Antivir non actif

Résolu
Bonjour,

Je viens d'installer antivir. Apres l'installation, je me rend compte que le parapluie est fermé. Il n'est donc pas actif
Je vais sur le forum de commentçamarche et je me rend compte qu'il y a quelques souci. Je tombe sur une discussion qui affirmer qu'il faut le désinstaller puis le réinstaller. Je m'exécute à la tache et pares la réinstallation, il n'est pas toujours actif. Je tombe sur une autre discussion qui dit qu'il ne faut pas le mettre a jour tout de suite, il faut d'abord redémarrer l'ordinateur. Je m'execute une second fois et le problème n'est pas résolu

Je peux scanné ( pas de virus), le mettre a jour mais il ne s'active pas au demarrage, le parapluie est toujours fermé.

Que faire??
Merci
Configuration: Windows XP
Firefox 2.0.0.14

26 réponses

Résumé de la discussion

Le problème porte sur l'activation de l'icône parapluie d'Antivir après une installation sous Windows XP et Firefox 2.0.0.14, l'icône restant fermée et aucun démarrage du service n'ayant lieu. Plusieurs utilisateurs recommandent de désinstaller puis de réinstaller l'antivirus, et d'attendre le redémarrage avant toute mise à jour; d'autres suggèrent de lancer la réinstallation en mode sans échec et de désactiver Spybot. Des interventions évoquent l'essai d'outils alternatifs ou l'examen d'une possible infection, et certains signalent que le même problème peut persister malgré les tentatives de réparation. En cas de solution non concluante, le fil illustre une disparité de conseils et une incertitude quant à la fiabilité des démarches, sans consensus sur une procédure universelle.

Bobot (l’IA à votre service)
  1. Et bien bravo a toi mais je ne comprend toujours pas ce qu'il s'est passé pour que tu aies ce problème ...
    1. Enfin ça marche. Quelle patience et persévérance .

      Il faut télécharge ce fichier zip : http://dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
      Vous décompressez le contenu dans le dossier d'avira Antivir personnal.
      Vous remplacer les fichiers existants.
      Vous redémarrer et le tour est jouer.

      Merci pour vos aides.
      1. Marche toujours pas. J'essaye toujours de me pencher sur le probleme. Si j'arrive a l'activer, je vous tiens au courant
        1. J'ai essayer mais ça ne marche pas.
          Je l'ai installer sur l'ordinateur de ma copine et ça fonctionne très bien.

          Je vois plus quoi faire!!!
          1. ok j'essaye

            Voici le rapport Hijackthis
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 21:14, on 18/05/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            C:\WINDOWS\system32\nvsvc32.exe
            E:\Jeux\Need for Speed ProStreet\PB\PnkBstrA.exe
            D:\Programmes\Sunbelt Software\Personal Firewall\kpf4ss.exe
            D:\Programmes\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\WINDOWS\Explorer.EXE
            D:\Programmes\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
            D:\Programmes\Wallpaper\Wallpaper.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
            D:\Programmes\Mozilla Firefox\firefox.exe
            D:\Programmes\HijackThis\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R3 - URLSearchHook: SrchHook Class - {F4F10C1D-87C7-404A-B4B3-000000000000} - D:\PROGRA~1\DAP\SBSearch.dll
            O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - (no file)
            O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [SpybotSnD] "D:\Programmes\Spybot - Search & Destroy\SpybotSD.exe"
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
            O4 - HKCU\..\Run: [ccleaner] "D:\Programmes\CCleaner\ccleaner.exe" /AUTO
            O4 - HKCU\..\Run: [Wallpaper] "D:\Programmes\Wallpaper\Wallpaper.exe" Starter
            O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Programmes\Spybot - Search & Destroy\TeaTimer.exe
            O8 - Extra context menu item: &Download with &DAP - D:\Programmes\DAP\dapextie.htm
            O8 - Extra context menu item: Download &all with DAP - D:\Programmes\DAP\dapextie2.htm
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
            O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - D:\Programmes\CDPoker\casino.exe
            O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - D:\Programmes\CDPoker\casino.exe
            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
            O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
            O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - E:\Jeux\Need for Speed ProStreet\PB\PnkBstrA.exe
            O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
            O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - D:\Programmes\Sunbelt Software\Personal Firewall\kpf4ss.exe
            1. moi non plus dsl

              essais de le reinstaller en mode sans echec n'oublie pas avant de reinstaller antivir desactive spybot!!
              1. Je suis désolé mais je n'ai maintenant plus d'idées, bonne chance j'espère...
                1. Dans le même genre que combofix il y a vundofix, http://www.clubic.com/telecharger-fiche25107-vundofix.html, tu peux aussi essayer mais sans aucunes garanties...
                  1. Voici le rapport

                    ComboFix 08-05-15.3 - benet 2008-05-18 20:37:24.2 - NTFSx86
                    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1675 [GMT 2:00]
                    Endroit: C:\Documents and Settings\benet\Bureau\ComboFix.exe
                    * Création d'un nouveau point de restauration

                    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                    .

                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                    .

                    C:\Documents and Settings\benet\Application Data\ShoppingReport
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\Config.xml
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\db\Aliases.dbs
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\db\Sites.dbs
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\dwld\WhiteList.xip
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\report\aggr_storage.xml
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\report\send_storage.xml
                    C:\Documents and Settings\benet\Application Data\ShoppingReport\cs\res1\WhiteList.dbs
                    C:\Program Files\ShoppingReport
                    C:\Program Files\ShoppingReport\Uninst.exe
                    C:\WINDOWS\system32\MSINET.oca
                    C:\WINDOWS\system32\winsys.exe

                    .
                    ((((((((((((((((((((((((((((( Fichiers créés 2008-04-18 to 2008-05-18 ))))))))))))))))))))))))))))))))))))
                    .

                    2008-05-18 19:52 . 2008-05-18 19:52 <REP> d-------- C:\Program Files\Avira
                    2008-05-18 17:59 . 2008-05-18 19:52 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Avira
                    2008-05-18 17:36 . 2008-05-18 20:37 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\NtUser.dat.LOG
                    2008-05-16 19:24 . 2008-05-16 19:24 <REP> d-------- C:\Documents and Settings\benet\Application Data\InstallShield Installation Information
                    2008-05-16 19:14 . 2006-05-31 09:22 62,232 -r------- C:\WINDOWS\system32\GameuxInstallHelper.dll
                    2008-05-15 20:50 . 2008-05-17 16:20 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
                    2008-05-15 20:27 . 2008-05-15 20:27 <REP> d-------- C:\WINDOWS\system32\LogFiles
                    2008-05-11 15:25 . 2008-05-11 15:25 45 --a------ C:\WINDOWS\nfsc_patch.ini
                    2008-05-11 15:14 . 2008-05-11 15:14 <REP> d-------- C:\Program Files\Logitech
                    2008-05-09 14:35 . 2008-05-12 22:49 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TrackMania
                    2008-05-09 14:31 . 2001-08-23 17:04 12,288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
                    2008-05-09 14:31 . 2001-08-23 17:04 12,288 --a--c--- C:\WINDOWS\system32\dllcache\mouhid.sys
                    2008-05-09 14:30 . 2004-08-04 00:45 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
                    2008-05-09 14:30 . 2004-08-04 00:45 14,848 --a--c--- C:\WINDOWS\system32\dllcache\kbdhid.sys
                    2008-05-09 14:20 . 2008-05-11 15:14 <REP> d-------- C:\Program Files\Fichiers communs\Logitech
                    2008-05-09 02:06 . 2008-05-09 14:15 <REP> d-------- C:\Program Files\DAEMON Tools Lite
                    2008-05-09 01:59 . 2008-05-09 01:59 <REP> d-------- C:\Documents and Settings\benet\Application Data\DAEMON Tools
                    2008-05-09 01:59 . 2008-05-09 01:59 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys
                    2008-04-29 19:20 . 2004-08-03 23:07 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
                    2008-04-29 19:20 . 2004-08-03 23:07 59,264 --a--c--- C:\WINDOWS\system32\dllcache\usbaudio.sys
                    2008-04-29 19:19 . 2004-08-03 23:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
                    2008-04-29 19:19 . 2004-08-03 23:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
                    2008-04-22 23:05 . 2008-04-22 23:05 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\IM
                    2008-04-22 23:04 . 2008-04-22 23:04 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\IncrediMail
                    2008-04-19 11:24 . 2005-05-03 18:43 69,632 --a------ C:\WINDOWS\Alcmtr.exe
                    2008-04-19 11:24 . 2007-11-14 15:18 553 --a------ C:\WINDOWS\USetup.iss
                    2008-04-19 11:17 . 2008-04-19 11:18 <REP> d-------- C:\Program Files\Setup Files

                    .
                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    2008-05-18 18:22 --------- d-----w C:\Documents and Settings\benet\Application Data\Wallpaper
                    2008-05-18 17:15 130,854 ----a-w C:\WINDOWS\system32\drivers\fwdrv.err
                    2008-05-17 21:13 --------- d-----w C:\Documents and Settings\benet\Application Data\uTorrent
                    2008-05-15 18:42 --------- d---a-w C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
                    2008-05-09 11:23 --------- d--h--w C:\Program Files\InstallShield Installation Information
                    2008-04-24 17:25 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
                    2008-04-19 09:24 --------- d-----w C:\Program Files\Realtek
                    2008-04-15 20:04 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\nView_Profiles
                    2008-04-12 23:05 --------- d-----w C:\Program Files\uTorrent
                    2008-04-04 17:18 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
                    2008-04-04 16:59 --------- d-----w C:\Documents and Settings\benet\Application Data\gtopala
                    2008-04-03 00:13 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
                    2008-04-02 23:46 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
                    2008-03-29 17:11 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft Help
                    2008-03-18 10:06 --------- d-----w C:\Program Files\MSI
                    2008-03-18 10:03 --------- d-----w C:\Program Files\SystemRequirementsLab
                    2008-03-18 10:03 --------- d-----w C:\Documents and Settings\benet\Application Data\SystemRequirementsLab
                    2008-03-07 00:25 159,541 ----a-w C:\WINDOWS\Lock on _ Flaming Cliffs FR Uninstaller.exe
                    2008-02-22 18:02 50,688 ----a-w C:\WINDOWS\system32\wbhelp2.dll
                    2008-02-18 22:23 43,520 ----a-w C:\WINDOWS\system32\CmdLineExt03.dll
                    .

                    ((((((((((((((((((((((((((((( snapshot@2008-04-03_ 2.39.13.26 )))))))))))))))))))))))))))))))))))))))))
                    .
                    - 2006-05-04 08:26:36 2,808,832 ------r C:\WINDOWS\alcwzrd.exe
                    + 2006-05-04 14:26:36 2,808,832 ----a-w C:\WINDOWS\alcwzrd.exe
                    - 2008-03-01 18:16:07 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
                    + 2008-05-13 18:06:54 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
                    - 2008-03-01 18:16:07 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
                    + 2008-05-13 18:06:54 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
                    - 2008-03-01 18:16:07 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
                    + 2008-05-13 18:06:55 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
                    - 2008-03-01 18:16:01 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:37 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:02 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:39 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:03 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:40 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:03 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:41 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:04 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-13 18:06:55 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:04 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:42 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:05 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:42 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:05 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:43 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:05 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:43 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:08 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    + 2008-05-10 21:29:46 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
                    - 2008-03-01 18:16:08 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                    + 2008-05-13 18:06:55 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
                    - 2008-03-01 18:16:08 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
                    + 2008-05-13 18:06:55 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
                    - 2008-03-01 18:16:08 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
                    + 2008-05-13 18:06:56 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
                    - 2008-03-01 18:16:08 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
                    + 2008-05-13 18:06:56 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
                    - 2008-03-01 18:16:06 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
                    + 2008-05-13 18:06:53 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
                    + 2008-05-16 17:12:59 315,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_fr_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
                    + 2008-05-16 17:13:05 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
                    + 2008-05-16 17:13:05 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
                    + 2008-05-16 17:13:06 10,240 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
                    + 2008-05-16 17:13:00 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll
                    + 2008-05-16 17:13:09 9,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
                    + 2008-05-16 17:13:09 9,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
                    + 2008-05-16 17:13:08 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
                    + 2008-05-16 17:13:06 311,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.Resources.dll
                    + 2008-05-16 17:13:08 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_fr_b03f5f7f11d50a3a\sysglobl.resources.dll
                    + 2008-05-16 17:13:06 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll
                    + 2008-05-16 17:13:08 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.resources.dll
                    + 2008-05-16 17:13:06 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.OracleClient.resources.dll
                    + 2008-05-16 17:13:04 335,872 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.Resources.dll
                    + 2008-05-16 17:13:06 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_fr_b77a5c561934e089\system.data.sqlxml.resources.dll
                    + 2008-05-16 17:13:00 385,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
                    + 2008-05-16 17:13:04 544,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Design.Resources.dll
                    + 2008-05-16 17:13:02 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
                    + 2008-05-16 17:13:01 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll
                    + 2008-05-16 17:13:07 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll
                    + 2008-05-16 17:13:04 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Resources.dll
                    + 2008-05-16 17:13:00 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll
                    + 2008-05-16 17:13:07 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Management.Resources.dll
                    + 2008-05-16 17:13:05 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Messaging.Resources.dll
                    + 2008-05-16 17:13:05 212,992 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\system.Resources.dll
                    + 2008-05-16 17:13:07 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_fr_b77a5c561934e089\System.Runtime.Remoting.Resources.dll
                    + 2008-05-16 17:13:08 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
                    + 2008-05-16 17:13:01 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Security.Resources.dll
                    + 2008-05-16 17:13:02 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
                    + 2008-05-16 17:13:08 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_fr_b77a5c561934e089\System.Transactions.resources.dll
                    + 2008-05-16 17:13:08 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
                    + 2008-05-16 17:13:02 610,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll
                    + 2008-05-16 17:13:03 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
                    + 2008-05-16 17:13:03 430,080 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.Resources.dll
                    + 2008-05-16 17:13:03 167,936 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_fr_b77a5c561934e089\System.xml.Resources.dll
                    + 2006-10-13 06:12:18 28,672 ----a-w C:\WINDOWS\AutoTuneScript.dll
                    + 2008-05-18 18:21:05 2,048 --s-a-w C:\WINDOWS\bootstat.dat
                    - 2000-08-31 06:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
                    + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
                    + 2000-08-31 06:00:00 73,728 ----a-w C:\WINDOWS\fdsv.exe
                    + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
                    + 2008-05-11 13:14:29 40,960 ----a-r C:\WINDOWS\Installer\{64B20B36-AEE7-4DD4-897C-C5DA5C218F60}\NewShortcut1_C5961323A2E54FABB92DDBF6C282F0F5.exe
                    + 2008-05-15 18:27:14 3,262 ----a-r C:\WINDOWS\Installer\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}\nfs_icon.exe
                    + 2005-09-23 14:33:08 1,060,864 ----a-w C:\WINDOWS\MFC71.dll
                    - 2007-04-25 08:55:52 2,162,688 ------r C:\WINDOWS\MicCal.exe
                    + 2007-06-28 14:44:14 2,165,760 ----a-w C:\WINDOWS\MicCal.exe
                    + 2005-12-23 06:59:08 24,064 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\alinkui.dll
                    + 2005-12-23 06:59:10 161,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\cscompui.dll
                    + 2005-12-23 06:59:10 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\CvtResUI.dll
                    + 2005-12-23 06:59:16 216,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\vbc7ui.dll
                    + 2005-12-23 06:59:06 245,760 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\Vsavb7rtUI.dll
                    + 2005-12-23 06:59:06 8,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_compiler.resources.dll
                    + 2005-12-23 06:59:06 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_rc.dll
                    + 2005-12-23 06:59:06 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regbrowsers.resources.dll
                    + 2005-12-23 06:59:06 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regsql.resources.dll
                    + 2005-12-23 06:59:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnetmmcext.resources.dll
                    + 2005-12-23 06:59:14 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\caspol.resources.dll
                    + 2005-12-23 06:59:14 4,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\InstallUtil.resources.dll
                    + 2005-12-23 06:59:12 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\JSC.Resources.dll
                    + 2005-12-23 06:59:14 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Engine.resources.dll
                    + 2005-12-23 06:59:14 139,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Tasks.resources.dll
                    + 2005-12-23 06:59:14 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Utilities.Resources.dll
                    + 2005-12-23 06:59:12 45,056 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.JScript.Resources.dll
                    + 2005-12-23 06:59:16 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.VisualBasic.resources.dll
                    + 2005-12-23 06:59:14 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\MSBuild.resources.dll
                    + 2005-12-23 06:59:14 311,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorlib.Resources.dll
                    + 2005-12-23 06:59:14 404,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorrc.dll
                    + 2005-12-23 06:59:14 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Regasm.resources.dll
                    + 2005-12-23 06:59:14 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\ShFusRes.dll
                    + 2005-12-23 06:59:14 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\sysglobl.resources.dll
                    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.Install.Resources.dll
                    + 2005-12-23 06:59:14 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.resources.dll
                    + 2005-12-23 06:59:14 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.OracleClient.resources.dll
                    + 2005-12-23 06:59:14 335,872 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.Resources.dll
                    + 2005-12-23 06:59:14 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.data.sqlxml.resources.dll
                    + 2005-12-23 06:59:08 385,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Deployment.resources.dll
                    + 2005-12-23 06:59:14 544,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Design.Resources.dll
                    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Protocols.resources.dll
                    + 2005-12-23 06:59:14 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Resources.dll
                    + 2005-12-23 06:59:14 6,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Design.Resources.dll
                    + 2005-12-23 06:59:14 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Resources.dll
                    + 2005-12-23 06:59:14 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.EnterpriseServices.Resources.dll
                    + 2005-12-23 06:59:14 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Management.Resources.dll
                    + 2005-12-23 06:59:14 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Messaging.Resources.dll
                    + 2005-12-23 06:59:14 212,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.Resources.dll
                    + 2005-12-23 06:59:14 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Remoting.Resources.dll
                    + 2005-12-23 06:59:14 11,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Serialization.Formatters.Soap.Resources.dll
                    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Security.Resources.dll
                    + 2005-12-23 06:59:14 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.ServiceProcess.Resources.dll
                    + 2005-12-23 06:59:14 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Transactions.resources.dll
                    + 2005-12-23 06:59:14 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Mobile.resources.dll
                    + 2005-12-23 06:59:14 610,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Resources.dll
                    + 2005-12-23 06:59:14 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Services.Resources.dll
                    + 2005-12-23 06:59:14 430,080 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Windows.Forms.Resources.dll
                    + 2005-12-23 06:59:14 167,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.xml.Resources.dll
                    + 2005-12-23 06:59:18 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.Data.resources.dll
                    + 2005-12-23 06:59:18 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.resources.dll
                    + 2005-12-09 08:45:38 609,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
                    + 2005-12-09 08:45:38 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.res.1036.dll
                    + 2005-12-09 10:26:10 245,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\unicows.dll
                    + 2005-12-23 06:59:14 23,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0[/u]40C\mscorsecr.dll
                    + 2005-09-23 14:33:10 499,712 ----a-w C:\WINDOWS\msvcp71.dll
                    + 2005-09-23 14:33:10 348,160 ----a-w C:\WINDOWS\msvcr71.dll
                    + 2006-08-21 07:20:24 45,056 ----a-w C:\WINDOWS\NTuneGpu.dll
                    + 2006-10-13 06:13:52 1,622,016 ----a-w C:\WINDOWS\NVBenchMarks.dll
                    + 2006-09-05 12:59:14 217,088 ----a-w C:\WINDOWS\NVGfxOgl.dll
                    + 2006-06-01 15:22:00 53,248 ----a-w C:\WINDOWS\Nvgpio.dll
                    + 2006-10-13 06:18:26 18,216 ----a-w C:\WINDOWS\nvoclk64.sys
                    + 2006-10-13 06:18:14 6,912 ----a-w C:\WINDOWS\nvoclock.sys
                    + 2006-10-13 06:16:36 421,888 ----a-w C:\WINDOWS\nvsulib.dll
                    - 2008-02-09 17:39:35 8,738 ----a-w C:\WINDOWS\pchealth\helpctr\Config\Cntstore.bin
                    + 2008-04-20 10:01:31 8,972 ----a-w C:\WINDOWS\pchealth\helpctr\Config\Cntstore.bin
                    - 2008-02-09 17:39:33 86,331 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
                    + 2008-04-20 10:02:32 86,331 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
                    + 2008-04-20 10:02:32 2,430 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
                    - 2007-05-10 10:08:06 16,342,528 ------r C:\WINDOWS\RTHDCPL.exe
                    + 2008-01-29 13:47:50 16,859,648 ----a-w C:\WINDOWS\RTHDCPL.exe
                    - 2007-03-23 11:19:10 9,715,200 ------r C:\WINDOWS\RTLCPL.exe
                    + 2007-03-23 17:19:10 9,715,200 ----a-w C:\WINDOWS\RTLCPL.exe
                    - 2007-01-12 08:54:44 520,192 ------r C:\WINDOWS\RtlExUpd.dll
                    + 2007-07-26 15:09:20 520,192 ----a-w C:\WINDOWS\RtlExUpd.dll
                    - 2007-01-16 02:39:36 1,191,936 ------r C:\WINDOWS\RtlUpd.exe
                    + 2007-11-07 15:31:38 1,191,936 ----a-w C:\WINDOWS\RtlUpd.exe
                    + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
                    - 2007-05-07 10:51:24 1,826,816 ------r C:\WINDOWS\SkyTel.exe
                    + 2007-11-20 16:15:58 1,826,816 ----a-w C:\WINDOWS\SkyTel.exe
                    - 2006-07-21 08:14:36 86,016 ------r C:\WINDOWS\SoundMan.exe
                    + 2006-07-21 14:14:36 86,016 ----a-w C:\WINDOWS\SoundMan.exe
                    + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
                    + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
                    + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
                    + 2001-08-24 12:00:00 2,000 ----a-w C:\WINDOWS\system\KEYBOARD.DRV
                    + 2001-08-24 12:00:00 2,032 ----a-w C:\WINDOWS\system\MOUSE.DRV
                    + 2001-08-24 12:00:00 1,744 ----a-w C:\WINDOWS\system\SOUND.DRV
                    + 2001-08-24 12:00:00 2,176 ----a-w C:\WINDOWS\system\VGA.DRV
                    - 2006-08-14 10:31:06 32,768 ----a-w C:\WINDOWS\system32\Auxiliary.dll
                    + 2006-08-14 09:31:06 32,768 ----a-w C:\WINDOWS\system32\Auxiliary.dll
                    - 2006-08-01 07:02:32 49,152 ------r C:\WINDOWS\system32\ChCfg.exe
                    + 2006-08-01 13:02:32 49,152 ----a-w C:\WINDOWS\system32\ChCfg.exe
                    + 2008-05-18 15:36:43 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\NtUser.dat
                    + 2007-10-12 13:14:00 1,374,232 ----a-w C:\WINDOWS\system32\D3DCompiler_36.dll
                    + 2007-10-02 07:56:34 444,776 ----a-w C:\WINDOWS\system32\d3dx10_36.dll
                    - 2005-07-22 18:59:04 2,319,568 ----a-w C:\WINDOWS\system32\d3dx9_27.dll
                    + 2005-07-22 17:59:04 2,319,568 ----a-w C:\WINDOWS\system32\d3dx9_27.dll
                    - 2005-12-05 17:09:18 2,323,664 ----a-w C:\WINDOWS\system32\d3dx9_28.dll
                    + 2005-12-05 16:09:18 2,323,664 ----a-w C:\WINDOWS\system32\d3dx9_28.dll
                    + 2007-10-12 13:14:00 3,734,536 ----a-w C:\WINDOWS\system32\d3dx9_36.dll
                    + 2004-08-03 23:08:26 1,788 ----a-w C:\WINDOWS\system32\Dcache.bin
                    - 2004-08-03 22:08:00 60,288 -c--a-w C:\WINDOWS\system32\dllcache\drmk.sys
                    + 2004-08-03 21:08:00 60,288 -c--a-w C:\WINDOWS\system32\dllcache\drmk.sys
                    + 2004-08-03 21:08:20 36,224 -c--a-w C:\WINDOWS\system32\dllcache\hidclass.sys
                    + 2004-08-03 21:08:18 24,960 -c--a-w C:\WINDOWS\system32\dllcache\hidparse.sys
                    - 2001-08-17 21:02:20 9,600 -c--a-w C:\WINDOWS\system32\dllcache\hidusb.sys
                    + 2001-08-17 20:02:20 9,600 -c--a-w C:\WINDOWS\system32\dllcache\hidusb.sys
                    + 2001-08-24 12:00:00 2,000 -c--a-w C:\WINDOWS\system32\dllcache\keyboard.drv
                    - 2004-08-03 22:15:22 140,928 -c--a-w C:\WINDOWS\system32\dllcache\ks.sys
                    + 2004-08-03 21:15:22 140,928 -c--a-w C:\WINDOWS\system32\dllcache\ks.sys
                    - 2004-08-03 23:54:30 4,096 -c--a-w C:\WINDOWS\system32\dllcache\ksuser.dll
                    + 2004-08-03 22:54:30 4,096 -c--a-w C:\WINDOWS\system32\dllcache\ksuser.dll
                    + 2001-08-24 12:00:00 2,560 -c--a-w C:\WINDOWS\system32\dllcache\lz32.dll
                    + 2001-08-24 12:00:00 2,032 -c--a-w C:\WINDOWS\system32\dllcache\mouse.drv
                    + 2001-08-24 12:00:00 2,944 -c--a-w C:\WINDOWS\system32\dllcache\null.sys
                    + 2004-03-16 09:58:20 136,960 -c--a-w C:\WINDOWS\system32\dllcache\portcls.sys
                    + 2001-08-24 12:00:00 1,744 -c--a-w C:\WINDOWS\system32\dllcache\sound.drv
                    - 2004-08-03 22:08:04 48,640 -c--a-w C:\WINDOWS\system32\dllcache\stream.sys
                    + 2004-08-03 21:08:04 48,640 -c--a-w C:\WINDOWS\system32\dllcache\stream.sys
                    + 2001-08-24 12:00:00 2,176 -c--a-w C:\WINDOWS\system32\dllcache\vga.drv
                    + 2001-08-24 12:00:00 2,864 -c--a-w C:\WINDOWS\system32\dllcache\winsock.dll
                    + 2001-08-24 12:00:00 2,112 -c--a-w C:\WINDOWS\system32\dllcache\winspool.exe
                    + 2001-08-24 12:00:00 2,736 -c--a-w C:\WINDOWS\system32\dllcache\wowdeb.exe
                    + 2008-01-21 16:12:56 41,792 ----a-w C:\WINDOWS\system32\drivers\avgntdd.sys
                    + 2008-01-21 16:11:28 22,336 ----a-w C:\WINDOWS\system32\drivers\avgntmgr.sys
                    + 2008-03-04 11:28:53 79,424 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys
                    - 2004-08-03 22:08:00 60,288 ----a-w C:\WINDOWS\system32\drivers\drmk.sys
                    + 2004-08-03 21:08:00 60,288 ----a-w C:\WINDOWS\system32\drivers\drmk.sys
                    + 2004-08-03 22:07:58 2,944 ----a-w C:\WINDOWS\system32\drivers\drmkaud.sys
                    - 2001-08-17 21:02:20 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys
                    + 2001-08-17 20:02:20 9,600 ----a-w C:\WINDOWS\system32\drivers\hidusb.sys
                    - 2004-08-03 22:15:22 140,928 ----a-w C:\WINDOWS\system32\drivers\ks.sys
                    + 2004-08-03 21:15:22 140,928 ----a-w C:\WINDOWS\system32\drivers\ks.sys
                    + 2001-08-24 12:00:00 2,944 ----a-w C:\WINDOWS\system32\drivers\null.sys
                    - 2007-10-03 20:31:40 102,656 ----a-w C:\WINDOWS\system32\drivers\Rtenicxp.sys
                    + 2008-01-03 20:10:16 105,856 ----a-w C:\WINDOWS\system32\drivers\Rtenicxp.sys
                    - 2007-05-10 10:28:08 4,419,584 ----a-w C:\WINDOWS\system32\drivers\RtkHDAud.sys
                    + 2008-01-30 09:28:36 4,725,760 ----a-w C:\WINDOWS\system32\drivers\RtkHDAud.sys
                    + 2007-03-01 08:34:22 28,352 ----a-w C:\WINDOWS\system32\drivers\ssmdrv.sys
                    - 2004-08-03 22:08:04 48,640 ----a-w C:\WINDOWS\system32\drivers\stream.sys
                    + 2004-08-03 21:08:04 48,640 ----a-w C:\WINDOWS\system32\drivers\stream.sys
                    + 2008-01-24 13:08:54 19,336 ----a-w C:\WINDOWS\system32\drivers\WmBEnum.sys
                    + 2008-01-24 13:09:04 28,168 ----a-w C:\WINDOWS\system32\drivers\WmFilter.sys
                    + 2008-01-24 13:09:14 29,192 ----a-w C:\WINDOWS\system32\drivers\WmHidLo.sys
                    + 2008-01-24 13:09:24 14,728 ----a-w C:\WINDOWS\system32\drivers\WmVirHid.sys
                    + 2008-01-24 13:09:34 48,904 ----a-w C:\WINDOWS\system32\drivers\WmXlCore.sys
                    - 2008-03-10 07:30:51 189,792 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
                    + 2008-04-22 21:33:13 189,792 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
                    - 2007-07-25 15:55:24 262,144 ----a-w C:\WINDOWS\system32\HookMAp.dll
                    + 2007-07-25 14:55:24 262,144 ----a-w C:\WINDOWS\system32\HookMAp.dll
                    - 2007-07-25 15:54:30 266,240 ----a-w C:\WINDOWS\system32\HookShield.dll
                    + 2007-07-25 14:54:30 266,240 ----a-w C:\WINDOWS\system32\HookShield.dll
                    + 2001-08-24 12:00:00 2,000 ----a-w C:\WINDOWS\system32\keyboard.drv
                    - 2007-06-28 23:43:00 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
                    + 2007-06-28 22:43:00 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
                    - 2004-08-03 23:54:30 4,096 ----a-w C:\WINDOWS\system32\ksuser.dll
                    + 2004-08-03 22:54:30 4,096 ----a-w C:\WINDOWS\system32\ksuser.dll
                    + 2001-08-24 12:00:00 2,560 ----a-w C:\WINDOWS\system32\lz32.dll
                    - 2007-05-28 22:13:38 130,048 ----a-w C:\WINDOWS\system32\MadCHook.dll
                    + 2007-05-28 21:13:38 130,048 ----a-w C:\WINDOWS\system32\MadCHook.dll
                    + 2001-08-24 12:00:00 2,032 ----a-w C:\WINDOWS\system32\mouse.drv
                    - 2007-07-25 15:20:36 1,748,992 ----a-w C:\WINDOWS\system32\msicpl.dll
                    + 2007-07-25 14:20:36 1,748,992 ----a-w C:\WINDOWS\system32\msicpl.dll
                    + 2005-12-23 06:59:14 6,656 ----a-w C:\WINDOWS\system32\mui\[u]0[/u]40C\mscorees.dll
                    + 2001-08-24 12:00:00 2,656 ----a-w C:\WINDOWS\system32\netware.drv
                    - 2007-06-28 23:43:00 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
                    + 2007-06-28 22:43:00 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
                    - 2007-06-28 23:43:00 37,376 ----a-w C:\WINDOWS\system32\nvcodins.dll
                    + 2007-06-28 22:43:00 37,376 ----a-w C:\WINDOWS\system32\nvcodins.dll
                    - 2007-06-28 23:43:00 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
                    + 2007-06-28 22:43:00 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
                    - 2007-06-28 23:43:00 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
                    + 2007-06-28 22:43:00 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
                    - 2006-06-01 16:22:00 53,248 ----a-w C:\WINDOWS\system32\Nvgpio.dll
                    + 2006-06-01 15:22:00 53,248 ----a-w C:\WINDOWS\system32\Nvgpio.dll
                    - 2007-06-28 23:43:00 1,474,560 ----a-w C:\WINDOWS\system32\nview.dll
                    + 2007-06-28 22:43:00 1,474,560 ----a-w C:\WINDOWS\system32\nview.dll
                    - 2007-06-28 23:43:00 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
                    + 2007-06-28 22:43:00 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
                    - 2007-06-28 23:43:00 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
                    + 2007-06-28 22:43:00 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
                    - 2007-06-28 23:43:00 327,680 ----a-w C:\WINDOWS\system32\nvrsar.dll
                    + 2007-06-28 22:43:00 327,680 ----a-w C:\WINDOWS\system32\nvrsar.dll
                    - 2007-06-28 23:43:00 249,856 ----a-w C:\WINDOWS\system32\nvrscs.dll
                    + 2007-06-28 22:43:00 249,856 ----a-w C:\WINDOWS\system32\nvrscs.dll
                    - 2007-06-28 23:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrsda.dll
                    + 2007-06-28 22:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrsda.dll
                    - 2007-06-28 23:43:00 278,528 ----a-w C:\WINDOWS\system32\nvrsde.dll
                    + 2007-06-28 22:43:00 278,528 ----a-w C:\WINDOWS\system32\nvrsde.dll
                    - 2007-06-28 23:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrsel.dll
                    + 2007-06-28 22:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrsel.dll
                    - 2007-06-28 23:43:00 245,760 ----a-w C:\WINDOWS\system32\nvrseng.dll
                    + 2007-06-28 22:43:00 245,760 ----a-w C:\WINDOWS\system32\nvrseng.dll
                    - 2007-06-28 23:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrses.dll
                    + 2007-06-28 22:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrses.dll
                    - 2007-06-28 23:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrsesm.dll
                    + 2007-06-28 22:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrsesm.dll
                    - 2007-06-28 23:43:00 249,856 ----a-w C:\WINDOWS\system32\nvrsfi.dll
                    + 2007-06-28 22:43:00 249,856 ----a-w C:\WINDOWS\system32\nvrsfi.dll
                    - 2007-06-28 23:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrsfr.dll
                    + 2007-06-28 22:43:00 282,624 ----a-w C:\WINDOWS\system32\nvrsfr.dll
                    - 2007-06-28 23:43:00 327,680 ----a-w C:\WINDOWS\system32\nvrshe.dll
                    + 2007-06-28 22:43:00 327,680 ----a-w C:\WINDOWS\system32\nvrshe.dll
                    - 2007-06-28 23:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrshu.dll
                    + 2007-06-28 22:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrshu.dll
                    - 2007-06-28 23:43:00 278,528 ----a-w C:\WINDOWS\system32\nvrsit.dll
                    + 2007-06-28 22:43:00 278,528 ----a-w C:\WINDOWS\system32\nvrsit.dll
                    - 2007-06-28 23:43:00 266,240 ----a-w C:\WINDOWS\system32\nvrsja.dll
                    + 2007-06-28 22:43:00 266,240 ----a-w C:\WINDOWS\system32\nvrsja.dll
                    - 2007-06-28 23:43:00 262,144 ----a-w C:\WINDOWS\system32\nvrsko.dll
                    + 2007-06-28 22:43:00 262,144 ----a-w C:\WINDOWS\system32\nvrsko.dll
                    - 2007-06-28 23:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrsnl.dll
                    + 2007-06-28 22:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrsnl.dll
                    - 2007-06-28 23:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrsno.dll
                    + 2007-06-28 22:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrsno.dll
                    - 2007-06-28 23:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrspl.dll
                    + 2007-06-28 22:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrspl.dll
                    - 2007-06-28 23:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrspt.dll
                    + 2007-06-28 22:43:00 274,432 ----a-w C:\WINDOWS\system32\nvrspt.dll
                    - 2007-06-28 23:43:00 266,240 ----a-w C:\WINDOWS\system32\nvrsptb.dll
                    + 2007-06-28 22:43:00 266,240 ----a-w C:\WINDOWS\system32\nvrsptb.dll
                    - 2007-06-28 23:43:00 270,336 ----a-w C:\WINDOWS\system32\nvrsru.dll
                    + 2007-06-28 22:43:00 270,336 ----a-w C:\WINDOWS\system32\nvrsru.dll
                    - 2007-06-28 23:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrssk.dll
                    + 2007-06-28 22:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrssk.dll
                    - 2007-06-28 23:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrssl.dll
                    + 2007-06-28 22:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrssl.dll
                    - 2007-06-28 23:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrssv.dll
                    + 2007-06-28 22:43:00 253,952 ----a-w C:\WINDOWS\system32\nvrssv.dll
                    - 2007-06-28 23:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrstr.dll
                    + 2007-06-28 22:43:00 258,048 ----a-w C:\WINDOWS\system32\nvrstr.dll
                    - 2007-06-28 23:43:00 225,280 ----a-w C:\WINDOWS\system32\nvrszhc.dll
                    + 2007-06-28 22:43:00 225,280 ----a-w C:\WINDOWS\system32\nvrszhc.dll
                    - 2007-06-28 23:43:00 126,976 ----a-w C:\WINDOWS\system32\nvrszht.dll
                    + 2007-06-28 22:43:00 126,976 ----a-w C:\WINDOWS\system32\nvrszht.dll
                    - 2007-06-28 23:43:00 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
                    + 2007-06-28 22:43:00 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
                    - 2007-06-28 23:43:00 1,018,772 ----a-w C:\WINDOWS\system32\nvucode.bin
                    + 2007-06-28 22:43:00 1,018,772 ----a-w C:\WINDOWS\system32\nvucode.bin
                    - 2007-06-28 23:43:00 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
                    + 2007-06-28 22:43:00 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
                    - 2007-06-28 23:43:00 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
                    + 2007-06-28 22:43:00 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
                    - 2007-06-28 23:43:00 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll
                    + 2007-06-28 22:43:00 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll
                    - 2007-06-28 23:43:00 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll
                    + 2007-06-28 22:43:00 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll
                    - 2007-06-28 23:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll
                    + 2007-06-28 22:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll
                    - 2007-06-28 23:43:00 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll
                    + 2007-06-28 22:43:00 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll
                    - 2007-06-28 23:43:00 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll
                    + 2007-06-28 22:43:00 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll
                    - 2007-06-28 23:43:00 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll
                    + 2007-06-28 22:43:00 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll
                    - 2007-06-28 23:43:00 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll
                    + 2007-06-28 22:43:00 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll
                    - 2007-06-28 23:43:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll
                    + 2007-06-28 22:43:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll
                    - 2007-06-28 23:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll
                    + 2007-06-28 22:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll
                    - 2007-06-28 23:43:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll
                    + 2007-06-28 22:43:00 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll
                    - 2007-06-28 23:43:00 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll
                    + 2007-06-28 22:43:00 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll
                    - 2007-06-28 23:43:00 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll
                    + 2007-06-28 22:43:00 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll
                    - 2007-06-28 23:43:00 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll
                    + 2007-06-28 22:43:00 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll
                    - 2007-06-28 23:43:00 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll
                    + 2007-06-28 22:43:00 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll
                    - 2007-06-28 23:43:00 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll
                    + 2007-06-28 22:43:00 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll
                    - 2007-06-28 23:43:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll
                    + 2007-06-28 22:43:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll
                    - 2007-06-28 23:43:00 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll
                    + 2007-06-28 22:43:00 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll
                    - 2007-06-28 23:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll
                    + 2007-06-28 22:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll
                    - 2007-06-28 23:43:00 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll
                    + 2007-06-28 22:43:00 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll
                    - 2007-06-28 23:43:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll
                    + 2007-06-28 22:43:00 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll
                    - 2007-06-28 23:43:00 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll
                    + 2007-06-28 22:43:00 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll
                    - 2007-06-28 23:43:00 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll
                    + 2007-06-28 22:43:00 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll
                    - 2007-06-28 23:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll
                    + 2007-06-28 22:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll
                    - 2007-06-28 23:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll
                    + 2007-06-28 22:43:00 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll
                    - 2007-06-28 23:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll
                    + 2007-06-28 22:43:00 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll
                    - 2007-06-28 23:43:00 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll
                    + 2007-06-28 22:43:00 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll
                    - 2007-06-28 23:43:00 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll
                    + 2007-06-28 22:43:00 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll
                    - 2007-06-28 23:43:00 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
                    + 2007-06-28 22:43:00 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
                    + 2007-10-03 20:31:40 102,656 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]007\DriverFiles\Rtenicxp.sys
                    + 2006-08-14 10:31:06 32,768 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\Auxiliary.dll
                    + 2005-07-22 18:59:04 2,319,568 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\d3dx9_27.dll
                    + 2005-12-05 17:09:18 2,323,664 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\d3dx9_28.dll
                    + 2007-07-25 15:55:24 262,144 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\HookMAp.dll
                    + 2007-07-25 15:54:30 266,240 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\HookShield.dll
                    + 2007-05-28 22:13:38 130,048 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\MadCHook.dll
                    + 2007-07-25 15:20:36 1,748,992 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\msicpl.dll
                    + 2003-02-21 04:42:22 348,160 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\msvcr71.dll
                    + 2007-12-05 00:41:00 5,773,568 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nv4_disp.dll
                    + 2007-12-05 00:41:00 7,435,392 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nv4_mini.sys
                    + 2007-12-05 00:41:00 385,024 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvapi.dll
                    + 2007-06-28 23:43:00 37,376 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvcod.dll
                    + 2007-12-05 00:41:00 8,523,776 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvcpl.dll
                    + 2007-12-05 00:41:00 6,549,504 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvdisps.dll
                    + 2007-12-05 00:41:00 5,611,520 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvdispsr.dll
                    + 2007-12-05 00:41:00 3,420,160 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvgames.dll
                    + 2007-12-05 00:41:00 3,334,144 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvgamesr.dll
                    + 2006-06-01 16:22:00 53,248 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\Nvgpio.dll
                    + 2007-12-05 00:41:00 229,376 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmccs.dll
                    + 2007-12-05 00:41:00 188,416 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmccss.dll
                    + 2007-12-05 00:41:00 458,752 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmccssr.dll
                    + 2007-12-05 00:41:00 81,920 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmctray.dll
                    + 2007-12-05 00:41:00 1,228,800 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmobls.dll
                    + 2007-12-05 00:41:00 2,854,912 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvmoblsr.dll
                    + 2007-06-28 23:43:00 286,720 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvnt4cpl.dll
                    + 2007-12-05 00:41:00 6,901,760 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvoglnt.dll
                    + 2007-12-05 00:41:00 155,716 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvsvc32.exe
                    + 2007-06-28 23:43:00 1,018,772 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvucode.bin
                    + 2007-12-05 00:41:00 3,710,976 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvvitvs.dll
                    + 2007-12-05 00:41:00 3,715,072 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvvitvsr.dll
                    + 2007-12-05 00:41:00 81,920 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvwddi.dll
                    + 2007-12-05 00:41:00 2,498,560 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvwss.dll
                    + 2007-12-05 00:41:00 2,519,040 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\nvwssr.dll
                    + 2006-07-13 04:00:04 131,072 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\smdll.dll
                    + 2006-12-15 09:58:28 208,896 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\sw20.exe
                    + 2006-12-15 09:58:48 69,632 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\sw24.exe
                    + 2006-06-01 16:22:00 114,688 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\sysinfo.dll
                    + 2006-06-01 16:22:00 8,192 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\sysinfo.sys
                    + 2006-06-01 16:22:00 9,728 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\sysinfoX64.sys
                    + 2006-04-29 10:36:56 208,896 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]008\DriverFiles\WinSys2.exe
                    + 2006-05-04 08:26:36 2,808,832 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\ALCWZRD.EXE
                    + 2004-08-03 22:08:00 60,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\drmk.sys
                    + 2004-08-03 22:15:22 140,928 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\ks.sys
                    + 2004-08-03 23:54:30 4,096 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\ksuser.dll
                    + 2004-03-16 09:58:20 136,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\portcls.sys
                    + 2004-08-03 22:08:04 48,640 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\stream.sys
                    + 2004-08-03 23:55:04 23,552 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\i386\wdmaud.drv
                    + 2007-04-25 08:55:52 2,162,688 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\MicCal.exe
                    + 2007-03-15 06:39:04 262,144 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RTCOMDLL.dll
                    + 2007-05-10 10:08:06 16,342,528 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RTHDCPL.EXE
                    + 2007-05-10 10:28:08 4,419,584 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RtkHDAud.sys
                    + 2007-03-07 06:59:30 131,072 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RTLCPAPI.dll
                    + 2007-03-23 11:19:10 9,715,200 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RTLCPL.EXE
                    + 2007-01-16 02:39:36 1,191,936 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\RtlUpd.exe
                    + 2007-05-07 10:51:24 1,826,816 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\SkyTel.exe
                    + 2006-07-21 08:14:36 86,016 ----a-r C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]009\DriverFiles\SOUNDMAN.EXE
                    + 2004-08-03 23:05:42 20,992 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]010\DriverFiles\i386\hid.dll
                    + 2004-08-03 21:08:20 36,224 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]010\DriverFiles\i386\hidclass.sys
                    + 2004-08-03 21:08:18 24,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]010\DriverFiles\i386\hidparse.sys
                    + 2001-08-17 21:02:20 9,600 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]010\DriverFiles\i386\hidusb.sys
                    + 2007-09-13 18:41:02 29,976 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]012\DriverFiles\WmFilter.sys
                    + 2004-08-03 23:05:42 20,992 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\i386\hid.dll
                    + 2004-08-03 21:08:20 36,224 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\i386\hidclass.sys
                    + 2004-08-03 21:08:18 24,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\i386\hidparse.sys
                    + 2001-08-17 20:02:20 9,600 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\i386\hidusb.sys
                    + 2007-09-13 18:41:12 29,208 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\WmHidLo.sys
                    + 2007-09-13 18:40:44 234,008 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]013\DriverFiles\WmJoyFrc.dll
                    + 2004-08-03 23:05:42 20,992 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]014\DriverFiles\i386\hid.dll
                    + 2004-08-03 21:08:20 36,224 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]014\DriverFiles\i386\hidclass.sys
                    + 2004-08-03 21:08:18 24,960 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]014\DriverFiles\i386\hidparse.sys
                    + 2001-08-17 20:02:20 9,600 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]014\DriverFiles\i386\hidusb.sys
                    + 2007-09-13 18:40:54 19,352 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]015\DriverFiles\WmBEnum.sys
                    + 2007-09-13 18:41:28 51,608 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]015\DriverFiles\WmXlCore.sys
                    + 2007-09-13 18:41:20 14,744 ----a-w C:\WINDOWS\system32\ReinstallBackups\[u]0[/u]016\DriverFiles\WmVirHid.sys
                    - 2007-03-15 06:39:04 262,144 ------r C:\WINDOWS\system32\RTCOM\RTCOMDLL.dll
                    + 2007-11-19 15:12:58 262,144 ----a-w C:\WINDOWS\system32\RTCOM\RTCOMDLL.dll
                    - 2007-03-07 06:59:30 131,072 ------r C:\WINDOWS\system32\RTCOM\RtlCPAPI.dll
                    + 2007-12-21 16:01:46 139,264 ----a-w C:\WINDOWS\system32\RTCOM\RtlCPAPI.dll
                    - 2006-07-13 04:00:04 131,072 ----a-w C:\WINDOWS\system32\smdll.dll
                    + 2006-07-13 03:00:04 131,072 ----a-w C:\WINDOWS\system32\smdll.dll
                    + 2001-08-24 12:00:00 1,744 ----a-w C:\WINDOWS\system32\sound.drv
                    - 2006-12-15 09:58:28 208,896 ----a-w C:\WINDOWS\system32\sw20.exe
                    + 2006-12-15 08:58:28 208,896 ----a-w C:\WINDOWS\system32\sw20.exe
                    - 2006-12-15 09:58:48 69,632 ----a-w C:\WINDOWS\system32\sw24.exe
                    + 2006-12-15 08:58:48 69,632 ----a-w C:\WINDOWS\system32\sw24.exe
                    - 2006-06-01 16:22:00 114,688 ----a-w C:\WINDOWS\system32\sysinfo.dll
                    + 2006-06-01 15:22:00 114,688 ----a-w C:\WINDOWS\system32\sysinfo.dll
                    - 2006-06-01 16:22:00 8,192 ----a-w C:\WINDOWS\system32\sysinfo.sys
                    + 2006-06-01 15:22:00 8,192 ----a-w C:\WINDOWS\system32\sysinfo.sys
                    - 2006-06-01 16:22:00 9,728 ----a-w C:\WINDOWS\system32\sysinfoX64.sys
                    + 2006-06-01 15:22:00 9,728 ----a-w C:\WINDOWS\system32\sysinfoX64.sys
                    + 2001-08-24 12:00:00 2,176 ----a-w C:\WINDOWS\system32\vga.drv
                    + 2001-08-24 12:00:00 2,864 ----a-w C:\WINDOWS\system32\winsock.dll
                    + 2001-08-24 12:00:00 2,112 ----a-w C:\WINDOWS\system32\winspool.exe
                    - 2006-04-29 10:36:56 208,896 ----a-w C:\WINDOWS\system32\WinSys2.exe
                    + 2006-04-29 09:36:56 208,896 ----a-w C:\WINDOWS\system32\WinSys2.exe
                    + 2008-01-24 13:08:44 233,992 ----a-w C:\WINDOWS\system32\WmJoyFrc.dll
                    + 2001-08-24 12:00:00 2,736 ----a-w C:\WINDOWS\system32\wowdeb.exe
                    - 2007-06-20 19:45:20 18,280 ----a-w C:\WINDOWS\system32\x3daudio1_2.dll
                    + 2007-10-22 01:37:16 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll
                    + 2007-10-22 01:39:54 267,272 ----a-w C:\WINDOWS\system32\xactengine2_10.dll
                    + 2007-07-19 22:57:12 267,112 ----a-w C:\WINDOWS\system32\xactengine2_9.dll
                    + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
                    + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
                    .
                    -- Snapshot reset to current date --
                    .
                    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    .
                    REGEDIT4
                    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

                    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{100EB1FD-D03E-47FD-81F3-EE91287F9465}]

                    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "ccleaner"="D:\Programmes\CCleaner\ccleaner.exe" [2007-03-06 13:51 603016]
                    "Wallpaper"="D:\Programmes\Wallpaper\Wallpaper.exe" [2006-04-01 21:25 208896]
                    "SpybotSD TeaTimer"="D:\Programmes\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776]
                    "WinSys2"="C:\WINDOWS\system32\winsys2.exe" [2006-04-29 11:36 208896]
                    "nwiz"="nwiz.exe" [2007-06-29 00:43 1626112 C:\WINDOWS\system32\nwiz.exe]
                    "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920]
                    "SpybotSnD"="D:\Programmes\Spybot - Search & Destroy\SpybotSD.exe" [2008-01-28 12:43 5146448]
                    "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]

                    [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^DualCoreCenter.lnk]
                    path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\DualCoreCenter.lnk
                    backup=C:\WINDOWS\pss\DualCoreCenter.lnkCommon Startup

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
                    --a------ 2007-05-11 04:06 40048 D:\Programmes\Adobe\Reader 8.0\Reader\Reader_sl.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
                    --a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
                    --a------ 2006-10-09 12:28 139264 C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\braviax]
                    C:\WINDOWS\system32\braviax.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
                    --a------ 2006-09-28 21:21 57344 D:\Programmes\CloneCD\CloneCDTray.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
                    --a------ 2007-01-19 13:55 5674352 C:\Program Files\MSN Messenger\msnmsgr.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
                    --a------ 2006-01-12 17:40 155648 C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
                    --a------ 2007-12-05 02:41 8523776 C:\WINDOWS\system32\NvCpl.dll

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
                    --a------ 2007-12-05 02:41 81920 C:\WINDOWS\system32\NvMcTray.dll

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
                    --a------ 2007-06-29 00:43 1626112 C:\WINDOWS\system32\nwiz.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProcessManager]
                    D:\Programmes\Bill2's Process Manager\ProcessManager.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
                    --a------ 2006-06-05 16:06 188416 D:\Programmes\PowerISO\PWRISOVM.EXE

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RavAV]
                    C:\WINDOWS\RavMonE.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
                    --a------ 2004-11-02 21:24 32768 D:\Programmes\PowerDVD\PDVDServ.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
                    --a------ 2008-01-29 15:47 16859648 C:\WINDOWS\RTHDCPL.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
                    -rahs---- 2008-01-28 12:43 2097488 D:\Programmes\Spybot - Search & Destroy\TeaTimer.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Start WingMan Profiler]
                    --a------ 2008-04-04 11:38 88584 C:\Program Files\Logitech\Gaming Software\LWEMon.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
                    --a------ 2007-09-25 02:11 132496 C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

                    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
                    "IDriverT"=3 (0x3)
                    "aawservice"=2 (0x2)
                    "xmlprov"=3 (0x3)
                    "Wmi"=3 (0x3)
                    "VSS"=3 (0x3)
                    "upnphost"=3 (0x3)
                    "TapiSrv"=3 (0x3)
                    "SysmonLog"=3 (0x3)
                    "SwPrv"=3 (0x3)
                    "stisvc"=3 (0x3)
                    "Spooler"=2 (0x2)
                    "SENS"=2 (0x2)
                    "Schedule"=2 (0x2)
                    "RasMan"=3 (0x3)
                    "RasAuto"=3 (0x3)
                    "NtmsSvc"=3 (0x3)
                    "NtLmSsp"=3 (0x3)
                    "Netlogon"=3 (0x3)
                    "MSIServer"=3 (0x3)
                    "MSDTC"=3 (0x3)
                    "lanmanworkstation"=2 (0x2)
                    "lanmanserver"=2 (0x2)
                    "ImapiService"=2 (0x2)
                    "helpsvc"=3 (0x3)
                    "EventSystem"=3 (0x3)
                    "Eventlog"=2 (0x2)
                    "dmadmin"=3 (0x3)
                    "COMSysApp"=3 (0x3)
                    "clr_optimization_v2.0.50727_32"=3 (0x3)
                    "BITS"=3 (0x3)
                    "aspnet_state"=3 (0x3)
                    "AppMgmt"=3 (0x3)
                    "wuauserv"=2 (0x2)

                    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
                    "AntiVirusDisableNotify"=dword:00000001
                    "UpdatesDisableNotify"=dword:00000001

                    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                    "EnableFirewall"= 0 (0x0)

                    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                    "%windir%\\system32\\sessmgr.exe"=
                    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
                    "C:\\Program Files\\MSN Messenger\\livecall.exe"=
                    "C:\\Program Files\\uTorrent\\uTorrent.exe"=
                    "E:\\Jeux\\Age of Empires III\\age3x.exe"=
                    "E:\\Jeux\\Age of Empires III\\age3y.exe"=
                    "E:\\Jeux\\FEAR\\FEARXP\\FEARXP.exe"=
                    "E:\\Jeux\\FEAR\\FEAR.exe"=
                    "E:\\Jeux\\FEAR\\FEARMP.exe"=

                    R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 14:46]
                    R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 11:21]
                    R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 11:21]
                    S2 SPF4;Sunbelt Personal Firewall 4;"D:\Programmes\Sunbelt Software\Personal Firewall\kpf4ss.exe" [2007-04-26 11:21]
                    S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 00:08]

                    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
                    \Shell\A
                    1. tu na rien

                      essais ca alors:

                      Télécharger Combifix (by Subs) sur cette page :
                      * http://download.bleepingcomputer.com/sUBs/ComboFix.exe
                      * Enregistrez le sur le bureau
                      * Déconnectez vous d'internet et fermez toutes tes applications et programmes
                      * Double-cliquez sur combo-fix.exe
                      * Appuyer sur la touche Y (Yes) pour démarrer le scan
                      * Le rapport sera crée sous la racine: C:\Combofix.txt

                      Remarque : combo se charge de supprimer un certain nombre de fichiers infectés liés à bagle.
                      Il est impératif de télécharger combo par le lien donné précédemment ( version renommée ) ou alors de renommer vous même combo ( clic droit sur le fichier < renommer ), car sinon Combo sera totalement inefficace face à Bagle !
                      (vous pouver renomer combofix en n'importe quoi comme killer ou tuer etc...)

                      vous me poster le rapport
                      • 1
                      • 2