dll
              + 2004-08-19 19:10:04 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\shmgrate.exe
              + 2004-08-19 19:10:04 78,848 ------w C:\WINDOWS\ServicePackFiles\i386\shrpubw.exe
              + 2004-08-19 19:09:42 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\shscrap.dll
              + 2004-08-19 19:09:42 135,168 ------w C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll
              + 2004-08-19 19:09:42 20,536 ------w C:\WINDOWS\ServicePackFiles\i386\shtml.dll
              + 2004-08-19 19:10:04 16,437 ------w C:\WINDOWS\ServicePackFiles\i386\shtml.exe
              + 2004-08-19 19:10:04 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\shutdown.exe
              + 2004-08-19 19:09:42 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\sigtab.dll
              + 2004-08-19 19:10:04 71,168 ------w C:\WINDOWS\ServicePackFiles\i386\sigverif.exe
              + 2004-08-19 19:09:42 3,901 ------w C:\WINDOWS\ServicePackFiles\i386\siint5.dll
              + 2004-08-04 02:07:44 41,088 ------w C:\WINDOWS\ServicePackFiles\i386\sisagp.sys
              + 2004-08-04 01:31:36 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\sisnic.sys
              + 2004-08-19 19:10:04 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\skeys.exe
              + 2004-08-04 01:31:42 63,547 ------w C:\WINDOWS\ServicePackFiles\i386\sla30nd5.sys
              + 2004-08-19 19:09:42 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\slayerxp.dll
              + 2004-08-04 01:31:44 306,176 ------w C:\WINDOWS\ServicePackFiles\i386\slbcsp.dll
              + 2004-08-19 19:09:42 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\slbiop.dll
              + 2004-08-19 19:09:42 73,832 ------w C:\WINDOWS\ServicePackFiles\i386\slcoinst.dll
              + 2004-08-19 19:09:42 286,792 ------w C:\WINDOWS\ServicePackFiles\i386\slextspk.dll
              + 2004-08-19 19:09:42 188,508 ------w C:\WINDOWS\ServicePackFiles\i386\slgen.dll
              + 2004-08-04 02:10:18 11,136 ------w C:\WINDOWS\ServicePackFiles\i386\slip.sys
              + 2004-08-04 01:41:42 129,535 ------w C:\WINDOWS\ServicePackFiles\i386\slnt7554.sys
              + 2004-08-04 01:41:44 404,990 ------w C:\WINDOWS\ServicePackFiles\i386\slntamr.sys
              + 2004-08-04 01:41:46 95,424 ------w C:\WINDOWS\ServicePackFiles\i386\slnthal.sys
              + 2004-08-19 19:10:04 32,866 ------w C:\WINDOWS\ServicePackFiles\i386\slrundll.exe
              + 2004-08-19 19:10:04 73,796 ------w C:\WINDOWS\ServicePackFiles\i386\slserv.exe
              + 2004-08-04 01:41:46 13,240 ------w C:\WINDOWS\ServicePackFiles\i386\slwdmsup.sys
              + 2004-08-04 02:07:38 6,016 ------w C:\WINDOWS\ServicePackFiles\i386\smbali.sys
              + 2004-08-04 02:07:36 16,128 ------w C:\WINDOWS\ServicePackFiles\i386\smbbatt.sys
              + 2004-08-04 02:07:36 6,912 ------w C:\WINDOWS\ServicePackFiles\i386\smbclass.sys
              + 2004-08-19 19:10:04 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\smbinst.exe
              + 2004-08-19 19:10:04 236,544 ------w C:\WINDOWS\ServicePackFiles\i386\smi2smir.exe
              + 2004-08-19 19:09:42 370,688 ------w C:\WINDOWS\ServicePackFiles\i386\smlogcfg.dll
              + 2004-08-19 19:10:04 93,184 ------w C:\WINDOWS\ServicePackFiles\i386\smlogsvc.exe
              + 2004-08-19 19:10:04 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\smss.exe
              + 2004-08-19 19:09:42 189,440 ------w C:\WINDOWS\ServicePackFiles\i386\smtpadm.dll
              + 2004-08-19 19:09:42 10,752 ------w C:\WINDOWS\ServicePackFiles\i386\smtpapi.dll
              + 2004-08-19 19:09:44 2,134,528 ------w C:\WINDOWS\ServicePackFiles\i386\smtpsnap.dll
              + 2004-08-19 19:09:44 466,944 ------w C:\WINDOWS\ServicePackFiles\i386\smtpsvc.dll
              + 2004-08-19 19:10:04 133,120 ------w C:\WINDOWS\ServicePackFiles\i386\sndrec32.exe
              + 2004-08-19 19:09:44 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\sniffpol.dll
              + 2004-08-19 19:10:04 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\snmp.exe
              + 2004-08-19 19:09:44 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\snmpapi.dll
              + 2004-08-19 19:09:44 259,072 ------w C:\WINDOWS\ServicePackFiles\i386\snmpcl.dll
              + 2004-08-19 19:09:44 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\snmpincl.dll
              + 2004-08-19 19:09:44 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\snmpmib.dll
              + 2004-08-19 19:09:44 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\snmpsmir.dll
              + 2004-08-19 19:09:44 184,320 ------w C:\WINDOWS\ServicePackFiles\i386\snmpsnap.dll
              + 2004-08-19 19:09:44 40,448 ------w C:\WINDOWS\ServicePackFiles\i386\snmpthrd.dll
              + 2004-08-19 19:10:04 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\snmptrap.exe
              + 2004-08-19 19:09:44 130,048 ------w C:\WINDOWS\ServicePackFiles\i386\softkbd.dll
              + 2004-08-04 02:00:06 7,552 ------w C:\WINDOWS\ServicePackFiles\i386\sonyait.sys
              + 2004-08-04 02:09:56 25,472 ------w C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys
              + 2004-08-19 19:10:04 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\spdwnwxp.exe
              + 2004-08-19 19:08:56 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\spgrmr.dll
              + 2004-08-19 19:10:04 539,136 ------w C:\WINDOWS\ServicePackFiles\i386\spider.exe
              + 2004-08-04 01:59:36 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\spiisupd.exe
              + 2004-08-04 02:07:48 6,400 ------w C:\WINDOWS\ServicePackFiles\i386\splitter.sys
              + 2004-08-19 19:10:04 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\spnpinst.exe
              + 2004-08-19 19:09:44 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\spoolss.dll
              + 2004-08-19 19:10:04 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe
              + 2004-08-19 19:08:56 197,632 ------w C:\WINDOWS\ServicePackFiles\i386\sprs040c.dll
              + 2004-08-19 19:08:58 2,986,496 ------w C:\WINDOWS\ServicePackFiles\i386\sprt040c.dll
              + 2004-08-19 19:09:44 272,384 ------w C:\WINDOWS\ServicePackFiles\i386\sptip.dll
              + 2004-08-19 19:10:04 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\spupdwxp.exe
              + 2004-08-19 19:09:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\sqldb20.dll
              + 2004-08-19 19:09:46 528,384 ------w C:\WINDOWS\ServicePackFiles\i386\sqloledb.dll
              + 2004-08-19 19:09:46 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\sqlqp20.dll
              + 2004-08-19 19:09:46 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\sqlse20.dll
              + 2004-08-19 19:09:46 442,368 ------w C:\WINDOWS\ServicePackFiles\i386\sqlsrv32.dll
              + 2004-08-19 19:09:46 180,800 ------w C:\WINDOWS\ServicePackFiles\i386\sqlunirl.dll
              + 2004-08-19 19:09:46 217,088 ------w C:\WINDOWS\ServicePackFiles\i386\sqlxmlx.dll
              + 2004-08-19 19:04:58 73,600 ------w C:\WINDOWS\ServicePackFiles\i386\sr.sys
              + 2004-08-19 19:09:46 58,434 ------w C:\WINDOWS\ServicePackFiles\i386\srchctls.dll
              + 2004-08-19 19:09:46 726,590 ------w C:\WINDOWS\ServicePackFiles\i386\srchui.dll
              + 2004-08-19 19:09:46 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\srclient.dll
              + 2004-08-19 19:09:46 241,664 ------w C:\WINDOWS\ServicePackFiles\i386\srrstr.dll
              + 2004-08-19 19:09:46 171,008 ------w C:\WINDOWS\ServicePackFiles\i386\srsvc.dll
              + 2004-08-04 02:14:46 336,256 ------w C:\WINDOWS\ServicePackFiles\i386\srv.sys
              + 2004-08-19 19:09:46 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\srvsvc.dll
              + 2004-08-19 19:10:08 708,608 ------w C:\WINDOWS\ServicePackFiles\i386\ss3dfo.scr
              + 2004-08-19 19:10:08 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ssbezier.scr
              + 2004-08-19 19:09:46 34,816 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpapi.dll
              + 2004-08-19 19:09:46 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll
              + 2004-08-19 19:10:08 393,216 ------w C:\WINDOWS\ServicePackFiles\i386\ssflwbox.scr
              + 2004-08-19 19:09:46 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\ssinc51.dll
              + 2004-08-19 19:10:08 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\ssmarque.scr
              + 2004-08-19 19:10:08 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\ssmypics.scr
              + 2004-08-19 19:10:08 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\ssmyst.scr
              + 2004-08-19 19:09:46 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\sspifilt.dll
              + 2004-08-19 19:10:08 610,304 ------w C:\WINDOWS\ServicePackFiles\i386\sspipes.scr
              + 2004-08-19 19:10:08 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\ssstars.scr
              + 2004-08-19 19:10:08 684,032 ------w C:\WINDOWS\ServicePackFiles\i386\sstext3d.scr
              + 2004-08-19 19:09:46 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\sstub.dll
              + 2004-08-19 19:09:46 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\staxmem.dll
              + 2004-08-19 19:09:46 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\stdprov.dll
              + 2004-08-19 19:09:46 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\sti.dll
              + 2004-08-19 19:09:46 138,240 ------w C:\WINDOWS\ServicePackFiles\i386\sti_ci.dll
              + 2004-08-19 19:10:04 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\stimon.exe
              + 2004-08-19 19:09:46 122,368 ------w C:\WINDOWS\ServicePackFiles\i386\stobject.dll
              + 2004-08-19 19:09:46 76,800 ------w C:\WINDOWS\ServicePackFiles\i386\storprop.dll
              + 2004-08-04 02:08:04 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\stream.sys
              + 2004-08-04 02:10:14 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\streamip.sys
              + 2004-08-19 19:09:46 246,302 ------w C:\WINDOWS\ServicePackFiles\i386\strmdll.dll
              + 2004-08-19 19:09:46 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\strmfilt.dll
              + 2004-08-19 19:10:04 16,449 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvadm.exe
              + 2004-08-19 19:10:04 65,601 ------w C:\WINDOWS\ServicePackFiles\i386\stub_fpsrvwin.exe
              + 2004-08-19 19:09:46 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\svcext51.dll
              + 2004-08-19 19:10:04 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\svchost.exe
              + 2004-08-04 01:58:42 4,352 ------w C:\WINDOWS\ServicePackFiles\i386\swenum.sys
              + 2004-08-19 19:09:46 716,800 ------w C:\WINDOWS\ServicePackFiles\i386\sxs.dll
              + 2004-07-19 21:54:18 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\sy52106.dll
              + 2004-08-19 19:09:46 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\synceng.dll
              + 2004-08-19 19:09:46 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\syncui.dll
              + 2004-08-04 02:15:56 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys
              + 2004-08-19 19:09:46 169,472 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod.dll
              + 2004-08-19 19:09:46 155,648 ------w C:\WINDOWS\ServicePackFiles\i386\sysmod_a.dll
              + 2004-08-19 19:10:04 107,520 ------w C:\WINDOWS\ServicePackFiles\i386\sysocmgr.exe
              + 2004-08-19 19:09:46 1,005,056 ------w C:\WINDOWS\ServicePackFiles\i386\syssetup.dll
              + 2004-07-19 21:54:18 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.configuration.install.dll
              + 2004-07-19 21:54:18 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\system.data.dll
              + 2004-07-19 21:54:18 1,695,744 ------w C:\WINDOWS\ServicePackFiles\i386\system.design.dll
              + 2004-07-19 21:54:18 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\system.directoryservices.dll
              + 2004-07-19 21:54:18 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.design.dll
              + 2004-07-19 21:54:18 462,848 ------w C:\WINDOWS\ServicePackFiles\i386\system.drawing.dll
              + 2004-07-19 21:54:18 212,992 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.dll
              + 2004-08-04 01:12:34 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
              + 2004-07-19 21:54:18 352,256 ------w C:\WINDOWS\ServicePackFiles\i386\system.management.dll
              + 2004-07-19 21:54:18 241,664 ------w C:\WINDOWS\ServicePackFiles\i386\system.messaging.dll
              + 2004-07-19 21:54:20 311,296 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.remoting.dll
              + 2004-07-19 21:54:20 131,072 ------w C:\WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
              + 2004-07-19 21:54:20 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\system.security.dll
              + 2004-07-19 21:54:20 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\system.serviceprocess.dll
              + 2004-07-19 21:54:20 1,200,128 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.dll
              + 2004-07-19 21:54:20 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.regularexpressions.dll
              + 2004-07-19 21:54:20 507,904 ------w C:\WINDOWS\ServicePackFiles\i386\system.web.services.dll
              + 2004-07-19 21:54:22 2,002,944 ------w C:\WINDOWS\ServicePackFiles\i386\system.windows.forms.dll
              + 2004-07-19 21:54:22 1,302,528 ------w C:\WINDOWS\ServicePackFiles\i386\system.xml.dll
              + 2004-08-19 19:09:46 210,432 ------w C:\WINDOWS\ServicePackFiles\i386\t2embed.dll
              + 2004-08-19 19:09:46 34,304 ------w C:\WINDOWS\ServicePackFiles\i386\tabletoc.dll
              + 2004-08-04 02:00:00 14,976 ------w C:\WINDOWS\ServicePackFiles\i386\tape.sys
              + 2004-08-19 19:09:48 860,160 ------w C:\WINDOWS\ServicePackFiles\i386\tapi3.dll
              + 2004-08-19 19:09:48 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\tapi32.dll
              + 2004-08-19 19:09:48 246,272 ------w C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll
              + 2004-08-19 19:10:04 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\taskmgr.exe
              + 2004-08-04 02:14:42 359,040 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
              + 2004-08-04 02:07:46 223,616 ------w C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys
              + 2004-08-19 19:09:48 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmib.dll
              + 2004-08-19 19:09:48 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmon.dll
              + 2004-08-19 19:09:48 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\tcpmonui.dll
              + 2004-08-19 19:10:04 32,827 ------w C:\WINDOWS\ServicePackFiles\i386\tcptest.exe
              + 2004-08-19 19:09:04 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\tcptsat.dll
              + 2004-08-04 02:07:50 18,560 ------w C:\WINDOWS\ServicePackFiles\i386\tdi.sys
              + 2004-08-19 19:10:20 12,040 ------w C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys
              + 2004-08-19 19:10:20 21,896 ------w C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys
              + 2004-08-19 19:10:04 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\telnet.exe
              + 2004-08-19 19:10:18 40,840 ------w C:\WINDOWS\ServicePackFiles\i386\termdd.sys
              + 2004-08-19 19:09:48 358,912 ------w C:\WINDOWS\ServicePackFiles\i386\termmgr.dll
              + 2004-08-19 19:09:48 297,984 ------w C:\WINDOWS\ServicePackFiles\i386\termsrv.dll
              + 2004-08-04 02:00:06 149,376 ------w C:\WINDOWS\ServicePackFiles\i386\tffsport.sys
              + 2004-08-19 19:09:48 391,168 ------w C:\WINDOWS\ServicePackFiles\i386\themeui.dll
              + 2004-08-19 19:10:04 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\tlntadmn.exe
              + 2004-08-19 19:10:04 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsess.exe
              + 2004-08-19 19:10:04 75,264 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvr.exe
              + 2004-08-19 19:09:48 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\tlntsvrp.dll
              + 2004-08-04 01:12:46 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\togac.exe
              + 2004-08-19 19:10:04 347,136 ------w C:\WINDOWS\ServicePackFiles\i386\tourstrt.exe
              + 2004-08-19 19:10:04 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\tp4mon.exe
              + 2004-08-19 19:10:04 260,096 ------w C:\WINDOWS\ServicePackFiles\i386\tracerpt.exe
              + 2004-08-19 19:10:04 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\tracert.exe
              + 2004-08-19 19:09:48 153,088 ------w C:\WINDOWS\ServicePackFiles\i386\triedit.dll
              + 2004-08-19 19:09:48 90,624 ------w C:\WINDOWS\ServicePackFiles\i386\trkwks.dll
              + 2004-08-19 19:09:48 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\tscfgwmi.dll
              + 2004-08-19 18:52:06 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\tscupgrd.exe
              + 2004-08-19 19:10:20 12,168 ------w C:\WINDOWS\ServicePackFiles\i386\tsddd.dll
              + 2004-08-19 19:09:48 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\tshoot.dll
              + 2004-08-19 19:09:48 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\tsoc.dll
              + 2004-08-19 19:09:48 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\tty.dll
              + 2004-08-19 19:09:04 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\ttyres.dll
              + 2004-08-19 19:09:48 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ttyui.dll
              + 2004-08-04 02:03:18 12,416 ------w C:\WINDOWS\ServicePackFiles\i386\tunmp.sys
              + 2004-08-19 19:09:48 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\twain_32.dll
              + 2004-08-19 19:09:48 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\twext.dll
              + 2004-08-19 19:09:48 101,376 ------w C:\WINDOWS\ServicePackFiles\i386\txflog.dll
              + 2004-08-04 02:07:44 44,672 ------w C:\WINDOWS\ServicePackFiles\i386\uagp35.sys
              + 2004-08-04 02:00:32 66,176 ------w C:\WINDOWS\ServicePackFiles\i386\udfs.sys
              + 2004-08-19 19:09:48 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\udhisapi.dll
              + 2004-08-19 19:09:48 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\uihelper.dll
              + 2004-08-19 19:09:48 311,808 ------w C:\WINDOWS\ServicePackFiles\i386\ulib.dll
              + 2004-08-19 19:09:48 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\umandlg.dll
              + 2004-08-19 19:09:48 119,808 ------w C:\WINDOWS\ServicePackFiles\i386\umpnpmgr.dll
              + 2004-08-19 19:09:48 264,704 ------w C:\WINDOWS\ServicePackFiles\i386\unidrv.dll
              + 2004-08-19 19:09:48 199,168 ------w C:\WINDOWS\ServicePackFiles\i386\unidrvui.dll
              + 2004-08-19 19:09:48 78,848 ------w C:\WINDOWS\ServicePackFiles\i386\unimdmat.dll
              + 2004-08-19 19:09:48 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\uniplat.dll
              + 2004-08-19 19:09:06 620,544 ------w C:\WINDOWS\ServicePackFiles\i386\unires.dll
              + 2004-08-19 19:10:04 208,896 ------w C:\WINDOWS\ServicePackFiles\i386\unregmp2.exe
              + 2004-08-19 19:09:48 316,416 ------w C:\WINDOWS\ServicePackFiles\i386\untfs.dll
              + 2004-08-04 01:58:34 209,408 ------w C:\WINDOWS\ServicePackFiles\i386\update.sys
              + 2004-08-19 19:10:04 151,040 ------w C:\WINDOWS\ServicePackFiles\i386\uploadm.exe
              + 2004-08-19 19:09:48 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\upnp.dll
              + 2004-08-19 19:10:04 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\upnpcont.exe
              + 2004-08-19 19:09:48 185,344 ------w C:\WINDOWS\ServicePackFiles\i386\upnphost.dll
              + 2004-08-19 19:09:48 240,128 ------w C:\WINDOWS\ServicePackFiles\i386\upnpui.dll
              + 2004-08-19 19:10:04 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\ups.exe
              + 2004-08-19 19:09:48 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\url.dll
              + 2004-08-19 19:09:48 603,136 ------w C:\WINDOWS\ServicePackFiles\i386\urlmon.dll
              + 2004-08-19 18:58:16 32,384 ------w C:\WINDOWS\ServicePackFiles\i386\usb101et.sys
              + 2004-08-04 02:04:34 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023.sys
              + 2004-08-04 02:04:34 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\usb8023x.sys
              + 2004-08-04 02:07:56 59,264 ------w C:\WINDOWS\ServicePackFiles\i386\usbaudio.sys
              + 2004-08-04 02:08:48 31,616 ------w C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys
              + 2004-08-04 02:08:38 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\usbehci.sys
              + 2004-08-04 02:08:44 57,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbhub.sys
              + 2004-08-04 02:08:58 16,000 ------w C:\WINDOWS\ServicePackFiles\i386\usbintel.sys
              + 2004-08-19 19:09:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\usbmon.dll
              + 2004-08-04 02:08:38 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\usbohci.sys
              + 2004-08-04 02:08:44 142,976 ------w C:\WINDOWS\ServicePackFiles\i386\usbport.sys
              + 2004-08-04 02:01:26 25,856 ------w C:\WINDOWS\ServicePackFiles\i386\usbprint.sys
              + 2004-08-04 01:58:46 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\usbscan.sys
              + 2004-08-04 02:08:44 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\usbser.sys
              + 2004-08-04 02:08:48 26,496 ------w C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
              + 2004-08-04 02:08:38 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys
              + 2004-08-19 19:09:48 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\usbui.dll
              + 2004-08-04 02:10:12 78,464 ------w C:\WINDOWS\ServicePackFiles\i386\usbvideo.sys
              + 2004-08-19 19:09:48 578,048 ------w C:\WINDOWS\ServicePackFiles\i386\user32.dll
              + 2004-08-19 19:09:48 731,136 ------w C:\WINDOWS\ServicePackFiles\i386\userenv.dll
              + 2004-08-19 19:10:04 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\userinit.exe
              + 2004-08-19 19:09:48 406,528 ------w C:\WINDOWS\ServicePackFiles\i386\usp10.dll
              + 2004-08-19 19:10:04 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\utilman.exe
              + 2004-08-19 19:09:48 219,648 ------w C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll
              + 2004-08-19 19:09:48 30,749 ------w C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll
              + 2004-07-19 21:54:22 716,800 ------w C:\WINDOWS\ServicePackFiles\i386\vbc.exe
              + 2004-08-04 01:12:48 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.chs.dll
              + 2004-08-04 01:12:48 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.cht.dll
              + 2004-08-04 01:12:48 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.dll
              + 2004-08-04 01:12:48 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.es.dll
              + 2004-08-04 01:12:48 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.fr.dll
              + 2004-08-04 01:12:48 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ger.dll
              + 2004-08-04 01:12:50 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.it.dll
              + 2004-08-04 01:12:50 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.ja.dll
              + 2004-08-04 01:12:50 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\vbc7ui.kor.dll
              + 2004-08-19 19:09:48 417,792 ------w C:\WINDOWS\ServicePackFiles\i386\vbscript.dll
              + 2004-08-19 19:09:48 11,325 ------w C:\WINDOWS\ServicePackFiles\i386\vchnt5.dll
              + 2004-08-19 19:09:48 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\vdmdbg.dll
              + 2004-08-19 19:09:48 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\vdmredir.dll
              + 2004-08-19 19:09:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\version.dll
              + 2004-08-19 19:09:48 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\vfwwdm32.dll
              + 2004-08-04 02:07:08 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\vga.sys
              + 2004-08-19 19:09:48 848,384 ------w C:\WINDOWS\ServicePackFiles\i386\vgx.dll
              + 2004-08-04 02:07:44 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\viaagp.sys
              + 2004-08-04 01:59:44 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\viaide.sys
              + 2004-08-04 02:07:06 79,744 ------w C:\WINDOWS\ServicePackFiles\i386\videoprt.sys
              + 2004-08-19 19:09:48 131,584 ------w C:\WINDOWS\ServicePackFiles\i386\viewprov.dll
              + 2004-08-19 18:59:14 53,376 ------w C:\WINDOWS\ServicePackFiles\i386\volsnap.sys
              + 2004-08-04 01:12:50 999,424 ------w C:\WINDOWS\ServicePackFiles\i386\vsavb7rt.dll
              + 2004-08-19 19:09:48 430,592 ------w C:\WINDOWS\ServicePackFiles\i386\vssapi.dll
              + 2004-08-19 19:10:04 295,424 ------w C:\WINDOWS\ServicePackFiles\i386\vssvc.exe
              + 2004-08-19 19:09:48 177,664 ------w C:\WINDOWS\ServicePackFiles\i386\w32time.dll
              + 2004-08-19 19:09:48 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\w3ssl.dll
              + 2004-08-19 19:09:48 366,592 ------w C:\WINDOWS\ServicePackFiles\i386\w3svc.dll
              + 2004-08-19 19:09:48 498,176 ------w C:\WINDOWS\ServicePackFiles\i386\w95upgnt.dll
              + 2004-08-19 19:10:04 46,080 ------w C:\WINDOWS\ServicePackFiles\i386\wab.exe
              + 2004-08-19 19:09:48 504,832 ------w C:\WINDOWS\ServicePackFiles\i386\wab32.dll
              + 2004-08-19 19:09:06 263,168 ------w C:\WINDOWS\ServicePackFiles\i386\wab32res.dll
              + 2004-08-19 19:09:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wabfind.dll
              + 2004-08-19 19:09:48 84,992 ------w C:\WINDOWS\ServicePackFiles\i386\wabimp.dll
              + 2004-08-19 19:10:04 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\wabmig.exe
              + 2004-08-04 02:04:54 13,568 ------w C:\WINDOWS\ServicePackFiles\i386\wacompen.sys
              + 2004-08-04 01:29:38 12,415 ------w C:\WINDOWS\ServicePackFiles\i386\wadv01nt.sys
              + 2004-08-04 01:29:38 12,127 ------w C:\WINDOWS\ServicePackFiles\i386\wadv02nt.sys
              + 2004-08-04 01:29:38 11,775 ------w C:\WINDOWS\ServicePackFiles\i386\wadv05nt.sys
              + 2004-08-04 01:29:40 11,807 ------w C:\WINDOWS\ServicePackFiles\i386\wadv07nt.sys
              + 2004-08-04 01:29:40 11,295 ------w C:\WINDOWS\ServicePackFiles\i386\wadv08nt.sys
              + 2004-08-04 01:29:42 11,871 ------w C:\WINDOWS\ServicePackFiles\i386\wadv09nt.sys
              + 2004-08-04 01:29:42 11,935 ------w C:\WINDOWS\ServicePackFiles\i386\wadv11nt.sys
              + 2004-08-19 19:09:48 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\wam51.dll
              + 2004-08-19 19:09:48 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\wamreg51.dll
              + 2004-08-04 02:04:58 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\wanarp.sys
              + 2004-08-04 02:07:34 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\watchdog.sys
              + 2004-08-04 01:29:42 29,311 ------w C:\WINDOWS\ServicePackFiles\i386\watv01nt.sys
              + 2004-08-04 01:29:44 19,551 ------w C:\WINDOWS\ServicePackFiles\i386\watv02nt.sys
              + 2004-08-04 01:29:44 33,599 ------w C:\WINDOWS\ServicePackFiles\i386\watv04nt.sys
              + 2004-08-04 01:29:46 22,271 ------w C:\WINDOWS\ServicePackFiles\i386\watv06nt.sys
              + 2004-08-04 01:29:46 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\watv10nt.sys
              + 2004-08-19 19:09:48 201,216 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcntl.dll
              + 2004-08-19 19:09:48 214,528 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcomn.dll
              + 2004-08-19 19:09:48 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcons.dll
              + 2004-08-19 19:09:48 530,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemcore.dll
              + 2004-08-19 19:09:48 178,176 ------w C:\WINDOWS\ServicePackFiles\i386\wbemdisp.dll
              + 2004-08-19 19:09:48 273,920 ------w C:\WINDOWS\ServicePackFiles\i386\wbemess.dll
              + 2004-08-19 19:09:48 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\wbemperf.dll
              + 2004-08-19 19:09:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\wbemprox.dll
              + 2004-08-19 19:09:48 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\wbemsvc.dll
              + 2004-08-19 19:10:06 119,808 ------w C:\WINDOWS\ServicePackFiles\i386\wbemtest.exe
              + 2004-08-19 19:09:48 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\wbemupgd.dll
              + 2004-08-19 19:00:04 32,128 ------w C:\WINDOWS\ServicePackFiles\i386\wceusbsh.sys
              + 2004-08-04 01:29:46 23,615 ------w C:\WINDOWS\ServicePackFiles\i386\wch7xxnt.sys
              + 2004-08-19 19:09:48 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\wdigest.dll
              + 2004-08-19 19:10:10 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.drv
              + 2004-08-04 02:15:06 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys
              + 2004-08-19 19:09:48 281,600 ------w C:\WINDOWS\ServicePackFiles\i386\webcheck.dll
              + 2004-08-19 19:09:48 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\webclnt.dll
              + 2004-08-19 19:09:48 136,192 ------w C:\WINDOWS\ServicePackFiles\i386\webvw.dll
              + 2004-08-19 19:10:06 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\wextract.exe
              + 2004-08-19 19:10:06 438,784 ------w C:\WINDOWS\ServicePackFiles\i386\wiaacmgr.exe
              + 2004-08-19 19:09:48 465,920 ------w C:\WINDOWS\ServicePackFiles\i386\wiadefui.dll
              + 2004-08-19 19:09:48 124,928 ------w C:\WINDOWS\ServicePackFiles\i386\wiadss.dll
              + 2004-08-19 19:09:48 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\wiascr.dll
              + 2004-08-19 19:09:48 333,824 ------w C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll
              + 2004-08-19 19:09:48 594,432 ------w C:\WINDOWS\ServicePackFiles\i386\wiashext.dll
              + 2004-08-19 19:09:48 111,104 ------w C:\WINDOWS\ServicePackFiles\i386\wiavideo.dll
              + 2004-08-19 19:00:56 1,836,032 ------w C:\WINDOWS\ServicePackFiles\i386\win32k.sys
              + 2004-08-19 19:09:48 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\win32spl.dll
              + 2004-08-19 19:09:08 938,496 ------w C:\WINDOWS\ServicePackFiles\i386\winbrand.dll
              + 2004-08-19 19:10:06 288,256 ------w C:\WINDOWS\ServicePackFiles\i386\winhlp32.exe
              + 2004-08-19 19:09:48 351,232 ------w C:\WINDOWS\ServicePackFiles\i386\winhttp.dll
              + 2004-08-19 19:09:48 660,480 ------w C:\WINDOWS\ServicePackFiles\i386\wininet.dll
              + 2004-08-19 19:09:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\winipsec.dll
              + 2004-08-19 19:10:06 506,368 ------w C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
              + 2004-08-19 19:09:48 180,736 ------w C:\WINDOWS\ServicePackFiles\i386\winmm.dll
              + 2004-08-04 01:51:20 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\winnls.dll
              + 2004-08-19 19:09:08 773,632 ------w C:\WINDOWS\ServicePackFiles\i386\winntbbu.dll
              + 2004-08-19 19:09:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\winrnr.dll
              + 2004-08-19 19:09:48 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\winscard.dll
              + 2004-08-19 19:09:48 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\winshfhc.dll
              + 2004-08-19 19:10:10 146,944 ------w C:\WINDOWS\ServicePackFiles\i386\winspool.drv
              + 2004-08-19 19:09:48 291,328 ------w C:\WINDOWS\ServicePackFiles\i386\winsrv.dll
              + 2004-08-19 19:09:48 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\winsta.dll
              + 2004-08-19 19:09:48 176,640 ------w C:\WINDOWS\ServicePackFiles\i386\wintrust.dll
              + 2004-08-19 19:10:06 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\winver.exe
              + 2004-08-19 19:09:48 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll
              + 2004-08-19 19:09:48 172,544 ------w C:\WINDOWS\ServicePackFiles\i386\wldap32.dll
              + 2004-08-04 01:31:28 154,624 ------w C:\WINDOWS\ServicePackFiles\i386\wlluc48.sys
              + 2004-08-19 19:09:48 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\wlnotify.dll
              + 2004-08-19 19:09:48 408,064 ------w C:\WINDOWS\ServicePackFiles\i386\wmadmod.dll
              + 2004-08-19 19:09:48 670,720 ------w C:\WINDOWS\ServicePackFiles\i386\wmadmoe.dll
              + 2004-08-19 19:09:48 230,400 ------w C:\WINDOWS\ServicePackFiles\i386\wmasf.dll
              + 2004-08-19 19:09:48 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\wmdmlog.dll
              + 2004-08-19 19:09:48 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\wmdmps.dll
              + 2004-08-19 19:09:08 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\wmerror.dll
              + 2004-08-19 19:09:08 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmi.dll
              + 2004-08-04 02:07:42 8,832 ------w C:\WINDOWS\ServicePackFiles\i386\wmiacpi.sys
              + 2004-08-19 19:10:06 196,608 ------w C:\WINDOWS\ServicePackFiles\i386\wmiadap.exe
              + 2004-08-19 19:09:08 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapres.dll
              + 2004-08-19 19:09:48 89,088 ------w C:\WINDOWS\ServicePackFiles\i386\wmiaprpl.dll
              + 2004-08-19 19:10:06 126,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmiapsrv.exe
              + 2004-08-19 19:10:06 369,664 ------w C:\WINDOWS\ServicePackFiles\i386\wmic.exe
              + 2004-08-19 19:09:50 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\wmicookr.dll
              + 2004-08-19 19:09:50 140,800 ------w C:\WINDOWS\ServicePackFiles\i386\wmidcprv.dll
              + 2004-08-19 19:09:50 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\wmidx.dll
              + 2004-08-19 19:09:50 156,672 ------w C:\WINDOWS\ServicePackFiles\i386\wmipcima.dll
              + 2004-08-19 19:09:50 132,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmipdskq.dll
              + 2004-08-19 19:09:50 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\wmipiprt.dll
              + 2004-08-19 19:09:50 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\wmipjobj.dll
              + 2004-08-19 19:09:50 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprov.dll
              + 2004-08-19 19:09:50 437,248 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvsd.dll
              + 2004-08-19 19:10:06 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe
              + 2004-08-19 19:09:50 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmipsess.dll
              + 2004-08-19 19:09:50 145,408 ------w C:\WINDOWS\ServicePackFiles\i386\wmisvc.dll
              + 2004-08-19 19:09:50 99,328 ------w C:\WINDOWS\ServicePackFiles\i386\wmiutils.dll
              + 2004-08-19 19:09:50 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ae.dll
              + 2004-08-19 19:09:50 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2eres.dll
              + 2004-08-19 19:09:50 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2ext.dll
              + 2004-08-19 19:09:50 402,432 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2filt.dll
              + 2004-08-19 19:09:50 502,272 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxa.dll
              + 2004-08-19 19:09:50 325,632 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2fxb.dll
              + 2004-08-19 19:09:50 4,290,048 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res.dll
              + 2004-08-19 19:09:50 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\wmm2res2.dll
              + 2004-08-19 19:09:50 1,050,624 ------w C:\WINDOWS\ServicePackFiles\i386\wmnetmgr.dll
              + 2004-08-19 19:09:50 4,874,240 ------w C:\WINDOWS\ServicePackFiles\i386\wmp.dll
              + 2004-08-19 19:09:50 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\wmpasf.dll
              + 2004-08-19 19:09:50 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\wmpband.dll
              + 2004-08-19 19:09:50 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpcd.dll
              + 2004-08-19 19:09:50 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpcore.dll
              + 2004-08-19 19:09:50 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmpdxm.dll
              + 2004-08-19 19:10:06 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\wmplayer.exe
              + 2004-08-19 19:09:12 2,985,984 ------w C:\WINDOWS\ServicePackFiles\i386\wmploc.dll
              + 2004-08-19 19:09:50 221,184 ------w C:\WINDOWS\ServicePackFiles\i386\wmpns.dll
              + 2004-08-19 19:09:50 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\wmpshell.dll
              + 2004-08-19 19:09:50 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\wmpui.dll
              + 2004-08-19 19:09:50 759,296 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmod.dll
              + 2004-08-19 19:09:50 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmoe.dll
              + 2004-08-19 19:09:50 1,119,744 ------w C:\WINDOWS\ServicePackFiles\i386\wmsdmoe2.dll
              + 2004-08-19 19:09:50 484,864 ------w C:\WINDOWS\ServicePackFiles\i386\wmspdmod.dll
              + 2004-08-19 19:09:50 896,512 ------w C:\WINDOWS\ServicePackFiles\i386\wmspdmoe.dll
              + 2004-08-19 19:09:50 303,616 ------w C:\WINDOWS\ServicePackFiles\i386\wmstream.dll
              + 2004-08-19 19:10:14 2,105,344 ------w C:\WINDOWS\ServicePackFiles\i386\wmvcore.dll
              + 2004-08-19 19:09:50 809,984 ------w C:\WINDOWS\ServicePackFiles\i386\wmvdmod.dll
              + 2004-08-19 19:09:50 1,001,472 ------w C:\WINDOWS\ServicePackFiles\i386\wmvdmoe2.dll
              + 2004-08-19 19:10:06 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\wordpad.exe
              + 2004-08-19 19:09:50 265,216 ------w C:\WINDOWS\ServicePackFiles\i386\wow32.dll
              + 2004-08-19 19:10:06 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\wpabaln.exe
              + 2004-08-19 19:10:06 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\wpnpinst.exe
              + 2004-08-19 19:09:50 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
              + 2004-08-19 19:09:50 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\ws2help.dll
              + 2004-08-19 19:10:06 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe
              + 2004-08-19 19:10:06 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\wscript.exe
              + 2004-08-19 19:09:50 81,408 ------w C:\WINDOWS\ServicePackFiles\i386\wscsvc.dll
              + 2004-08-19 19:09:50 614,400 ------w C:\WINDOWS\ServicePackFiles\i386\wsecedit.dll
              + 2004-08-19 19:09:50 108,032 ------w C:\WINDOWS\ServicePackFiles\i386\wshbth.dll
              + 2004-08-19 19:09:50 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\wshcon.dll
              + 2004-08-19 19:09:50 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\wshext.dll
              + 2004-08-19 19:09:50 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\wship6.dll
              + 2004-08-19 19:09:50 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\wshirda.dll
              + 2004-08-19 19:09:50 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\wshrm.dll
              + 2004-08-19 19:09:50 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll
              + 2004-08-04 01:29:48 12,063 ------w C:\WINDOWS\ServicePackFiles\i386\wsiintxx.sys
              + 2004-08-19 19:09:50 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\wsnmp32.dll
              + 2004-08-19 19:09:50 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\wsock32.dll
              + 2004-08-04 02:10:22 19,328 ------w C:\WINDOWS\ServicePackFiles\i386\wstcodec.sys
              + 2004-08-19 19:09:50 51,200 ------w C:\WINDOWS\ServicePackFiles\i386\wstdecod.dll
              + 2004-08-19 19:09:50 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\wtsapi32.dll
              + 2004-08-19 19:09:50 432,640 ------w C:\WINDOWS\ServicePackFiles\i386\wuapi.dll
              + 2004-08-19 19:10:06 112,640 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe
              + 2004-08-19 19:10:06 168,960 ------w C:\WINDOWS\ServicePackFiles\i386\wuauclt1.exe
              + 2004-08-19 19:09:50 1,134,592 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng.dll
              + 2004-08-19 19:09:50 184,320 ------w C:\WINDOWS\ServicePackFiles\i386\wuaueng1.dll
              + 2004-08-19 19:09:50 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\wuauserv.dll
              + 2004-08-19 19:09:50 114,176 ------w C:\WINDOWS\ServicePackFiles\i386\wucltui.dll
              + 2004-08-19 19:09:50 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\wups.dll
              + 2004-08-19 19:09:50 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\wuweb.dll
              + 2004-08-04 01:29:50 19,455 ------w C:\WINDOWS\ServicePackFiles\i386\wvchntxx.sys
              + 2004-08-19 19:09:50 378,880 ------w C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll
              + 2004-08-19 19:09:50 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll
              + 2004-08-19 19:09:50 359,936 ------w C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll
              + 2004-08-19 19:09:50 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\xactsrv.dll
              + 2004-08-19 19:10:06 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\xcopy.exe
              + 2004-07-17 14:39:04 177,784 ------w C:\WINDOWS\ServicePackFiles\i386\xenroll.dll
              + 2004-08-19 19:09:50 129,536 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll
              + 2004-08-19 19:09:50 50,176 ------w C:\WINDOWS\ServicePackFiles\i386\xmlprovi.dll
              + 2004-08-19 19:09:50 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\xolehlp.dll
              + 2004-08-19 19:09:50 116,736 ------w C:\WINDOWS\ServicePackFiles\i386\xrxwiadr.dll
              + 2004-08-19 19:09:50 340,480 ------w C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll
              + 2004-08-19 19:10:04 32,866 ------w C:\WINDOWS\slrundll.exe
              + 2008-03-19 22:23:20 114,688 ----a-w C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
              + 2008-03-19 22:36:22 202,168 ----a-w C:\WINDOWS\system32\Adobe\Director\SwDir.dll
              + 2008-03-19 22:24:02 487,424 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll
              + 2008-03-19 21:46:26 1,798,144 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\dirapi.dll
              + 2008-03-19 22:24:04 9,216 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll
              + 2008-03-19 21:36:14 754,688 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gi.dll
              + 2008-03-19 21:36:16 1,145,896 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gt.exe
              + 2008-03-19 21:36:14 52,288 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\gtapi.dll
              + 2008-03-19 21:42:42 892,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll
              + 2008-03-19 22:22:34 249,856 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll
              + 2008-03-19 22:25:36 442,368 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll
              + 2008-03-19 22:36:06 439,736 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100429.exe
              + 2008-03-19 22:26:20 110,592 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe
              + 2008-03-19 22:22:22 94,208 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll
              + 2008-03-19 21:36:14 50,808 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
              + 1999-06-25 13:55:30 149,504 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE
              + 2004-08-19 19:09:20 229,376 ------w C:\WINDOWS\system32\ati2cqag.dll
              + 2004-08-19 19:09:20 377,984 ------w C:\WINDOWS\system32\ati2dvaa.dll
              + 2004-08-19 19:09:20 201,728 ------w C:\WINDOWS\system32\ati2dvag.dll
              + 2004-08-19 19:09:20 870,784 ------w C:\WINDOWS\system32\ati3d1ag.dll
              + 2004-08-19 19:09:20 1,888,992 ------w C:\WINDOWS\system32\ati3duag.dll
              + 2004-08-19 19:09:20 32,768 ------w C:\WINDOWS\system32\ativtmxx.dll
              + 2004-08-19 19:09:20 516,768 ------w C:\WINDOWS\system32\ativvaxx.dll
              - 2007-12-07 01:07:03 1,024,000 ----a-w C:\WINDOWS\system32\browseui.dll
              + 2008-02-16 09:02:34 1,024,000 ----a-w C:\WINDOWS\system32\browseui.dll
              - 2007-12-07 01:07:03 152,064 ----a-w C:\WINDOWS\system32\cdfview.dll
              + 2008-02-16 09:02:34 152,064 ----a-w C:\WINDOWS\system32\cdfview.dll
              + 2004-08-04 01:59:36 9,728 ------w C:\WINDOWS\system32\comsdupd.exe
              - 2008-03-26 13:17:46 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
              + 2008-04-15 04:53:27 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
              - 2008-03-26 13:17:46 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
              + 2008-04-15 04:53:27 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
              - 2008-03-26 13:17:46 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
              + 2008-04-15 04:53:27 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
              - 2007-12-07 01:07:03 1,056,768 ----a-w C:\WINDOWS\system32\danim.dll
              + 2007-04-18 12:31:56 1,056,768 ----a-w C:\WINDOWS\system32\danim.dll
              - 2005-09-23 10:28:38 83,456 ----a-w C:\WINDOWS\system32\dfshim.dll
              + 2007-10-24 04:47:28 96,760 ----a-w C:\WINDOWS\system32\dfshim.dll
              - 2007-12-07 01:07:03 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
              + 2008-02-16 09:02:34 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
              - 2007-12-07 01:07:03 152,064 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
              + 2008-02-16 09:02:34 152,064 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
              - 2004-08-04 03:31:52 97,792 -c--a-w C:\WINDOWS\system32\dllcache\chtmbx.dll
              + 2004-08-04 01:31:52 97,792 -c--a-w C:\WINDOWS\system32\dllcache\chtmbx.dll
              - 2004-08-04 03:31:54 56,320 -c--a-w C:\WINDOWS\system32\dllcache\chtskdic.dll
              + 2004-08-04 01:31:54 56,320 -c--a-w C:\WINDOWS\system32\dllcache\chtskdic.dll
              - 2004-08-04 03:31:54 173,568 -c--a-w C:\WINDOWS\system32\dllcache\chtskf.dll
              + 2004-08-04 01:31:54 173,568 -c--a-w C:\WINDOWS\system32\dllcache\chtskf.dll
              - 2004-08-04 03:31:54 198,656 -c--a-w C:\WINDOWS\system32\dllcache\cintime.dll
              + 2004-08-04 01:31:54 198,656 -c--a-w C:\WINDOWS\system32\dllcache\cintime.dll
              - 2004-08-04 03:31:56 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe
              + 2004-08-04 01:31:56 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe
              - 2004-08-04 03:31:40 57,399 -c--a-w C:\WINDOWS\system32\dllcache\cplexe.exe
              + 2004-08-04 01:31:40 57,399 -c--a-w C:\WINDOWS\system32\dllcache\cplexe.exe
              - 2004-08-19 21:09:22 28,672 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
              + 2006-06-02 19:32:20 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll
              - 2007-12-07 01:07:03 1,056,768 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
              + 2007-04-18 12:31:56 1,056,768 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
              - 2006-06-26 17:41:32 148,480 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
              + 2008-02-20 05:35:05 148,992 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
              - 2004-08-19 21:09:24 45,568 -c--a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
              + 2008-02-20 05:35:05 45,568 -c--a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
              - 2007-12-07 01:07:03 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
              + 2008-02-16 09:02:34 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
              - 2007-12-07 01:07:03 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
              + 2008-02-16 09:02:35 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
              - 2007-12-07 01:07:04 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
              + 2008-02-16 09:02:35 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
              - 2007-06-19 13:32:25 282,112 -c--a-w C:\WINDOWS\system32\dllcache\gdi32.dll
              + 2008-02-20 06:51:00 282,624 -c--a-w C:\WINDOWS\system32\dllcache\gdi32.dll
              - 2007-12-06 13:07:07 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
              + 2008-02-15 09:23:37 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
              - 2007-12-07 01:07:04 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
              + 2008-02-16 09:02:35 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
              - 2004-08-04 04:04:38 106,496 -c--a-w C:\WINDOWS\system32\dllcache\imekrcic.dll
              + 2004-08-04 02:04:38 106,496 -c--a-w C:\WINDOWS\system32\dllcache\imekrcic.dll
              - 2004-08-04 04:04:34 86,016 -c--a-w C:\WINDOWS\system32\dllcache\imekrmbx.dll
              + 2004-08-04 02:04:34 86,016 -c--a-w C:\WINDOWS\system32\dllcache\imekrmbx.dll
              - 2004-08-04 03:31:50 811,064 -c--a-w C:\WINDOWS\system32\dllcache\imjp81k.dll
              + 2004-08-04 01:31:50 811,064 -c--a-w C:\WINDOWS\system32\dllcache\imjp81k.dll
              - 2004-08-04 03:31:52 368,696 -c--a-w C:\WINDOWS\system32\dllcache\imjpcic.dll
              + 2004-08-04 01:31:52 368,696 -c--a-w C:\WINDOWS\system32\dllcache\imjpcic.dll
              - 2004-08-04 03:31:52 716,856 -c--a-w C:\WINDOWS\system32\dllcache\imjpcus.dll
              + 2004-08-04 01:31:52 716,856 -c--a-w C:\WINDOWS\system32\dllcache\imjpcus.dll
              - 2004-08-04 03:31:54 81,976 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.dll
              + 2004-08-04 01:31:54 81,976 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.dll
              - 2004-08-04 03:31:54 307,257 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.exe
              + 2004-08-04 01:31:54 307,257 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.exe
              - 2004-08-04 03:31:56 155,705 -c--a-w C:\WINDOWS\system32\dllcache\imjpdsvr.exe
              + 2004-08-04 01:31:56 155,705 -c--a-w C:\WINDOWS\system32\dllcache\imjpdsvr.exe
              - 2004-08-04 03:31:58 196,665 -c--a-w C:\WINDOWS\system32\dllcache\imjpinst.exe
              + 2004-08-04 01:31:58 196,665 -c--a-w C:\WINDOWS\system32\dllcache\imjpinst.exe
              - 2004-08-04 03:32:00 208,952 -c--a-w C:\WINDOWS\system32\dllcache\imjpmig.exe
              + 2004-08-04 01:32:00 208,952 -c--a-w C:\WINDOWS\system32\dllcache\imjpmig.exe
              - 2004-08-04 03:32:12 233,527 -c--a-w C:\WINDOWS\system32\dllcache\imjprw.exe
              + 2004-08-04 01:32:12 233,527 -c--a-w C:\WINDOWS\system32\dllcache\imjprw.exe
              - 2004-08-04 03:32:16 262,200 -c--a-w C:\WINDOWS\system32\dllcache\imjputy.exe
              + 2004-08-04 01:32:16 262,200 -c--a-w C:\WINDOWS\system32\dllcache\imjputy.exe
              - 2004-08-04 03:32:16 274,489 -c--a-w C:\WINDOWS\system32\dllcache\imjputyc.dll
              + 2004-08-04 01:32:16 274,489 -c--a-w C:\WINDOWS\system32\dllcache\imjputyc.dll
              - 2004-08-04 03:32:28 102,456 -c--a-w C:\WINDOWS\system32\dllcache\imlang.dll
              + 2004-08-04 01:32:28 102,456 -c--a-w C:\WINDOWS\system32\dllcache\imlang.dll
              - 2004-08-04 03:31:50 59,392 -c--a-w C:\WINDOWS\system32\dllcache\imscinst.exe
              + 2004-08-04 01:31:50 59,392 -c--a-w C:\WINDOWS\system32\dllcache\imscinst.exe
              - 2007-12-07 01:07:04 96,768 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
              + 2008-02-16 09:02:35 96,768 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
              - 2007-11-14 07:28:02 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
              + 2007-12-18 14:41:58 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
              - 2007-12-07 01:07:04 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
              + 2008-02-16 09:02:35 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
              + 2001-08-18 01:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101b.dll
              + 2001-08-18 01:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101c.dll
              + 2001-08-18 01:55:56 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbd103.dll
              + 2001-08-18 01:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd106.dll
              + 2001-08-23 20:47:06 8,704 -c--a-w C:\WINDOWS\system32\dllcache\kbdjpn.dll
              + 2001-08-23 20:47:06 8,192 -c--a-w C:\WINDOWS\system32\dllcache\kbdkor.dll
              - 2007-12-07 14:37:06 3,080,192 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
              + 2008-02-16 22:32:38 3,080,704 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
              - 2007-12-07 01:07:04 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
              + 2008-02-16 09:02:36 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
              - 2007-12-07 01:07:04 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
              + 2008-02-16 09:02:37 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
              - 2007-12-07 01:07:04 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
              + 2008-02-16 09:02:37 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
              - 2004-08-04 03:32:12 15,872 -c--a-w C:\WINDOWS\system32\dllcache\padrs404.dll
              + 2004-08-04 01:32:12 15,872 -c--a-w C:\WINDOWS\system32\dllcache\padrs404.dll
              - 2004-08-04 03:31:50 15,360 -c--a-w C:\WINDOWS\system32\dllcache\padrs804.dll
              + 2004-08-04 01:31:50 15,360 -c--a-w C:\WINDOWS\system32\dllcache\padrs804.dll
              - 2004-08-04 03:31:50 175,104 -c--a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll
              + 2004-08-04 01:31:50 175,104 -c--a-w C:\WINDOWS\system32\dllcache\pintlcsa.dll
              - 2004-08-04 03:31:50 53,760 -c--a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll
              + 2004-08-04 01:31:50 53,760 -c--a-w C:\WINDOWS\system32\dllcache\pintlcsd.dll
              - 2004-08-04 03:31:50 70,144 -c--a-w C:\WINDOWS\system32\dllcache\pintlphr.exe
              + 2004-08-04 01:31:50 70,144 -c--a-w C:\WINDOWS\system32\dllcache\pintlphr.exe
              - 2004-08-04 03:31:50 67,584 -c--a-w C:\WINDOWS\system32\dllcache\pmigrate.dll
              + 2004-08-04 01:31:50 67,584 -c--a-w C:\WINDOWS\system32\dllcache\pmigrate.dll
              - 2007-12-07 01:07:04 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
              + 2008-02-16 09:02:37 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
              - 2007-12-07 01:07:05 1,495,040 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
              + 2008-02-16 09:02:38 1,495,040 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
              - 2007-12-07 01:07:05 474,624 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
              + 2008-02-16 09:02:38 474,624 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
              - 2004-08-04 03:32:16 44,032 -c--a-w C:\WINDOWS\system32\dllcache\tintlphr.exe
              + 2004-08-04 01:32:16 44,032 -c--a-w C:\WINDOWS\system32\dllcache\tintlphr.exe
              - 2004-08-04 03:32:16 455,168 -c--a-w C:\WINDOWS\system32\dllcache\tintsetp.exe
              + 2004-08-04 01:32:16 455,168 -c--a-w C:\WINDOWS\system32\dllcache\tintsetp.exe
              - 2004-08-04 03:32:14 10,240 -c--a-w C:\WINDOWS\system32\dllcache\tmigrate.dll
              + 2004-08-04 01:32:14 10,240 -c--a-w C:\WINDOWS\system32\dllcache\tmigrate.dll
              - 2004-08-04 04:04:12 76,288 -c--a-w C:\WINDOWS\system32\dllcache\uniime.dll
              + 2004-08-04 02:04:12 76,288 -c--a-w C:\WINDOWS\system32\dllcache\uniime.dll
              - 2007-12-07 01:07:05 617,472 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
              + 2008-02-16 09:02:39 617,984 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
              - 2004-08-19 21:09:48 417,792 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
              + 2007-12-18 14:41:59 417,792 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
              - 2004-08-04 03:32:36 426,041 -c--a-w C:\WINDOWS\system32\dllcache\voicepad.dll
              + 2004-08-04 01:32:36 426,041 -c--a-w C:\WINDOWS\system32\dllcache\voicepad.dll
              - 2004-08-04 03:32:36 86,073 -c--a-w C:\WINDOWS\system32\dllcache\voicesub.dll
              + 2004-08-04 01:32:36 86,073 -c--a-w C:\WINDOWS\system32\dllcache\voicesub.dll
              - 2004-08-19 21:09:48 49,152 -c--a-w C:\WINDOWS\system32\dllcache\wdigest.dll
              + 2006-03-24 04:37:52 49,152 -c--a-w C:\WINDOWS\system32\dllcache\wdigest.dll
              - 2007-03-08 15:33:58 1,843,712 -c--a-w C:\WINDOWS\system32\dllcache\win32k.sys
              + 2008-03-20 08:09:22 1,845,376 -c--a-w C:\WINDOWS\system32\dllcache\win32k.sys
              - 2007-12-07 01:07:05 663,552 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
              + 2008-02-16 09:02:39 663,552 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
              - 2006-06-26 17:41:32 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
              + 2008-02-20 05:35:05 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
              + 2004-08-19 19:09:20 4,255 ------w C:\WINDOWS\system32\drivers\adv01nt5.dll
              + 2004-08-19 19:09:20 3,967 ------w C:\WINDOWS\system32\drivers\adv02nt5.dll
              + 2004-08-19 19:09:20 3,615 ------w C:\WINDOWS\system32\drivers\adv05nt5.dll
              + 2004-08-19 19:09:20 3,647 ------w C:\WINDOWS\system32\drivers\adv07nt5.dll
              + 2004-08-19 19:09:20 3,135 ------w C:\WINDOWS\system32\drivers\adv08nt5.dll
              + 2004-08-19 19:09:20 3,711 ------w C:\WINDOWS\system32\drivers\adv09nt5.dll
              + 2004-08-19 19:09:20 3,775 ------w C:\WINDOWS\system32\drivers\adv11nt5.dll
              + 2004-08-04 02:07:42 42,368 ------w C:\WINDOWS\system32\drivers\agp440.sys
              + 2004-08-04 02:07:44 44,928 ------w C:\WINDOWS\system32\drivers\agpcpq.sys
              + 2004-08-04 02:07:42 42,752 ------w C:\WINDOWS\system32\drivers\alim1541.sys
              + 2004-08-04 02:07:44 43,008 ------w C:\WINDOWS\system32\drivers\amdagp.sys
              + 2004-08-04 01:29:30 56,623 ------w C:\WINDOWS\system32\drivers\ati1btxx.sys
              + 2004-08-04 01:29:30 11,615 ------w C:\WINDOWS\system32\drivers\ati1mdxx.sys
              + 2004-08-04 01:29:30 12,047 ------w C:\WINDOWS\system32\drivers\ati1pdxx.sys
              + 2004-08-04 01:29:32 30,671 ------w C:\WINDOWS\system32\drivers\ati1raxx.sys
              + 2004-08-04 01:29:32 63,663 ------w C:\WINDOWS\system32\drivers\ati1rvxx.sys
              + 2004-08-04 01:29:32 26,367 ------w C:\WINDOWS\system32\drivers\ati1snxx.sys
              + 2004-08-04 01:29:32 21,343 ------w C:\WINDOWS\system32\drivers\ati1ttxx.sys
              + 2004-08-04 01:29:32 36,463 ------w C:\WINDOWS\system32\drivers\ati1tuxx.sys
              + 2004-08-04 01:29:32 29,455 ------w C:\WINDOWS\system32\drivers\ati1xbxx.sys
              + 2004-08-04 01:29:32 34,735 ------w C:\WINDOWS\system32\drivers\ati1xsxx.sys
              + 2004-08-19 18:53:40 327,168 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys
              + 2004-08-19 18:53:42 701,440 ------w C:\WINDOWS\system32\drivers\ati2mtag.sys
              + 2004-08-04 01:29:28 57,856 ------w C:\WINDOWS\system32\drivers\atinbtxx.sys
              + 2004-08-04 01:29:30 13,824 ------w C:\WINDOWS\system32\drivers\atinmdxx.sys
              + 2004-08-04 01:29:30 14,336 ------w C:\WINDOWS\system32\drivers\atinpdxx.sys
              + 2004-08-04 01:29:30 52,224 ------w C:\WINDOWS\system32\drivers\atinraxx.sys
              + 2004-08-04 01:29:32 104,960 ------w C:\WINDOWS\system32\drivers\atinrvxx.sys
              + 2004-08-04 01:29:32 28

              1. + 2004-08-19 19:09:28 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\hostmib.dll
                + 2004-08-19 19:09:28 146,944 ------w C:\WINDOWS\ServicePackFiles\i386\hotplug.dll
                + 2004-08-19 19:09:28 10,752 ------w C:\WINDOWS\ServicePackFiles\i386\hpcjrr.dll
                + 2004-08-19 19:09:28 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\hpcjrrps.dll
                + 2004-08-19 19:09:28 87,552 ------w C:\WINDOWS\ServicePackFiles\i386\hpfud50.dll
                + 2004-08-19 19:09:56 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\hscupd.exe
                + 2004-08-04 01:41:48 220,032 ------w C:\WINDOWS\ServicePackFiles\i386\hsfbs2s2.sys
                + 2004-08-19 19:09:28 32,285 ------w C:\WINDOWS\ServicePackFiles\i386\hsfcisp2.dll
                + 2004-08-04 01:41:50 685,056 ------w C:\WINDOWS\ServicePackFiles\i386\hsfcxts2.sys
                + 2004-08-04 01:41:56 1,041,536 ------w C:\WINDOWS\ServicePackFiles\i386\hsfdpsp2.sys
                + 2004-08-04 02:00:14 263,040 ------w C:\WINDOWS\ServicePackFiles\i386\http.sys
                + 2004-08-19 19:09:28 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\httpapi.dll
                + 2004-08-19 19:09:28 268,288 ------w C:\WINDOWS\ServicePackFiles\i386\httpext.dll
                + 2004-08-19 19:09:28 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\httpmb51.dll
                + 2004-08-19 19:09:28 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\httpod51.dll
                + 2004-08-19 19:09:28 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\htui.dll
                + 2004-08-19 19:09:28 352,256 ------w C:\WINDOWS\ServicePackFiles\i386\hypertrm.dll
                + 2004-08-04 02:00:52 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\i2omgmt.sys
                + 2004-08-04 02:00:52 18,560 ------w C:\WINDOWS\ServicePackFiles\i386\i2omp.sys
                + 2004-08-19 18:56:40 54,400 ------w C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys
                + 2004-08-19 19:09:28 702,845 ------w C:\WINDOWS\ServicePackFiles\i386\i81xdnt5.dll
                + 2004-08-04 01:29:38 161,020 ------w C:\WINDOWS\ServicePackFiles\i386\i81xnt5.sys
                + 2004-08-19 19:09:28 119,808 ------w C:\WINDOWS\ServicePackFiles\i386\iasrad.dll
                + 2004-08-19 19:09:28 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\icaapi.dll
                + 2004-08-19 19:09:28 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\iccvid.dll
                + 2004-08-19 19:09:28 253,952 ------w C:\WINDOWS\ServicePackFiles\i386\icm32.dll
                + 2004-08-19 19:08:16 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\icmp.dll
                + 2004-08-19 19:09:28 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\iconlib.dll
                + 2004-08-19 19:09:28 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn.dll
                + 2004-08-19 19:09:56 218,624 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn1.exe
                + 2004-08-19 19:09:56 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\icwconn2.exe
                + 2004-08-19 19:09:28 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\icwdial.dll
                + 2004-08-19 19:09:28 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\icwdl.dll
                + 2004-08-19 19:09:28 176,128 ------w C:\WINDOWS\ServicePackFiles\i386\icwhelp.dll
                + 2004-08-19 19:09:28 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\icwphbk.dll
                + 2004-08-19 19:09:56 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\icwrmind.exe
                + 2004-08-19 19:09:28 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\icwutil.dll
                + 2004-08-19 19:09:28 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\idq.dll
                + 2004-08-19 19:09:56 34,304 ------w C:\WINDOWS\ServicePackFiles\i386\ie4uinit.exe
                + 2004-08-19 19:09:28 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\ieakeng.dll
                + 2004-08-19 19:09:28 221,696 ------w C:\WINDOWS\ServicePackFiles\i386\ieaksie.dll
                + 2004-08-19 19:09:28 323,584 ------w C:\WINDOWS\ServicePackFiles\i386\iedkcs32.dll
                + 2004-08-19 19:09:56 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\iedw.exe
                + 2004-08-19 19:09:28 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\ieencode.dll
                + 2004-07-19 21:54:06 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\ieexec.exe
                + 2004-07-19 21:54:06 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\ieexecremote.dll
                + 2004-07-19 21:54:06 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\iehost.dll
                + 2004-08-19 19:09:28 249,344 ------w C:\WINDOWS\ServicePackFiles\i386\iepeers.dll
                + 2004-08-19 19:09:28 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\iernonce.dll
                + 2004-08-19 19:09:28 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\iesetup.dll
                + 2004-08-19 19:09:56 93,184 ------w C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
                + 2004-08-19 19:09:56 114,688 ------w C:\WINDOWS\ServicePackFiles\i386\iexpress.exe
                + 2004-08-19 19:09:28 142,848 ------w C:\WINDOWS\ServicePackFiles\i386\ifmon.dll
                + 2004-08-19 19:09:28 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\igmpagnt.dll
                + 2004-08-19 19:08:16 508,416 ------w C:\WINDOWS\ServicePackFiles\i386\iis.dll
                + 2004-08-19 19:09:28 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\iisadmin.dll
                + 2004-08-19 19:09:28 145,408 ------w C:\WINDOWS\ServicePackFiles\i386\iische51.dll
                + 2004-08-19 19:09:28 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\iisext51.dll
                + 2004-08-19 19:09:28 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\iisfecnv.dll
                + 2004-08-19 19:09:28 79,872 ------w C:\WINDOWS\ServicePackFiles\i386\iislog51.dll
                + 2004-08-19 19:09:28 64,512 ------w C:\WINDOWS\ServicePackFiles\i386\iismap.dll
                + 2004-08-19 19:09:56 31,232 ------w C:\WINDOWS\ServicePackFiles\i386\iisrstas.exe
                + 2004-08-19 19:09:28 133,632 ------w C:\WINDOWS\ServicePackFiles\i386\iisrtl.dll
                + 2004-08-04 01:11:48 184,320 ------w C:\WINDOWS\ServicePackFiles\i386\ilasm.exe
                + 2004-08-19 19:09:28 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\ils.dll
                + 2004-08-19 19:09:28 144,384 ------w C:\WINDOWS\ServicePackFiles\i386\imagehlp.dll
                + 2004-08-19 19:09:56 150,016 ------w C:\WINDOWS\ServicePackFiles\i386\imapi.exe
                + 2004-08-04 02:00:16 41,856 ------w C:\WINDOWS\ServicePackFiles\i386\imapi.sys
                + 2004-08-19 19:09:28 36,921 ------w C:\WINDOWS\ServicePackFiles\i386\imeshare.dll
                + 2004-08-19 19:09:30 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\imgutil.dll
                + 2004-08-19 19:09:30 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\imm32.dll
                + 2004-08-19 19:09:30 282,624 ------w C:\WINDOWS\ServicePackFiles\i386\inetcfg.dll
                + 2004-08-19 19:09:30 678,400 ------w C:\WINDOWS\ServicePackFiles\i386\inetcomm.dll
                + 2004-08-19 19:09:56 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\inetin51.exe
                + 2004-08-19 19:09:30 842,240 ------w C:\WINDOWS\ServicePackFiles\i386\inetmgr.dll
                + 2004-08-19 19:09:30 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\inetmib1.dll
                + 2004-08-19 19:09:30 75,264 ------w C:\WINDOWS\ServicePackFiles\i386\inetpp.dll
                + 2004-08-19 19:09:30 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\inetppui.dll
                + 2004-08-19 19:08:18 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\inetres.dll
                + 2004-08-19 19:09:56 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\inetwiz.exe
                + 2004-08-19 19:09:30 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\infoadmn.dll
                + 2004-08-19 19:09:30 257,024 ------w C:\WINDOWS\ServicePackFiles\i386\infocomm.dll
                + 2004-08-19 19:09:30 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\initpki.dll
                + 2004-08-19 19:09:30 126,464 ------w C:\WINDOWS\ServicePackFiles\i386\input.dll
                + 2004-08-19 19:09:30 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\inseng.dll
                + 2004-07-19 21:54:06 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\installutil.exe
                + 2004-08-19 18:59:08 5,504 ------w C:\WINDOWS\ServicePackFiles\i386\intelide.sys
                + 2004-08-19 18:59:10 40,320 ------w C:\WINDOWS\ServicePackFiles\i386\intelppm.sys
                + 2004-08-04 02:00:08 29,056 ------w C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys
                + 2004-08-19 19:09:56 58,368 ------w C:\WINDOWS\ServicePackFiles\i386\ipconfig.exe
                + 2004-08-19 19:08:12 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\ipevldpc.dll
                + 2004-08-19 19:08:10 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\ipevlpid.dll
                + 2004-08-19 19:09:32 95,744 ------w C:\WINDOWS\ServicePackFiles\i386\iphlpapi.dll
                + 2004-08-04 02:04:46 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\ipinip.sys
                + 2004-08-19 19:08:22 96,768 ------w C:\WINDOWS\ServicePackFiles\i386\ipmntdpc.dll
                + 2004-08-04 02:04:52 134,912 ------w C:\WINDOWS\ServicePackFiles\i386\ipnat.sys
                + 2004-08-19 19:09:32 332,800 ------w C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll
                + 2004-08-19 19:09:32 355,840 ------w C:\WINDOWS\ServicePackFiles\i386\ippromon.dll
                + 2004-08-19 19:09:32 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\iprip.dll
                + 2004-08-04 02:14:30 74,752 ------w C:\WINDOWS\ServicePackFiles\i386\ipsec.sys
                + 2004-08-19 19:09:32 361,472 ------w C:\WINDOWS\ServicePackFiles\i386\ipsecsnp.dll
                + 2004-08-19 19:09:32 184,320 ------w C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll
                + 2004-08-19 19:08:52 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\ipseldpc.dll
                + 2004-08-19 19:08:10 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\ipselpid.dll
                + 2004-08-19 19:09:32 388,096 ------w C:\WINDOWS\ServicePackFiles\i386\ipsmsnap.dll
                + 2004-08-19 19:09:56 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\ipv6.exe
                + 2004-08-19 19:09:32 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\ipv6mon.dll
                + 2004-08-19 19:09:56 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\ipxroute.exe
                + 2004-08-19 19:09:32 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\ir41_qc.dll
                + 2004-08-19 19:09:32 338,432 ------w C:\WINDOWS\ServicePackFiles\i386\ir41_qcx.dll
                + 2004-08-19 19:09:32 755,200 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_32.dll
                + 2004-08-19 19:09:32 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_qc.dll
                + 2004-08-19 19:09:32 183,808 ------w C:\WINDOWS\ServicePackFiles\i386\ir50_qcx.dll
                + 2004-08-04 02:08:34 40,832 ------w C:\WINDOWS\ServicePackFiles\i386\irbus.sys
                + 2004-08-04 02:00:54 87,424 ------w C:\WINDOWS\ServicePackFiles\i386\irda.sys
                + 2004-08-04 02:00:48 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\irenum.sys
                + 2004-08-19 19:09:56 154,112 ------w C:\WINDOWS\ServicePackFiles\i386\irftp.exe
                + 2004-08-19 19:09:32 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\irmon.dll
                + 2004-08-19 19:09:32 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\isatq.dll
                + 2004-08-19 19:09:32 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\iscomlog.dll
                + 2004-08-19 19:09:32 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\isign32.dll
                + 2004-08-19 19:09:32 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\isrdbg32.dll
                + 2004-08-19 19:09:32 143,872 ------w C:\WINDOWS\ServicePackFiles\i386\itircl.dll
                + 2004-08-19 19:09:32 134,144 ------w C:\WINDOWS\ServicePackFiles\i386\itss.dll
                + 2004-08-19 19:09:32 192,000 ------w C:\WINDOWS\ServicePackFiles\i386\iuengine.dll
                + 2004-08-19 19:09:32 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\ixsso.dll
                + 2004-08-19 19:09:32 47,616 ------w C:\WINDOWS\ServicePackFiles\i386\iyuv_32.dll
                + 2004-07-19 21:54:06 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\jsc.exe
                + 2004-08-19 19:09:32 450,560 ------w C:\WINDOWS\ServicePackFiles\i386\jscript.dll
                + 2004-08-19 19:09:32 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\jsproxy.dll
                + 2004-08-19 19:00:34 25,216 ------w C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys
                + 2004-08-19 19:08:20 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdfi1.dll
                + 2004-08-19 19:00:36 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\kbdhid.sys
                + 2004-08-19 19:08:20 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinbe1.dll
                + 2004-08-19 19:08:20 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinben.dll
                + 2004-08-19 19:08:20 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\kbdinmal.dll
                + 2004-08-19 19:08:20 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmaori.dll
                + 2004-08-19 19:08:20 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmlt47.dll
                + 2004-08-19 19:08:20 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\kbdmlt48.dll
                + 2004-08-19 19:08:20 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdno1.dll
                + 2004-08-19 19:08:20 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\kbdsmsfi.dll
                + 2004-08-19 19:08:20 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\kbdsmsno.dll
                + 2004-08-19 19:08:20 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\kbdukx.dll
                + 2004-08-04 01:59:24 7,424 ------w C:\WINDOWS\ServicePackFiles\i386\kd1394.dll
                + 2004-08-19 19:09:32 294,400 ------w C:\WINDOWS\ServicePackFiles\i386\kerberos.dll
                + 2004-08-19 19:09:32 1,048,576 ------w C:\WINDOWS\ServicePackFiles\i386\kernel32.dll
                + 2004-08-04 01:46:56 42,537 ------w C:\WINDOWS\ServicePackFiles\i386\keyboard.sys
                + 2004-08-19 19:09:32 157,184 ------w C:\WINDOWS\ServicePackFiles\i386\keymgr.dll
                + 2004-08-04 02:07:50 171,776 ------w C:\WINDOWS\ServicePackFiles\i386\kmixer.sys
                + 2004-08-04 01:49:58 92,608 ------w C:\WINDOWS\ServicePackFiles\i386\krnl386.exe
                + 2004-08-19 19:09:32 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\krnlprov.dll
                + 2004-08-04 02:15:22 140,928 ------w C:\WINDOWS\ServicePackFiles\i386\ks.sys
                + 2004-08-04 01:59:48 92,032 ------w C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys
                + 2004-08-19 19:09:32 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\ksuser.dll
                + 2004-08-04 01:31:52 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtmbx.dll
                + 2004-08-04 01:31:54 56,320 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtskdic.dll
                + 2004-08-04 01:31:54 173,568 ------w C:\WINDOWS\ServicePackFiles\i386\lang\chtskf.dll
                + 2004-08-04 01:31:54 198,656 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cintime.dll
                + 2004-08-04 01:31:56 480,256 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cintsetp.exe
                + 2004-08-04 01:31:40 57,399 ------w C:\WINDOWS\ServicePackFiles\i386\lang\cplexe.exe
                + 2004-08-04 02:04:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imekrcic.dll
                + 2004-08-04 02:04:34 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imekrmbx.dll
                + 2004-08-04 01:31:50 811,064 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjp81k.dll
                + 2004-08-04 01:31:52 368,696 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpcic.dll
                + 2004-08-04 01:31:52 716,856 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpcus.dll
                + 2004-08-04 01:31:54 81,976 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.dll
                + 2004-08-04 01:31:54 307,257 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdct.exe
                + 2004-08-04 01:31:56 155,705 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpdsvr.exe
                + 2004-08-04 01:31:58 196,665 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpinst.exe
                + 2004-08-04 01:32:00 208,952 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjpmig.exe
                + 2004-08-04 01:32:12 233,527 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjprw.exe
                + 2004-08-04 01:32:16 262,200 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjputy.exe
                + 2004-08-04 01:32:16 274,489 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imjputyc.dll
                + 2004-08-04 01:32:28 102,456 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imlang.dll
                + 2004-08-04 01:31:50 59,392 ------w C:\WINDOWS\ServicePackFiles\i386\lang\imscinst.exe
                + 2004-08-04 01:32:12 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\lang\padrs404.dll
                + 2004-08-04 01:31:50 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\lang\padrs804.dll
                + 2004-08-04 01:31:50 175,104 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsa.dll
                + 2004-08-04 01:31:50 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlcsd.dll
                + 2004-08-04 01:31:50 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pintlphr.exe
                + 2004-08-04 01:31:50 67,584 ------w C:\WINDOWS\ServicePackFiles\i386\lang\pmigrate.dll
                + 2004-08-04 01:32:16 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tintlphr.exe
                + 2004-08-04 01:32:16 455,168 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tintsetp.exe
                + 2004-08-04 01:32:14 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\lang\tmigrate.dll
                + 2004-08-04 02:04:12 76,288 ------w C:\WINDOWS\ServicePackFiles\i386\lang\uniime.dll
                + 2004-08-04 01:32:36 426,041 ------w C:\WINDOWS\ServicePackFiles\i386\lang\voicepad.dll
                + 2004-08-04 01:32:36 86,073 ------w C:\WINDOWS\ServicePackFiles\i386\lang\voicesub.dll
                + 2004-08-19 19:09:32 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\laprxy.dll
                + 2004-08-04 01:59:34 34,688 ------w C:\WINDOWS\ServicePackFiles\i386\lbrtfdc.sys
                + 2004-08-19 19:09:32 424,960 ------w C:\WINDOWS\ServicePackFiles\i386\licdll.dll
                + 2004-08-19 19:09:32 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\licmgr10.dll
                + 2004-08-19 19:09:32 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\licwmi.dll
                + 2004-08-19 19:09:32 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll
                + 2004-08-19 19:09:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\lmhsvc.dll
                + 2004-08-19 19:09:32 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\lmmib2.dll
                + 2004-08-19 19:09:32 399,872 ------w C:\WINDOWS\ServicePackFiles\i386\lmrt.dll
                + 2004-08-19 19:09:32 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\loadperf.dll
                + 2004-08-19 19:09:32 228,352 ------w C:\WINDOWS\ServicePackFiles\i386\localsec.dll
                + 2004-08-19 19:09:32 344,576 ------w C:\WINDOWS\ServicePackFiles\i386\localspl.dll
                + 2004-08-19 19:09:32 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\localui.dll
                + 2004-08-19 19:09:56 75,264 ------w C:\WINDOWS\ServicePackFiles\i386\locator.exe
                + 2004-08-19 19:09:32 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\log.dll
                + 2004-08-19 19:09:56 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\logagent.exe
                + 2004-08-19 19:09:56 61,952 ------w C:\WINDOWS\ServicePackFiles\i386\logman.exe
                + 2004-08-19 19:10:08 221,696 ------w C:\WINDOWS\ServicePackFiles\i386\logon.scr
                + 2004-08-19 19:09:56 515,584 ------w C:\WINDOWS\ServicePackFiles\i386\logonui.exe
                + 2004-08-19 19:09:32 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\lonsint.dll
                + 2004-08-19 19:09:32 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\lpdsvc.dll
                + 2004-08-19 19:09:32 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\lpk.dll
                + 2004-08-19 19:09:32 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\lprhelp.dll
                + 2004-08-19 19:09:32 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\lprmon.dll
                + 2004-08-19 19:09:32 728,576 ------w C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll
                + 2004-08-19 19:09:56 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\lsass.exe
                + 2004-08-19 19:02:02 607,452 ------w C:\WINDOWS\ServicePackFiles\i386\ltmdmnt.sys
                + 2004-08-19 19:02:06 422,528 ------w C:\WINDOWS\ServicePackFiles\i386\ltmdmntt.sys
                + 2004-08-04 02:00:08 7,040 ------w C:\WINDOWS\ServicePackFiles\i386\ltotape.sys
                + 2004-08-04 01:39:32 20,864 ------w C:\WINDOWS\ServicePackFiles\i386\lwadihid.sys
                + 2004-08-19 19:09:56 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\magnify.exe
                + 2004-08-19 19:09:56 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\makecab.exe
                + 2004-08-19 19:09:32 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\mcastmib.dll
                + 2004-08-19 19:09:32 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\mciavi32.dll
                + 2004-08-19 19:09:32 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\mciqtz32.dll
                + 2004-08-19 19:09:32 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\mciseq.dll
                + 2004-08-19 19:09:32 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\mciwave.dll
                + 2004-08-19 19:09:32 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\md5filt.dll
                + 2004-08-19 19:09:32 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\mdminst.dll
                + 2004-08-19 19:09:32 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.dll
                + 2004-08-04 01:41:56 11,868 ------w C:\WINDOWS\ServicePackFiles\i386\mdmxsdk.sys
                + 2004-08-19 19:09:32 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\medctroc.dll
                + 2004-08-04 02:00:50 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\memstpci.sys
                + 2004-08-19 19:09:32 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\metada51.dll
                + 2004-08-04 02:07:46 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\mf.sys
                + 2004-08-19 19:09:32 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\mf3216.dll
                + 2004-08-19 19:09:32 1,028,096 ------w C:\WINDOWS\ServicePackFiles\i386\mfc42.dll
                + 2004-08-19 19:09:32 1,024,000 ------w C:\WINDOWS\ServicePackFiles\i386\mfc42u.dll
                + 2004-08-19 19:09:32 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\mfcsubs.dll
                + 2004-08-19 19:09:32 14,848 ------w C:\WINDOWS\ServicePackFiles\i386\mgmtapi.dll
                + 2004-07-19 21:54:06 712,704 ------w C:\WINDOWS\ServicePackFiles\i386\microsoft.jscript.dll
                + 2004-07-19 21:54:06 286,720 ------w C:\WINDOWS\ServicePackFiles\i386\microsoft.visualbasic.dll
                + 2004-08-19 19:09:32 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\midimap.dll
                + 2004-08-19 19:09:32 201,216 ------w C:\WINDOWS\ServicePackFiles\i386\migism.dll
                + 2004-08-19 19:09:32 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\migism_a.dll
                + 2004-08-19 19:09:32 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\miglibnt.dll
                + 2004-08-19 19:09:56 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\migload.exe
                + 2004-08-19 19:09:56 786,432 ------w C:\WINDOWS\ServicePackFiles\i386\migrate.exe
                + 2004-08-19 19:09:56 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\migregdb.exe
                + 2004-08-19 19:09:56 246,784 ------w C:\WINDOWS\ServicePackFiles\i386\migwiz.exe
                + 2004-08-19 19:09:56 242,688 ------w C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe
                + 2004-08-19 19:09:32 586,240 ------w C:\WINDOWS\ServicePackFiles\i386\mlang.dll
                + 2004-08-19 19:09:58 816,128 ------w C:\WINDOWS\ServicePackFiles\i386\mmc.exe
                + 2004-08-19 19:09:32 79,872 ------w C:\WINDOWS\ServicePackFiles\i386\mmcbase.dll
                + 2004-08-19 19:09:32 1,198,080 ------w C:\WINDOWS\ServicePackFiles\i386\mmcndmgr.dll
                + 2004-08-19 19:09:32 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\mmcshext.dll
                + 2004-08-19 19:09:32 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\mmfutil.dll
                + 2004-08-19 18:52:22 70,688 ------w C:\WINDOWS\ServicePackFiles\i386\mmsystem.dll
                + 2004-08-19 19:09:32 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\mnmdd.dll
                + 2004-08-19 19:09:58 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\mnmsrvc.exe
                + 2004-08-19 19:09:32 210,432 ------w C:\WINDOWS\ServicePackFiles\i386\mobsync.dll
                + 2004-08-19 19:09:58 144,384 ------w C:\WINDOWS\ServicePackFiles\i386\mobsync.exe
                + 2004-08-19 18:52:28 30,336 ------w C:\WINDOWS\ServicePackFiles\i386\modem.sys
                + 2004-08-19 19:09:32 156,160 ------w C:\WINDOWS\ServicePackFiles\i386\modemui.dll
                + 2004-08-19 19:09:58 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\mofcomp.exe
                + 2004-08-19 19:09:32 124,928 ------w C:\WINDOWS\ServicePackFiles\i386\mofd.dll
                + 2004-08-19 19:08:24 216,064 ------w C:\WINDOWS\ServicePackFiles\i386\moricons.dll
                + 2004-08-19 18:52:34 23,680 ------w C:\WINDOWS\ServicePackFiles\i386\mouclass.sys
                + 2004-08-04 01:58:32 42,240 ------w C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys
                + 2004-08-19 19:10:00 3,555,328 ------w C:\WINDOWS\ServicePackFiles\i386\moviemk.exe
                + 2004-08-19 19:09:32 310,272 ------w C:\WINDOWS\ServicePackFiles\i386\mp43dmod.dll
                + 2004-08-19 19:09:32 384,512 ------w C:\WINDOWS\ServicePackFiles\i386\mp4sdmod.dll
                + 2004-08-04 02:10:14 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\mpe.sys
                + 2004-08-19 19:09:32 240,640 ------w C:\WINDOWS\ServicePackFiles\i386\mpg4dmod.dll
                + 2004-08-19 19:10:00 124,928 ------w C:\WINDOWS\ServicePackFiles\i386\mplay32.exe
                + 2004-08-19 19:10:00 4,639 ------w C:\WINDOWS\ServicePackFiles\i386\mplayer2.exe
                + 2004-08-19 19:09:32 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\mpr.dll
                + 2004-08-19 19:09:32 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\mprapi.dll
                + 2004-08-19 19:09:32 368,640 ------w C:\WINDOWS\ServicePackFiles\i386\mpvis.dll
                + 2004-08-04 01:58:22 72,960 ------w C:\WINDOWS\ServicePackFiles\i386\mqac.sys
                + 2004-08-19 19:09:32 138,240 ------w C:\WINDOWS\ServicePackFiles\i386\mqad.dll
                + 2004-08-19 19:10:00 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\mqbkup.exe
                + 2004-08-19 19:09:32 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\mqdscli.dll
                + 2004-08-19 19:09:32 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\mqise.dll
                + 2004-08-19 19:09:32 89,088 ------w C:\WINDOWS\ServicePackFiles\i386\mqlogmgr.dll
                + 2004-08-19 19:09:32 225,280 ------w C:\WINDOWS\ServicePackFiles\i386\mqoa.dll
                + 2004-08-19 19:09:32 660,992 ------w C:\WINDOWS\ServicePackFiles\i386\mqqm.dll
                + 2004-08-19 19:09:32 177,152 ------w C:\WINDOWS\ServicePackFiles\i386\mqrt.dll
                + 2004-08-19 19:09:32 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\mqrtdep.dll
                + 2004-08-19 19:09:32 95,744 ------w C:\WINDOWS\ServicePackFiles\i386\mqsec.dll
                + 2004-08-19 19:09:34 517,632 ------w C:\WINDOWS\ServicePackFiles\i386\mqsnap.dll
                + 2004-08-19 19:10:00 4,608 ------w C:\WINDOWS\ServicePackFiles\i386\mqsvc.exe
                + 2004-08-19 19:10:00 117,248 ------w C:\WINDOWS\ServicePackFiles\i386\mqtgsvc.exe
                + 2004-08-19 19:09:34 186,880 ------w C:\WINDOWS\ServicePackFiles\i386\mqtrig.dll
                + 2004-08-19 19:09:34 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\mqupgrd.dll
                + 2004-08-19 19:09:34 527,360 ------w C:\WINDOWS\ServicePackFiles\i386\mqutil.dll
                + 2004-08-04 02:00:58 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys
                + 2004-08-04 02:15:18 451,456 ------w C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys
                + 2004-08-19 19:09:34 72,192 ------w C:\WINDOWS\ServicePackFiles\i386\msacm32.dll
                + 2004-08-19 19:09:34 331,776 ------w C:\WINDOWS\ServicePackFiles\i386\msadce.dll
                + 2004-08-19 19:08:24 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\msadcer.dll
                + 2004-08-19 19:09:34 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\msadcf.dll
                + 2004-08-19 19:08:24 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msadcfr.dll
                + 2004-08-19 19:09:34 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\msadco.dll
                + 2004-08-19 19:08:24 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msadcor.dll
                + 2004-08-19 19:09:34 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\msadcs.dll
                + 2004-08-19 19:09:34 155,648 ------w C:\WINDOWS\ServicePackFiles\i386\msadds.dll
                + 2004-08-19 19:08:26 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msaddsr.dll
                + 2004-08-19 19:08:26 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\msader15.dll
                + 2004-08-19 19:09:34 536,576 ------w C:\WINDOWS\ServicePackFiles\i386\msado15.dll
                + 2004-08-19 19:09:34 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\msadomd.dll
                + 2004-08-19 19:09:34 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msador15.dll
                + 2004-08-19 19:09:34 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\msadox.dll
                + 2004-08-19 19:09:34 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msadrh15.dll
                + 2004-08-19 19:08:26 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\msafd.dll
                + 2004-08-19 19:09:34 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\msapsspc.dll
                + 2004-08-19 19:09:34 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\msasn1.dll
                + 2004-08-19 19:09:34 220,160 ------w C:\WINDOWS\ServicePackFiles\i386\mscandui.dll
                + 2004-08-19 19:09:34 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\mscms.dll
                + 2004-08-19 19:09:34 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\msconf.dll
                + 2004-08-19 19:10:00 160,768 ------w C:\WINDOWS\ServicePackFiles\i386\msconfig.exe
                + 2004-07-17 14:42:20 116,288 ------w C:\WINDOWS\ServicePackFiles\i386\msconv97.dll
                + 2004-07-19 21:54:06 1,564,672 ------w C:\WINDOWS\ServicePackFiles\i386\mscorcfg.dll
                + 2004-08-04 01:12:02 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\mscordbc.dll
                + 2004-08-04 01:12:02 221,184 ------w C:\WINDOWS\ServicePackFiles\i386\mscordbi.dll
                + 2004-07-19 21:54:08 131,072 ------w C:\WINDOWS\ServicePackFiles\i386\mscoree.dll
                + 2004-08-04 01:12:04 73,728 ------w C:\WINDOWS\ServicePackFiles\i386\mscorie.dll
                + 2004-07-19 21:54:08 303,104 ------w C:\WINDOWS\ServicePackFiles\i386\mscorjit.dll
                + 2004-08-04 01:12:06 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\mscorld.dll
                + 2004-07-19 21:54:08 1,998,848 ------w C:\WINDOWS\ServicePackFiles\i386\mscorlib.dll
                + 2004-08-04 01:12:08 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\mscorpe.dll
                + 2004-08-04 01:12:08 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.chs.dll
                + 2004-08-04 01:12:08 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.cht.dll
                + 2004-08-04 01:12:08 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.dll
                + 2004-08-04 01:12:10 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.es.dll
                + 2004-08-04 01:12:10 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.fr.dll
                + 2004-08-04 01:12:10 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.ger.dll
                + 2004-08-04 01:12:10 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.it.dll
                + 2004-08-04 01:12:10 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.ja.dll
                + 2004-08-04 01:12:10 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\mscorrc.kor.dll
                + 2004-08-04 01:12:10 46,592 ------w C:\WINDOWS\ServicePackFiles\i386\mscorsec.dll
                + 2004-08-04 01:12:10 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\mscorsn.dll
                + 2004-07-19 21:54:12 2,265,088 ------w C:\WINDOWS\ServicePackFiles\i386\mscorsvr.dll
                + 2004-08-04 01:12:14 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\mscortim.dll
                + 2004-07-19 21:54:14 2,269,184 ------w C:\WINDOWS\ServicePackFiles\i386\mscorwks.dll
                + 2004-08-19 19:08:26 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\mscpx32r.dll
                + 2004-08-19 19:09:34 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\mscpxl32.dll
                + 2004-08-19 19:09:34 294,400 ------w C:\WINDOWS\ServicePackFiles\i386\msctf.dll
                + 2004-08-19 19:09:34 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\msctfp.dll
                + 2004-08-19 19:09:34 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdadc.dll
                + 2004-08-19 19:09:34 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\msdadiag.dll
                + 2004-08-19 19:09:34 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaenum.dll
                + 2004-08-19 19:09:34 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaer.dll
                + 2004-08-19 19:09:34 532,480 ------w C:\WINDOWS\ServicePackFiles\i386\msdaipp.dll
                + 2004-08-19 19:09:34 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\msdaora.dll
                + 2004-08-19 19:08:26 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaorar.dll
                + 2004-08-19 19:09:34 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\msdaosp.dll
                + 2004-08-19 19:08:26 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaprsr.dll
                + 2004-08-19 19:09:34 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\msdaprst.dll
                + 2004-08-19 19:09:34 204,800 ------w C:\WINDOWS\ServicePackFiles\i386\msdaps.dll
                + 2004-08-19 19:09:34 118,784 ------w C:\WINDOWS\ServicePackFiles\i386\msdarem.dll
                + 2004-08-19 19:08:26 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdaremr.dll
                + 2004-08-19 19:09:34 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\msdart.dll
                + 2004-08-19 19:09:34 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdasc.dll
                + 2004-08-19 19:09:34 315,392 ------w C:\WINDOWS\ServicePackFiles\i386\msdasql.dll
                + 2004-08-19 19:08:26 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msdasqlr.dll
                + 2004-08-19 19:09:34 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\msdatl3.dll
                + 2004-08-19 19:09:34 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\msdatt.dll
                + 2004-08-19 19:09:34 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\msdaurl.dll
                + 2004-08-19 19:09:34 36,864 ------w C:\WINDOWS\ServicePackFiles\i386\msdfmap.dll
                + 2004-08-19 19:09:34 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\msdmo.dll
                + 2004-08-19 19:10:00 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\msdtc.exe
                + 2004-08-19 19:09:34 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\msdtclog.dll
                + 2004-08-19 19:09:34 425,472 ------w C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll
                + 2004-08-19 19:09:34 949,248 ------w C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll
                + 2004-08-19 19:09:34 161,280 ------w C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll
                + 2004-08-04 02:10:00 51,328 ------w C:\WINDOWS\ServicePackFiles\i386\msdv.sys
                + 2004-08-19 19:08:26 4,126 ------w C:\WINDOWS\ServicePackFiles\i386\msdxmlc.dll
                + 2004-08-19 19:09:34 512,029 ------w C:\WINDOWS\ServicePackFiles\i386\msexch40.dll
                + 2004-08-19 19:09:34 319,517 ------w C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll
                + 2004-08-04 02:00:42 19,072 ------w C:\WINDOWS\ServicePackFiles\i386\msfs.sys
                + 2004-08-19 19:09:34 537,088 ------w C:\WINDOWS\ServicePackFiles\i386\msftedit.dll
                + 2004-08-19 19:09:34 1,004,032 ------w C:\WINDOWS\ServicePackFiles\i386\msgina.dll
                + 2004-08-04 02:04:14 35,072 ------w C:\WINDOWS\ServicePackFiles\i386\msgpc.sys
                + 2004-08-19 19:09:34 3,166,208 ------w C:\WINDOWS\ServicePackFiles\i386\msgr3en.dll
                + 2004-08-19 19:09:34 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\msgrocm.dll
                + 2004-08-19 19:09:34 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\msgsc.dll
                + 2004-08-19 19:08:28 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\msgslang.dll
                + 2004-08-19 19:09:34 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll
                + 2004-08-19 19:10:10 188,416 ------w C:\WINDOWS\ServicePackFiles\i386\msh261.drv
                + 2004-08-19 19:10:10 294,912 ------w C:\WINDOWS\ServicePackFiles\i386\msh263.drv
                + 2004-08-19 19:10:00 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\mshta.exe
                + 2004-08-19 19:09:34 3,003,392 ------w C:\WINDOWS\ServicePackFiles\i386\mshtml.dll
                + 2004-08-19 19:09:34 448,512 ------w C:\WINDOWS\ServicePackFiles\i386\mshtmled.dll
                + 2004-08-19 19:08:28 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\mshtmler.dll
                + 2004-08-19 19:09:34 2,804,224 ------w C:\WINDOWS\ServicePackFiles\i386\msi.dll
                + 2004-08-19 19:09:34 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\msident.dll
                + 2004-08-19 19:09:34 6,656 ------w C:\WINDOWS\ServicePackFiles\i386\msidle.dll
                + 2004-08-19 19:09:34 252,416 ------w C:\WINDOWS\ServicePackFiles\i386\msieftp.dll
                + 2004-08-19 19:10:00 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\msiexec.exe
                + 2004-08-19 19:09:34 331,264 ------w C:\WINDOWS\ServicePackFiles\i386\msihnd.dll
                + 2004-08-19 19:09:34 4,608 ------w C:\WINDOWS\ServicePackFiles\i386\msimg32.dll
                + 2004-08-19 19:10:00 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\msimn.exe
                + 2004-08-19 19:08:34 884,736 ------w C:\WINDOWS\ServicePackFiles\i386\msimsg.dll
                + 2004-08-19 19:09:34 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\msimtf.dll
                + 2004-08-19 19:09:34 381,952 ------w C:\WINDOWS\ServicePackFiles\i386\msinfo.dll
                + 2004-08-04 02:00:48 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\msircomm.sys
                + 2004-08-19 19:10:00 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\msiregmv.exe
                + 2004-08-19 19:09:34 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\msisip.dll
                + 2004-08-19 19:09:34 1,507,356 ------w C:\WINDOWS\ServicePackFiles\i386\msjet40.dll
                + 2004-07-17 14:34:48 358,976 ------w C:\WINDOWS\ServicePackFiles\i386\msjetol1.dll
                + 2004-08-19 19:09:34 184,351 ------w C:\WINDOWS\ServicePackFiles\i386\msjint40.dll
                + 2004-08-19 19:09:34 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\msjro.dll
                + 2004-08-19 19:09:34 53,279 ------w C:\WINDOWS\ServicePackFiles\i386\msjter40.dll
                + 2004-08-19 19:09:34 241,693 ------w C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll
                + 2004-08-04 01:58:42 7,552 ------w C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys
                + 2004-08-19 19:09:34 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\mslbui.dll
                + 2004-08-19 19:09:34 213,023 ------w C:\WINDOWS\ServicePackFiles\i386\msltus40.dll
                + 2004-08-19 19:09:34 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\mslwvtts.dll
                + 2004-08-19 19:09:34 169,984 ------w C:\WINDOWS\ServicePackFiles\i386\msmqocm.dll
                + 2004-08-19 19:10:00 1,667,584 ------w C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
                + 2004-08-19 19:10:10 259,072 ------w C:\WINDOWS\ServicePackFiles\i386\msnetobj.dll
                + 2004-08-19 19:09:34 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\msnsspc.dll
                + 2004-08-19 19:09:34 122,368 ------w C:\WINDOWS\ServicePackFiles\i386\msobcomm.dll
                + 2004-08-19 19:09:34 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\msobdl.dll
                + 2004-08-19 19:09:34 563,200 ------w C:\WINDOWS\ServicePackFiles\i386\msobmain.dll
                + 2004-08-19 19:09:34 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\msobshel.dll
                + 2004-08-19 19:09:34 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\msobweb.dll
                + 2004-08-19 19:09:34 1,311,232 ------w C:\WINDOWS\ServicePackFiles\i386\msoe.dll
                + 2004-08-19 19:09:34 252,928 ------w C:\WINDOWS\ServicePackFiles\i386\msoeacct.dll
                + 2004-08-19 19:08:36 2,534,400 ------w C:\WINDOWS\ServicePackFiles\i386\msoeres.dll
                + 2004-08-19 19:09:34 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\msoert2.dll
                + 2004-08-19 19:08:36 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msorc32r.dll
                + 2004-08-19 19:09:34 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\msorcl32.dll
                + 2004-08-19 19:10:00 347,648 ------w C:\WINDOWS\ServicePackFiles\i386\mspaint.exe
                + 2004-08-19 19:09:34 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\mspatcha.dll
                + 2004-08-19 19:09:34 348,189 ------w C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll
                + 2004-08-04 01:58:40 5,376 ------w C:\WINDOWS\ServicePackFiles\i386\mspclock.sys
                + 2004-08-19 19:09:34 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\mspmsnsv.dll
                + 2004-08-19 19:09:34 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\mspmsp.dll
                + 2004-08-04 01:58:42 4,992 ------w C:\WINDOWS\ServicePackFiles\i386\mspqm.sys
                + 2004-08-19 19:08:36 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\msprivs.dll
                + 2004-08-19 19:09:34 146,432 ------w C:\WINDOWS\ServicePackFiles\i386\msrating.dll
                + 2004-08-19 19:09:34 421,919 ------w C:\WINDOWS\ServicePackFiles\i386\msrd2x40.dll
                + 2004-08-19 19:09:34 315,423 ------w C:\WINDOWS\ServicePackFiles\i386\msrd3x40.dll
                + 2004-08-19 19:09:34 552,989 ------w C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll
                + 2004-08-19 19:09:34 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\msrle32.dll
                + 2004-08-19 19:09:34 134,656 ------w C:\WINDOWS\ServicePackFiles\i386\mssap.dll
                + 2004-08-19 19:10:12 356,352 ------w C:\WINDOWS\ServicePackFiles\i386\msscp.dll
                + 2004-08-04 02:07:48 15,488 ------w C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys
                + 2004-08-19 19:09:34 274,432 ------w C:\WINDOWS\ServicePackFiles\i386\mst120.dll
                + 2004-08-19 19:09:36 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\mst123.dll
                + 2004-08-04 02:10:00 49,024 ------w C:\WINDOWS\ServicePackFiles\i386\mstape.sys
                + 2004-08-19 19:09:36 281,600 ------w C:\WINDOWS\ServicePackFiles\i386\mstask.dll
                + 2004-08-04 01:58:40 5,504 ------w C:\WINDOWS\ServicePackFiles\i386\mstee.sys
                + 2004-08-19 19:09:36 258,077 ------w C:\WINDOWS\ServicePackFiles\i386\mstext40.dll
                + 2004-08-19 19:09:36 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\mstime.dll
                + 2004-08-19 19:10:00 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\mstinit.exe
                + 2004-08-19 19:09:36 115,712 ------w C:\WINDOWS\ServicePackFiles\i386\mstlsapi.dll
                + 2004-08-19 18:52:00 411,648 ------w C:\WINDOWS\ServicePackFiles\i386\mstsc.exe
                + 2004-08-04 01:59:44 655,360 ------w C:\WINDOWS\ServicePackFiles\i386\mstscax.dll
                + 2004-08-19 19:09:36 195,584 ------w C:\WINDOWS\ServicePackFiles\i386\msutb.dll
                + 2004-08-19 19:09:36 129,536 ------w C:\WINDOWS\ServicePackFiles\i386\msv1_0.dll
                + 2004-08-19 19:09:36 1,392,671 ------w C:\WINDOWS\ServicePackFiles\i386\msvbvm60.dll
                + 2004-08-19 19:09:36 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\msvcirt.dll
                + 2004-08-19 19:09:36 413,696 ------w C:\WINDOWS\ServicePackFiles\i386\msvcp60.dll
                + 2004-08-19 19:09:36 343,040 ------w C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll
                + 2004-08-04 01:58:26 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\msvcrt40.dll
                + 2004-08-19 19:09:36 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\msvfw32.dll
                + 2004-08-19 19:09:36 1,433,600 ------w C:\WINDOWS\ServicePackFiles\i386\msvidctl.dll
                + 2004-08-19 19:09:36 72,704 ------w C:\WINDOWS\ServicePackFiles\i386\msw3prt.dll
                + 2004-08-19 19:09:36 831,519 ------w C:\WINDOWS\ServicePackFiles\i386\mswdat10.dll
                + 2004-08-19 19:09:36 204,800 ------w C:\WINDOWS\ServicePackFiles\i386\mswebdvd.dll
                + 2004-08-19 19:09:36 246,272 ------w C:\WINDOWS\ServicePackFiles\i386\mswmdm.dll
                + 2004-08-19 19:09:36 247,808 ------w C:\WINDOWS\ServicePackFiles\i386\mswsock.dll
                + 2004-08-19 19:09:36 614,429 ------w C:\WINDOWS\ServicePackFiles\i386\mswstr10.dll
                + 2004-08-19 19:09:36 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\msxactps.dll
                + 2004-08-19 19:09:36 348,189 ------w C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll
                + 2004-08-19 19:09:36 506,368 ------w C:\WINDOWS\ServicePackFiles\i386\msxml.dll
                + 2004-08-19 19:09:36 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\msxml2.dll
                + 2004-08-19 19:09:36 1,236,480 ------w C:\WINDOWS\ServicePackFiles\i386\msxml3.dll
                + 2004-08-19 19:09:36 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\msyuv.dll
                + 2004-08-04 01:41:40 126,686 ------w C:\WINDOWS\ServicePackFiles\i386\mtlmnt5.sys
                + 2004-08-04 01:41:38 1,309,184 ------w C:\WINDOWS\ServicePackFiles\i386\mtlstrm.sys
                + 2004-08-19 19:09:36 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll
                + 2004-08-19 19:09:36 90,112 ------w C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll
                + 2004-08-19 19:09:36 1,737,856 ------w C:\WINDOWS\ServicePackFiles\i386\mtxparhd.dll
                + 2004-08-04 01:29:38 452,736 ------w C:\WINDOWS\ServicePackFiles\i386\mtxparhm.sys
                + 2004-08-04 02:15:22 107,904 ------w C:\WINDOWS\ServicePackFiles\i386\mup.sys
                + 2004-08-04 02:04:52 12,672 ------w C:\WINDOWS\ServicePackFiles\i386\mutohpen.sys
                + 2004-08-19 19:09:36 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\mydocs.dll
                + 2004-08-04 02:10:30 85,376 ------w C:\WINDOWS\ServicePackFiles\i386\nabtsfec.sys
                + 2004-08-19 19:09:36 221,184 ------w C:\WINDOWS\ServicePackFiles\i386\nac.dll
                + 2004-08-19 19:10:00 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\narrator.exe
                + 2004-08-19 19:09:36 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\ncobjapi.dll
                + 2004-08-19 19:09:36 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\ncprov.dll
                + 2004-08-19 19:09:36 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\ncpsres.dll
                + 2004-08-19 19:09:36 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\nddeapi.dll
                + 2004-08-19 19:10:00 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\nddeapir.exe
                + 2004-08-19 19:09:36 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\nddenb32.dll
                + 2004-08-04 02:14:30 182,912 ------w C:\WINDOWS\ServicePackFiles\i386\ndis.sys
                + 2004-08-04 02:10:14 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\ndisip.sys
                + 2004-08-19 19:09:36 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\ndisnpp.dll
                + 2004-08-04 02:03:14 12,928 ------w C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys
                + 2004-08-04 02:14:32 91,776 ------w C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys
                + 2004-08-19 19:10:00 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\net.exe
                + 2004-08-19 19:10:00 124,928 ------w C:\WINDOWS\ServicePackFiles\i386\net1.exe
                + 2004-08-19 19:09:36 332,288 ------w C:\WINDOWS\ServicePackFiles\i386\netapi32.dll
                + 2004-08-04 02:03:22 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\netbios.sys
                + 2004-08-04 02:14:38 162,816 ------w C:\WINDOWS\ServicePackFiles\i386\netbt.sys
                + 2004-08-19 19:09:36 633,856 ------w C:\WINDOWS\ServicePackFiles\i386\netcfgx.dll
                + 2004-08-19 19:10:00 114,176 ------w C:\WINDOWS\ServicePackFiles\i386\netdde.exe
                + 2004-08-04 01:10:58 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\netfxocm.dll
                + 2004-08-04 01:12:20 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\netfxupdate.exe
                + 2004-08-19 19:09:36 144,896 ------w C:\WINDOWS\ServicePackFiles\i386\netid.dll
                + 2004-08-19 19:09:38 407,040 ------w C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
                + 2004-08-19 19:09:38 198,144 ------w C:\WINDOWS\ServicePackFiles\i386\netman.dll
                + 2004-08-19 19:09:38 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\netoc.dll
                + 2004-08-19 19:09:38 885,248 ------w C:\WINDOWS\ServicePackFiles\i386\netplwiz.dll
                + 2004-08-19 19:09:38 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\netrap.dll
                + 2004-08-19 19:12:34 332,800 ------w C:\WINDOWS\ServicePackFiles\i386\netsetup.exe
                + 2004-08-19 19:10:00 88,576 ------w C:\WINDOWS\ServicePackFiles\i386\netsh.exe
                + 2004-08-19 19:09:38 1,723,904 ------w C:\WINDOWS\ServicePackFiles\i386\netshell.dll
                + 2004-08-19 19:10:00 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\netstat.exe
                + 2004-08-19 19:09:38 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\netui0.dll
                + 2004-08-19 19:09:38 245,760 ------w C:\WINDOWS\ServicePackFiles\i386\netui1.dll
                + 2004-08-19 19:03:26 132,695 ------w C:\WINDOWS\ServicePackFiles\i386\netwlan5.sys
                + 2004-08-19 19:09:38 251,392 ------w C:\WINDOWS\ServicePackFiles\i386\newdev.dll
                + 2004-08-04 01:12:20 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\ngen.exe
                + 2004-08-04 01:58:30 61,824 ------w C:\WINDOWS\ServicePackFiles\i386\nic1394.sys
                + 2004-08-19 19:09:38 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\nlhtml.dll
                + 2004-08-19 19:09:38 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\nmas.dll
                + 2004-08-19 19:09:38 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nmasnt.dll
                + 2004-08-19 19:09:38 81,920 ------w C:\WINDOWS\ServicePackFiles\i386\nmchat.dll
                + 2004-08-19 19:09:38 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\nmcom.dll
                + 2004-08-19 19:09:38 155,648 ------w C:\WINDOWS\ServicePackFiles\i386\nmft.dll
                + 2004-08-19 19:09:38 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nmmkcert.dll
                + 2004-08-04 01:59:52 40,320 ------w C:\WINDOWS\ServicePackFiles\i386\nmnt.sys
                + 2004-08-19 19:09:38 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\nmoldwb.dll
                + 2004-08-19 19:09:38 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\nmwb.dll
                + 2004-08-19 19:10:00 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\notepad.exe
                + 2004-08-19 19:10:12 226,816 ------w C:\WINDOWS\ServicePackFiles\i386\npdrmv2.dll
                + 2004-08-19 19:09:38 364,544 ------w C:\WINDOWS\ServicePackFiles\i386\npdsplay.dll
                + 2004-08-04 02:00:44 30,848 ------w C:\WINDOWS\ServicePackFiles\i386\npfs.sys
                + 2004-08-19 19:10:00 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\nppagent.exe
                + 2004-08-19 19:09:38 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\npptools.dll
                + 2004-08-19 19:09:38 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\npwmsdrm.dll
                + 2004-08-04 02:00:52 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\nscirda.sys
                + 2004-08-19 19:09:38 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\nsepm.dll
                + 2004-08-19 19:10:00 79,360 ------w C:\WINDOWS\ServicePackFiles\i386\nslookup.exe
                + 2004-08-19 19:10:00 1,230,848 ------w C:\WINDOWS\ServicePackFiles\i386\ntbackup.exe
                + 2004-08-04 01:38:34 47,564 ------w C:\WINDOWS\ServicePackFiles\i386\ntdetect.com
                + 2004-08-19 19:09:16 733,184 ------w C:\WINDOWS\ServicePackFiles\i386\ntdll.dll
                + 2004-08-19 19:09:38 67,072 ------w C:\WINDOWS\ServicePackFiles\i386\ntdsapi.dll
                + 2004-08-19 19:09:38 212,992 ------w C:\WINDOWS\ServicePackFiles\i386\ntevt.dll
                + 2004-08-04 02:15:10 574,592 ------w C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
                + 2004-08-04 01:45:26 34,000 ------w C:\WINDOWS\ServicePackFiles\i386\ntio.sys
                + 2004-08-04 01:45:16 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\ntio404.sys
                + 2004-08-04 01:45:12 35,648 ------w C:\WINDOWS\ServicePackFiles\i386\ntio411.sys
                + 2004-08-04 01:45:16 35,424 ------w C:\WINDOWS\ServicePackFiles\i386\ntio412.sys
                + 2004-08-04 01:45:14 34,560 ------w C:\WINDOWS\ServicePackFiles\i386\ntio804.sys
                + 2004-08-19 19:04:16 2,150,400 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrnlmp.exe
                + 2004-08-19 19:04:20 2,058,880 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
                + 2004-08-19 19:04:26 2,017,280 ------w C:\WINDOWS\ServicePackFiles\i386\ntkrpamp.exe
                + 2004-08-19 19:09:38 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\ntlanman.dll
                + 2004-08-19 19:09:38 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\ntlsapi.dll
                + 2004-08-19 19:09:38 119,808 ------w C:\WINDOWS\ServicePackFiles\i386\ntmarta.dll
                + 2004-08-19 19:09:38 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsapi.dll
                + 2004-08-19 19:09:38 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsdba.dll
                + 2004-08-19 19:09:38 496,640 ------w C:\WINDOWS\ServicePackFiles\i386\ntmsmgr.dll
                + 2004-08-19 19:09:38 438,272 ------w C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll
                + 2004-08-04 01:41:40 180,360 ------w C:\WINDOWS\ServicePackFiles\i386\ntmtlfax.sys
                + 2004-08-19 19:09:38 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\ntoc.dll
                + 2004-08-19 19:04:36 2,183,040 ------w C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
                + 2004-08-19 19:09:38 91,648 ------w C:\WINDOWS\ServicePackFiles\i386\ntprint.dll
                + 2004-08-19 19:09:38 145,920 ------w C:\WINDOWS\ServicePackFiles\i386\ntshrui.dll
                + 2004-08-19 19:10:00 420,864 ------w C:\WINDOWS\ServicePackFiles\i386\ntvdm.exe
                + 2004-08-19 19:09:38 4,274,816 ------w C:\WINDOWS\ServicePackFiles\i386\nv4_disp.dll
                + 2004-08-04 01:29:56 1,897,408 ------w C:\WINDOWS\ServicePackFiles\i386\nv4_mini.sys
                + 2004-08-04 02:03:36 88,448 ------w C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys
                + 2004-08-19 19:09:38 147,968 ------w C:\WINDOWS\ServicePackFiles\i386\nwprovau.dll
                + 2004-08-04 02:02:24 163,584 ------w C:\WINDOWS\ServicePackFiles\i386\nwrdr.sys
                + 2004-08-19 19:09:38 64,000 ------w C:\WINDOWS\ServicePackFiles\i386\nwwks.dll
                + 2004-08-19 19:09:38 267,776 ------w C:\WINDOWS\ServicePackFiles\i386\oakley.dll
                + 2004-08-19 19:09:38 288,768 ------w C:\WINDOWS\ServicePackFiles\i386\objsel.dll
                + 2004-08-19 19:08:44 445,440 ------w C:\WINDOWS\ServicePackFiles\i386\obrs040c.dll
                + 2004-08-19 19:09:38 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\occache.dll
                + 2004-08-19 19:09:38 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\ocgen.dll
                + 2004-08-19 19:09:38 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\ocmsn.dll
                + 2004-07-17 14:36:44 26,224 ------w C:\WINDOWS\ServicePackFiles\i386\odbc16gt.dll
                + 2004-08-19 19:09:38 249,856 ------w C:\WINDOWS\ServicePackFiles\i386\odbc32.dll
                + 2004-08-19 19:09:38 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\odbc32gt.dll
                + 2004-08-19 19:10:00 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\odbcad32.exe
                + 2004-08-19 19:09:38 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\odbcbcp.dll
                + 2004-08-19 19:09:38 135,168 ------w C:\WINDOWS\ServicePackFiles\i386\odbcconf.dll
                + 2004-08-19 19:10:00 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\odbcconf.exe
                + 2004-08-19 19:09:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\odbccp32.dll
                + 2004-08-19 19:09:38 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\odbccr32.dll
                + 2004-08-19 19:09:38 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\odbccu32.dll
                + 2004-08-19 19:08:44 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\odbcint.dll
                + 2004-08-19 19:08:44 61,712 ------w C:\WINDOWS\ServicePackFiles\i386\odbcji32.dll
                + 2004-08-19 19:09:38 278,559 ------w C:\WINDOWS\ServicePackFiles\i386\odbcjt32.dll
                + 2004-08-19 19:08:44 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\odbcp32r.dll
                + 2004-08-19 19:09:38 147,456 ------w C:\WINDOWS\ServicePackFiles\i386\odbctrac.dll
                + 2004-08-19 19:09:38 20,511 ------w C:\WINDOWS\ServicePackFiles\i386\oddbse32.dll
                + 2004-08-19 19:09:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odexl32.dll
                + 2004-08-19 19:09:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odfox32.dll
                + 2004-08-19 19:09:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i386\odpdx32.dll
                + 2004-08-19 19:09:38 20,511 ------w C:\WINDOWS\ServicePackFiles\i386\odtext32.dll
                + 2004-08-19 19:09:38 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\oeimport.dll
                + 2004-08-19 19:10:00 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\oemig50.exe
                + 2004-08-19 19:09:38 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\oemiglib.dll
                + 2004-08-19 19:09:38 120,832 ------w C:\WINDOWS\ServicePackFiles\i386\offfilt.dll
                + 2004-08-04 02:10:10 61,056 ------w C:\WINDOWS\ServicePackFiles\i386\ohci1394.sys
                + 2004-08-19 19:09:38 1,281,024 ------w C:\WINDOWS\ServicePackFiles\i386\ole32.dll
                + 2004-08-19 19:09:38 553,472 ------w C:\WINDOWS\ServicePackFiles\i386\oleaut32.dll
                + 2004-08-19 19:09:38 487,424 ------w C:\WINDOWS\ServicePackFiles\i386\oledb32.dll
                + 2004-08-19 19:09:38 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\oledb32r.dll
                + 2004-08-19 19:09:38 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\oleprn.dll
                + 2004-08-19 19:09:38 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\olepro32.dll
                + 2004-08-19 19:10:00 51,712 ------w C:\WINDOWS\ServicePackFiles\i386\oobebaln.exe
                + 2004-08-19 19:09:38 713,728 ------w C:\WINDOWS\ServicePackFiles\i386\opengl32.dll
                + 2004-08-19 19:10:00 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\opnfiles.exe
                + 2004-08-04 02:00:22 166,400 ------w C:\WINDOWS\ServicePackFiles\i386\oschoice.exe
                + 2004-08-19 19:10:02 216,576 ------w C:\WINDOWS\ServicePackFiles\i386\osk.exe
                + 2004-08-04 01:59:44 231,936 ------w C:\WINDOWS\ServicePackFiles\i386\osloader.exe
                + 2004-08-19 19:09:38 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\osuninst.dll
                + 2004-08-19 19:09:38 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\p2p.dll
                + 2004-08-19 19:09:38 86,016 ------w C:\WINDOWS\ServicePackFiles\i386\p2pgasvc.dll
                + 2004-08-19 19:09:38 312,320 ------w C:\WINDOWS\ServicePackFiles\i386\p2pgraph.dll
                + 2004-08-19 19:09:38 88,064 ------w C:\WINDOWS\ServicePackFiles\i386\p2pnetsh.dll
                + 2004-08-19 19:09:38 526,848 ------w C:\WINDOWS\ServicePackFiles\i386\p2psvc.dll
                + 2004-08-19 18:51:42 46,720 ------w C:\WINDOWS\ServicePackFiles\i386\p3.sys
                + 2004-08-19 19:10:02 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\packager.exe
                + 2004-08-19 18:51:44 80,384 ------w C:\WINDOWS\ServicePackFiles\i386\parport.sys
                + 2004-08-19 19:09:38 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\pautoenr.dll
                + 2004-08-04 01:31:24 29,502 ------w C:\WINDOWS\ServicePackFiles\i386\pca200e.sys
                + 2004-08-19 19:09:38 102,400 ------w C:\WINDOWS\ServicePackFiles\i386\pchshell.dll
                + 2004-08-19 19:09:38 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\pchsvc.dll
                + 2004-08-19 18:52:04 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\pci.sys
                + 2004-08-04 01:59:42 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\pciidex.sys
                + 2004-08-19 19:08:46 679,936 ------w C:\WINDOWS\ServicePackFiles\i386\pcl5eres.dll
                + 2004-08-19 19:08:46 169,472 ------w C:\WINDOWS\ServicePackFiles\i386\pclxl.dll
                + 2004-08-19 18:52:10 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys
                + 2004-08-04 01:06:18 169,984 ------w C:\WINDOWS\ServicePackFiles\i386\pcx500.sys
                + 2004-08-19 19:09:38 286,208 ------w C:\WINDOWS\ServicePackFiles\i386\pdh.dll
                + 2004-08-04 01:12:20 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\perfcounter.dll
                + 2004-08-19 19:09:38 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll
                + 2004-08-19 19:09:38 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\perfdisk.dll
                + 2004-08-19 19:10:02 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\perfmon.exe
                + 2004-08-19 19:09:38 26,624 ------w C:\WINDOWS\ServicePackFiles\i386\perfos.dll
                + 2004-08-19 19:09:38 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\perfproc.dll
                + 2004-08-04 02:06:56 27,904 ------w C:\WINDOWS\ServicePackFiles\i386\perm2.sys
                + 2004-08-19 19:08:46 211,712 ------w C:\WINDOWS\ServicePackFiles\i386\perm2dll.dll
                + 2004-08-04 02:06:58 28,032 ------w C:\WINDOWS\ServicePackFiles\i386\perm3.sys
                + 2004-08-19 19:08:46 259,328 ------w C:\WINDOWS\ServicePackFiles\i386\perm3dd.dll
                + 2004-08-19 19:09:38 172,032 ------w C:\WINDOWS\ServicePackFiles\i386\photowiz.dll
                + 2004-08-19 19:09:38 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\pid.dll
                + 2004-08-19 19:09:08 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\pidgen.dll
                + 2004-08-19 19:10:02 284,160 ------w C:\WINDOWS\ServicePackFiles\i386\pinball.exe
                + 2004-08-19 19:10:02 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\ping.exe
                + 2004-08-19 19:09:38 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\pjlmon.dll
                + 2004-08-19 19:09:38 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\plotter.dll
                + 2004-08-19 19:09:38 53,760 ------w C:\WINDOWS\ServicePackFiles\i386\plotui.dll
                + 2004-08-19 19:09:38 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\pngfilt.dll
                + 2004-08-19 19:09:38 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\pnrpnsp.dll
                + 2004-08-19 19:09:38 92,672 ------w C:\WINDOWS\ServicePackFiles\i386\policman.dll
                + 2004-08-19 19:09:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i386\polstore.dll
                + 2004-08-04 02:15:50 145,792 ------w C:\WINDOWS\ServicePackFiles\i386\portcls.sys
                + 2004-08-19 19:10:02 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\powercfg.exe
                + 2004-08-19 19:09:40 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\powrprof.dll
                + 2004-08-04 02:00:18 17,664 ------w C:\WINDOWS\ServicePackFiles\i386\ppa3.sys
                + 2004-08-19 19:09:40 578,560 ------w C:\WINDOWS\ServicePackFiles\i386\printui.dll
                + 2004-08-19 18:53:28 39,552 ------w C:\WINDOWS\ServicePackFiles\i386\processr.sys
                + 2004-08-19 19:09:40 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\profmap.dll
                + 2004-08-19 19:10:02 109,568 ------w C:\WINDOWS\ServicePackFiles\i386\progman.exe
                + 2004-08-19 19:10:04 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\proquota.exe
                + 2004-08-19 19:09:40 237,056 ------w C:\WINDOWS\ServicePackFiles\i386\provthrd.dll
                + 2004-08-19 19:10:04 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\proxycfg.exe
                + 2004-08-19 19:09:40 134,656 ------w C:\WINDOWS\ServicePackFiles\i386\ps5ui.dll
                + 2004-08-19 19:09:40 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\psapi.dll
                + 2004-08-19 19:09:40 98,816 ------w C:\WINDOWS\ServicePackFiles\i386\psbase.dll
                + 2004-08-04 02:04:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\psched.sys
                + 2004-08-19 19:09:40 464,384 ------w C:\WINDOWS\ServicePackFiles\i386\pscript5.dll
                + 2004-08-19 19:09:40 363,520 ------w C:\WINDOWS\ServicePackFiles\i386\psisdecd.dll
                + 2004-08-19 19:09:40 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\pstorec.dll
                + 2004-08-19 19:09:40 34,304 ------w C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll
                + 2004-08-19 19:09:40 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\ptpusd.dll
                + 2004-08-19 19:09:40 7,680 ------w C:\WINDOWS\ServicePackFiles\i386\pwsdata.dll
                + 2004-08-19 19:09:40 237,568 ------w C:\WINDOWS\ServicePackFiles\i386\qasf.dll
                + 2004-08-19 19:09:40 192,512 ------w C:\WINDOWS\ServicePackFiles\i386\qcap.dll
                + 2004-08-19 19:09:40 279,040 ------w C:\WINDOWS\ServicePackFiles\i386\qdv.dll
                + 2004-08-19 19:09:40 386,048 ------w C:\WINDOWS\ServicePackFiles\i386\qdvd.dll
                + 2004-08-19 19:09:40 563,200 ------w C:\WINDOWS\ServicePackFiles\i386\qedit.dll
                + 2004-08-19 19:08:48 733,696 ------w C:\WINDOWS\ServicePackFiles\i386\qedwipes.dll
                + 2004-08-04 02:00:06 6,016 ------w C:\WINDOWS\ServicePackFiles\i386\qic157.sys
                + 2004-08-19 19:09:40 382,464 ------w C:\WINDOWS\ServicePackFiles\i386\qmgr.dll
                + 2004-08-19 19:09:40 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\qmgrprxy.dll
                + 2004-08-19 19:10:04 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\qprocess.exe
                + 2004-08-19 19:09:40 1,293,824 ------w C:\WINDOWS\ServicePackFiles\i386\quartz.dll
                + 2004-08-19 19:09:40 1,440,768 ------w C:\WINDOWS\ServicePackFiles\i386\query.dll
                + 2004-08-19 19:09:40 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\racpldlg.dll
                + 2004-08-04 02:00:52 20,736 ------w C:\WINDOWS\ServicePackFiles\i386\ramdisk.sys
                + 2004-08-19 19:09:40 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll
                + 2004-08-19 19:09:40 237,056 ------w C:\WINDOWS\ServicePackFiles\i386\rasapi32.dll
                + 2004-08-19 19:09:40 89,088 ------w C:\WINDOWS\ServicePackFiles\i386\rasauto.dll
                + 2004-08-19 19:09:40 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\raschap.dll
                + 2004-08-19 19:09:40 685,056 ------w C:\WINDOWS\ServicePackFiles\i386\rasdlg.dll
                + 2004-08-04 02:14:24 51,328 ------w C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys
                + 2004-08-19 19:09:40 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\rasman.dll
                + 2004-08-19 19:09:40 174,080 ------w C:\WINDOWS\ServicePackFiles\i386\rasmans.dll
                + 2004-08-19 19:10:04 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\rasphone.exe
                + 2004-08-19 19:09:40 206,336 ------w C:\WINDOWS\ServicePackFiles\i386\rasppp.dll
                + 2004-08-04 02:05:08 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys
                + 2004-08-04 02:14:28 48,384 ------w C:\WINDOWS\ServicePackFiles\i386\raspptp.sys
                + 2004-08-19 19:09:40 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\rassapi.dll
                + 2004-08-19 19:09:40 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\rastapi.dll
                + 2004-08-19 19:09:40 113,152 ------w C:\WINDOWS\ServicePackFiles\i386\rastls.dll
                + 2004-08-19 19:09:40 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\rcbdyctl.dll
                + 2004-08-19 19:10:04 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\rcimlby.exe
                + 2004-08-19 19:10:04 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\rcp.exe
                + 2004-08-04 02:20:08 176,512 ------w C:\WINDOWS\ServicePackFiles\i386\rdbss.sys
                + 2004-08-19 19:09:40 147,968 ------w C:\WINDOWS\ServicePackFiles\i386\rdchost.dll
                + 2004-08-19 19:10:04 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\rdpclip.exe
                + 2004-08-19 19:10:20 92,168 ------w C:\WINDOWS\ServicePackFiles\i386\rdpdd.dll
                + 2004-08-04 02:01:16 196,864 ------w C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys
                + 2004-08-19 19:09:40 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\rdpsnd.dll
                + 2004-08-19 19:10:20 139,400 ------w C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys
                + 2004-08-19 19:10:20 87,176 ------w C:\WINDOWS\ServicePackFiles\i386\rdpwsx.dll
                + 2004-08-19 19:10:04 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\rdsaddin.exe
                + 2004-08-19 19:10:04 67,072 ------w C:\WINDOWS\ServicePackFiles\i386\rdshost.exe
                + 2004-08-04 01:41:40 13,776 ------w C:\WINDOWS\ServicePackFiles\i386\recagent.sys
                + 2004-08-19 18:54:52 58,496 ------w C:\WINDOWS\ServicePackFiles\i386\redbook.sys
                + 2004-08-04 01:48:48 3,352 ------w C:\WINDOWS\ServicePackFiles\i386\redir.exe
                + 2004-08-19 19:10:04 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\reg.exe
                1. - 2005-09-23 10:28:32 70,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
                  + 2007-10-24 04:47:22 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
                  - 2005-09-23 10:28:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
                  + 2007-10-24 04:47:22 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
                  - 2005-09-23 10:28:32 26,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
                  + 2007-10-24 04:47:22 32,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
                  - 2005-09-23 10:28:32 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
                  + 2007-10-24 04:47:22 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
                  - 2005-09-23 10:28:32 29,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
                  + 2007-10-24 04:47:22 33,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
                  - 2005-09-23 10:28:32 29,888 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
                  + 2007-10-24 04:47:22 33,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
                  - 2005-09-23 10:28:32 503,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
                  + 2007-10-24 04:47:22 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
                  - 2005-09-23 10:28:56 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
                  + 2007-10-24 04:47:40 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
                  - 2005-09-23 10:28:56 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
                  + 2007-10-24 04:47:40 101,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
                  - 2005-09-23 10:28:42 76,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
                  + 2007-10-24 04:47:30 80,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
                  - 2005-09-23 10:28:42 1,144,832 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
                  + 2007-10-24 04:47:30 1,162,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
                  - 2005-09-23 10:28:42 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
                  + 2007-10-24 04:47:30 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
                  - 2005-09-23 10:28:58 17,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
                  + 2007-10-24 04:47:42 27,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
                  - 2005-09-23 10:28:56 68,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
                  + 2007-10-24 04:47:40 69,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
                  - 2005-09-23 10:28:44 31,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
                  + 2007-10-24 04:47:30 35,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
                  - 2005-09-23 10:28:38 52,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
                  + 2007-10-24 04:47:28 66,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
                  - 2005-09-23 10:28:38 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
                  + 2007-10-24 04:47:28 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
                  - 2005-09-23 10:29:12 547,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
                  + 2007-10-24 04:47:54 572,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
                  - 2005-09-23 10:28:56 788,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
                  + 2007-10-24 04:47:40 798,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
                  - 2005-09-23 10:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
                  + 2007-10-24 04:47:36 18,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
                  - 2005-09-23 10:28:56 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
                  + 2007-10-24 04:47:40 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
                  - 2005-09-23 10:28:56 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
                  + 2007-10-24 04:47:40 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
                  - 2005-09-23 10:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
                  + 2007-10-24 04:47:40 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
                  - 2005-09-23 10:28:56 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
                  + 2007-10-24 04:47:40 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
                  - 2005-09-23 10:28:56 224,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
                  + 2007-10-24 04:47:40 230,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
                  - 2005-09-23 10:28:56 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
                  + 2007-10-24 04:47:40 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
                  - 2005-09-23 10:28:56 55,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
                  + 2007-10-24 04:47:40 65,032 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
                  - 2005-09-23 10:28:56 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
                  + 2007-10-24 04:47:40 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
                  - 2005-09-23 10:28:48 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
                  + 2007-10-24 04:47:34 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
                  - 2005-09-23 10:28:48 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
                  + 2007-10-24 04:47:36 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
                  - 2005-09-23 10:28:48 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
                  + 2007-10-24 04:47:36 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
                  - 2005-09-23 10:28:48 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
                  + 2007-10-24 04:47:36 655,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
                  - 2005-09-23 10:28:48 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
                  + 2007-10-24 04:47:36 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
                  - 2005-09-23 10:28:48 745,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
                  + 2007-10-24 04:47:34 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
                  - 2005-09-23 10:29:10 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
                  + 2007-10-24 04:47:52 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
                  - 2005-09-23 10:29:10 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
                  + 2007-10-24 04:47:52 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
                  - 2005-09-23 10:29:08 667,648 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
                  + 2007-10-24 04:47:50 671,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
                  - 2005-09-23 10:28:30 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
                  + 2007-10-24 04:47:20 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
                  - 2005-09-23 10:29:10 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
                  + 2007-10-24 04:47:52 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
                  - 2005-09-23 10:28:30 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
                  + 2007-10-24 04:47:20 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
                  - 2005-09-23 10:28:30 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                  + 2007-10-24 04:47:20 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                  - 2005-09-23 10:28:30 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
                  + 2007-10-24 04:47:20 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
                  - 2005-09-23 10:28:32 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
                  + 2007-10-24 04:47:22 97,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
                  - 2005-09-23 10:28:48 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
                  + 2007-10-24 04:47:36 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
                  - 2005-09-23 10:28:56 800,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
                  + 2007-10-24 04:47:40 822,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
                  - 2005-09-23 10:28:56 73,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
                  + 2007-10-24 04:47:40 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
                  - 2005-09-23 10:28:56 288,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
                  + 2007-10-24 04:47:40 308,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
                  - 2005-09-23 10:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
                  + 2007-10-24 04:47:40 47,104 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
                  - 2005-09-23 10:28:56 326,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
                  + 2007-10-24 04:47:40 348,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
                  - 2005-09-23 10:28:56 81,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
                  + 2007-10-24 04:47:40 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
                  - 2005-09-23 10:28:56 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
                  + 2007-10-24 04:47:40 4,444,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
                  - 2005-09-23 10:28:56 102,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
                  + 2007-10-24 04:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
                  - 2005-09-23 10:29:00 330,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
                  + 2007-10-24 04:47:44 340,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
                  - 2005-09-23 10:28:56 67,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
                  + 2007-10-24 04:47:40 77,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
                  - 2005-09-23 10:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
                  + 2007-10-24 04:47:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
                  - 2005-09-23 10:28:56 226,816 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
                  + 2007-10-24 04:47:40 242,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
                  - 2005-09-23 10:28:56 66,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
                  + 2007-10-24 04:47:40 70,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
                  - 2005-09-23 10:28:56 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
                  + 2007-10-24 04:47:40 19,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
                  - 2005-09-23 10:28:50 5,615,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
                  + 2007-10-24 04:47:36 5,814,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
                  - 2005-09-23 10:29:00 22,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
                  + 2007-10-24 04:47:44 31,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
                  - 2005-09-23 10:28:56 96,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
                  + 2007-10-24 04:47:40 101,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
                  - 2005-09-23 10:28:56 14,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
                  + 2007-10-24 04:47:40 24,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
                  - 2005-09-23 10:28:56 78,336 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
                  + 2007-10-24 04:47:40 89,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
                  - 2005-09-23 10:28:50 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
                  + 2007-10-24 04:47:36 144,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
                  - 2005-09-23 10:28:56 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
                  + 2007-10-24 04:47:40 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
                  - 2005-09-23 10:28:56 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
                  + 2007-10-24 04:47:40 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
                  - 2005-09-23 10:29:02 59,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
                  + 2007-10-24 04:47:46 61,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
                  - 2005-09-23 10:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
                  + 2007-10-24 04:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
                  - 2005-09-23 10:28:56 107,520 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
                  + 2007-10-24 04:47:40 119,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
                  - 2005-09-23 10:29:00 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
                  + 2007-10-24 04:47:44 95,232 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
                  - 2005-09-23 10:28:56 377,344 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
                  + 2007-10-24 04:47:40 392,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
                  - 2005-09-23 10:28:56 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
                  + 2007-10-24 04:47:40 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
                  - 2005-09-23 10:28:58 389,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
                  + 2007-10-24 04:47:42 425,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
                  - 2005-09-23 10:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
                  + 2007-10-24 04:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
                  - 2005-09-23 10:28:56 2,878,976 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
                  + 2007-10-24 04:47:40 3,036,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
                  - 2005-09-23 10:28:56 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
                  + 2007-10-24 04:47:40 483,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
                  - 2005-09-23 10:28:56 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
                  + 2007-10-24 04:47:40 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
                  - 2005-09-23 10:28:38 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
                  + 2007-10-24 04:47:28 933,888 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
                  - 2005-09-23 10:28:56 5,050,368 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
                  + 2007-10-24 04:47:40 5,070,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
                  - 2005-09-23 10:28:56 397,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
                  + 2007-10-24 04:47:40 401,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
                  - 2005-09-23 10:28:56 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
                  + 2007-10-24 04:47:40 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
                  - 2005-09-23 10:28:56 3,018,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
                  + 2007-10-24 04:47:40 3,076,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
                  - 2005-09-23 10:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
                  + 2007-10-24 04:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
                  - 2005-09-23 10:28:56 700,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
                  + 2007-10-24 04:47:40 630,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
                  - 2005-09-23 10:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
                  + 2007-10-24 04:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
                  - 2005-09-23 10:28:56 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
                  + 2007-10-24 04:47:40 57,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
                  - 2005-09-23 10:28:56 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
                  + 2007-10-24 04:47:40 113,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
                  - 2005-09-23 10:28:56 368,640 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
                  + 2007-10-24 04:47:40 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
                  - 2005-09-23 10:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
                  + 2007-10-24 04:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
                  - 2005-09-23 10:28:56 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
                  + 2007-10-24 04:47:40 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
                  - 2005-09-23 10:28:56 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
                  + 2007-10-24 04:47:40 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
                  - 2005-09-23 10:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
                  + 2007-10-24 04:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
                  - 2005-09-23 10:28:56 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
                  + 2007-10-24 04:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
                  - 2005-09-23 10:28:56 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
                  + 2007-10-24 04:47:40 261,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
                  - 2005-09-23 10:28:56 5,025,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
                  + 2007-10-24 04:47:40 5,431,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
                  - 2005-09-23 10:28:56 835,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
                  + 2007-10-24 04:47:40 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
                  - 2005-09-23 10:28:56 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
                  + 2007-10-24 04:47:40 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
                  - 2005-09-23 10:28:56 823,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
                  + 2007-10-24 04:47:40 839,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
                  - 2005-09-23 10:28:56 5,316,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
                  + 2007-10-24 04:47:40 5,013,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
                  - 2005-09-23 10:28:56 2,035,712 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
                  + 2007-10-24 04:47:40 2,068,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
                  - 2005-09-23 10:28:56 71,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
                  + 2007-10-24 04:47:40 81,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
                  - 2005-09-23 10:29:06 1,140,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
                  + 2007-10-24 04:47:48 1,172,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
                  - 2005-09-23 10:28:30 1,306,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
                  + 2007-10-24 04:47:20 1,344,000 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
                  - 2005-09-23 10:28:32 298,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
                  + 2007-10-24 04:47:22 434,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
                  - 2005-09-23 10:28:56 28,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
                  + 2007-10-24 04:47:40 37,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
                  + 2006-06-02 19:32:20 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
                  + 2006-10-10 12:44:50 557,568 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
                  + 2004-08-04 02:10:08 53,248 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
                  + 2004-08-04 02:00:04 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
                  + 2004-08-04 02:10:12 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys
                  + 2004-08-19 19:09:20 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
                  + 2004-08-04 01:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
                  + 2004-08-04 01:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
                  + 2004-08-19 19:09:52 189,952 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
                  + 2004-08-19 19:09:20 1,852,416 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
                  + 2004-08-19 19:09:20 450,048 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
                  + 2004-08-19 19:09:20 137,728 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll
                  + 2004-08-19 19:09:20 119,296 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll
                  + 2004-08-19 18:51:56 188,672 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys
                  + 2004-08-19 19:09:20 244,736 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
                  + 2004-08-19 19:09:20 194,048 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll
                  + 2004-08-19 19:09:52 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
                  + 2004-08-19 19:09:20 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
                  + 2004-08-19 19:09:20 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
                  + 2004-08-19 19:09:20 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\admexs.dll
                  + 2004-08-19 19:09:20 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll
                  + 2004-08-19 19:09:52 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe
                  + 2004-08-04 01:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
                  + 2004-08-19 19:09:20 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
                  + 2004-08-19 19:09:20 43,520 ------w C:\WINDOWS\ServicePackFiles\i386\admwprox.dll
                  + 2004-08-19 19:09:20 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\adsiis51.dll
                  + 2004-08-19 19:09:20 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
                  + 2004-08-19 19:09:20 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
                  + 2004-08-19 19:09:20 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
                  + 2004-08-19 19:09:20 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
                  + 2004-07-17 14:35:20 85,813 ------w C:\WINDOWS\ServicePackFiles\i386\adsutil.vbs
                  + 2004-08-19 19:09:20 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
                  + 2004-08-19 19:09:20 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
                  + 2004-08-19 19:09:20 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
                  + 2004-08-19 19:09:20 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
                  + 2004-08-19 19:09:20 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
                  + 2004-08-19 19:09:20 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
                  + 2004-08-19 19:09:20 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
                  + 2004-08-19 19:09:20 685,056 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
                  + 2004-08-19 19:09:20 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll
                  + 2004-08-04 01:39:38 142,464 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys
                  + 2004-08-04 02:14:16 138,496 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys
                  + 2004-08-19 19:09:20 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
                  + 2004-08-19 19:09:20 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
                  + 2004-08-19 19:09:20 41,984 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
                  + 2004-08-19 19:09:20 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
                  + 2004-08-19 19:09:20 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
                  + 2004-08-19 19:09:20 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
                  + 2004-08-19 19:09:20 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
                  + 2004-08-19 19:09:52 256,512 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
                  + 2004-08-04 02:07:42 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys
                  + 2004-08-04 02:07:44 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
                  + 2004-08-19 19:09:20 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
                  + 2004-08-19 19:09:52 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
                  + 2004-08-19 19:09:52 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe
                  + 2004-08-04 02:07:42 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
                  + 2004-08-19 19:09:20 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
                  + 2004-08-04 02:07:44 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
                  + 2004-08-19 18:52:42 41,216 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
                  + 2004-08-19 18:52:44 41,600 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
                  + 2004-08-19 19:09:20 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll
                  + 2004-08-04 01:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys
                  + 2004-08-19 19:09:20 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\appconf.dll
                  + 2004-08-19 19:09:20 126,976 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
                  + 2004-08-19 19:09:20 176,640 ------w C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll
                  + 2004-08-19 19:09:20 302,592 ------w C:\WINDOWS\ServicePackFiles\i386\appmgr.dll
                  + 2004-08-19 19:09:20 334,336 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
                  + 2004-08-04 01:58:30 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
                  + 2004-08-19 19:08:02 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\asferror.dll
                  + 2004-08-19 19:09:20 377,344 ------w C:\WINDOWS\ServicePackFiles\i386\asp51.dll
                  + 2004-08-04 01:11:02 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_isapi.dll
                  + 2004-08-04 01:11:06 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_regiis.exe
                  + 2004-08-04 01:11:06 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\aspnet_wp.exe
                  + 2004-08-19 19:09:52 30,720 ------w C:\WINDOWS\ServicePackFiles\i386\asr_fmt.exe
                  + 2004-08-19 19:09:52 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\asr_pfu.exe
                  + 2004-08-19 19:09:20 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
                  + 2004-08-04 02:05:04 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
                  + 2004-08-19 19:09:52 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe
                  + 2004-08-04 01:59:44 95,360 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys
                  + 2004-08-04 01:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
                  + 2004-08-04 01:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
                  + 2004-08-04 01:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
                  + 2004-08-04 01:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
                  + 2004-08-04 01:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
                  + 2004-08-04 01:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
                  + 2004-08-04 01:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
                  + 2004-08-04 01:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
                  + 2004-08-04 01:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
                  + 2004-08-04 01:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
                  + 2004-08-19 19:09:20 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
                  + 2004-08-19 19:09:20 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
                  + 2004-08-19 19:09:20 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
                  + 2004-08-19 18:53:40 327,168 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
                  + 2004-08-19 18:53:42 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
                  + 2004-08-19 19:09:20 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
                  + 2004-08-19 19:09:20 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
                  + 2004-08-19 19:09:20 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
                  + 2004-08-04 01:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
                  + 2004-08-04 01:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
                  + 2004-08-04 01:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
                  + 2004-08-04 01:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
                  + 2004-08-04 01:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
                  + 2004-08-04 01:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
                  + 2004-08-04 01:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
                  + 2004-08-04 01:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
                  + 2004-08-04 01:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
                  + 2004-08-04 01:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
                  + 2004-08-19 19:09:20 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
                  + 2004-08-19 19:09:20 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
                  + 2004-08-19 19:09:20 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll
                  + 2004-08-19 19:09:52 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
                  + 2004-08-04 01:58:32 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
                  + 2004-08-19 19:08:02 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
                  + 2004-08-04 01:58:36 55,936 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
                  + 2004-08-19 19:09:22 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
                  + 2004-08-19 19:09:22 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
                  + 2004-08-19 19:09:22 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
                  + 2004-08-19 19:09:22 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
                  + 2004-08-19 19:09:22 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
                  + 2004-08-19 19:09:22 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
                  + 2004-08-19 19:09:22 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
                  + 2004-08-19 19:09:52 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
                  + 2004-08-19 19:09:22 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll
                  + 2004-08-19 19:09:52 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe
                  + 2004-08-19 19:09:22 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll
                  + 2004-08-19 19:09:52 625,152 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe
                  + 2004-08-19 19:09:52 638,976 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
                  + 2004-08-19 19:09:52 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
                  + 2004-08-19 19:09:52 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
                  + 2004-08-04 02:10:12 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys
                  + 2004-08-04 02:10:00 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
                  + 2004-08-19 19:09:22 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
                  + 2004-08-19 19:09:22 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
                  + 2004-08-19 19:09:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
                  + 2004-08-19 19:09:22 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll
                  + 2004-08-04 02:10:14 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
                  + 2004-08-19 19:09:22 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
                  + 2004-08-19 19:09:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
                  + 2004-08-19 19:09:22 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
                  + 2004-08-19 19:09:22 286,208 ------w C:\WINDOWS\ServicePackFiles\i386\blackbox.dll
                  + 2004-08-19 19:09:52 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
                  + 2004-08-04 01:59:58 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys
                  + 2004-08-19 19:08:04 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll
                  + 2004-08-19 19:09:22 77,312 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll
                  + 2004-08-19 19:09:22 1,017,344 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
                  + 2004-08-19 19:09:22 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
                  + 2004-08-19 19:09:22 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
                  + 2004-08-04 02:10:40 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
                  + 2004-08-04 02:10:40 38,016 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
                  + 2004-08-04 01:58:40 100,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
                  + 2004-08-19 18:55:32 274,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys
                  + 2004-08-04 02:10:38 35,456 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
                  + 2004-08-19 19:09:22 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
                  + 2004-08-04 02:10:36 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
                  + 2004-08-19 19:09:22 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
                  + 2004-08-19 19:09:22 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
                  + 2004-08-19 19:09:22 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
                  + 2004-08-19 19:09:22 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll
                  + 2004-08-19 19:09:22 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll
                  + 2004-07-19 21:54:04 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\caspol.exe
                  + 2004-08-19 19:09:22 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
                  + 2004-08-19 19:09:22 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
                  + 2004-08-19 19:09:22 628,224 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
                  + 2004-08-04 02:10:18 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
                  + 2004-08-04 02:14:12 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
                  + 2004-08-19 19:09:22 151,552 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
                  + 2004-08-19 19:09:22 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll
                  + 2004-08-19 19:09:22 2,067,968 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
                  + 2004-08-04 01:59:54 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
                  + 2004-08-19 19:09:22 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll
                  + 2004-08-19 19:09:22 467,968 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
                  + 2004-08-19 19:09:22 159,232 ------w C:\WINDOWS\ServicePackFiles\i386\cewmdm.dll
                  + 2004-08-19 19:09:22 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
                  + 2004-08-19 19:08:04 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
                  + 2004-08-19 19:09:52 188,480 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
                  + 2004-08-19 19:09:22 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
                  + 2004-08-04 02:00:14 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys
                  + 2004-08-19 19:09:22 1,352,704 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
                  + 2004-08-19 19:09:22 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
                  + 2004-08-19 19:09:52 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\cipher.exe
                  + 2004-08-19 19:09:52 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
                  + 2004-08-04 02:14:28 49,664 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
                  + 2004-08-19 19:09:22 110,080 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
                  + 2004-08-19 19:09:22 501,248 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
                  + 2004-08-19 19:09:52 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
                  + 2004-08-19 19:09:22 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
                  + 2004-08-19 19:09:52 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
                  + 2004-08-19 19:09:52 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
                  + 2004-08-19 19:09:52 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
                  + 2004-08-19 19:09:22 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
                  + 2004-08-04 02:07:40 14,080 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
                  + 2004-08-19 19:09:22 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
                  + 2004-08-19 19:09:52 400,896 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
                  + 2004-08-19 19:09:22 352,256 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
                  + 2004-08-19 19:09:52 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
                  + 2004-08-19 19:09:52 40,448 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
                  + 2004-08-19 19:09:22 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
                  + 2004-08-19 19:09:22 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
                  + 2004-08-19 19:09:52 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
                  + 2004-08-19 19:09:22 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
                  + 2004-08-19 19:09:22 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
                  + 2004-08-19 19:09:22 83,968 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
                  + 2004-08-19 19:09:22 47,104 ------w C:\WINDOWS\ServicePackFiles\i386\coadmin.dll
                  + 2004-08-19 19:09:22 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll
                  + 2004-08-19 19:09:22 195,584 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
                  + 2004-08-19 19:09:22 611,328 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
                  + 2004-08-19 19:09:22 281,088 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
                  + 2004-08-19 19:09:22 253,440 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
                  + 2004-08-19 19:09:22 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\compfilt.dll
                  + 2004-08-19 19:09:22 230,912 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
                  + 2004-08-19 19:09:52 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
                  + 2004-08-19 19:09:22 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll
                  + 2004-08-04 01:59:36 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comsdupd.exe
                  + 2004-08-19 19:09:22 1,251,840 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
                  + 2004-08-19 19:09:22 540,160 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll
                  + 2004-08-19 19:09:52 1,044,480 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe
                  + 2004-08-19 19:09:22 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
                  + 2004-08-19 19:09:52 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe
                  + 2004-08-04 01:11:12 69,632 ------w C:\WINDOWS\ServicePackFiles\i386\corperfmonext.dll
                  + 2004-08-19 19:09:22 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll
                  + 2004-08-19 19:09:22 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll
                  + 2004-08-19 18:59:26 40,704 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
                  + 2004-08-19 19:09:22 604,672 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
                  + 2004-08-19 19:09:22 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
                  + 2004-08-19 19:09:22 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
                  + 2004-08-19 19:09:22 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
                  + 2004-08-19 19:09:22 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
                  + 2004-08-19 19:09:22 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
                  + 2004-08-19 19:09:22 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
                  + 2004-08-04 01:11:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\csc.exe
                  + 2004-08-19 19:09:22 102,912 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
                  + 2004-07-19 21:54:04 589,824 ------w C:\WINDOWS\ServicePackFiles\i386\cscomp.dll
                  + 2004-08-19 19:09:52 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
                  + 2004-08-19 19:09:22 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
                  + 2004-08-19 19:09:22 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
                  + 2004-08-19 19:09:52 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe
                  + 2004-08-19 19:09:52 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
                  + 2004-08-19 19:09:22 252,416 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
                  + 2004-08-19 19:09:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll
                  + 2004-08-04 01:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
                  + 2004-08-19 19:09:22 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
                  + 2004-08-19 19:09:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
                  + 2004-08-19 19:09:22 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
                  + 2004-08-19 19:09:24 825,344 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
                  + 2004-08-19 19:09:24 1,056,256 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll
                  + 2004-08-19 19:09:24 561,179 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll
                  + 2004-08-19 19:09:24 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
                  + 2004-08-19 19:09:52 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\davcdata.exe
                  + 2004-08-19 19:09:24 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
                  + 2004-08-19 19:09:24 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
                  + 2004-08-19 19:09:24 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
                  + 2004-08-19 19:09:24 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
                  + 2004-08-19 19:09:24 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
                  + 2004-08-19 19:09:24 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
                  + 2004-08-19 19:09:24 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
                  + 2004-08-19 19:09:52 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
                  + 2004-08-19 19:09:24 266,240 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
                  + 2004-08-19 19:09:24 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
                  + 2004-08-19 19:09:52 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe
                  + 2004-08-19 19:09:24 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll
                  + 2004-08-19 19:09:24 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
                  + 2004-08-19 19:09:52 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
                  + 2004-08-19 19:09:52 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
                  + 2004-08-19 19:09:24 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
                  + 2004-08-19 19:09:24 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
                  + 2004-08-19 19:09:24 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
                  + 2004-08-19 19:09:24 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
                  + 2004-08-19 19:09:24 111,616 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
                  + 2004-08-19 19:09:52 548,352 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
                  + 2004-08-19 19:09:52 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe
                  + 2004-08-19 19:09:24 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll
                  + 2004-08-19 19:09:24 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll
                  + 2004-08-19 19:09:24 187,904 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
                  + 2004-08-19 19:09:24 81,408 ------w C:\WINDOWS\ServicePackFiles\i386\directdb.dll
                  + 2004-08-04 01:59:56 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\disk.sys
                  + 2004-08-04 01:59:54 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\diskdump.sys
                  + 2004-08-19 19:09:52 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\diskpart.exe
                  + 2004-08-19 19:09:52 294,912 ------w C:\WINDOWS\ServicePackFiles\i386\dlimport.exe
                  + 2004-08-19 19:09:52 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\dllhost.exe
                  + 2004-08-04 02:00:06 8,320 ------w C:\WINDOWS\ServicePackFiles\i386\dlttape.sys
                  + 2004-08-19 19:09:52 225,280 ------w C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe
                  + 2004-08-19 19:09:24 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dmband.dll
                  + 2004-08-19 19:01:16 800,256 ------w C:\WINDOWS\ServicePackFiles\i386\dmboot.sys
                  + 2004-08-19 19:09:24 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll
                  + 2004-08-19 19:09:24 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll
                  + 2004-08-19 19:09:24 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\dmime.dll
                  + 2004-08-19 19:01:22 154,496 ------w C:\WINDOWS\ServicePackFiles\i386\dmio.sys
                  + 2004-08-19 19:09:24 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\dmloader.dll
                  + 2004-08-19 19:09:52 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\dmremote.exe
                  + 2004-08-19 19:09:24 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dmscript.dll
                  + 2004-08-19 19:09:24 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dmserver.dll
                  + 2004-08-19 19:09:24 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll
                  + 2004-08-19 19:09:24 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll
                  + 2004-08-19 19:09:24 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.dll
                  + 2004-08-04 02:07:40 52,864 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.sys
                  + 2004-08-19 19:09:24 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\dmutil.dll
                  + 2004-08-19 19:09:24 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll
                  + 2004-08-19 19:09:24 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll
                  + 2004-08-19 19:09:24 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\docprop2.dll
                  + 2004-08-04 01:51:28 54,080 ------w C:\WINDOWS\ServicePackFiles\i386\dosx.exe
                  + 2004-08-04 01:58:30 207,360 ------w C:\WINDOWS\ServicePackFiles\i386\dot4.sys
                  + 2004-08-19 19:09:24 97,280 ------w C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll
                  + 2004-08-19 19:09:52 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe
                  + 2004-08-19 19:09:24 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\dplayx.dll
                  + 2004-08-19 19:09:24 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
                  + 2004-08-19 19:08:08 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll
                  + 2004-08-19 19:09:24 375,296 ------w C:\WINDOWS\ServicePackFiles\i386\dpnet.dll
                  + 2004-08-19 19:09:24 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll
                  + 2004-08-19 19:09:24 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll
                  + 2004-08-19 19:08:08 3,584 ------w C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll
                  + 2004-08-19 19:09:52 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe
                  + 2004-08-19 19:09:24 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll
                  + 2004-08-19 19:09:24 213,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
                  + 2004-08-19 19:09:52 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe
                  + 2004-08-19 19:09:24 116,736 ------w C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll
                  + 2004-08-19 19:09:24 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\dpwsockx.dll
                  + 2004-08-19 19:10:16 299,520 ------w C:\WINDOWS\ServicePackFiles\i386\drmclien.dll
                  + 2004-08-04 02:08:00 60,288 ------w C:\WINDOWS\ServicePackFiles\i386\drmk.sys
                  + 2004-08-19 19:09:24 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\drmstor.dll
                  + 2004-08-19 19:10:14 695,296 ------w C:\WINDOWS\ServicePackFiles\i386\drmv2clt.dll
                  + 2004-08-19 19:09:24 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\drprov.dll
                  + 2004-07-17 14:36:44 4,656 ------w C:\WINDOWS\ServicePackFiles\i386\ds16gt.dll
                  + 2004-08-19 19:09:24 16,384 ------w C:\WINDOWS\ServicePackFiles\i386\ds32gt.dll
                  + 2004-08-19 19:09:24 181,760 ------w C:\WINDOWS\ServicePackFiles\i386\dsdmo.dll
                  + 2004-08-19 19:09:24 72,192 ------w C:\WINDOWS\ServicePackFiles\i386\dsdmoprp.dll
                  + 2004-08-19 19:09:24 93,696 ------w C:\WINDOWS\ServicePackFiles\i386\dskquota.dll
                  + 2004-08-19 19:09:24 367,616 ------w C:\WINDOWS\ServicePackFiles\i386\dsound.dll
                  + 2004-08-19 19:09:24 1,294,336 ------w C:\WINDOWS\ServicePackFiles\i386\dsound3d.dll
                  + 2004-08-19 19:09:24 145,408 ------w C:\WINDOWS\ServicePackFiles\i386\dsprop.dll
                  + 2004-08-19 19:08:10 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\dsprpres.dll
                  + 2004-08-19 19:09:24 240,640 ------w C:\WINDOWS\ServicePackFiles\i386\dsquery.dll
                  + 2004-08-19 19:09:24 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\dssec.dll
                  + 2004-08-04 01:31:44 137,216 ------w C:\WINDOWS\ServicePackFiles\i386\dssenh.dll
                  + 2004-08-19 19:09:24 113,664 ------w C:\WINDOWS\ServicePackFiles\i386\dsuiext.dll
                  + 2004-08-19 19:09:24 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\dswave.dll
                  + 2004-08-19 19:09:52 10,752 ------w C:\WINDOWS\ServicePackFiles\i386\dumprep.exe
                  + 2004-08-19 19:09:24 304,128 ------w C:\WINDOWS\ServicePackFiles\i386\duser.dll
                  + 2004-08-19 19:09:52 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\dvdupgrd.exe
                  + 2004-08-19 19:09:52 180,224 ------w C:\WINDOWS\ServicePackFiles\i386\dwwin.exe
                  + 2004-08-19 19:09:24 619,008 ------w C:\WINDOWS\ServicePackFiles\i386\dx7vb.dll
                  + 2004-08-19 19:09:24 1,227,264 ------w C:\WINDOWS\ServicePackFiles\i386\dx8vb.dll
                  + 2004-08-19 19:09:52 1,298,432 ------w C:\WINDOWS\ServicePackFiles\i386\dxdiag.exe
                  + 2004-08-19 19:09:24 2,113,536 ------w C:\WINDOWS\ServicePackFiles\i386\dxdiagn.dll
                  + 2004-08-04 02:00:56 71,040 ------w C:\WINDOWS\ServicePackFiles\i386\dxg.sys
                  + 2004-08-19 19:09:24 499,741 ------w C:\WINDOWS\ServicePackFiles\i386\dxmasf.dll
                  + 2004-08-19 19:09:24 357,888 ------w C:\WINDOWS\ServicePackFiles\i386\dxtmsft.dll
                  + 2004-08-19 19:09:24 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\dxtrans.dll
                  + 2004-08-19 19:09:24 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\efsadu.dll
                  + 2004-08-19 19:09:26 187,392 ------w C:\WINDOWS\ServicePackFiles\i386\els.dll
                  + 2004-08-19 19:09:26 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\encapi.dll
                  + 2004-08-19 19:09:26 186,368 ------w C:\WINDOWS\ServicePackFiles\i386\encdec.dll
                  + 2004-08-19 19:08:12 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\ep9res.dll
                  + 2004-08-19 18:52:52 121,344 ------w C:\WINDOWS\ServicePackFiles\i386\epcl5res.dll
                  + 2004-08-19 19:09:26 23,040 ------w C:\WINDOWS\ServicePackFiles\i386\ersvc.dll
                  + 2004-08-19 19:09:26 243,200 ------w C:\WINDOWS\ServicePackFiles\i386\es.dll
                  + 2004-08-19 19:09:26 1,097,728 ------w C:\WINDOWS\ServicePackFiles\i386\esent.dll
                  + 2004-08-19 19:09:26 247,808 ------w C:\WINDOWS\ServicePackFiles\i386\esscli.dll
                  + 2004-08-04 01:32:28 137,088 ------w C:\WINDOWS\ServicePackFiles\i386\essm2e.sys
                  + 2004-08-19 19:09:52 195,072 ------w C:\WINDOWS\ServicePackFiles\i386\eudcedit.exe
                  + 2004-08-19 19:09:52 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\evcreate.exe
                  + 2004-08-19 19:09:26 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
                  + 2004-07-19 21:54:06 798,720 ------w C:\WINDOWS\ServicePackFiles\i386\eventlogmessages.dll
                  + 2004-08-19 19:09:26 109,568 ------w C:\WINDOWS\ServicePackFiles\i386\evntagnt.dll
                  + 2004-08-19 19:09:54 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\evntcmd.exe
                  + 2004-08-19 19:09:26 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\evntrprv.dll
                  + 2004-08-19 19:09:54 94,720 ------w C:\WINDOWS\ServicePackFiles\i386\evntwin.exe
                  + 2004-08-19 19:09:26 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\evtgprov.dll
                  + 2004-08-19 19:09:54 1,036,288 ------w C:\WINDOWS\ServicePackFiles\i386\explorer.exe
                  + 2004-08-19 19:09:26 380,957 ------w C:\WINDOWS\ServicePackFiles\i386\expsrv.dll
                  + 2004-08-19 19:09:26 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\exstrace.dll
                  + 2004-08-19 19:09:26 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\extmgr.dll
                  + 2004-08-19 19:09:54 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\extrac32.exe
                  + 2004-08-04 02:14:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\fastfat.sys
                  + 2004-08-19 19:09:26 472,064 ------w C:\WINDOWS\ServicePackFiles\i386\fastprox.dll
                  + 2004-08-19 19:09:26 80,896 ------w C:\WINDOWS\ServicePackFiles\i386\faultrep.dll
                  + 2004-08-19 19:09:54 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\faxpatch.exe
                  + 2004-08-04 01:59:28 27,392 ------w C:\WINDOWS\ServicePackFiles\i386\fdc.sys
                  + 2004-08-19 19:09:26 76,288 ------w C:\WINDOWS\ServicePackFiles\i386\fdeploy.dll
                  + 2004-08-19 19:09:26 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\feclient.dll
                  + 2004-08-19 19:09:26 348,160 ------w C:\WINDOWS\ServicePackFiles\i386\filemgmt.dll
                  + 2004-08-19 19:09:56 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\findstr.exe
                  + 2004-08-19 19:09:26 88,064 ------w C:\WINDOWS\ServicePackFiles\i386\fldrclnr.dll
                  + 2004-08-04 01:59:28 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys
                  + 2004-08-19 19:09:26 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\fltlib.dll
                  + 2004-08-19 19:09:56 22,528 ------w C:\WINDOWS\ServicePackFiles\i386\fltmc.exe
                  + 2004-08-04 02:01:20 124,800 ------w C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys
                  + 2004-08-19 19:09:26 386,560 ------w C:\WINDOWS\ServicePackFiles\i386\fontext.dll
                  + 2004-08-19 19:09:56 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\fontview.exe
                  + 2004-08-04 01:31:24 34,173 ------w C:\WINDOWS\ServicePackFiles\i386\forehe.sys
                  + 2004-08-19 19:09:26 32,828 ------w C:\WINDOWS\ServicePackFiles\i386\fp40ext.dll
                  + 2004-08-19 19:09:26 184,435 ------w C:\WINDOWS\ServicePackFiles\i386\fp4amsft.dll
                  + 2004-08-19 19:09:26 82,035 ------w C:\WINDOWS\ServicePackFiles\i386\fp4anscp.dll
                  + 2004-08-19 19:09:26 147,513 ------w C:\WINDOWS\ServicePackFiles\i386\fp4apws.dll
                  + 2004-08-19 19:09:26 49,210 ------w C:\WINDOWS\ServicePackFiles\i386\fp4areg.dll
                  + 2004-08-19 19:09:26 102,509 ------w C:\WINDOWS\ServicePackFiles\i386\fp4atxt.dll
                  + 2004-08-19 19:09:26 618,605 ------w C:\WINDOWS\ServicePackFiles\i386\fp4autl.dll
                  + 2004-08-19 19:09:26 41,020 ------w C:\WINDOWS\ServicePackFiles\i386\fp4avnb.dll
                  + 2004-08-19 19:09:26 32,826 ------w C:\WINDOWS\ServicePackFiles\i386\fp4avss.dll
                  + 2004-08-19 19:09:26 49,212 ------w C:\WINDOWS\ServicePackFiles\i386\fp4awebs.dll
                  + 2004-08-19 19:09:26 876,653 ------w C:\WINDOWS\ServicePackFiles\i386\fp4awel.dll
                  + 2004-08-19 19:09:56 15,120 ------w C:\WINDOWS\ServicePackFiles\i386\fp98sadm.exe
                  + 2004-08-19 19:09:56 109,840 ------w C:\WINDOWS\ServicePackFiles\i386\fp98swin.exe
                  + 2004-08-19 19:09:56 24,632 ------w C:\WINDOWS\ServicePackFiles\i386\fpadmcgi.exe
                  + 2004-08-19 19:09:26 20,541 ------w C:\WINDOWS\ServicePackFiles\i386\fpadmdll.dll
                  + 2004-08-19 19:09:56 188,494 ------w C:\WINDOWS\ServicePackFiles\i386\fpcount.exe
                  + 2004-08-19 19:09:26 94,208 ------w C:\WINDOWS\ServicePackFiles\i386\fpencode.dll
                  + 2004-08-19 19:09:26 20,541 ------w C:\WINDOWS\ServicePackFiles\i386\fpexedll.dll
                  + 2004-08-19 19:09:28 598,071 ------w C:\WINDOWS\ServicePackFiles\i386\fpmmc.dll
                  + 2004-08-19 19:08:14 217,088 ------w C:\WINDOWS\ServicePackFiles\i386\fpmmcsat.dll
                  + 2004-08-19 19:09:56 20,538 ------w C:\WINDOWS\ServicePackFiles\i386\fpremadm.exe
                  + 2004-08-19 19:09:56 28,728 ------w C:\WINDOWS\ServicePackFiles\i386\fpsrvadm.exe
                  + 2004-08-19 19:08:14 9,344 ------w C:\WINDOWS\ServicePackFiles\i386\framebuf.dll
                  + 2004-08-19 19:09:28 185,856 ------w C:\WINDOWS\ServicePackFiles\i386\framedyn.dll
                  + 2004-08-19 19:09:56 193,024 ------w C:\WINDOWS\ServicePackFiles\i386\fsquirt.exe
                  + 2004-08-19 19:09:56 46,080 ------w C:\WINDOWS\ServicePackFiles\i386\ftp.exe
                  + 2004-08-19 19:09:28 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\ftpmib.dll
                  + 2004-08-19 19:09:28 127,488 ------w C:\WINDOWS\ServicePackFiles\i386\ftpsv251.dll
                  + 2004-07-19 21:54:06 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\fusion.dll
                  + 2004-08-19 19:09:28 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\fwcfg.dll
                  + 2004-08-19 19:09:28 452,096 ------w C:\WINDOWS\ServicePackFiles\i386\fxsapi.dll
                  + 2004-08-19 19:09:56 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\fxsclnt.exe
                  + 2004-08-19 19:09:28 72,192 ------w C:\WINDOWS\ServicePackFiles\i386\fxscom.dll
                  + 2004-08-19 19:09:28 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\fxscomex.dll
                  + 2004-08-19 19:09:56 238,592 ------w C:\WINDOWS\ServicePackFiles\i386\fxscover.exe
                  + 2004-08-19 19:09:28 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\fxsdrv.dll
                  + 2004-08-19 19:09:28 66,048 ------w C:\WINDOWS\ServicePackFiles\i386\fxsevent.dll
                  + 2004-08-19 19:09:28 23,552 ------w C:\WINDOWS\ServicePackFiles\i386\fxsext32.dll
                  + 2004-08-19 19:09:28 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\fxsmon.dll
                  + 2004-08-19 19:09:28 132,608 ------w C:\WINDOWS\ServicePackFiles\i386\fxsocm.dll
                  + 2004-08-19 19:09:28 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\fxsperf.dll
                  + 2004-08-19 19:08:14 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\fxsres.dll
                  + 2004-08-19 19:09:28 563,712 ------w C:\WINDOWS\ServicePackFiles\i386\fxsst.dll
                  + 2004-08-19 19:09:56 268,800 ------w C:\WINDOWS\ServicePackFiles\i386\fxssvc.exe
                  + 2004-08-19 19:09:28 246,272 ------w C:\WINDOWS\ServicePackFiles\i386\fxst30.dll
                  + 2004-08-19 19:09:28 397,312 ------w C:\WINDOWS\ServicePackFiles\i386\fxstiff.dll
                  + 2004-08-19 19:09:28 156,672 ------w C:\WINDOWS\ServicePackFiles\i386\fxsui.dll
                  + 2004-08-19 19:09:28 197,120 ------w C:\WINDOWS\ServicePackFiles\i386\fxswzrd.dll
                  + 2004-08-19 19:09:28 400,896 ------w C:\WINDOWS\ServicePackFiles\i386\fxsxp32.dll
                  + 2004-08-04 02:07:44 46,464 ------w C:\WINDOWS\ServicePackFiles\i386\gagp30kx.sys
                  + 2004-08-04 02:08:22 10,624 ------w C:\WINDOWS\ServicePackFiles\i386\gameenum.sys
                  + 2004-08-04 02:08:30 59,136 ------w C:\WINDOWS\ServicePackFiles\i386\gckernel.sys
                  + 2004-08-19 19:09:28 278,016 ------w C:\WINDOWS\ServicePackFiles\i386\gdi32.dll
                  + 2004-08-19 19:09:28 123,904 ------w C:\WINDOWS\ServicePackFiles\i386\glu32.dll
                  + 2004-08-19 19:09:28 577,536 ------w C:\WINDOWS\ServicePackFiles\i386\gpedit.dll
                  + 2004-08-04 01:31:44 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\gpkcsp.dll
                  + 2004-08-19 19:08:14 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\gpkrsrc.dll
                  + 2004-08-19 19:09:56 123,392 ------w C:\WINDOWS\ServicePackFiles\i386\gprslt.exe
                  + 2004-08-19 19:09:28 201,216 ------w C:\WINDOWS\ServicePackFiles\i386\gptext.dll
                  + 2004-08-19 19:09:56 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\grpconv.exe
                  + 2004-08-19 18:55:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\grserial.sys
                  + 2004-08-19 19:09:28 125,440 ------w C:\WINDOWS\ServicePackFiles\i386\guitrn.dll
                  + 2004-08-19 19:09:28 109,056 ------w C:\WINDOWS\ServicePackFiles\i386\guitrn_a.dll
                  + 2004-08-19 19:09:28 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\gzip.dll
                  + 2004-08-19 19:09:28 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\h323cc.dll
                  + 2004-08-19 19:09:28 614,912 ------w C:\WINDOWS\ServicePackFiles\i386\h323msp.dll
                  + 2004-08-04 01:59:20 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\hal.dll
                  + 2004-08-04 01:59:10 131,968 ------w C:\WINDOWS\ServicePackFiles\i386\halaacpi.dll
                  + 2004-08-04 01:59:08 81,280 ------w C:\WINDOWS\ServicePackFiles\i386\halacpi.dll
                  + 2004-08-04 01:59:14 150,656 ------w C:\WINDOWS\ServicePackFiles\i386\halapic.dll
                  + 2004-08-04 01:59:14 134,400 ------w C:\WINDOWS\ServicePackFiles\i386\halmacpi.dll
                  + 2004-08-04 01:59:20 152,704 ------w C:\WINDOWS\ServicePackFiles\i386\halmps.dll
                  + 2004-08-04 01:59:20 77,696 ------w C:\WINDOWS\ServicePackFiles\i386\halsp.dll
                  + 2004-08-19 19:09:28 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\hccoin.dll
                  + 2004-08-19 19:09:56 768,512 ------w C:\WINDOWS\ServicePackFiles\i386\helpctr.exe
                  + 2004-08-19 19:09:56 743,936 ------w C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe
                  + 2004-08-19 19:09:56 10,752 ------w C:\WINDOWS\ServicePackFiles\i386\hh.exe
                  + 2004-08-19 19:09:28 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll
                  + 2004-08-19 19:09:28 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\hid.dll
                  + 2004-08-19 18:55:52 25,856 ------w C:\WINDOWS\ServicePackFiles\i386\hidbth.sys
                  + 2004-08-04 02:08:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\hidclass.sys
                  + 2004-08-04 02:08:20 15,104 ------w C:\WINDOWS\ServicePackFiles\i386\hidir.sys
                  + 2004-08-04 02:08:18 24,960 ------w C:\WINDOWS\ServicePackFiles\i386\hidparse.sys
                  + 2004-08-19 19:09:28 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\hidserv.dll
                  + 2004-08-19 19:09:28 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\hmmapi.dll
                  + 2004-08-19 19:09:28 347,648 ------w C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll
                  + 2004-08-19 19:09:28 336,384 ------w C:\WINDOWS\ServicePackFiles\i386\hnetwiz.dll
                  + 2004-08-19 19:09:
                  1. Aloorss....

                    voilà le nouveau rapport de smitfraudfix, suivi de vundo et combo:

                    -Smitfraudfi: rapport.txt

                    SmitFraudFix v2.314

                    Rapport fait à 17:18:14,65, 2008-04-18
                    Executé à partir de C:\Documents and Settings\MSI\Bureau\Security\SmitfraudFix
                    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                    Le type du système de fichiers est NTFS
                    Fix executé en mode normal

                    »»»»»»»»»»»»»»»»»»»»»»»» Process

                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\system32\acs.exe
                    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                    C:\Program Files\Bonjour\mDNSResponder.exe
                    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                    C:\WINDOWS\system32\nvsvc32.exe
                    C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
                    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                    C:\WINDOWS\system32\rundll32.exe
                    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                    C:\Program Files\Atheros\ACU.exe
                    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
                    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
                    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
                    C:\Program Files\DAEMON Tools\daemon.exe
                    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                    C:\Program Files\QuickTime\QTTask.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
                    C:\WINDOWS\system32\wuauclt.exe
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\iPod\bin\iPodService.exe
                    C:\Program Files\BitLord\BitLord.exe
                    C:\Program Files\Messenger\msmsgs.exe
                    C:\WINDOWS\system32\cmd.exe

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI\Application Data

                    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MSI\Favoris

                    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                    "Source"="About:Home"
                    "SubscribedURL"="About:Home"
                    "FriendlyName"="Ma page d'accueil"

                    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    IEDFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    VACFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLs"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                    "System"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                    »»»»»»»»»»»»»»»»»»»»»»»» DNS

                    Description: Realtek RTL8168/8111 PCI-E Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
                    DNS Server Search Order: 192.168.0.1

                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS3\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

                    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Fin

                    ----------------------------------------------------------------------------------

                    -Vundofix: vundofix.txt

                    VundoFix V7.0.3

                    Scan started at 00:45:38 2008-04-18

                    Listing files found while scanning....

                    No infected files were found.

                    --------------------------------------------------------------------------------------

                    Combofix: log.txt

                    ComboFix 08-04-08.4 - MSI 2008-04-18 19:14:31.3 - NTFSx86
                    Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1445 [GMT -3:00]
                    Endroit: C:\Documents and Settings\MSI\Bureau\ComboFix.exe

                    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
                    .

                    ((((((((((((((((((((((((((((( Fichiers créés 2008-03-18 to 2008-04-18 ))))))))))))))))))))))))))))))))))))
                    .

                    2008-04-18 18:41 . 2008-04-18 18:41 <REP> d-------- C:\WINDOWS\LastGood
                    2008-04-18 00:45 . 2008-04-18 00:45 <REP> d-------- C:\VundoFix Backups
                    2008-04-18 00:43 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
                    2008-04-18 00:43 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
                    2008-04-18 00:43 . 2008-04-14 19:28 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
                    2008-04-18 00:43 . 2008-04-12 13:49 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
                    2008-04-18 00:43 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
                    2008-04-18 00:43 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
                    2008-04-18 00:43 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
                    2008-04-17 13:32 . 2008-04-17 13:32 <REP> d-------- C:\_OTMoveIt
                    2008-04-17 13:03 . 2008-04-18 17:18 3,562 --a------ C:\WINDOWS\system32\tmp.reg
                    2008-04-16 21:14 . 2008-04-16 21:14 <REP> d-------- C:\Deckard
                    2008-04-15 01:42 . 2008-04-15 01:42 <REP> d-------- C:\WINDOWS\ServicePackFiles
                    2008-04-15 01:41 . 2004-07-17 11:40 19,528 --a------ C:\WINDOWS\[u]0/u00001_.tmp
                    2008-04-14 17:26 . 2008-04-14 17:26 <REP> d-------- C:\Program Files\Fichiers communs\Noesis 3D Content Creation
                    2008-04-13 13:52 . 2008-04-13 13:52 <REP> d-------- C:\Program Files\NOESIS
                    2008-04-13 13:50 . 2008-04-13 13:50 <REP> d-------- C:\Program Files\Fichiers communs\Noesis - Custom Props & Animation
                    2008-04-13 13:46 . 2008-04-13 13:46 <REP> d-------- C:\Program Files\Fichiers communs\Noesis HL2 Character Design
                    2008-04-13 13:46 . 2004-03-29 16:23 90,112 --a------ C:\WINDOWS\unvise32.exe
                    2008-04-13 13:45 . 2008-04-14 17:26 <REP> d-------- C:\Program Files\Noesis Interactive
                    2008-04-13 13:45 . 2008-04-13 13:45 <REP> d-------- C:\Program Files\Noesis HL2 Character Design
                    2008-04-13 00:08 . 2008-04-13 00:08 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
                    2008-04-13 00:08 . 2008-04-18 18:42 6,149 --a------ C:\WINDOWS\system32\drivers\fwdrv.err
                    2008-04-12 23:20 . 2008-04-12 23:20 <REP> d-------- C:\Program Files\Sunbelt Software
                    2008-04-12 14:28 . 2008-04-12 14:28 <REP> d-------- C:\Program Files\Fichiers communs\Adobe AIR
                    2008-04-12 14:28 . 2008-04-12 14:28 <REP> d-------- C:\Program Files\Adobe Media Player
                    2008-04-12 14:19 . 2008-04-12 14:20 <REP> d-------- C:\WINDOWS\system32\Adobe
                    2008-04-12 12:28 . 2008-04-12 12:28 <REP> d-------- C:\Program Files\SystemRequirementsLab
                    2008-04-12 12:28 . 2008-04-12 12:28 <REP> d-------- C:\Documents and Settings\MSI\Application Data\SystemRequirementsLab
                    2008-04-11 20:55 . 2008-04-11 20:55 <REP> d-------- C:\Program Files\Fichiers communs\Avid
                    2008-04-11 20:55 . 2006-01-04 23:00 2,981,888 --a------ C:\WINDOWS\system32\iplw7.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 2,973,696 --a------ C:\WINDOWS\system32\iplA6.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 2,785,280 --a------ C:\WINDOWS\system32\iplM6.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 2,686,976 --a------ C:\WINDOWS\system32\iplM5.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 2,531,328 --a------ C:\WINDOWS\system32\iplP6.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 2,502,656 --a------ C:\WINDOWS\system32\iplPX.dll
                    2008-04-11 20:55 . 2006-01-04 23:00 53,248 --a------ C:\WINDOWS\system32\ipl.dll
                    2008-04-11 18:47 . 2008-04-14 21:18 <REP> d--h----- C:\WINDOWS\msdownld.tmp
                    2008-04-10 14:57 . 2008-04-11 20:30 <REP> d-------- C:\WINDOWS\system32\QuickTime
                    2008-04-10 04:56 . 2008-04-10 04:56 1,409 --a------ C:\WINDOWS\system32\tmpD8A03.FOT
                    2008-04-10 04:55 . 2005-06-15 03:00 102,400 --a------ C:\WINDOWS\system32\tsccvid.dll
                    2008-04-10 04:07 . 2005-06-15 03:00 80,788 --a------ C:\WINDOWS\system32\tsccvid.zsx
                    2008-04-10 03:00 . 2008-04-11 18:47 1,374 --a------ C:\WINDOWS\imsins.BAK
                    2008-04-09 18:57 . 2008-04-09 18:57 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                    2008-04-09 18:57 . 2008-04-09 18:57 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Malwarebytes
                    2008-04-09 18:57 . 2008-04-09 18:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                    2008-04-08 00:10 . 2008-04-08 00:10 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Grisoft
                    2008-04-08 00:10 . 2007-05-30 09:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
                    2008-04-08 00:08 . 2008-04-08 00:08 <REP> d-------- C:\Program Files\clean
                    2008-04-08 00:06 . 2008-04-08 00:06 <REP> d-------- C:\Program Files\CCleaner
                    2008-04-06 18:22 . 2008-04-06 18:54 <REP> d-------- C:\Documents and Settings\MSI\Application Data\GetRightToGo
                    2008-04-06 15:53 . 2008-04-06 15:53 <REP> d-------- C:\Program Files\Google
                    2008-04-05 17:19 . 2008-04-06 18:13 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Azureus
                    2008-04-05 17:19 . 2008-04-05 17:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
                    2008-04-05 17:07 . 2008-04-05 17:07 <REP> d-------- C:\Documents and Settings\MSI\Application Data\vlc
                    2008-04-05 16:44 . 2008-04-05 16:44 <REP> d-------- C:\Update
                    2008-04-05 16:41 . 2008-04-05 16:41 <REP> d-------- C:\Program Files\VideoLAN
                    2008-04-05 14:52 . 2008-04-05 14:52 736 --a------ C:\WINDOWS\DigimaxMaster.INI
                    2008-04-05 14:49 . 2008-04-05 14:49 8,192 --ahs---- C:\WINDOWS\Thumbs.db
                    2008-04-05 11:54 . 2008-04-08 16:30 <REP> d-------- C:\Documents and Settings\MSI\Application Data\AVG7
                    2008-04-05 11:54 . 2008-04-05 11:54 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AVG7
                    2008-04-05 11:54 . 2008-04-10 00:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
                    2008-04-05 11:54 . 2008-04-10 00:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg7
                    2008-04-05 01:17 . 2008-04-05 01:17 0 --a------ C:\WINDOWS\system32\update32.exe.tmp
                    2008-04-05 01:15 . 2008-04-05 01:15 0 --a------ C:\WINDOWS\system32\sex2.ico.tmp
                    2008-04-05 01:08 . 2008-03-29 15:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                    2008-04-05 01:08 . 2008-03-29 15:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                    2008-04-05 00:54 . 2008-04-05 00:54 <REP> d-------- C:\Program Files\Samsung
                    2008-04-05 00:54 . 2005-12-14 15:10 552,960 --a------ C:\WINDOWS\system32\xvidcore.dll
                    2008-04-05 00:54 . 1998-07-09 19:41 217,088 --a------ C:\WINDOWS\system32\skjpeg40.dll
                    2008-04-05 00:54 . 2005-12-14 15:08 159,744 --a------ C:\WINDOWS\system32\xvidvfw.dll
                    2008-04-05 00:54 . 1998-03-04 10:40 83,968 --a------ C:\WINDOWS\system32\Skbase40.dll
                    2008-04-05 00:54 . 2005-12-14 15:11 61,440 --a------ C:\WINDOWS\system32\xvid.ax
                    2008-04-05 00:54 . 2004-03-09 09:39 8,704 --a------ C:\WINDOWS\system32\vidccleaner.exe
                    2008-04-05 00:07 . 1998-07-09 19:41 14,404 --a------ C:\WINDOWS\system32\skjpeg40.cbs
                    2008-04-04 02:35 . 2008-04-04 02:35 <REP> d-------- C:\Program Files\iPod
                    2008-04-03 16:11 . 2008-04-03 16:11 <REP> d-------- C:\Documents and Settings\MSI\Application Data\Lost Marble
                    2008-04-03 16:09 . 2008-04-08 01:13 <REP> d-------- C:\Program Files\Anime Studio Pro
                    2008-04-03 00:31 . 2008-04-03 16:08 <REP> d-------- C:\Program Files\Toon Boom Animation
                    2008-04-02 17:15 . 2008-04-02 17:15 <REP> d-------- C:\Program Files\Fichiers communs\iS3
                    2008-04-02 17:15 . 2008-04-05 01:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
                    2008-04-02 17:15 . 2008-04-05 00:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SITEguard
                    2008-04-02 17:09 . 2008-04-02 17:14 <REP> d-------- C:\Program Files\killad
                    2008-04-02 16:29 . 2008-04-02 16:29 <REP> d-------- C:\Program Files\Trend Micro
                    2008-04-02 00:37 . 2008-04-02 17:31 <REP> d-------- C:\Program Files\Puzzle Quest
                    2008-04-02 00:37 . 2008-04-02 00:37 <REP> d-------- C:\Program Files\OpenAL
                    2008-04-02 00:37 . 2008-04-02 00:37 409,600 --a------ C:\WINDOWS\system32\wrap_oal.dll
                    2008-04-02 00:37 . 2008-04-02 00:37 114,688 --a------ C:\WINDOWS\system32\OpenAL32.dll
                    2008-04-01 22:57 . 2008-04-01 22:57 <REP> d-------- C:\WINDOWS\Sun
                    2008-04-01 22:34 . 2008-04-01 22:34 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
                    2008-04-01 15:04 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
                    2008-04-01 15:04 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
                    2008-04-01 15:04 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
                    2008-04-01 15:04 . 2006-09-28 16:03 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
                    2008-04-01 15:03 . 2008-04-01 15:03 <REP> d-------- C:\Program Files\Microsoft XNA
                    2008-04-01 14:38 . 2008-04-01 14:38 <REP> d-------- C:\Program Files\OGPlanet
                    2008-04-01 13:35 . 2008-04-01 13:36 <REP> d-------- C:\Program Files\Microsoft Visual Studio 8
                    2008-04-01 13:35 . 2008-04-01 15:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
                    2008-04-01 12:58 . 2008-04-01 13:22 27 --a------ C:\WINDOWS\ic.ini
                    2008-04-01 01:52 . 2008-04-15 22:50 <REP> d-------- C:\Program Files\Eden_World

                    .
                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    2008-04-17 14:58 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
                    2008-04-17 14:57 --------- d-----w C:\Program Files\SpywareBlaster
                    2008-04-14 20:26 2,418 ----a-w C:\Program Files\Fichiers communs\Noesis 3D Content Creation.log
                    2008-04-13 16:50 2,561 ----a-w C:\Program Files\Fichiers communs\Noesis - Custom Props & Animation.log
                    2008-04-13 16:46 2,471 ----a-w C:\Program Files\Fichiers communs\Noesis HL2 Character Design.log
                    2008-03-29 18:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
                    2008-03-29 18:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                    2008-03-29 18:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                    2008-03-29 18:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                    2008-03-29 18:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                    2008-03-29 18:23 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
                    2008-03-26 13:25 --------- d-----w C:\Program Files\Alwil Software
                    2008-03-26 13:14 --------- d-----w C:\Program Files\microsoft frontpage
                    2008-03-26 13:12 --------- d-----w C:\Program Files\Services en ligne
                    2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
                    2008-02-21 02:05 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
                    2008-02-21 02:05 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
                    2008-02-21 02:05 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
                    2008-02-21 02:05 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
                    2008-02-21 02:05 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
                    2008-02-21 02:05 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
                    2008-02-21 02:05 129,784 ------w C:\WINDOWS\system32\pxafs.dll
                    2008-02-21 02:05 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
                    2008-02-21 02:05 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
                    2008-02-21 02:05 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
                    2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
                    2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
                    2008-02-21 02:04 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
                    2008-02-21 02:04 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
                    2008-02-21 02:04 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
                    2008-02-21 02:04 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
                    2008-02-21 02:04 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
                    2008-02-21 02:04 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
                    2008-02-21 02:04 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
                    2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
                    2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
                    2008-02-21 02:04 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
                    2008-02-21 02:03 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
                    2008-02-21 02:03 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
                    2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
                    2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
                    2008-02-16 09:02 663,552 ----a-w C:\WINDOWS\system32\wininet.dll
                    2008-01-29 15:02 107,368 ----a-w C:\WINDOWS\system32\GEARAspi.dll
                    .

                    ((((((((((((((((((((((((((((( snapshot@2008-04-08_15.49.15.45 )))))))))))))))))))))))))))))))))))))))))
                    .
                    + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
                    + 2007-12-18 14:32:57 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\jscript.dll
                    + 2007-12-18 14:32:57 417,792 ----a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\vbscript.dll
                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944338\spmsg.dll
                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944338\spuninst.exe
                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\spcustom.dll
                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\update.exe
                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944338\update\updspapi.dll
                    + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
                    + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
                    + 2008-02-16 09:31:57 1,024,512 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\browseui.dll
                    + 2008-02-16 09:31:57 152,064 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\cdfview.dll
                    + 2008-02-16 09:31:58 1,056,768 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\danim.dll
                    + 2008-02-16 09:31:58 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\dxtmsft.dll
                    + 2008-02-16 09:31:58 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\dxtrans.dll
                    + 2008-02-16 09:31:58 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\extmgr.dll
                    + 2008-02-15 09:07:53 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\iedw.exe
                    + 2008-02-16 09:31:58 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\iepeers.dll
                    + 2008-02-16 09:31:58 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\inseng.dll
                    + 2008-02-16 09:31:58 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\jsproxy.dll
                    + 2008-02-16 09:31:59 3,087,872 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mshtml.dll
                    + 2008-02-16 09:31:59 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mshtmled.dll
                    + 2008-02-16 09:31:59 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\msrating.dll
                    + 2008-02-16 09:31:59 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\mstime.dll
                    + 2008-02-16 09:31:59 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\pngfilt.dll
                    + 2008-02-16 09:32:00 1,499,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\shdocvw.dll
                    + 2008-02-16 09:32:00 474,624 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\shlwapi.dll
                    + 2008-02-15 23:03:14 370,176 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\spru040c.dll
                    + 2008-02-16 09:32:00 620,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\urlmon.dll
                    + 2008-02-16 09:32:00 670,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\wininet.dll
                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864\spmsg.dll
                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864\spuninst.exe
                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\spcustom.dll
                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\update.exe
                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864\update\updspapi.dll
                    + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
                    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
                    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
                    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
                    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
                    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
                    - 2008-03-28 02:15:43 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
                    + 2008-04-11 06:02:11 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
                    - 2008-03-28 02:15:48 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
                    + 2008-04-11 06:02:17 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
                    - 2008-03-28 02:15:49 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
                    + 2008-04-11 06:01:49 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
                    - 2008-03-28 02:15:49 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
                    + 2008-04-11 06:02:19 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
                    - 2008-03-28 02:15:46 2,878,976 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
                    + 2008-04-11 06:02:04 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
                    - 2008-03-28 02:15:41 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
                    + 2008-04-11 06:02:22 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
                    - 2008-03-28 02:15:41 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
                    + 2008-04-11 06:02:22 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
                    - 2008-03-28 02:15:51 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
                    + 2008-04-11 06:02:18 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
                    - 2008-03-28 02:15:45 5,025,792 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
                    + 2008-04-11 06:02:01 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
                    - 2008-03-28 02:15:43 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
                    + 2008-04-11 06:02:09 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
                    - 2008-03-28 02:15:41 503,808 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
                    + 2008-04-11 06:02:02 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
                    - 2008-03-28 02:15:41 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
                    + 2008-04-11 06:02:10 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
                    - 2008-03-28 02:15:47 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
                    + 2008-04-11 06:02:13 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
                    - 2008-03-28 02:15:48 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
                    + 2008-04-11 06:02:14 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
                    - 2008-03-28 02:15:48 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
                    + 2008-04-11 06:02:15 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
                    - 2008-03-28 02:15:42 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
                    + 2008-04-11 06:02:23 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
                    - 2008-03-28 02:15:42 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
                    + 2008-04-11 06:02:23 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
                    - 2008-03-28 02:15:43 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
                    + 2008-04-11 06:02:24 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
                    - 2008-03-28 02:15:43 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
                    + 2008-04-11 06:02:25 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
                    - 2008-03-28 02:15:42 745,472 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
                    + 2008-04-11 06:02:15 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
                    - 2008-03-28 02:15:52 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
                    + 2008-04-11 06:02:14 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
                    - 2008-03-28 02:15:52 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
                    + 2008-04-11 06:02:13 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
                    - 2008-03-28 02:15:40 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
                    + 2008-04-11 06:02:20 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
                    - 2008-03-28 02:15:51 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
                    + 2008-04-11 06:02:12 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
                    - 2008-03-28 02:15:52 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
                    + 2008-04-11 06:01:58 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
                    - 2008-03-28 02:15:41 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                    + 2008-04-11 06:02:21 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
                    - 2008-03-28 02:15:40 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
                    + 2008-04-11 06:02:12 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
                    - 2008-03-28 02:15:40 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
                    + 2008-04-11 06:02:11 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
                    - 2008-03-28 02:15:50 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
                    + 2008-04-11 06:02:16 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
                    - 2008-03-28 02:15:43 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
                    + 2008-04-11 06:02:17 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
                    - 2008-03-28 02:15:50 389,120 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
                    + 2008-04-11 06:02:03 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
                    - 2008-03-28 02:15:49 716,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
                    + 2008-04-11 06:02:05 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
                    - 2008-03-28 02:15:41 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
                    + 2008-04-11 06:02:05 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
                    - 2008-03-28 02:15:47 5,050,368 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
                    + 2008-04-11 06:02:25 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
                    - 2008-03-28 02:15:44 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
                    + 2008-04-11 06:02:24 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
                    - 2008-03-28 02:15:44 397,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
                    + 2008-04-11 06:02:09 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
                    - 2008-03-28 02:15:44 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
                    + 2008-04-11 06:02:21 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
                    - 2008-03-28 02:15:51 700,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
                    + 2008-04-11 06:01:59 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
                    - 2008-03-28 02:15:49 368,640 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
                    + 2008-04-11 06:02:22 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
                    - 2008-03-28 02:15:51 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
                    + 2008-04-11 06:02:20 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
                    - 2008-03-28 02:15:49 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
                    + 2008-04-11 06:02:19 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
                    - 2008-03-28 02:15:50 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
                    + 2008-04-11 06:02:18 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
                    - 2008-03-28 02:15:43 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
                    + 2008-04-11 06:02:00 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
                    - 2008-03-28 02:15:44 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
                    + 2008-04-11 06:02:00 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
                    - 2008-03-28 02:15:51 835,584 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
                    + 2008-04-11 06:02:08 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
                    - 2008-03-28 02:15:45 86,016 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
                    + 2008-04-11 06:02:08 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
                    - 2008-03-28 02:15:45 823,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
                    + 2008-04-11 06:02:07 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
                    - 2008-03-28 02:15:46 5,316,608 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
                    + 2008-04-11 06:02:10 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
                    - 2008-03-28 02:15:46 2,035,712 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
                    + 2008-04-11 06:02:01 2,068,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
                    - 2008-03-28 02:15:50 3,018,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
                    + 2008-04-11 06:02:06 3,076,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
                    + 2008-04-11 06:05:47 27,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
                    + 2008-04-11 06:05:48 884,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
                    + 2008-04-11 06:06:17 503,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\373d5acced35e392e1f413a69042340d\ComSvcConfig.ni.exe
                    + 2008-04-11 06:07:17 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
                    + 2008-04-11 06:06:16 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
                    + 2008-04-11 06:05:49 589,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE\afd14e699e99ce00e420ef889a717168\EnvDTE.ni.dll
                    + 2008-04-11 06:07:18 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\EnvDTE80\e5ff1ac14e40f15cbcdb29aec2b443dd\EnvDTE80.ni.dll
                    + 2008-04-11 06:07:19 876,544 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
                    + 2008-04-11 06:07:20 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
                    + 2008-04-11 06:07:22 1,695,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
                    + 2008-04-11 06:07:23 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
                    + 2008-04-11 06:06:19 1,114,112 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\[u]0/u19a85babfbe02cecdbb63a65d391aba\Microsoft.Transactions.Bridge.ni.dll
                    + 2008-04-11 06:06:20 401,408 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cb8d7b6cc6827e9f2d66c4d7ef9b5d54\Microsoft.Transactions.Bridge.Dtc.ni.dll
                    + 2008-04-11 06:07:25 1,740,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
                    + 2008-04-11 06:06:36 17,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll
                    + 2008-04-11 06:07:31 2,011,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3796def4270f354abc34710ab0365c7b\Microsoft.VisualStudio.CommonIDE.ni.dll
                    + 2008-04-11 06:07:41 315,392 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\39d36c3299b9a8a771e491fd50a73181\Microsoft.VisualStudio.OLE.Interop.ni.dll
                    + 2008-04-11 06:07:42 905,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5daf472325e0f988711e5943b1707e50\Microsoft.VisualStudio.Shell.ni.dll
                    + 2008-04-11 06:07:34 1,191,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\64b4794dbb51a7d6ec4a57570a604c00\Microsoft.VisualStudio.Design.ni.dll
                    + 2008-04-11 06:07:40 4,046,848 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6ae0ea49ecd456fad0187449ca78569f\Microsoft.VisualStudio.Editors.ni.dll
                    + 2008-04-11 06:07:32 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8599fc303951ee6d202b9e53b1fc5770\Microsoft.VisualStudio.Configuration.ni.dll
                    + 2008-04-11 06:07:35 23,040 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8acff37d1532e69ddd3d18c091f52541\Microsoft.VisualStudio.Designer.Interfaces.ni.dll
                    + 2008-04-11 06:07:44 372,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8da786ed57087f3f38b4a962ba0c2790\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll
                    + 2008-04-11 06:07:28 704,512 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a7f8ad4fbd178f8f44b54acd347cc233\Microsoft.VisualStudio.ni.dll
                    + 2008-04-11 06:07:43 655,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ccce5aec2a7bf73bcfccac6b0952bb88\Microsoft.VisualStudio.Shell.Design.ni.dll
                    + 2008-04-11 06:07:45 868,352 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f8ac4925ea76fbe0e1582087cadfdfdf\Microsoft.VisualStudio.Windows.Forms.ni.dll
                    + 2008-04-11 06:03:39 11,722,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
                    + 2008-04-11 06:07:47 1,564,672 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\41bd82648d480ec304ea0c04034787bc\PresentationBuildTasks.ni.dll
                    + 2008-04-11 06:07:16 40,448 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\9385f2c37b2e00e06ec3f57153f63a2d\PresentationCFFRasterizer.ni.dll
                    + 2008-04-11 06:06:53 11,980,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\7e413273e9d6710be8a39dcce2e45c2c\PresentationCore.ni.dll
                    + 2008-04-11 06:06:26 48,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\599806acdd6dc0aeed19ebf9d622dcad\PresentationFontCache.ni.exe
                    + 2008-04-11 06:08:23 552,960 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\[u]0/u766df362854f0330a4a45179773657e\PresentationFramework.Luna.ni.dll
                    + 2008-04-11 06:08:24 274,432 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8aaa2b56f733902cc1ba9d8300d2a0e3\PresentationFramework.Royale.ni.dll
                    + 2008-04-11 06:08:22 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d87c2740add3b0f86833159ce57c71ec\PresentationFramework.Classic.ni.dll
                    + 2008-04-11 06:08:11 14,659,584 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\de20226274a5739a4b42d8e26b546180\PresentationFramework.ni.dll
                    + 2008-04-11 06:08:21 393,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e389aa7f3dd4eb1ee585724f130a79cb\PresentationFramework.Aero.ni.dll
                    + 2008-04-11 06:08:14 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationUI\f97ac4e9c402e98d2b5b7114e4fbbd2a\PresentationUI.ni.dll
                    + 2008-04-11 06:08:18 2,416,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ReachFramework\1fe0f79dd0d47e4d1eb474f98a1949fb\ReachFramework.ni.dll
                    + 2008-04-11 06:06:21 139,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\[u]0/ubcc4abbe0c5c3feeda7f711304ac4a0\ServiceModelReg.ni.exe
                    + 2008-04-11 06:06:21 286,720 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\5e3765ee346151c26a3793ddf3a8d6d7\SMDiagnostics.ni.dll
                    + 2008-04-11 06:06:22 323,584 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMSvcHost\c6f33f28f5bb403981ac148da447e3c5\SMSvcHost.ni.exe
                    + 2008-04-11 06:08:30 262,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\sysglobl\6a075eb8e0f13de87d1278aa8562d51e\sysglobl.ni.dll
                    + 2008-04-11 06:06:33 163,840 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
                    + 2008-04-11 06:06:28 1,011,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
                    + 2008-04-11 06:07:13 1,183,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll
                    + 2008-04-11 06:06:31 2,756,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
                    + 2008-04-11 06:03:58 7,049,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
                    + 2008-04-11 06:06:35 1,798,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
                    + 2008-04-11 06:04:10 10,969,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
                    + 2008-04-11 06:06:57 1,224,704 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
                    + 2008-04-11 06:07:15 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
                    + 2008-04-11 06:04:13 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
                    + 2008-04-11 06:04:12 1,667,072 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0/ue83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
                    + 2008-04-11 06:06:56 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
                    + 2008-04-11 06:06:56 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
                    + 2008-04-11 06:05:52 241,664 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\dd8f551c39409fa95b0c22cf2ee48b65\System.IdentityModel.Selectors.ni.dll
                    + 2008-04-11 06:05:51 978,944 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\581d8571e61ebe24154ae912624c3c9d\System.IdentityModel.ni.dll
                    + 2008-04-11 06:05:53 417,792 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IO.Log\86cd41998dc72b213d9464b56fe245b9\System.IO.Log.ni.dll
                    + 2008-04-11 06:08:45 655,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Messaging\[u]0/u0e3750e478bac4913ee7a6c3b7cd392\System.Messaging.ni.dll
                    + 2008-04-11 06:08:20 1,118,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Printing\690a965457e274ad13f6b1f9ac2bad4e\System.Printing.ni.dll
                    + 2008-04-11 06:06:58 815,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\[u]0/u898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll
                    + 2008-04-11 06:06:34 339,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
                    + 2008-04-11 06:05:55 2,351,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c4838d300f677f34c9d44ead84b8603b\System.Runtime.Serialization.ni.dll
                    + 2008-04-11 06:06:33 733,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
                    + 2008-04-11 06:06:15 17,354,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7a2bc3302a133e235ec99193c56a0571\System.ServiceModel.ni.dll
                    + 2008-04-11 06:06:26 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
                    + 2008-04-11 06:08:29 2,039,808 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Speech\d38908d5c6a11dd7dceaf9bd34adb437\System.Speech.ni.dll
                    + 2008-04-11 06:06:54 679,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
                    + 2008-04-11 06:08:32 2,342,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
                    + 2008-04-11 06:07:14 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
                    + 2008-04-11 06:07:11 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
                    + 2008-04-11 06:07:09 12,509,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
                    + 2008-04-11 06:04:24 13,193,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
                    + 2008-04-11 06:08:36 2,994,176 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\5e0df5685ce40f838eea52a5f1454b68\System.Workflow.Activities.ni.dll
                    + 2008-04-11 06:08:41 4,587,520 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\2689e361e42d0bb9e3d19f1ecd30c26a\System.Workflow.ComponentModel.ni.dll
                    + 2008-04-11 06:08:44 2,093,056 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\41b6c3a0c115c43c53697efa1607fe49\System.Workflow.Runtime.ni.dll
                    + 2008-04-11 06:04:31 5,771,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
                    + 2008-04-11 06:03:50 8,265,728 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
                    + 2008-04-11 06:08:47 483,328 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\f61803ded1c123ed9ed5849e7dcebf25\UIAutomationClient.ni.dll
                    + 2008-04-11 06:08:48 1,118,208 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\679889309b57024e8abbe80c6c7d48bc\UIAutomationClientsideProviders.ni.dll
                    + 2008-04-11 06:07:15 50,688 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9865738a916ad3664dd374582b9ea873\UIAutomationProvider.ni.dll
                    + 2008-04-11 06:07:16 196,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\71605ce631809dcbfba38842fdf59acf\UIAutomationTypes.ni.dll
                    + 2008-04-11 06:08:49 118,784 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\VSLangProj\e4788a914c41f4a5ae90451dbe93180e\VSLangProj.ni.dll
                    + 2008-04-11 06:06:39 3,260,416 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\50652bfd061ead84841e6c9bfffacfb1\WindowsBase.ni.dll
                    + 2008-04-11 06:08:50 270,336 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\2c96738a6ba8ff9e88889f331590e181\WindowsFormsIntegration.ni.dll
                    + 2008-04-11 06:06:23 380,928 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WsatConfig\[u]0/u2436080d129210828823210ce879fd8\WsatConfig.ni.exe
                    + 2006-06-19 19:02:55 274,433 ----a-w C:\WINDOWS\Downloaded Installations\{54C0D94A-F467-4ABC-9D02-6E58748668D4}\iTunesSetup.exe
                    + 2006-05-10 13:23:26 35,177,616 ----a-w C:\WINDOWS\Downloaded Installations\{54C0D94A-F467-4ABC-9D02-6E58748668D4}\QuickTimeInstaller.exe
                    + 2008-03-24 22:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe
                    + 2004-08-19 19:09:56 58,368 ------w C:\WINDOWS\ehome\medctrro.exe
                    + 2004-08-04 01:31:50 175,104 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSA.DLL
                    + 2004-08-04 01:31:50 53,760 ----a-w C:\WINDOWS\ime\chsime\applets\PINTLCSD.DLL
                    + 2004-08-04 01:31:52 97,792 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTMBX.DLL
                    + 2004-08-04 01:31:54 56,320 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKDIC.DLL
                    + 2004-08-04 01:31:54 173,568 ----a-w C:\WINDOWS\ime\CHTIME\Applets\CHTSKF.DLL
                    + 2004-08-04 01:32:36 426,041 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicepad.dll
                    + 2004-08-04 01:32:36 86,073 ----a-w C:\WINDOWS\ime\imjp8_1\applets\voicesub.dll
                    + 2004-08-04 01:31:40 57,399 ----a-w C:\WINDOWS\ime\imjp8_1\cplexe.exe
                    + 2004-08-04 01:31:52 368,696 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcic.dll
                    + 2004-08-04 01:31:52 716,856 ----a-w C:\WINDOWS\ime\imjp8_1\imjpcus.dll
                    + 2004-08-04 01:31:54 81,976 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.dll
                    + 2004-08-04 01:31:54 307,257 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdct.exe
                    + 2004-08-04 01:31:56 155,705 ----a-w C:\WINDOWS\ime\imjp8_1\imjpdsvr.exe
                    + 2004-08-04 01:31:58 196,665 ----a-w C:\WINDOWS\ime\imjp8_1\imjpinst.exe
                    + 2004-08-04 01:32:00 208,952 ----a-w C:\WINDOWS\ime\imjp8_1\imjpmig.exe
                    + 2004-08-04 01:32:12 233,527 ----a-w C:\WINDOWS\ime\imjp8_1\imjprw.exe
                    + 2004-08-04 01:32:16 262,200 ----a-w C:\WINDOWS\ime\imjp8_1\imjputy.exe
                    + 2004-08-04 01:32:16 274,489 ----a-w C:\WINDOWS\ime\imjp8_1\imjputyc.dll
                    + 2004-08-04 02:04:34 86,016 ----a-w C:\WINDOWS\ime\imkr6_1\applets\imekrmbx.dll
                    + 2004-08-04 02:04:38 106,496 ----a-w C:\WINDOWS\ime\imkr6_1\imekrcic.dll
                    + 2004-08-04 01:32:28 102,456 ----a-w C:\WINDOWS\ime\shared\imlang.dll
                    + 2004-08-04 01:32:12 15,872 ----a-w C:\WINDOWS\ime\shared\res\PADRS404.DLL
                    + 2004-08-04 01:31:50 15,360 ----a-w C:\WINDOWS\ime\shared\res\padrs804.dll
                    + 2008-04-10 17:57:14 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
                    + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\ARPPRODUCTICON.exe
                    + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\NewShortcut1_E659E0EE10E649B7869660F38D0EB174.exe
                    + 2008-04-13 02:20:26 18,718 ----a-r C:\WINDOWS\Installer\{E659E0EE-10E6-49B7-8696-60F38D0EB174}\NewShortcut2_8315396A5EA1419DBEC4978284BDF556.exe
                    + 2004-08-04 01:31:50 175,104 ----a-w C:\WINDOWS\LastGood\IME\CHSIME\APPLETS\PINTLCSA.DLL
                    + 2004-08-04 01:31:50 53,760 ----a-w C:\WINDOWS\LastGood\IME\CHSIME\APPLETS\PINTLCSD.DLL
                    + 2004-08-04 01:31:52 97,792 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTMBX.DLL
                    + 2004-08-04 01:31:54 56,320 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTSKDIC.DLL
                    + 2004-08-04 01:31:54 173,568 ----a-w C:\WINDOWS\LastGood\IME\CHTIME\APPLETS\CHTSKF.DLL
                    + 2004-08-04 01:32:36 426,041 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\APPLETS\voicepad.dll
                    + 2004-08-04 01:32:36 86,073 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\APPLETS\voicesub.dll
                    + 2004-08-04 01:31:40 57,399 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\cplexe.exe
                    + 2004-08-04 01:31:52 368,696 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpcic.dll
                    + 2004-08-04 01:31:52 716,856 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpcus.dll
                    + 2004-08-04 01:31:54 81,976 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdct.dll
                    + 2004-08-04 01:31:54 307,257 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdct.exe
                    + 2004-08-04 01:31:56 155,705 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpdsvr.exe
                    + 2004-08-04 01:31:58 196,665 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpinst.exe
                    + 2004-08-04 01:32:00 208,952 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjpmig.exe
                    + 2004-08-04 01:32:12 233,527 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjprw.exe
                    + 2004-08-04 01:32:16 262,200 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjputy.exe
                    + 2004-08-04 01:32:16 274,489 ----a-w C:\WINDOWS\LastGood\IME\IMJP8_1\imjputyc.dll
                    + 2004-08-04 02:04:34 86,016 ----a-w C:\WINDOWS\LastGood\IME\IMKR6_1\Applets\imekrmbx.dll
                    + 2004-08-04 02:04:38 106,496 ----a-w C:\WINDOWS\LastGood\IME\IMKR6_1\imekrcic.dll
                    + 2004-08-04 01:32:28 102,456 ----a-w C:\WINDOWS\LastGood\IME\SHARED\imlang.dll
                    + 2004-08-04 01:32:12 15,872 ----a-w C:\WINDOWS\LastGood\IME\SHARED\RES\PADRS404.DLL
                    + 2004-08-04 01:31:50 15,360 ----a-w C:\WINDOWS\LastGood\IME\SHARED\RES\padrs804.dll
                    + 2004-08-04 01:31:54 198,656 ----a-w C:\WINDOWS\LastGood\system32\IME\CINTLGNT\CINTIME.DLL
                    + 2004-08-04 01:31:56 480,256 ----a-w C:\WINDOWS\LastGood\system32\IME\CINTLGNT\CINTSETP.EXE
                    + 2004-08-04 01:31:50 59,392 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\IMSCINST.EXE
                    + 2004-08-04 01:31:50 70,144 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\PINTLPHR.EXE
                    + 2004-08-04 01:31:50 67,584 ----a-w C:\WINDOWS\LastGood\system32\IME\PINTLGNT\PMIGRATE.DLL
                    + 2004-08-04 01:32:16 44,032 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TINTLPHR.EXE
                    + 2004-08-04 01:32:16 455,168 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TINTSETP.EXE
                    + 2004-08-04 01:32:14 10,240 ----a-w C:\WINDOWS\LastGood\system32\IME\TINTLGNT\TMIGRATE.DLL
                    + 2004-08-04 01:31:50 811,064 ----a-w C:\WINDOWS\LastGood\system32\imjp81k.dll
                    + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd101b.dll
                    + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd101c.dll
                    + 2001-08-18 01:55:56 5,632 ----a-w C:\WINDOWS\LastGood\system32\kbd103.dll
                    + 2001-08-18 01:55:56 6,144 ----a-w C:\WINDOWS\LastGood\system32\kbd106.dll
                    + 2001-08-23 20:47:06 8,704 ----a-w C:\WINDOWS\LastGood\system32\kbdjpn.dll
                    + 2001-08-23 20:47:06 8,192 ----a-w C:\WINDOWS\LastGood\system32\kbdkor.dll
                    + 2004-08-04 02:04:12 76,288 ----a-w C:\WINDOWS\LastGood\system32\uniime.dll
                    - 2005-09-23 10:28:52 72,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
                    + 2007-10-24 04:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
                    - 2005-09-23 10:28:52 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
                    + 2007-10-24 04:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
                    - 2005-09-23 10:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
                    + 2007-10-24 04:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
                    - 2005-09-23 10:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
                    + 2007-10-24 04:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
                    - 2005-09-23 10:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
                    + 2007-10-24 04:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
                    - 2005-09-23 10:28:52 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
                    + 2007-10-24 04:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
                    - 2005-09-23 10:28:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
                    + 2007-10-24 04:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
                    - 2005-09-23 10:28:42 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
                    + 2007-10-24 04:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
                    - 2005-09-23 10:28:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
                    + 2007-10-24 04:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
                    - 2005-09-23 10:29:04 183,808 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
                    + 2007-10-24 04:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
                    - 2005-09-23 10:28:28 208,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
                    + 2007-10-24 04:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
                    - 2005-09-23 10:28:56 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
                    + 2007-10-24 04:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
                    - 2005-09-23 10:28:58 138,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
                    + 2007-10-24 04:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
                    - 2005-09-23 10:28:36 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
                    + 2007-10-24 04:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
                    - 2005-09-23 10:28:58 55,488 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
                    + 2007-10-24 04:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
                    - 2005-09-23 10:28:32 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
                    + 2007-10-24 04:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
                    - 2005-09-23 10:28:32 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
                    + 2007-10-24 04:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
                    - 2005-09-23 10:28:32 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
                    + 2007-10-24 04:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
                    - 2005-09-23 10:28:32 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
                    + 2007-10-24 04:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
                    1. Hello,
                      alors le smitfraudfix devait être fait en mode normal (si je te ne dis pas en MSE alors c'est en mode normal qu'il faut le faire).

                      Bon, je ne sais pas si c'est à cause de cela mais je n'ai pas les résultat escomptés...
                      Refais le en mode normal stp puis poste le rapport,

                      Ensuite,
                      >Télécharge VundoFix : http://www.atribune.org/ccount/click.php?id=4 (par Atribune) sur ton Bureau.
                      - Lance le programme, puis clique sur le bouton <Scan for Vundo>
                      - Lorsque le scan est complété, clique sur le bouton <Remove Vundo>
                      - Une invite te demandera si tu veux supprimer les fichiers, clique <YES> (le Bureau disparaîtra lors de la suppression des fichiers).
                      - Tu verras une invite qui t'annonce que ton PC va redémarrer; clique <OK>
                      - Copie/colle le contenu du rapport situé dans C:\vundofix.txt dans ton prochain poste.
                      Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage.
                      Si un message runtime error '339' s'affiche : télécharge MSWINSCK.OCX du lien ci-dessous, et place-le dans le dossier C:\Windows\System32
                      http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX

                      Après,
                      > Télécharge ComboFix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur ton Bureau.
                      Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement.
                      - Double clique combofix.exe
                      - Tape sur la touche 1 (Yes) pour démarrer le scan.
                      - Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
                      NOTE : Le rapport se trouve également ici : C:\Combofix.txt
                      Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                      PS : combo peut remplacer Vundo....mais dans ton cas...c'est bizarre...je préfère qu'on fasse les deux...et puis Combo fourni un rapport très révélateur...

                      Bon courage

                      A+
                      1. Re,

                        (Je ne pense pas que le service pack était bien installé avant alors j'ai été le chercher quand je voyais qu'ie7 ne voulais pas fonctionner)

                        Voilà le rapport de smitfraudfix:

                        SmitFraudFix v2.314

                        Rapport fait à 13:03:51,31, 2008-04-17
                        Executé à partir de C:\Documents and Settings\MSI\Bureau\Security\SmitfraudFix
                        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                        Le type du système de fichiers est NTFS
                        Fix executé en mode sans echec

                        »»»»»»»»»»»»»»»»»»»»»»»» Process

                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\WINDOWS\system32\NOTEPAD.EXE
                        C:\WINDOWS\system32\cmd.exe

                        »»»»»»»»»»»»»»»»»»»»»»»» hosts

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MSI\Application Data

                        »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MSI\Favoris

                        »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                        »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                        »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                        "Source"="About:Home"
                        "SubscribedURL"="About:Home"
                        "FriendlyName"="Ma page d'accueil"

                        »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        IEDFix
                        Credits: Malware Analysis & Diagnostic
                        Code: S!Ri

                        »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        VACFix
                        Credits: Malware Analysis & Diagnostic
                        Code: S!Ri

                        »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll

                        »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                        "AppInit_DLLs"=""

                        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                        "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                        "System"=""

                        »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                        »»»»»»»»»»»»»»»»»»»»»»»» DNS

                        HKLM\SYSTEM\CCS\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS2\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS3\Services\Tcpip\..\{53EA499A-3922-4EA3-BF08-015E4C730D78}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

                        »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                        »»»»»»»»»»»»»»»»»»»»»»»» Fin

                        et voilà pour OTMoveIT2, je ne pense pas que ça a fonctionné correctement:

                        File/Folder not found.
                        File/Folder C:\WINDOWS\system32\winupdate.exe not found.

                        OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04172008_133234

                        Erf, je ne pensais pas être aussi atteint que ça...merci encore pour le coup de main!
                        1. Bonjour,
                          Pourtant le service pack2 est bel et bien installé sur ta bécane !? Pourquoi dis tu que non ?

                          En effet, il reste une vilaine crasse collée à ton navigateur web (c'est donc pour cela que tu ne peux installer IE7...).

                          Alors,
                          >Ouvre ce lien (merci a S!RI pour ce fix) http://siri.urz.free.fr/Fix/SmitfraudFix.php et télécharge SmitfraudFix.exe.
                          - Regarde le tuto
                          - Exécute le programme et choisi l’option 1 (et uniquement).
                          Le programme va générer un rapport, copie/colle le sur le forum stp.

                          Ensuite,
                          > Télécharge OTMoveIT (de Old_Timer) : http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe sur ton bureau...
                          - Double-clique sur OTMoveIt.exe pour le lancer.
                          - Assure toi que la case "Unregister Dll's and Ocx's" est bien cochée !!!
                          - Copie le texte qui se trouve ci-dessous et colle-le dans le cadre de gauche de OTMoveIt nommé <Paste standard List of Files/Folders to be moved>.

                          C:\WINDOWS\system32\winupdate.exe

                          - Clique sur < MoveIt! > pour lancer la suppression.
                          - Lorsqu'un résultat apparaît dans le cadre Results clique sur Exit
                          N.B :Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur YES.
                          Un rapport est créé dans %SYSTEMDRIVE%\_OTMoveIt\MovedFiles\date du jour (C:\_OTMoveIt\MovedFiles\), copie-colle-le dans ta réponse suivante stp.

                          .....
                          Arff, je regarde au fur et à mesure.....il reste encore pas mal de trojans, vers.....bref,
                          On va encore reste un p'tit moment ensemble mon ami...

                          :)

                          A+
                          1. Re,

                            voilà le rapport, suivi de l'extra:

                            -main.txt

                            Deckard's System Scanner v20071014.68
                            Run by MSI on 2008-04-16 21:15:30
                            Computer is in Normal Mode.
                            --------------------------------------------------------------------------------

                            -- System Restore --------------------------------------------------------------

                            Successfully created a Deckard's System Scanner Restore Point.

                            -- Last 5 Restore Point(s) --
                            88: 2008-04-17 00:15:36 UTC - RP88 - Deckard's System Scanner Restore Point
                            87: 2008-04-16 04:38:05 UTC - RP87 - Software Distribution Service 3.0
                            86: 2008-04-16 00:08:19 UTC - RP86 - Installed Windows IDNMitigationAPIs.
                            85: 2008-04-16 00:08:00 UTC - RP85 - Installed Windows NLSDownlevelMapping.
                            84: 2008-04-16 00:07:30 UTC - RP84 - Installed Windows XP KB915865.

                            -- First Restore Point --
                            1: 2008-03-26 13:20:22 UTC - RP1 - Point de vérification système

                            Backed up registry hives.
                            Performed disk cleanup.

                            -- HijackThis (run as MSI.exe) -------------------------------------------------

                            Logfile of Trend Micro HijackThis v2.0.2
                            Scan saved at 21:16:28, on 2008-04-16
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                            Boot mode: Normal

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                            C:\Program Files\Alwil Software\Avast4\ashServ.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\WINDOWS\system32\acs.exe
                            C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            C:\Program Files\Bonjour\mDNSResponder.exe
                            C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                            C:\WINDOWS\system32\nvsvc32.exe
                            C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
                            C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                            C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\WINDOWS\system32\rundll32.exe
                            C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                            C:\Program Files\Atheros\ACU.exe
                            C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
                            C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
                            C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
                            C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                            C:\Program Files\iTunes\iTunesHelper.exe
                            C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
                            C:\Program Files\iPod\bin\iPodService.exe
                            C:\Program Files\Messenger\msmsgs.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Windows Live\Messenger\usnsvc.exe
                            C:\Documents and Settings\MSI\Bureau\dss.exe
                            C:\WINDOWS\system32\wscntfy.exe
                            C:\PROGRA~1\TRENDM~1\HIJACK~1\MSI.exe

                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                            O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                            O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                            O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
                            O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
                            O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
                            O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
                            O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
                            O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                            O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                            O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
                            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                            O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                            O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                            O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                            O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
                            O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                            O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
                            O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                            O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                            O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                            O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                            O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                            O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                            O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                            O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                            O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                            O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                            O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
                            O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                            O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                            O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                            1. Bonsoir,
                              ok,
                              peux tu poster un rapport DSS stp :

                              > Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau : http://www.techsupportforum.com/sectools/Deckard/dss.exe
                              - Choisis <enregistrer> et <Bureau> pour l'emplacement.
                              - Ferme toutes les applications en cours (même internet). C'est important car sinon le PC peut planter.
                              - Double-clique sur dss.exe pour lancer l'outil.
                              - S'il ne trouve pas HijackThis, clique sur Oui.
                              - Clique sur OK à chaque fois que cela te sera demandé.
                              - Une fois l'analyse finie un rapport s'affichera. Poste son contenu dans ta réponse.
                              NB : Le rapport se trouve aussi ici : C:\Deckard\System Scanner\main.txt
                              PS : Si tu obtiens deux rapports (main + extra) alors poste les deux.

                              Bon courage,

                              A+
                              1. Re,
                                cela fait bien deux jour que j'essaie d'installer ie7 mais je retourne toujours a ie6 comme s'il ne s'était rien passé, je viens d'installer le service pack 2 dont j'ai remarqué l'absence mais il ne s'installe pas plus. Adobe reader 8 est déjà installer et jsais pas si ca dérange que je fasse le reste en attendant ie7, mais son absence reste toujours un problème.
                                1. Bonjour,
                                  Ok, super.
                                  Alors on termine :

                                  > Installe IE7 stp : https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

                                  > Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/

                                  > Télécharge ToolsCleaner : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/ sur ton bureau.
                                  - Clique sur Recherche et laisse le scan agir ...
                                  - Clique sur Suppression pour finaliser (tu peux, si tu le souhaites, te servir des Options facultatives)
                                  - Clique sur Quitter pour obtenir le rapport et poste le dans ta réponse (TCleaner.txt se trouve à la racine de ton disque dur (C:\)).
                                  - Supprime ToolsCleaner ensuite.

                                  > Télécharge et installe Easy Cleaner stp : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
                                  (lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
                                  - Lance le programme puis clique sur <Registre> puis sur <Trouver>.
                                  - A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
                                  Si besoin tuto ici : https://www.pcparadise.fr
                                  et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/

                                  > Tu peux aussi vider ta corbeille.

                                  > Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924

                                  > Passe un coup d'AGV et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC). Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser. Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être alaise))
                                  Rappel des liens :
                                  - http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware
                                  - https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

                                  > Pour bien protéger ton PC :
                                  [1 seul Antivirus] + [1 seul Pare feu] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]

                                  > Quelques liens utiles :
                                  - http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet
                                  - https://sebsauvage.net/safehex.html
                                  - https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)

                                  > Refais un scanne Kaspersky pour vérifier qu'il ne reste plus rien et poste le rapport stp.

                                  Voila,
                                  Bonne lecture....

                                  A+
                                  1. Re, dsl, voilà le rapport, j'ai pu voir qu'il restait des trojan-downloader:
                                    KASPERSKY ON-LINE SCANNER REPORT
                                    Sunday, April 13, 2008 12:01:24 PM
                                    Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
                                    Kaspersky On-line Scanner version : 5.0.83.0
                                    Dernière mise à jour de la base antivirus Kaspersky : 13/04/2008
                                    Enregistrements dans la base antivirus Kaspersky : 701099
                                    Paramètres d'analyse
                                    Analyser avec la base antivirus suivante étendue
                                    Analyser les archives vrai
                                    Analyser les bases de messagerie vrai
                                    Cible de l'analyse Poste de travail
                                    C:\
                                    D:\
                                    E:\
                                    F:\
                                    Statistiques de l'analyse
                                    Total d'objets analysés 102661
                                    Nombre de virus trouvés 13
                                    Nombre d'objets infectés 41 / 0
                                    Nombre d'objets suspects 0
                                    Durée de l'analyse 01:36:34

                                    Nom de l'objet infecté Nom du virus Dernière action
                                    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\temp\Cookies\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\temp\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
                                    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Cookies\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\CardSpace\CardSpace.db.shadow L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\dfsr.db L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\fsr.log L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\fsrtmp.log L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Messenger\alcoolwolf@hotmail.com\SharingMetadata\Working\database_EC04_97BF_497_8AEA\tmp.edb L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows Live Contacts\alcoolwolf@hotmail.com\real\members.stg L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Application Data\Microsoft\Windows Live Contacts\alcoolwolf@hotmail.com\shadow\members.stg L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Temp\~DF7C5D.tmp L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Temp\~DF7CC7.tmp L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Temp\~DFC819.tmp L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Temp\~DFC83D.tmp L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\NTUSER.DAT L'objet est verrouillé ignoré
                                    C:\Documents and Settings\MSI\ntuser.dat.LOG L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\Cookies\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
                                    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
                                    C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\gnomon_asi02.7z.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\03 Sabbra Cadabra.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\04 Turn the Page.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\07 Mercyful Fate.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\08 Astronomy.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\09 Whiskey in the Jar.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (1 of 2)\10 Tuesday's Gone.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\01 Helpless.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\02 The Small Hours.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\03 The Wait.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\06 Am I Evil_.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\07 Blitzkrieg.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\08 Breadfan.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\11 So What.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\12 Killing Time.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\13 Overkill.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\14 Damage Case.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\15 Stone Dead Forever.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Garage, Inc. (2 of 2)\16 Too Late Too Late.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\01 Battery.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\02 Master of Puppets.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\03 The Thing That Should Not Be.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\04 Welcome Home (Sanitarium).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\05 Disposable Heroes.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\07 Orion [Instrumental].mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\Master of Puppets\08 Damage, Inc..mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Creeping Death (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Helpless (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\I Disappear.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Last Caress (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Let It Loose.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Low Man's Lyric (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Poor Twisted Me (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\Sucking My Love.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\The Chase Is Better Than The Catch.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\other Metallica\The Four Horsemen (acoustic).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\01) Motorbreath.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\02) The Mechanix.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\03) Jump In The Fire.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\04) Seek And Destroy.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\06) Metal Militia.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1982] No Life 'til Leather\07) Hit The Lights.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\01) Hit The Lights.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\02) The Four Horsemen.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\03) Motorbreath.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\04) Jump In The Fire.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\05) (Anesthesia) - Pulling Teeth.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\06) Whiplash.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\07) Phantom Lord.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\08) No Remorse.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\09) Seek And Destroy.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1983] Kill 'em All\10) Metal Militia.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\01) Fight Fire With Fire.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\04) Fade To Black.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\05) Trapped Under Ice.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\06) Escape.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1984] Ride The Lightning\07) Creeping Death.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\01) Helpless.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\02) The Small Hours.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1987] Garage Days - Re-Revisited\04) Crash Course In Brain Surgery.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\01) Blackened.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\02) And Justice For All.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\03) Eye Of The Beholder.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\04) One.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\05) The Shortest Straw.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\06) Harvester Of Sorrow.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\07) The Frayed Ends Of Sanity.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\08) To Live Is To Die.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1988] And Justice For All\09) Dyers Eve.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\01) Enter Sandman.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\02) Sad But True.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\03) Holier Than Thou.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\04) The Unforgiven.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\05) Wherever I May Roam.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\06) Don't Tread On Me.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\07) Through The Never.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\08) Nothing Else Matters.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\10) The God That Failed.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\11) My Friend Of Misery.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1991] (the black album)\12) The Struggle Within.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-01) Enter Sandman.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-02) Creeping Death.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-03) Harvester Of Sorrow.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-04) Welcome Home (Sanitarium).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-05) Sad But True.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-06) Of Wolf And Man.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-07) The Unforgiven.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-08) Justice Medley.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\1-09) Solos (bass-guitar).mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-02) For Whom The Bell Tolls.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-03) Fade To Black.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\2-05) Seek & Destroy.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-01) Nothing Else Matters.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-02) Wherever I May Roam.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-03) Am I Evil.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-05) One.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-06) Battery.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-07) The Four Horsemen.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-08) Motorbreath.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1993] Live Shit - Binge and Purge\3-09) Stone Cold Crazy.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\01) Ain't My Bitch.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\02) 2 X 4.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\03) The House Jack Built.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\04) Until It Sleeps.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\05) King Nothing.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\06) Hero Of The Day.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\07) Bleeding Me.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\08) Cure.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\11) Mama Said.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\12) Thorn Within.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\13) Ronnie.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1996] Load\14) The Outlaw Torn.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\02) The Memory Remains.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\03) Devil's Dance.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\04) The Unforgiven II.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\05) Better Then You.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\06) Slither.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\07) Carpe Diem Baby.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\08) Bad Seed.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\09) Where The Wild Things Are.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\10) Prince Charming.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\11) Low Man's Lyric.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\12) Attitude.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1997] Reload\13) Fixxxer.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-01) The Ecstasy Of Gold.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-02) The Call Of Ktulu.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-04) Of Wolf And Man.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-05) The Thing That Should Not Be.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-06) Fuel.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-07) The Memory Remains.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-08) No Leaf Clover.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-10) Devil's Dance.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\1-11) Bleeding Me.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-01) Nothing Else Matters.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-03) For Whom The Bell Tolls.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-04) -Human.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-05) Wherever I May Roam.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-06) The Outlaw Torn.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-07) Sad But True.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-08) One.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-09) Enter Sandman.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[1999] S & M\2-10) Battery.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\02) St. Anger.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\03) Some Kind Of Monster.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\04) Dirty Window.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\05) Invisible Kid.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\06) My World.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\07) Shoot Me Again.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\08) Sweet Amber.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\09) The Unnamed Feeling.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\10) Purify.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\Metallica\[2003] St. Anger\11) All Within My Hands.mp3.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\BitLord\Downloads\NOESIS\Noesis Advanced Source Level Design\NOESIS - Advanced Level Design.iso.bc! L'objet est verrouillé ignoré
                                    C:\Program Files\clean\pskill.exe Infecté : not-a-virus:RiskTool.Win32.PsKill.k ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log.idx L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log L'objet est verrouillé ignoré
                                    C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log.idx L'objet est verrouillé ignoré
                                    C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip/Documents and Settings/MSI/Bureau/catchme.zip/efccyyvs.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip/Documents and Settings/MSI/Bureau/catchme.zip Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\QooBox\Quarantine\catchme2008-04-08_154655.67.zip ZIP: infecté - 2 ignoré
                                    C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004667.dll Infecté : Trojan-Downloader.Win32.Zlob.kye ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004707.exe Infecté : Trojan-Downloader.Win32.Zlob.kvd ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004708.exe Infecté : Trojan-Downloader.Win32.Zlob.kyy ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004709.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004717.exe Infecté : Trojan-Downloader.Win32.Zlob.kue ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004718.exe Infecté : Trojan-Downloader.Win32.Zlob.kux ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP45\A0004719.exe Infecté : Trojan-Downloader.Win32.Zlob.lad ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/keygen.exe Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/patch.exe Infecté : Trojan.Win32.Dialer.yz ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar/crack.exe Infecté : Trojan-Downloader.Win32.Small.ude ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe/data.rar Infecté : Trojan-Downloader.Win32.Small.ude ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP47\A0004766.exe RarSFX: infecté - 4 ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP50\A0004961.exe Infecté : Rootkit.Win32.Agent.ahc ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0007120.dll Infecté : not-a-virus:AdWare.Win32.Virtumonde.mhf ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0007121.dll Infecté : not-a-virus:AdWare.Win32.Virtumonde.mhf ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0008116.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP53\A0008117.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009531.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009532.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009533.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009534.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0009535.dll Infecté : Trojan-Downloader.Win32.Zlob.kyi ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013539.exe Infecté : Trojan-Downloader.Win32.Small.ude ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013540.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013541.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013542.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013543.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013544.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013545.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013546.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013547.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013548.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013549.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013550.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013551.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013552.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP55\A0013553.dll Infecté : Packed.Win32.Monder.gen ignoré
                                    C:\System Volume Information\_restore{D32F0EB2-A13E-4F34-B70E-AA1CA68603FF}\RP68\change.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
                                    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\ACS.evt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
                                    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
                                    C:\WINDOWS\Temp\fa56d7ec.$$$ L'objet est verrouillé ignoré
                                    C:\WINDOWS\Temp\Perflib_Perfdata_32c.dat L'objet est verrouillé ignoré
                                    C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
                                    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
                                    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
                                    Analyse terminée.
                                    1. Bonsoir,
                                      voici le résultat...voici le résultat....
                                      Ton lien ne marche pas et même s'il fonctionnait je ne pourrai pas voir ton rapport....

                                      Il faut obligatoirement que tu me le poste (copier/coller).

                                      Peux-tu le poster stp ?

                                      Après on termine : il reste encore quelques trucs à gérer d'un coup.

                                      Bon courage.

                                      A+
                                      1. Bonjour,
                                        voilà le résultat : file:///C:/Documents%20and%20Settings/MSI/Bureau/analyse.html

                                        Logfile of Trend Micro HijackThis v2.0.2
                                        Scan saved at 12:03:30, on 2008-04-13
                                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                                        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                                        Boot mode: Normal

                                        Running processes:
                                        C:\WINDOWS\System32\smss.exe
                                        C:\WINDOWS\system32\winlogon.exe
                                        C:\WINDOWS\system32\services.exe
                                        C:\WINDOWS\system32\lsass.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                                        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                        C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                        C:\WINDOWS\system32\spoolsv.exe
                                        C:\WINDOWS\system32\acs.exe
                                        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                        C:\Program Files\Bonjour\mDNSResponder.exe
                                        C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                                        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                                        C:\WINDOWS\system32\nvsvc32.exe
                                        C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
                                        C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                                        C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                                        C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                                        C:\WINDOWS\Explorer.EXE
                                        C:\WINDOWS\system32\rundll32.exe
                                        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                        C:\Program Files\Atheros\ACU.exe
                                        C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
                                        C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
                                        C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
                                        C:\Program Files\DAEMON Tools\daemon.exe
                                        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                                        C:\Program Files\QuickTime\QTTask.exe
                                        C:\Program Files\iTunes\iTunesHelper.exe
                                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                        C:\Program Files\BitLord\BitLord.exe
                                        C:\Program Files\iPod\bin\iPodService.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\Program Files\Messenger\msmsgs.exe
                                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                        C:\Program Files\Windows Live\Messenger\usnsvc.exe
                                        C:\Program Files\Mozilla Firefox\firefox.exe
                                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                                        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                                        O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
                                        O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
                                        O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
                                        O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
                                        O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
                                        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                                        O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
                                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                        O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitLord\BitLord.exe"
                                        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                                        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                                        O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                        O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                                        O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
                                        O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                                        O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
                                        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                        O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                        O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                                        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                        O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                                        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
                                        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                        O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Oz128 Driver\o2flash.exe
                                        O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                                        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                                        O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                                        1. Bonsoir,
                                          Alors,
                                          > Bon il te faut un pare feu :
                                          - Je te conseille Kerio : http://www.commentcamarche.net/telecharger/telecharger 206 kerio . Si problème, tuto : https://kerio.probb.fr/
                                          - Si tu as des difficultés avec les configuration de Kerio, alors installe Zone Alarme : /telecharger/telecharger-157-zonealarm, en cas de problème : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm
                                          - Installe le nouveau pare-feu, puis désactive le pare-feu windows.

                                          Après,
                                          avant de finir :
                                          > Fais un scan en ligne avec Kaspersky : https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                                          - Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >.
                                          Le scan ne marche que sous Internet Explorer.
                                          - On va te demander de télécharger un contôle active x, accepte .
                                          - Dans le menu Choisissez la cible de l'analyse, sélectionne Poste de travail. Le scan va commencer.
                                          - Poste le rapport qui sera généré stp.
                                          S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : http://www.inoculer.com/activex.php3
                                          Rappel : le scan est à faire sous Internet Explorer
                                          Tuto ici si problème : http://www.vista-xp.fr/forum/topic109.html

                                          Ensuite,
                                          Poste un nouveau rapport HiJackT stp.

                                          A+
                                          • 1
                                          • 2