Virus en perspective...

Résolu
kurar -  
Bonjour,
je voudrais savoir si quelqu'un peut m'aider pour "nettoyer" (si possible au karcher) mon ordinateur... j'ai un rapport accablant de la part de avast qui me nomme quantité de trojan et autre fichier douteux. Mon probleme etant que se sont les fichiers de windows qui sont touchés. Merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

72 réponses

Résumé de la discussion

Plusieurs éléments signalent une suspicion d'infection par des trojans et des fichiers Windows affectés, nécessitant un nettoyage approfondi et une approche structurée sous Windows XP. Des mesures préventives et des outils de réparation ont été recommandés: mise à jour des antivirus et anti-malware, scan complet en mode sans échec avec Malwarebytes et Avast, puis suppression des éléments détectés. D'autres conseils incluent la vérification et la désactivation temporaire de certains composants (pare-feu Windows, ActiveX), la mise à jour Java et l'utilisation d'outils de sécurité adaptés pour prévenir les reprises. En complément, les retours insistent sur l'importance de vérifier régulièrement les mises à jour logicielles et de maintenir une surveillance par des scans périodiques, tout en adoptant des pratiques de sécurité préventives.

Bobot (l’IA à votre service)
  1. sKe69 Contributeur sécurité
    Salut,

    fais ceci pour commencer :

    1- Télécharges et installes le logiciel HijackThis :

    ici ftp://ftp.commentcamarche.com/download/HJTInstall.exe
    ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
    ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

    -->Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
    A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
    "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

    ( ne lance pas ce prg pour l'instant et fais la suite ... )

    2- Télécharges Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    -> http://images.malwareremoval.com/random/RSIT.exe

    ! Déconnecte toi et fermes toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer .

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 3 months

    * cliques ensuite sur " Continue " pour lancer l'analyse ...

    -> laisses faire le scan et ne touche pas au PC ...

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

    Postes le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
    1. kurar Auteur
      merci de la rapidité de la reponse je post les rapport

      d'abord le log:

      Logfile of random's system information tool 1.02 (written by random/random)
      Run by kurar at 2008-09-25 19:05:05
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 3 GB (4%) free of 76 GB
      Total RAM: 511 MB (32% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:05:21, on 25/09/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Documents and Settings\kurar\Mes documents\aide virus\RSIT.exe
      C:\Program Files\Trend Micro\HijackThis\kurar.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {47E7F0B3-DAD6-4C15-BA3E-D2144878D239} - C:\WINDOWS\system32\pmnlm.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
      O4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453729 14
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O20 - AppInit_DLLs: C:\WINDOWS\system32\__c0069D7A.dat
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Odyssey Client for Fujitsu Siemens Computers (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    2. kurar Auteur
      merci de la rapidité de la reponse je post les rapport

      d'abord le log:

      Logfile of random's system information tool 1.02 (written by random/random)
      Run by kurar at 2008-09-25 19:05:05
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 3 GB (4%) free of 76 GB
      Total RAM: 511 MB (32% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:05:21, on 25/09/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Documents and Settings\kurar\Mes documents\aide virus\RSIT.exe
      C:\Program Files\Trend Micro\HijackThis\kurar.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {47E7F0B3-DAD6-4C15-BA3E-D2144878D239} - C:\WINDOWS\system32\pmnlm.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" /c
      O4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453729 14
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O20 - AppInit_DLLs: C:\WINDOWS\system32\__c0069D7A.dat
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Odyssey Client for Fujitsu Siemens Computers (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
  2. sKe69 Contributeur sécurité
    bien ...

    Fais exactement ce qui suit :

    Télécharges ComboFix (par sUBs) sur ton Bureau (et pas ailleurs !):

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    --------------------------------------------- [ ! ATTENTION ! ] ----------------------------------------------------------
    !! Déconnectes toi,fermes tes applications en cours et DESACTIVES TOUTES TES DEFENSES (anti-virus, guardes anti spy-ware, pare-feu) le temps de la manipe :
    en effet , activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil ( voir planter le PC )...Tu les réactiveras donc après !!
    --->Important : si tu rencontres des difficultés à ce niveau là, fais m'en part avant de poursuivre ...
    Tuto ( aide ) ici : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    ---------------------------------------------------------------------------------------------------------------------------------

    Ensuite :
    double-cliques sur l'icône "combofix.exe" pour lancer l'outil .

    Appuyes sur la touche Y (Yes) pour démarrer le scan .

    Attention :
    --> n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi .
    --> Il se peut que le PC redémarre de lui même ( pour finaliser le nettoyage ) , laisses le faire .
    --> si un message d'erreur windows apparait à un momment : clik sur la croix rouge en haut à droite de la fenêtre pour la fermer ( et pas sur autre chose ! sinon pas de rapport ... )

    Le rapport sera crée dans: C:\Combofix.txt

    Postes le rapport Combofix accompagné d'un nouveau rapport RSIT pour analyse ...

    1. kurar Auteur
      Etape franchi voici le rapport obtenu:

      ComboFix 08-09-25.03 - kurar 2008-09-25 20:03:30.2 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.164 [GMT 2:00]
      Lancé depuis: C:\Documents and Settings\kurar\Bureau\ComboFix.exe
      * Un nouveau point de restauration a été créé

      [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\check_LSA7.txt
      C:\Documents and Settings\kurar\Cookies\kurar@clickintext[1].txt
      C:\WINDOWS\BM4bda1b1a.txt
      C:\WINDOWS\BM4bda1b1a.xml
      C:\WINDOWS\cookies.ini
      C:\WINDOWS\pskt.ini
      C:\WINDOWS\system32\__c0014770.dat
      C:\WINDOWS\system32\__c0016C72.dat
      C:\WINDOWS\system32\__c001F2A8.dat
      C:\WINDOWS\system32\__c002027E.dat
      C:\WINDOWS\system32\__c002F390.dat
      C:\WINDOWS\system32\__c0030619.dat
      C:\WINDOWS\system32\__c0030B61.dat
      C:\WINDOWS\system32\__c0032D06.dat
      C:\WINDOWS\system32\__c0036279.dat
      C:\WINDOWS\system32\__c003AC41.dat
      C:\WINDOWS\system32\__c003D103.dat
      C:\WINDOWS\system32\__c004316D.dat
      C:\WINDOWS\system32\__c00445D2.dat
      C:\WINDOWS\system32\__c005F92D.dat
      C:\WINDOWS\system32\__c0062B44.dat
      C:\WINDOWS\system32\__c006EEEB.dat
      C:\WINDOWS\system32\__c0070529.dat
      C:\WINDOWS\system32\__c007174A.dat
      C:\WINDOWS\system32\__c0075E08.dat
      C:\WINDOWS\system32\__c009B10.dat
      C:\WINDOWS\system32\__c00A1A5B.dat
      C:\WINDOWS\system32\__c00A63F9.dat
      C:\WINDOWS\system32\__c00A88B1.dat
      C:\WINDOWS\system32\__c00BBAB6.dat
      C:\WINDOWS\system32\__c00D6FC4.dat
      C:\WINDOWS\system32\__c00DC0F4.dat
      C:\WINDOWS\system32\__c00E32A2.dat
      C:\WINDOWS\system32\__c00F6A0C.dat
      C:\WINDOWS\system32\__c00FA35A.dat
      C:\WINDOWS\system32\ajbasowf.dll
      C:\WINDOWS\system32\amddmssd.dll
      C:\WINDOWS\system32\arxsjgyv.dll
      C:\WINDOWS\system32\aualhqwv.dll
      C:\WINDOWS\system32\awlqvxnh.dll
      C:\WINDOWS\system32\axbcbrnu.dll
      C:\WINDOWS\system32\bbsglukm.dll
      C:\WINDOWS\system32\bkypvlte.dll
      C:\WINDOWS\system32\bwfgmsle.dll
      C:\WINDOWS\system32\bxjjunkk.dll
      C:\WINDOWS\system32\cjaryyri.dll
      C:\WINDOWS\system32\cnrthcms.dll
      C:\WINDOWS\system32\cymuqsvf.dll
      C:\WINDOWS\system32\djtxrafa.dll
      C:\WINDOWS\system32\dkfuskoy.ini
      C:\WINDOWS\system32\dtanqsty.dll
      C:\WINDOWS\system32\duuaejfq.dll
      C:\WINDOWS\system32\enxtvrgp.dll
      C:\WINDOWS\system32\exxggaib.dll
      C:\WINDOWS\system32\fagxbosq.dll
      C:\WINDOWS\system32\fcrinbrd.dll
      C:\WINDOWS\system32\fdxvilus.dll
      C:\WINDOWS\system32\fvdxpytu.dll
      C:\WINDOWS\system32\fvsqumyc.ini
      C:\WINDOWS\system32\fvwkobvl.dll
      C:\WINDOWS\system32\gdukloxr.dll
      C:\WINDOWS\system32\ghfmkcsq.dll
      C:\WINDOWS\system32\gxaeceya.dll
      C:\WINDOWS\system32\hrqcqase.dll
      C:\WINDOWS\system32\hsurteym.dll
      C:\WINDOWS\system32\hwhnngqf.dll
      C:\WINDOWS\system32\igmlomid.dll
      C:\WINDOWS\system32\iqfgbrtd.dll
      C:\WINDOWS\system32\j.exe
      C:\WINDOWS\system32\jevnhxvm.ini
      C:\WINDOWS\system32\jkpvchkw.dll
      C:\WINDOWS\system32\jsrelrug.dll
      C:\WINDOWS\system32\jwypssyw.dll
      C:\WINDOWS\system32\jxmhoifb.dll
      C:\WINDOWS\system32\kdvplomf.dll
      C:\WINDOWS\system32\khakccks.dll
      C:\WINDOWS\system32\lidhmrox.dll
      C:\WINDOWS\system32\ltojbgaj.dll
      C:\WINDOWS\system32\lvhlvubh.dll
      C:\WINDOWS\system32\mbcpvhmo.ini
      C:\WINDOWS\system32\mcrh.tmp
      C:\WINDOWS\system32\mjdjvntf.dll
      C:\WINDOWS\system32\mvxhnvej.dll
      C:\WINDOWS\system32\nhxopriv.dll
      C:\WINDOWS\system32\nombjupu.dll
      C:\WINDOWS\system32\ntdbyguq.dll
      C:\WINDOWS\system32\okiauuma.dll
      C:\WINDOWS\system32\olffvtlq.ini
      C:\WINDOWS\system32\omhvpcbm.dll
      C:\WINDOWS\system32\pcymieqm.dll
      C:\WINDOWS\system32\qcgtinfd.dll
      C:\WINDOWS\system32\qltvfflo.dll
      C:\WINDOWS\system32\qobcvdix.dll
      C:\WINDOWS\system32\qwlacemm.dll
      C:\WINDOWS\system32\rdlonyka.dll
      C:\WINDOWS\system32\rftplxlm.dll
      C:\WINDOWS\system32\rhywmttk.dll
      C:\WINDOWS\system32\riosynww.dll
      C:\WINDOWS\system32\rkxbtadf.dll
      C:\WINDOWS\system32\rmwplsmb.dll
      C:\WINDOWS\system32\rqreqwix.dll
      C:\WINDOWS\system32\rstwwjxv.dll
      C:\WINDOWS\system32\sglklxoo.dll
      C:\WINDOWS\system32\tbyqgxjd.dll
      C:\WINDOWS\system32\thecxhho.dll
      C:\WINDOWS\system32\ulakqcya.dll
      C:\WINDOWS\system32\uqioxumj.dll
      C:\WINDOWS\system32\uxksbaxl.dll
      C:\WINDOWS\system32\vebdphli.dll
      C:\WINDOWS\system32\viqnkjov.dll
      C:\WINDOWS\system32\vrvhvagu.dll
      C:\WINDOWS\system32\vwrccvkb.dll
      C:\WINDOWS\system32\vygjsxra.ini
      C:\WINDOWS\system32\xdvyghva.dll
      C:\WINDOWS\system32\xouhpbxr.dll
      C:\WINDOWS\system32\yoksufkd.dll
      C:\WINDOWS\system32\yovgpxto.dll
      C:\WINDOWS\system32\yuebghgr.dll

      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-25 au 2008-09-25 ))))))))))))))))))))))))))))))))))))
      .

      2008-09-25 19:05 . 2008-09-25 19:05 <REP> d-------- C:\rsit
      2008-09-25 19:01 . 2008-09-25 19:01 <REP> d-------- C:\Program Files\Trend Micro
      2008-09-25 14:53 . 2008-09-25 14:53 <REP> d-------- C:\Program Files\Alwil Software
      2008-09-25 14:22 . 2008-09-25 14:22 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\system32\fr
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\system32\bits
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\l2schemas
      2008-09-24 17:30 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\ServicePackFiles
      2008-09-24 17:22 . 2008-09-24 17:22 <REP> d-------- C:\WINDOWS\EHome
      2008-09-24 12:55 . 2008-09-24 12:55 <REP> d-------- C:\Nouveau dossier (2)
      2008-09-12 17:11 . 2008-09-12 17:11 4,096 --a------ C:\WINDOWS\d3dx.dat
      2008-09-12 17:07 . 2008-09-12 17:07 <REP> d-------- C:\Program Files\Lionhead Studios Ltd
      2008-09-06 11:00 . 2008-09-06 11:00 <REP> d-------- C:\Documents and Settings\kurar\Application Data\vlc
      2008-09-06 10:59 . 2008-09-06 10:59 <REP> d-------- C:\Program Files\VideoLAN
      2008-09-05 10:33 . 2008-09-24 12:56 <REP> d-------- C:\SNES
      2008-09-03 12:04 . 2004-08-04 00:38 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-09-25 12:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
      2008-09-24 16:49 --------- d-----w C:\Program Files\Fichiers communs\Adobe
      2008-09-24 15:06 --------- d-----w C:\Program Files\Java
      2008-09-24 14:52 --------- d-----w C:\Program Files\Creative
      2008-09-24 14:51 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-09-24 10:56 --------- d-----w C:\Documents and Settings\kurar\Application Data\Azureus
      2008-09-04 19:15 --------- d-----w C:\Program Files\Azureus
      2008-08-11 21:19 47,648 ----a-w C:\Documents and Settings\kurar\Application Data\GDIPFONTCACHEV1.DAT
      2007-02-21 21:41 190 ----a-w C:\Documents and Settings\kurar\Application Data\wklnhst.dat
      2006-02-22 18:52 56 --sh--r C:\WINDOWS\system32\F20D02A70A.sys
      2006-02-22 18:52 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
      2008-05-28 15:17 747,878 --sh--w C:\WINDOWS\system32\mlnmp.ini2
      .

      ((((((((((((((((((((((((((((( snapshot_2007-09-27_124552.65 )))))))))))))))))))))))))))))))))))))))))
      .
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\updspapi.dll
      + 2007-08-20 09:49:19 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\advpack.dll
      + 2007-08-20 09:49:28 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\dxtrans.dll
      + 2007-08-20 09:49:19 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\extmgr.dll
      + 2007-08-20 09:49:19 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\icardie.dll
      + 2007-08-17 10:13:10 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ie4uinit.exe
      + 2007-08-20 09:49:20 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakeng.dll
      + 2007-08-20 09:49:20 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieaksie.dll
      + 2007-08-17 07:29:55 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dat
      + 2007-08-20 09:49:20 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dll
      + 2007-08-20 09:49:20 387,584 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iedkcs32.dll
      + 2007-08-20 09:49:23 6,066,176 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieframe.dll
      + 2007-08-20 09:49:23 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iernonce.dll
      + 2007-08-20 09:49:23 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iertutil.dll
      + 2007-08-17 10:13:10 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieudinit.exe
      + 2007-08-17 10:13:39 625,152 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iexplore.exe
      + 2007-08-20 09:49:23 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\jsproxy.dll
      + 2007-08-20 09:49:24 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeeds.dll
      + 2007-08-20 09:49:24 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeedsbs.dll
      + 2007-08-20 09:49:26 3,592,192 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
      + 2007-08-20 09:49:26 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtmled.dll
      + 2007-08-20 09:49:26 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msrating.dll
      + 2007-08-20 09:49:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mstime.dll
      + 2007-08-20 09:49:27 102,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\occache.dll
      + 2007-08-20 09:49:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\url.dll
      + 2007-08-20 09:49:28 1,161,728 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\urlmon.dll
      + 2007-08-20 09:49:28 232,960 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\webcheck.dll
      + 2007-08-20 09:49:28 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\updspapi.dll
      + 2007-08-21 06:25:34 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll
      + 2007-10-29 22:36:31 1,293,824 ----a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll
      + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
      + 2007-10-10 23:22:14 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
      + 2007-10-10 23:22:14 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
      + 2007-10-10 23:22:14 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
      + 2007-10-10 23:22:14 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
      + 2007-10-10 08:16:47 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
      + 2007-10-10 23:22:14 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
      + 2007-10-10 23:22:14 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
      + 2007-10-10 05:47:20 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
      + 2007-10-10 23:22:14 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
      + 2007-10-10 23:22:15 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
      + 2007-10-10 23:22:16 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
      + 2007-10-10 23:22:16 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
      + 2007-10-10 23:22:16 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
      + 2007-10-10 08:16:47 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
      + 2007-10-10 08:16:56 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
      + 2007-10-10 23:22:16 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
      + 2007-10-10 23:22:16 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
      + 2007-10-10 23:22:16 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
      + 2007-10-30 23:40:57 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
      + 2007-10-10 23:22:18 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
      + 2007-10-10 23:22:18 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
      + 2007-10-10 23:22:18 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
      + 2007-10-10 23:22:18 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
      + 2007-10-10 23:22:18 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
      + 2007-10-10 23:22:19 1,162,240 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
      + 2007-10-10 23:22:19 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
      + 2007-10-10 23:22:19 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\updspapi.dll
      + 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll
      + 2007-12-04 18:30:15 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
      + 2007-11-07 09:50:06 733,696 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
      + 2007-12-07 01:42:15 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
      + 2007-12-19 22:20:28 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
      + 2007-12-07 01:42:15 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
      + 2007-12-07 01:42:15 133,120 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
      + 2007-12-07 01:42:15 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
      + 2007-12-06 08:34:28 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
      + 2007-12-07 01:42:15 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
      + 2007-12-07 01:42:16 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
      + 2007-12-06 05:00:02 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
      + 2007-12-07 01:42:16 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
      + 2007-12-07 01:42:16 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
      + 2007-12-07 01:42:19 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
      + 2007-12-07 01:42:19 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
      + 2007-12-07 01:42:19 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
      + 2007-12-06 08:34:29 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
      + 2007-12-06 08:34:45 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
      + 2007-12-07 01:42:20 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
      + 2007-12-07 01:42:20 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
      + 2007-12-07 01:42:20 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
      + 2007-12-07 01:42:21 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
      + 2007-12-07 01:42:21 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
      + 2007-12-07 01:42:21 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
      + 2007-12-07 01:42:21 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
      + 2007-12-07 01:42:21 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
      + 2008-01-11 05:54:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
      + 2007-12-07 01:42:21 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
      + 2007-12-07 01:42:22 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
      + 2007-12-07 01:42:22 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
      + 2007-12-07 01:42:22 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\updspapi.dll
      + 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
      + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
      + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
      + 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
      + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
      + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
      + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
      + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
      + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
      + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
      + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
      + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
      + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
      + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
      + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
      + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
      + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
      + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
      + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
      + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
      + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
      + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
      + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
      + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
      + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
      + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
      + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
      + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
      + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
      + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
      + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
      + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
      + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\updspapi.dll
      + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
      + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll
      + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
      + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
      + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
      + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
      + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
      + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
      + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
      + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
      + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
      + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
      + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
      + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
      + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
      + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
      + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
      + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
      + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
      + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
      + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
      + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
      + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
      + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
      + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
      + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
      + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
      + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
      + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
      + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
      + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
      + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
      + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
      + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
      + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
      + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
      + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
      + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
      + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
      + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
      + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
      + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
      + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
      + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
      + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
      + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
      + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
      + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updspapi.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
      + 2008-05-08 12:14:51 203,008 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
      + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
      + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
      + 2008-07-07 20:18:27 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll
      + 2008-07-07 20:28:20 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll
      + 2008-07-07 20:24:11 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll
      + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
      + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll
      + 2008-04-11 18:40:33 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
      + 2008-04-11 19:05:22 691,712 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
      + 2008-04-11 22:23:04 691,712 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951066\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\spcustom.dll
      + 2007-12-03 15:25:43 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\updspapi.dll
      + 2008-07-14 11:03:00 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
      + 2008-07-11 12:42:28 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
      + 2008-07-11 12:51:51 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll
      + 2008-06-14 18:03:13 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
      + 2008-06-14 17:33:37 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
      + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
      + 2008-04-14 16:17:04 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
      + 2008-04-14 15:59:30 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
      + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
      + 2008-05-07 04:55:47 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
      + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
      + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
      + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
      + 2008-06-20 17:47:22 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
      + 2008-06-20 17:47:22 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
      + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
      + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
      + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
      + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
      + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
      + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
      + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
      + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
      + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
      + 2008-05-01 15:04:51 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP2QFE\msadce.dll
      + 2008-05-01 14:36:26 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3GDR\msadce.dll
      + 2008-05-01 14:39:23 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3QFE\msadce.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\updspapi.dll
      + 2008-06-24 16:30:27 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll
      + 2008-06-24 16:44:02 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll
      + 2008-06-24 16:53:52 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll
      + 2008-06-23 15:40:01 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
      + 2008-06-23 15:40:01 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
      + 2008-06-23 15:40:01 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
      + 2008-06-23 15:40:01 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
      + 2008-06-23 15:40:01 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
      + 2008-06-23 08:23:18 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
      + 2008-06-23 15:40:01 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
      + 2008-06-23 15:40:01 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
      + 2008-06-21 05:23:53 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
      + 2008-06-23 15:40:02 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
      + 2008-06-23 15:40:02 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
      + 2008-06-23 15:40:04 6,068,736 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
      + 2008-06-23 15:40:04 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
      + 2008-06-23 15:40:04 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
      + 2008-06-23 08:23:18 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
      + 2008-06-23 08:23:52 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
      + 2008-06-23 15:40:05 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
      + 2008-06-23 15:40:05 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
      + 2008-06-23 15:40:05 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
      + 2008-06-23 15:40:07 3,594,240 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
      + 2008-06-23 15:40:07 477,696 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
      + 2008-06-23 15:40:07 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
      + 2008-06-23 15:40:07 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
      + 2008-06-23 15:40:07 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
      + 2008-06-23 15:40:07 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
      + 2008-06-23 15:40:07 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
      + 2008-06-23 15:40:08 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
      + 2008-06-23 15:40:08 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
      + 2008-06-23 15:40:08 827,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\updspapi.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB953839\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB953839\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\updspapi.dll
      + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe
      + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB926239$\spuninst\updspapi.dll
      + 2006-10-18 19:47:16 414,208 -c----w C:\WINDOWS\$NtUninstallKB929399$\msscp.dll
      + 2005-06-28 08:23:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB929399$\spuninst\updspapi.dll
      + 2004-12-06 22:54:57 297,472 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\msctf.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 581,120 -c----w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
      + 2005-10-12 23:15:24 216,800 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
      + 2005-10-12 23:15:43 394,976 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
      + 2007-03-09 11:51:20 265,216 -c----w C:\WINDOWS\$NtUninstallKB933729$\xpsp3res.dll
      + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\updspapi.dll
      + 2006-10-18 19:47:20 10,834,432 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\wmp.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\updspapi.dll
      + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB939683$\spuninst\updspapi.dll
      + 2006-11-03 07:58:34 317,440 -c----w C:\WINDOWS\$NtUninstallKB939683$\unregmp2.exe
      + 2007-05-16 15:13:53 683,520 -c----w C:\WINDOWS\$NtUninstallKB941202$\inetcomm.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\updspapi.dll
      + 2005-08-30 03:55:43 1,293,312 -c----w C:\WINDOWS\$NtUninstallKB941568$\quartz.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll
      + 2005-06-28 09:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
      + 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
      + 2005-01-28 06:53:16 224,768 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
      + 2006-04-20 12:18:35 360,576 -c----w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
      + 2007-03-08 15:33:58 1,843,712 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll
      + 2007-07-18 12:42:22 60,416 -c----w C:\WINDOWS\$NtUninstallKB942763$\tzchange.exe
      + 2007-05-17 11:29:50 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
      + 2006-12-19 21:49:47 8,509,952 -c----w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe
      + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll
      + 2007-06-18 22:24:36 369,152 -c----w C:\WINDOWS\$NtUninstallKB943460$\xpsp3res.dll
      + 2006-08-17 12:29:49 728,576 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 27,440 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
      + 2006-06-26 17:41:32 148,480 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll
      + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
      + 2007-06-19 13:32:25 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe
      + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 561,179 -c----w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
      + 2004-08-05 12:00:00 512,029 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
      + 2004-08-05 12:00:00 319,517 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
      + 2004-08-05 12:00:00 1,507,356 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
      + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
      + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
      + 2004-08-05 12:00:00 184,351 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
      + 2004-08-05 12:00:00 53,279 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
      + 2004-08-05 12:00:00 241,693 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
      + 2004-08-05 12:00:00 213,023 -c----w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
      + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
      + 2004-08-05 12:00:00 421,919 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
      + 2004-08-05 12:00:00 315,423 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
      + 2004-08-05 12:00:00 552,989 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
      + 2004-08-05 12:00:00 258,077 -c----w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
      + 2004-08-05 12:00:00 831,519 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
      + 2004-08-05 12:00:00 614,429 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
      + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
      + 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\rmcast.sys
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\updspapi.dll
      + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\es.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\updspapi.dll
      + 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\inetcomm.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
      + 2007-11-13 11:31:11 60,416 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\tzchange.exe
      + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\bthport.sys
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\updspapi.dll
      + 2007-10-29 22:43:32 1,293,824 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\quartz.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\updspapi.dll
      + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\6to4svc.dll
      + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys
      + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\dnsapi.dll
      + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\updspapi.dll
      + 2007-10-30 16:53:32 360,832 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
      + 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\tcpip6.sys
      + 2004-08-05 12:00:00 331,776 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\msadce.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\updspapi.dll
      + 2005-06-29 01:49:41 74,240 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\mscms.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB953839$\spuninst\updspapi.dll
      + 2007-07-27 06:28:58 234,872 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
      + 2007-07-27 08:41:48 382,840 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
      + 2006-10-18 19:47:20 295,936 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\wmpeffects.dll
      + 2006-09-25 15:58:48 221,488 -c----w C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe
      + 2006-09-25 15:58:48 379,184 -c----w C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\updspapi.dll
      + 2005-01-28 13:22:12 486,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\audiodev.dll
      + 2005-01-28 06:53:28 294,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\blackbox.dll
      + 2005-01-28 06:53:20 164,864 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\cewmdm.dll
      + 2005-01-28 06:53:38 502,272 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\drmv2clt.dll
      + 2005-01-28 06:53:16 6,656 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\laprxy.dll
      + 2005-01-27 23:21:46 96,768 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\logagent.exe
      + 2004-08-05 12:00:00 310,272 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mp43dmod.dll
      + 2004-08-05 12:00:00 384,512 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mp4sdmod.dll
      + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mpg4dmod.dll
      + 2005-01-28 06:53:22 142,336 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\msnetobj.dll
      + 2005-01-28 06:53:20 25,088 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll
      + 2005-01-28 06:53:20 173,568 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mspmsp.dll
      + 2005-01-28 11:32:44 364,784 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\msscp.dll
      + 2005-01-28 13:22:12 316,416 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mswmdm.dll
      + 2005-01-28 06:53:22 221,184 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\qasf.dll
      + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe
      + 2006-05-16 16:11:54 371,424 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\updspapi.dll
      + 2006-11-02 09:46:52 13,312 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\wpdinstallutil.dll
      + 2005-01-27 23:36:04 47,104 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\uwdf.exe
      + 2005-01-27 23:35:58 15,872 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wdfapi.dll
      + 2005-01-27 23:36:00 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wdfmgr.exe
      + 2005-01-28 11:32:44 396,528 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmadmod.dll
      + 2005-01-28 06:53:18 716,288 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmadmoe.dll
      + 2007-10-20 05:01:32 227,328 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmasf.dll
      + 2005-01-28 06:53:20 28,160 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdmlog.dll
      + 2005-01-28 06:53:20 33,792 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdmps.dll
      + 2005-01-28 06:53:50 335,872 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdrmdev.dll
      + 2005-01-28 06:53:54 290,816 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdrmnet.dll
      + 2005-01-28 06:53:16 150,016 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmidx.dll
      + 2005-01-28 06:53:16 1,027,072 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmnetmgr.dll
      + 2005-01-28 11:32:56 774,904 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsdmod.dll
      + 2005-01-28 06:53:18 1,119,744 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsdmoe2.dll
      + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsetsdk.exe
      + 2005-01-28 11:32:44 413,944 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmspdmod.dll
      + 2005-01-28 06:53:18 940,544 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmspdmoe.dll
      + 2005-01-28 11:32:56 1,218,808 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvadvd.dll
      + 2005-01-28 06:53:20 1,512,448 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvadve.dll
      + 2006-12-07 05:29:34 2,374,472 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvcore.dll
      + 2005-04-30 15:23:50 900,856 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvdmod.dll
      + 2005-01-28 06:53:18 1,003,008 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvdmoe2.dll
      + 2005-01-27 23:36:28 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpd_ci.dll
      + 2005-01-27 23:36:20 61,952 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdconns.dll
      + 2005-01-27 23:36:24 114,176 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdmtp.dll
      + 2005-01-27 23:36:22 66,560 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdmtpus.dll
      + 2005-01-27 23:36:28 331,264 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdsp.dll
      + 2005-01-27 23:36:24 18,944 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdusb.sys
      + 2005-01-28 13:22:24 8,704 -c----w C:\WINDOWS\$NtUninstallwmp11$\asferror.dll
      + 2005-01-28 13:22:12 352,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\mpvis.dll
      + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallwmp11$\setup_wm.exe
      + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe
      + 2006-05-16 16:11:56 394,976 -c----w C:\WINDOWS\$NtUninstallwmp11$\spuninst\updspapi.dll
      + 2005-01-28 13:22:12 192,512 -c----w C:\WINDOWS\$NtUninstallwmp11$\unregmp2.exe
      + 2005-01-28 13:22:24 226,304 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmerror.dll
      + 2005-01-27 23:26:30 122,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmlaunch.exe
      + 2007-04-30 06:20:24 5,537,792 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmp.dll
      + 2005-01-28 06:53:20 135,168 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpasf.dll
      + 2005-01-28 13:22:12 77,824 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpband.dll
      + 2005-01-28 06:53:20 282,624 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpdxm.dll
      + 2005-01-27 23:26:30 28,672 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpenc.exe
      + 2005-01-28 06:53:18 1,594,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpencen.dll
      + 2005-01-28 13:22:12 73,728 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmplayer.exe
      + 2005-01-28 13:22:14 3,424,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmploc.dll
      + 2005-01-28 13:22:18 86,016 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpshell.dll
      + 2005-01-28 06:53:18 175,104 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpsrcwp.dll
      + 2006-09-15 23:05:22 221,488 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe
      + 2006-09-15 23:05:22 379,184 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\updspapi.dll
      + 2006-09-28 17:01:52 58,368 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\WudfCustom.dll
      + 2006-10-04 14:05:26 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc(2)(2).dll
      + 2008-04-14 02:33:18 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc.dll
      - 2004-11-10 22:58:37 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
      + 2008-04-14 02:33:18 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
      - 2004-08-05 12:00:00 450,048 ----a-w C:\WINDOWS\AppPatch\AcLayers.dll
      + 2008-04-14 02:33:18 451,072 ----a-w C:\WINDOWS\AppPatch\aclayers.dll
      - 2004-08-05 12:00:00 137,728 ----a-w C:\WINDOWS\AppPatch\AcLua.dll
      + 2008-04-14 02:33:18 141,312 ----a-w C:\WINDOWS\AppPatch\aclua.dll
      - 2004-09-24 02:12:56 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
      + 2008-04-14 02:33:18 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
      - 2004-08-05 12:00:00 116,224 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.dll
      + 2008-04-14 02:33:18 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll
      + 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
      + 2008-06-14 17:33:37 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
      - 2007-03-13 08:57:10 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
      + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
      + 2007-09-29 13:24:08 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000001\NTUSER.DAT
      + 2007-09-29 13:24:08 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000002\UsrClass.dat
      + 2007-09-27 20:03:23 163,328 -
      1. sKe69 Contributeur sécurité
        re, il me manque la fin du rapport Combofix .... :-/

        postes la stp ...
    2. kurar Auteur
      desolé ...
      la voici:

      ComboFix 08-09-25.03 - kurar 2008-09-25 20:03:30.2 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.164 [GMT 2:00]
      Lancé depuis: C:\Documents and Settings\kurar\Bureau\ComboFix.exe
      * Un nouveau point de restauration a été créé

      [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\check_LSA7.txt
      C:\Documents and Settings\kurar\Cookies\kurar@clickintext[1].txt
      C:\WINDOWS\BM4bda1b1a.txt
      C:\WINDOWS\BM4bda1b1a.xml
      C:\WINDOWS\cookies.ini
      C:\WINDOWS\pskt.ini
      C:\WINDOWS\system32\__c0014770.dat
      C:\WINDOWS\system32\__c0016C72.dat
      C:\WINDOWS\system32\__c001F2A8.dat
      C:\WINDOWS\system32\__c002027E.dat
      C:\WINDOWS\system32\__c002F390.dat
      C:\WINDOWS\system32\__c0030619.dat
      C:\WINDOWS\system32\__c0030B61.dat
      C:\WINDOWS\system32\__c0032D06.dat
      C:\WINDOWS\system32\__c0036279.dat
      C:\WINDOWS\system32\__c003AC41.dat
      C:\WINDOWS\system32\__c003D103.dat
      C:\WINDOWS\system32\__c004316D.dat
      C:\WINDOWS\system32\__c00445D2.dat
      C:\WINDOWS\system32\__c005F92D.dat
      C:\WINDOWS\system32\__c0062B44.dat
      C:\WINDOWS\system32\__c006EEEB.dat
      C:\WINDOWS\system32\__c0070529.dat
      C:\WINDOWS\system32\__c007174A.dat
      C:\WINDOWS\system32\__c0075E08.dat
      C:\WINDOWS\system32\__c009B10.dat
      C:\WINDOWS\system32\__c00A1A5B.dat
      C:\WINDOWS\system32\__c00A63F9.dat
      C:\WINDOWS\system32\__c00A88B1.dat
      C:\WINDOWS\system32\__c00BBAB6.dat
      C:\WINDOWS\system32\__c00D6FC4.dat
      C:\WINDOWS\system32\__c00DC0F4.dat
      C:\WINDOWS\system32\__c00E32A2.dat
      C:\WINDOWS\system32\__c00F6A0C.dat
      C:\WINDOWS\system32\__c00FA35A.dat
      C:\WINDOWS\system32\ajbasowf.dll
      C:\WINDOWS\system32\amddmssd.dll
      C:\WINDOWS\system32\arxsjgyv.dll
      C:\WINDOWS\system32\aualhqwv.dll
      C:\WINDOWS\system32\awlqvxnh.dll
      C:\WINDOWS\system32\axbcbrnu.dll
      C:\WINDOWS\system32\bbsglukm.dll
      C:\WINDOWS\system32\bkypvlte.dll
      C:\WINDOWS\system32\bwfgmsle.dll
      C:\WINDOWS\system32\bxjjunkk.dll
      C:\WINDOWS\system32\cjaryyri.dll
      C:\WINDOWS\system32\cnrthcms.dll
      C:\WINDOWS\system32\cymuqsvf.dll
      C:\WINDOWS\system32\djtxrafa.dll
      C:\WINDOWS\system32\dkfuskoy.ini
      C:\WINDOWS\system32\dtanqsty.dll
      C:\WINDOWS\system32\duuaejfq.dll
      C:\WINDOWS\system32\enxtvrgp.dll
      C:\WINDOWS\system32\exxggaib.dll
      C:\WINDOWS\system32\fagxbosq.dll
      C:\WINDOWS\system32\fcrinbrd.dll
      C:\WINDOWS\system32\fdxvilus.dll
      C:\WINDOWS\system32\fvdxpytu.dll
      C:\WINDOWS\system32\fvsqumyc.ini
      C:\WINDOWS\system32\fvwkobvl.dll
      C:\WINDOWS\system32\gdukloxr.dll
      C:\WINDOWS\system32\ghfmkcsq.dll
      C:\WINDOWS\system32\gxaeceya.dll
      C:\WINDOWS\system32\hrqcqase.dll
      C:\WINDOWS\system32\hsurteym.dll
      C:\WINDOWS\system32\hwhnngqf.dll
      C:\WINDOWS\system32\igmlomid.dll
      C:\WINDOWS\system32\iqfgbrtd.dll
      C:\WINDOWS\system32\j.exe
      C:\WINDOWS\system32\jevnhxvm.ini
      C:\WINDOWS\system32\jkpvchkw.dll
      C:\WINDOWS\system32\jsrelrug.dll
      C:\WINDOWS\system32\jwypssyw.dll
      C:\WINDOWS\system32\jxmhoifb.dll
      C:\WINDOWS\system32\kdvplomf.dll
      C:\WINDOWS\system32\khakccks.dll
      C:\WINDOWS\system32\lidhmrox.dll
      C:\WINDOWS\system32\ltojbgaj.dll
      C:\WINDOWS\system32\lvhlvubh.dll
      C:\WINDOWS\system32\mbcpvhmo.ini
      C:\WINDOWS\system32\mcrh.tmp
      C:\WINDOWS\system32\mjdjvntf.dll
      C:\WINDOWS\system32\mvxhnvej.dll
      C:\WINDOWS\system32\nhxopriv.dll
      C:\WINDOWS\system32\nombjupu.dll
      C:\WINDOWS\system32\ntdbyguq.dll
      C:\WINDOWS\system32\okiauuma.dll
      C:\WINDOWS\system32\olffvtlq.ini
      C:\WINDOWS\system32\omhvpcbm.dll
      C:\WINDOWS\system32\pcymieqm.dll
      C:\WINDOWS\system32\qcgtinfd.dll
      C:\WINDOWS\system32\qltvfflo.dll
      C:\WINDOWS\system32\qobcvdix.dll
      C:\WINDOWS\system32\qwlacemm.dll
      C:\WINDOWS\system32\rdlonyka.dll
      C:\WINDOWS\system32\rftplxlm.dll
      C:\WINDOWS\system32\rhywmttk.dll
      C:\WINDOWS\system32\riosynww.dll
      C:\WINDOWS\system32\rkxbtadf.dll
      C:\WINDOWS\system32\rmwplsmb.dll
      C:\WINDOWS\system32\rqreqwix.dll
      C:\WINDOWS\system32\rstwwjxv.dll
      C:\WINDOWS\system32\sglklxoo.dll
      C:\WINDOWS\system32\tbyqgxjd.dll
      C:\WINDOWS\system32\thecxhho.dll
      C:\WINDOWS\system32\ulakqcya.dll
      C:\WINDOWS\system32\uqioxumj.dll
      C:\WINDOWS\system32\uxksbaxl.dll
      C:\WINDOWS\system32\vebdphli.dll
      C:\WINDOWS\system32\viqnkjov.dll
      C:\WINDOWS\system32\vrvhvagu.dll
      C:\WINDOWS\system32\vwrccvkb.dll
      C:\WINDOWS\system32\vygjsxra.ini
      C:\WINDOWS\system32\xdvyghva.dll
      C:\WINDOWS\system32\xouhpbxr.dll
      C:\WINDOWS\system32\yoksufkd.dll
      C:\WINDOWS\system32\yovgpxto.dll
      C:\WINDOWS\system32\yuebghgr.dll

      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-25 au 2008-09-25 ))))))))))))))))))))))))))))))))))))
      .

      2008-09-25 19:05 . 2008-09-25 19:05 <REP> d-------- C:\rsit
      2008-09-25 19:01 . 2008-09-25 19:01 <REP> d-------- C:\Program Files\Trend Micro
      2008-09-25 14:53 . 2008-09-25 14:53 <REP> d-------- C:\Program Files\Alwil Software
      2008-09-25 14:22 . 2008-09-25 14:22 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\system32\fr
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\system32\bits
      2008-09-24 17:33 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\l2schemas
      2008-09-24 17:30 . 2008-09-24 17:33 <REP> d-------- C:\WINDOWS\ServicePackFiles
      2008-09-24 17:22 . 2008-09-24 17:22 <REP> d-------- C:\WINDOWS\EHome
      2008-09-24 12:55 . 2008-09-24 12:55 <REP> d-------- C:\Nouveau dossier (2)
      2008-09-12 17:11 . 2008-09-12 17:11 4,096 --a------ C:\WINDOWS\d3dx.dat
      2008-09-12 17:07 . 2008-09-12 17:07 <REP> d-------- C:\Program Files\Lionhead Studios Ltd
      2008-09-06 11:00 . 2008-09-06 11:00 <REP> d-------- C:\Documents and Settings\kurar\Application Data\vlc
      2008-09-06 10:59 . 2008-09-06 10:59 <REP> d-------- C:\Program Files\VideoLAN
      2008-09-05 10:33 . 2008-09-24 12:56 <REP> d-------- C:\SNES
      2008-09-03 12:04 . 2004-08-04 00:38 701,440 --------- C:\WINDOWS\system32\drivers\ati2mtag.sys

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-09-25 12:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
      2008-09-24 16:49 --------- d-----w C:\Program Files\Fichiers communs\Adobe
      2008-09-24 15:06 --------- d-----w C:\Program Files\Java
      2008-09-24 14:52 --------- d-----w C:\Program Files\Creative
      2008-09-24 14:51 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-09-24 10:56 --------- d-----w C:\Documents and Settings\kurar\Application Data\Azureus
      2008-09-04 19:15 --------- d-----w C:\Program Files\Azureus
      2008-08-11 21:19 47,648 ----a-w C:\Documents and Settings\kurar\Application Data\GDIPFONTCACHEV1.DAT
      2007-02-21 21:41 190 ----a-w C:\Documents and Settings\kurar\Application Data\wklnhst.dat
      2006-02-22 18:52 56 --sh--r C:\WINDOWS\system32\F20D02A70A.sys
      2006-02-22 18:52 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
      2008-05-28 15:17 747,878 --sh--w C:\WINDOWS\system32\mlnmp.ini2
      .

      ((((((((((((((((((((((((((((( snapshot_2007-09-27_124552.65 )))))))))))))))))))))))))))))))))))))))))
      .
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\updspapi.dll
      + 2007-08-20 09:49:19 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\advpack.dll
      + 2007-08-20 09:49:28 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\dxtrans.dll
      + 2007-08-20 09:49:19 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\extmgr.dll
      + 2007-08-20 09:49:19 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\icardie.dll
      + 2007-08-17 10:13:10 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ie4uinit.exe
      + 2007-08-20 09:49:20 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakeng.dll
      + 2007-08-20 09:49:20 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieaksie.dll
      + 2007-08-17 07:29:55 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dat
      + 2007-08-20 09:49:20 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieapfltr.dll
      + 2007-08-20 09:49:20 387,584 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iedkcs32.dll
      + 2007-08-20 09:49:23 6,066,176 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieframe.dll
      + 2007-08-20 09:49:23 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iernonce.dll
      + 2007-08-20 09:49:23 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iertutil.dll
      + 2007-08-17 10:13:10 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\ieudinit.exe
      + 2007-08-17 10:13:39 625,152 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iexplore.exe
      + 2007-08-20 09:49:23 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\jsproxy.dll
      + 2007-08-20 09:49:24 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeeds.dll
      + 2007-08-20 09:49:24 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msfeedsbs.dll
      + 2007-08-20 09:49:26 3,592,192 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
      + 2007-08-20 09:49:26 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtmled.dll
      + 2007-08-20 09:49:26 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\msrating.dll
      + 2007-08-20 09:49:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mstime.dll
      + 2007-08-20 09:49:27 102,400 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\occache.dll
      + 2007-08-20 09:49:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\url.dll
      + 2007-08-20 09:49:28 1,161,728 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\urlmon.dll
      + 2007-08-20 09:49:28 232,960 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\webcheck.dll
      + 2007-08-20 09:49:28 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB939653-IE7\update\updspapi.dll
      + 2007-08-21 06:25:34 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll
      + 2007-10-29 22:36:31 1,293,824 ----a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll
      + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
      + 2007-10-10 23:22:14 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
      + 2007-10-10 23:22:14 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
      + 2007-10-10 23:22:14 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
      + 2007-10-10 23:22:14 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
      + 2007-10-10 08:16:47 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
      + 2007-10-10 23:22:14 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
      + 2007-10-10 23:22:14 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
      + 2007-10-10 05:47:20 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
      + 2007-10-10 23:22:14 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
      + 2007-10-10 23:22:15 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
      + 2007-10-10 23:22:16 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
      + 2007-10-10 23:22:16 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
      + 2007-10-10 23:22:16 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
      + 2007-10-10 08:16:47 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
      + 2007-10-10 08:16:56 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
      + 2007-10-10 23:22:16 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
      + 2007-10-10 23:22:16 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
      + 2007-10-10 23:22:16 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
      + 2007-10-30 23:40:57 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
      + 2007-10-10 23:22:18 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
      + 2007-10-10 23:22:18 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
      + 2007-10-10 23:22:18 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
      + 2007-10-10 23:22:18 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
      + 2007-10-10 23:22:18 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
      + 2007-10-10 23:22:19 1,162,240 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
      + 2007-10-10 23:22:19 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
      + 2007-10-10 23:22:19 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\updspapi.dll
      + 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll
      + 2007-12-04 18:30:15 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
      + 2007-11-07 09:50:06 733,696 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
      + 2007-12-07 01:42:15 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
      + 2007-12-19 22:20:28 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
      + 2007-12-07 01:42:15 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
      + 2007-12-07 01:42:15 133,120 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
      + 2007-12-07 01:42:15 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
      + 2007-12-06 08:34:28 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
      + 2007-12-07 01:42:15 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
      + 2007-12-07 01:42:16 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
      + 2007-12-06 05:00:02 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
      + 2007-12-07 01:42:16 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
      + 2007-12-07 01:42:16 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
      + 2007-12-07 01:42:19 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
      + 2007-12-07 01:42:19 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
      + 2007-12-07 01:42:19 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
      + 2007-12-06 08:34:29 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
      + 2007-12-06 08:34:45 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
      + 2007-12-07 01:42:20 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
      + 2007-12-07 01:42:20 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
      + 2007-12-07 01:42:20 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
      + 2007-12-07 01:42:21 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
      + 2007-12-07 01:42:21 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
      + 2007-12-07 01:42:21 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
      + 2007-12-07 01:42:21 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
      + 2007-12-07 01:42:21 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
      + 2008-01-11 05:54:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
      + 2007-12-07 01:42:21 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
      + 2007-12-07 01:42:22 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
      + 2007-12-07 01:42:22 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
      + 2007-12-07 01:42:22 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\updspapi.dll
      + 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
      + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
      + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
      + 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
      + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
      + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
      + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
      + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
      + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
      + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
      + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
      + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
      + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
      + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
      + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
      + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
      + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
      + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
      + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
      + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
      + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
      + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
      + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
      + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
      + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
      + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
      + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
      + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
      + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
      + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
      + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
      + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
      + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\updspapi.dll
      + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
      + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll
      + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
      + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
      + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
      + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
      + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
      + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
      + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
      + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
      + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
      + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
      + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
      + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
      + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
      + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
      + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
      + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
      + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
      + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
      + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
      + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
      + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
      + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
      + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
      + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
      + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
      + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
      + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
      + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
      + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
      + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
      + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
      + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
      + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
      + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
      + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
      + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
      + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
      + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
      + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
      + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
      + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
      + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
      + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
      + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
      + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
      + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updspapi.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
      + 2008-05-08 12:14:51 203,008 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
      + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
      + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
      + 2008-07-07 20:18:27 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll
      + 2008-07-07 20:28:20 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll
      + 2008-07-07 20:24:11 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll
      + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
      + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll
      + 2008-04-11 18:40:33 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
      + 2008-04-11 19:05:22 691,712 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
      + 2008-04-11 22:23:04 691,712 ----a-w C:\WINDOWS\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951066\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\spcustom.dll
      + 2007-12-03 15:25:43 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951066\update\updspapi.dll
      + 2008-07-14 11:03:00 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
      + 2008-07-11 12:42:28 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
      + 2008-07-11 12:51:51 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll
      + 2008-06-14 18:03:13 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
      + 2008-06-14 17:33:37 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
      + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
      + 2008-04-14 16:17:04 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
      + 2008-04-14 15:59:30 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
      + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
      + 2008-05-07 04:55:47 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
      + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
      + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
      + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
      + 2008-06-20 17:47:22 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
      + 2008-06-20 17:47:22 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
      + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
      + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
      + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
      + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
      + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
      + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
      + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
      + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
      + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
      + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
      + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
      + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
      + 2008-05-01 15:04:51 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP2QFE\msadce.dll
      + 2008-05-01 14:36:26 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3GDR\msadce.dll
      + 2008-05-01 14:39:23 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3QFE\msadce.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\updspapi.dll
      + 2008-06-24 16:30:27 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll
      + 2008-06-24 16:44:02 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll
      + 2008-06-24 16:53:52 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll
      + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
      + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll
      + 2008-06-23 15:40:01 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
      + 2008-06-23 15:40:01 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
      + 2008-06-23 15:40:01 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
      + 2008-06-23 15:40:01 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
      + 2008-06-23 15:40:01 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
      + 2008-06-23 08:23:18 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
      + 2008-06-23 15:40:01 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
      + 2008-06-23 15:40:01 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
      + 2008-06-21 05:23:53 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
      + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
      + 2008-06-23 15:40:02 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
      + 2008-06-23 15:40:02 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
      + 2008-06-23 15:40:04 6,068,736 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
      + 2008-06-23 15:40:04 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
      + 2008-06-23 15:40:04 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
      + 2008-06-23 08:23:18 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
      + 2008-06-23 08:23:52 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
      + 2008-06-23 15:40:05 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
      + 2008-06-23 15:40:05 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
      + 2008-06-23 15:40:05 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
      + 2008-06-23 15:40:07 3,594,240 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
      + 2008-06-23 15:40:07 477,696 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
      + 2008-06-23 15:40:07 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
      + 2008-06-23 15:40:07 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
      + 2008-06-23 15:40:07 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
      + 2008-06-23 15:40:07 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
      + 2008-06-23 15:40:07 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
      + 2008-06-23 15:40:08 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
      + 2008-06-23 15:40:08 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
      + 2008-06-23 15:40:08 827,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
      + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\spmsg.dll
      + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\spuninst.exe
      + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\spcustom.dll
      + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\update.exe
      + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB953838-IE7\update\updspapi.dll
      + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB953839\spmsg.dll
      + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB953839\spuninst.exe
      + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\spcustom.dll
      + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\update.exe
      + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB953839\update\updspapi.dll
      + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe
      + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB926239$\spuninst\updspapi.dll
      + 2006-10-18 19:47:16 414,208 -c----w C:\WINDOWS\$NtUninstallKB929399$\msscp.dll
      + 2005-06-28 08:23:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB929399$\spuninst\updspapi.dll
      + 2004-12-06 22:54:57 297,472 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\msctf.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 581,120 -c----w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll
      + 2005-10-12 23:15:24 216,800 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe
      + 2005-10-12 23:15:43 394,976 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll
      + 2007-03-09 11:51:20 265,216 -c----w C:\WINDOWS\$NtUninstallKB933729$\xpsp3res.dll
      + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\updspapi.dll
      + 2006-10-18 19:47:20 10,834,432 -c----w C:\WINDOWS\$NtUninstallKB936782_WMP11$\wmp.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB938464_0$\spuninst\updspapi.dll
      + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe
      + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB939683$\spuninst\updspapi.dll
      + 2006-11-03 07:58:34 317,440 -c----w C:\WINDOWS\$NtUninstallKB939683$\unregmp2.exe
      + 2007-05-16 15:13:53 683,520 -c----w C:\WINDOWS\$NtUninstallKB941202$\inetcomm.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\updspapi.dll
      + 2005-08-30 03:55:43 1,293,312 -c----w C:\WINDOWS\$NtUninstallKB941568$\quartz.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll
      + 2005-06-28 09:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
      + 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
      + 2005-01-28 06:53:16 224,768 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
      + 2006-04-20 12:18:35 360,576 -c----w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
      + 2007-03-08 15:33:58 1,843,712 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll
      + 2007-07-18 12:42:22 60,416 -c----w C:\WINDOWS\$NtUninstallKB942763$\tzchange.exe
      + 2007-05-17 11:29:50 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
      + 2006-12-19 21:49:47 8,509,952 -c----w C:\WINDOWS\$NtUninstallKB943460$\shell32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe
      + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB943460$\spuninst\updspapi.dll
      + 2007-06-18 22:24:36 369,152 -c----w C:\WINDOWS\$NtUninstallKB943460$\xpsp3res.dll
      + 2006-08-17 12:29:49 728,576 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 27,440 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
      + 2006-06-26 17:41:32 148,480 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll
      + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
      + 2007-06-19 13:32:25 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe
      + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll
      + 2004-08-05 12:00:00 561,179 -c----w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
      + 2004-08-05 12:00:00 512,029 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
      + 2004-08-05 12:00:00 319,517 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
      + 2004-08-05 12:00:00 1,507,356 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
      + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
      + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
      + 2004-08-05 12:00:00 184,351 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
      + 2004-08-05 12:00:00 53,279 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
      + 2004-08-05 12:00:00 241,693 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
      + 2004-08-05 12:00:00 213,023 -c----w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
      + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
      + 2004-08-05 12:00:00 421,919 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
      + 2004-08-05 12:00:00 315,423 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
      + 2004-08-05 12:00:00 552,989 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
      + 2004-08-05 12:00:00 258,077 -c----w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
      + 2004-08-05 12:00:00 831,519 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
      + 2004-08-05 12:00:00 614,429 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
      + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
      + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
      + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
      + 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\rmcast.sys
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950762_0$\spuninst\updspapi.dll
      + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\es.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB950974_0$\spuninst\updspapi.dll
      + 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\inetcomm.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951066_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
      + 2007-11-13 11:31:11 60,416 -c----w C:\WINDOWS\$NtUninstallKB951072-v2$\tzchange.exe
      + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\bthport.sys
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376-v2_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376_0$\spuninst\updspapi.dll
      + 2007-10-29 22:43:32 1,293,824 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\quartz.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951698_0$\spuninst\updspapi.dll
      + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\6to4svc.dll
      + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys
      + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\dnsapi.dll
      + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll
      + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\spuninst\updspapi.dll
      + 2007-10-30 16:53:32 360,832 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
      + 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\$NtUninstallKB951748_0$\tcpip6.sys
      + 2004-08-05 12:00:00 331,776 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\msadce.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB952287_0$\spuninst\updspapi.dll
      + 2005-06-29 01:49:41 74,240 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\mscms.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\spuninst.exe
      + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB952954_0$\spuninst\updspapi.dll
      + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe
      + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB953839$\spuninst\updspapi.dll
      + 2007-07-27 06:28:58 234,872 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
      + 2007-07-27 08:41:48 382,840 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
      + 2006-10-18 19:47:20 295,936 -c----w C:\WINDOWS\$NtUninstallKB954154_WM11$\wmpeffects.dll
      + 2006-09-25 15:58:48 221,488 -c----w C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe
      + 2006-09-25 15:58:48 379,184 -c----w C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\updspapi.dll
      + 2005-01-28 13:22:12 486,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\audiodev.dll
      + 2005-01-28 06:53:28 294,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\blackbox.dll
      + 2005-01-28 06:53:20 164,864 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\cewmdm.dll
      + 2005-01-28 06:53:38 502,272 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\drmv2clt.dll
      + 2005-01-28 06:53:16 6,656 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\laprxy.dll
      + 2005-01-27 23:21:46 96,768 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\logagent.exe
      + 2004-08-05 12:00:00 310,272 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mp43dmod.dll
      + 2004-08-05 12:00:00 384,512 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mp4sdmod.dll
      + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mpg4dmod.dll
      + 2005-01-28 06:53:22 142,336 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\msnetobj.dll
      + 2005-01-28 06:53:20 25,088 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll
      + 2005-01-28 06:53:20 173,568 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mspmsp.dll
      + 2005-01-28 11:32:44 364,784 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\msscp.dll
      + 2005-01-28 13:22:12 316,416 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\mswmdm.dll
      + 2005-01-28 06:53:22 221,184 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\qasf.dll
      + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe
      + 2006-05-16 16:11:54 371,424 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\updspapi.dll
      + 2006-11-02 09:46:52 13,312 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\wpdinstallutil.dll
      + 2005-01-27 23:36:04 47,104 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\uwdf.exe
      + 2005-01-27 23:35:58 15,872 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wdfapi.dll
      + 2005-01-27 23:36:00 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wdfmgr.exe
      + 2005-01-28 11:32:44 396,528 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmadmod.dll
      + 2005-01-28 06:53:18 716,288 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmadmoe.dll
      + 2007-10-20 05:01:32 227,328 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmasf.dll
      + 2005-01-28 06:53:20 28,160 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdmlog.dll
      + 2005-01-28 06:53:20 33,792 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdmps.dll
      + 2005-01-28 06:53:50 335,872 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdrmdev.dll
      + 2005-01-28 06:53:54 290,816 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmdrmnet.dll
      + 2005-01-28 06:53:16 150,016 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmidx.dll
      + 2005-01-28 06:53:16 1,027,072 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmnetmgr.dll
      + 2005-01-28 11:32:56 774,904 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsdmod.dll
      + 2005-01-28 06:53:18 1,119,744 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsdmoe2.dll
      + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmsetsdk.exe
      + 2005-01-28 11:32:44 413,944 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmspdmod.dll
      + 2005-01-28 06:53:18 940,544 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmspdmoe.dll
      + 2005-01-28 11:32:56 1,218,808 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvadvd.dll
      + 2005-01-28 06:53:20 1,512,448 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvadve.dll
      + 2006-12-07 05:29:34 2,374,472 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvcore.dll
      + 2005-04-30 15:23:50 900,856 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvdmod.dll
      + 2005-01-28 06:53:18 1,003,008 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wmvdmoe2.dll
      + 2005-01-27 23:36:28 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpd_ci.dll
      + 2005-01-27 23:36:20 61,952 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdconns.dll
      + 2005-01-27 23:36:24 114,176 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdmtp.dll
      + 2005-01-27 23:36:22 66,560 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdmtpus.dll
      + 2005-01-27 23:36:28 331,264 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdsp.dll
      + 2005-01-27 23:36:24 18,944 -c----w C:\WINDOWS\$NtUninstallWMFDist11$\wpdusb.sys
      + 2005-01-28 13:22:24 8,704 -c----w C:\WINDOWS\$NtUninstallwmp11$\asferror.dll
      + 2005-01-28 13:22:12 352,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\mpvis.dll
      + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallwmp11$\setup_wm.exe
      + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe
      + 2006-05-16 16:11:56 394,976 -c----w C:\WINDOWS\$NtUninstallwmp11$\spuninst\updspapi.dll
      + 2005-01-28 13:22:12 192,512 -c----w C:\WINDOWS\$NtUninstallwmp11$\unregmp2.exe
      + 2005-01-28 13:22:24 226,304 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmerror.dll
      + 2005-01-27 23:26:30 122,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmlaunch.exe
      + 2007-04-30 06:20:24 5,537,792 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmp.dll
      + 2005-01-28 06:53:20 135,168 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpasf.dll
      + 2005-01-28 13:22:12 77,824 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpband.dll
      + 2005-01-28 06:53:20 282,624 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpdxm.dll
      + 2005-01-27 23:26:30 28,672 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpenc.exe
      + 2005-01-28 06:53:18 1,594,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpencen.dll
      + 2005-01-28 13:22:12 73,728 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmplayer.exe
      + 2005-01-28 13:22:14 3,424,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmploc.dll
      + 2005-01-28 13:22:18 86,016 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpshell.dll
      + 2005-01-28 06:53:18 175,104 -c----w C:\WINDOWS\$NtUninstallwmp11$\wmpsrcwp.dll
      + 2006-09-15 23:05:22 221,488 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe
      + 2006-09-15 23:05:22 379,184 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\updspapi.dll
      + 2006-09-28 17:01:52 58,368 -c----w C:\WINDOWS\$NtUninstallWudf01000$\spuninst\WudfCustom.dll
      + 2006-10-04 14:05:26 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc(2)(2).dll
      + 2008-04-14 02:33:18 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc.dll
      - 2004-11-10 22:58:37 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
      + 2008-04-14 02:33:18 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
      - 2004-08-05 12:00:00 450,048 ----a-w C:\WINDOWS\AppPatch\AcLayers.dll
      + 2008-04-14 02:33:18 451,072 ----a-w C:\WINDOWS\AppPatch\aclayers.dll
      - 2004-08-05 12:00:00 137,728 ----a-w C:\WINDOWS\AppPatch\AcLua.dll
      + 2008-04-14 02:33:18 141,312 ----a-w C:\WINDOWS\AppPatch\aclua.dll
      - 2004-09-24 02:12:56 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
      + 2008-04-14 02:33:18 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
      - 2004-08-05 12:00:00 116,224 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.dll
      + 2008-04-14 02:33:18 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll
      + 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
      + 2008-06-14 17:33:37 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
      - 2007-03-13 08:57:10 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
      + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
      + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
      + 2007-09-29 13:24:08 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000001\NTUSER.DAT
      + 2007-09-29 13:24:08 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000002\UsrClass.dat
      + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\
      3. sKe69 Contributeur sécurité
        re,

        toujours pas ... ^^"

        il est trop long pour le forum ...

        postes moi seulement du chapitre ->

        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

        -> à la fin ... merci ;)
        1. kurar Auteur
          c'est ultra long !!!!!
          desolé j'envoi la suite en morceau...

          + 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
          + 2008-06-14 17:33:37 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
          + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
          - 2007-03-13 08:57:10 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
          + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
          + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
          + 2007-09-29 13:24:08 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000001\NTUSER.DAT
          + 2007-09-29 13:24:08 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
          + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
          + 2007-09-29 13:24:05 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\NTUSER.DAT
          + 2007-09-29 13:24:05 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
          - 2007-06-13 13:10:53 1,037,312 ----a-w C:\WINDOWS\explorer.exe
          + 2008-04-14 02:34:03 1,037,824 ----a-w C:\WINDOWS\explorer.exe
          + 2000-08-31 06:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe
          + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
          - 2004-08-05 12:00:00 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
          + 2008-04-14 02:33:41 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
          - 2004-08-05 12:00:00 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
          + 2008-04-14 02:33:46 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
          - 2004-08-05 12:00:00 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
          + 2008-04-14 02:33:46 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
          - 2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe
          + 2008-04-14 02:34:06 10,752 ----a-w C:\WINDOWS\hh.exe
          + 2004-08-05 12:00:00 2,589 ----a-w C:\WINDOWS\I386\RUNW32.BAT
          + 2007-06-27 13:22:39 124,928 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\advpack.dll
          + 2006-10-17 10:57:50 214,528 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\dxtrans.dll
          + 2007-06-27 13:22:40 132,608 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\extmgr.dll
          + 2006-10-17 10:58:20 61,952 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\icardie.dll
          + 2007-06-27 08:27:04 63,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe
          + 2007-06-27 13:22:40 153,088 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakeng.dll
          + 2007-06-27 13:22:42 230,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieaksie.dll
          + 2007-06-27 07:00:33 161,792 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakui.dll
          + 2007-06-27 13:22:45 383,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieapfltr.dll
          + 2007-06-27 13:22:48 384,512 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iedkcs32.dll
          + 2007-06-27 13:23:23 6,058,496 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieframe.dll
          + 2007-06-27 13:23:23 44,544 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iernonce.dll
          + 2007-06-27 13:23:25 267,776 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iertutil.dll
          + 2007-06-27 08:27:05 13,824 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe
          + 2007-06-27 08:28:24 625,152 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe
          + 2007-06-27 13:23:31 27,648 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\jsproxy.dll
          + 2007-06-27 13:23:32 459,264 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeeds.dll
          + 2007-06-27 13:23:32 52,224 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeedsbs.dll
          + 2007-07-19 06:58:09 3,583,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtml.dll
          + 2007-06-27 13:24:06 477,696 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtmled.dll
          + 2007-06-27 13:24:07 193,024 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msrating.dll
          + 2007-06-27 13:24:09 671,232 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mstime.dll
          + 2007-06-27 13:24:09 102,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\occache.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\updspapi.dll
          + 2007-06-27 13:24:10 105,984 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\url.dll
          + 2007-06-27 13:24:14 1,152,000 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\urlmon.dll
          + 2007-06-27 13:24:15 232,960 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\webcheck.dll
          + 2007-06-27 13:24:19 823,808 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\wininet.dll
          + 2007-08-20 09:59:29 124,928 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
          + 2007-08-20 09:59:29 214,528 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
          + 2007-08-20 09:59:29 132,608 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
          + 2007-08-20 09:59:29 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
          + 2007-08-17 10:22:11 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
          + 2007-08-20 09:59:29 153,088 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
          + 2007-08-20 09:59:29 230,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
          + 2007-08-17 07:34:25 161,792 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
          + 2007-08-20 09:59:29 383,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
          + 2007-08-20 09:59:29 384,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
          + 2007-08-20 09:59:29 6,058,496 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
          + 2007-08-20 09:59:29 44,544 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
          + 2007-08-20 09:59:30 267,776 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
          + 2007-08-17 10:22:11 13,824 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
          + 2007-08-17 10:22:32 625,152 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
          + 2007-08-20 09:59:30 27,648 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
          + 2007-08-20 09:59:30 459,264 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
          + 2007-08-20 09:59:30 52,224 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
          + 2007-08-20 09:59:30 3,584,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
          + 2007-08-20 09:59:30 477,696 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
          + 2007-08-20 09:59:30 193,024 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
          + 2007-08-20 09:59:30 671,232 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
          + 2007-08-20 09:59:31 102,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
          + 2007-08-20 09:59:31 105,984 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
          + 2007-08-20 09:59:31 1,152,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
          + 2007-08-20 09:59:31 232,960 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
          + 2007-08-20 09:59:31 824,832 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
          + 2007-10-10 23:49:42 124,928 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll
          + 2006-10-17 10:58:06 346,624 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll
          + 2007-10-10 23:49:42 214,528 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll
          + 2007-10-10 23:49:42 132,608 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll
          + 2007-10-10 23:49:42 63,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll
          + 2007-10-10 11:00:41 70,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
          + 2007-10-10 23:49:42 153,088 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll
          + 2007-10-10 23:49:42 230,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll
          + 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll
          + 2007-10-10 23:49:42 383,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll
          + 2007-10-10 23:49:42 384,512 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll
          + 2007-10-10 23:49:43 6,065,664 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll
          + 2007-10-10 23:49:43 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll
          + 2007-10-10 23:49:43 267,776 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll
          + 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
          + 2007-10-10 11:00:59 625,152 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
          + 2007-10-10 23:49:44 27,648 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll
          + 2007-10-10 23:49:44 459,264 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll
          + 2007-10-10 23:49:44 52,224 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll
          + 2007-10-30 23:23:48 3,590,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll
          + 2007-10-10 23:49:44 478,208 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll
          + 2007-10-10 23:49:44 193,024 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll
          + 2007-10-10 23:49:45 671,232 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll
          + 2007-10-10 23:49:45 102,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll
          + 2006-10-17 10:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll
          + 2007-10-10 23:49:45 105,984 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\url.dll
          + 2007-10-10 23:49:45 1,159,680 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll
          + 2007-10-10 23:49:45 232,960 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll
          + 2007-10-10 23:49:45 824,832 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
          + 2007-12-07 02:08:32 124,928 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
          + 2007-12-19 22:53:23 347,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
          + 2007-12-07 02:08:32 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
          + 2007-12-07 02:08:32 133,120 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
          + 2007-12-07 02:08:32 63,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
          + 2007-12-06 11:02:31 70,656 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
          + 2007-12-07 02:08:32 153,088 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
          + 2007-12-07 02:08:32 230,400 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
          + 2007-12-06 04:59:51 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
          + 2007-12-07 02:08:32 383,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
          + 2007-12-07 02:08:32 384,512 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
          + 2007-12-07 02:08:33 6,066,176 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
          + 2007-12-07 02:08:33 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
          + 2007-12-07 02:08:33 267,776 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
          + 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
          + 2007-12-06 11:03:16 625,664 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
          + 2007-12-07 02:08:33 27,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
          + 2007-12-07 02:08:33 459,264 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
          + 2007-12-07 02:08:33 52,224 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
          + 2007-12-08 05:08:36 3,592,192 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
          + 2007-12-07 02:08:34 478,208 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
          + 2007-12-07 02:08:34 193,024 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
          + 2007-12-07 02:08:34 671,232 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
          + 2007-12-07 02:08:34 102,912 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
          + 2008-01-11 05:36:55 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
          + 2007-12-07 02:08:34 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
          + 2007-12-07 02:08:34 1,159,680 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
          + 2007-12-07 02:08:34 233,472 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
          + 2007-12-07 02:08:34 824,832 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
          + 2008-03-01 12:58:06 124,928 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
          + 2008-03-01 12:58:06 347,136 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
          + 2008-03-01 12:58:06 214,528 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
          + 2008-03-01 12:58:06 133,120 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
          + 2008-03-01 12:58:06 63,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
          + 2008-02-29 08:56:41 70,656 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
          + 2008-03-01 12:58:06 153,088 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
          + 2008-03-01 12:58:06 230,400 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
          + 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
          + 2008-03-01 12:58:07 383,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
          + 2008-03-01 12:58:07 384,512 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
          + 2008-03-01 12:58:08 6,066,176 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
          + 2008-03-01 12:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
          + 2008-03-01 12:58:08 267,776 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
          + 2008-02-22 10:00:51 13,824 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
          + 2008-02-29 08:57:05 625,664 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
          + 2008-03-01 12:58:08 27,648 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
          + 2008-03-01 12:58:08 459,264 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
          + 2008-03-01 12:58:08 52,224 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
          + 2008-03-01 16:28:10 3,591,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
          + 2008-03-01 12:58:09 478,208 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
          + 2008-03-01 12:58:10 193,024 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
          + 2008-03-01 12:58:10 671,232 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
          + 2008-03-01 12:58:10 102,912 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
          + 2008-03-01 12:58:10 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
          + 2008-03-01 12:58:10 105,984 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
          + 2008-03-01 12:58:10 1,159,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
          + 2008-03-01 12:58:11 233,472 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
          + 2008-03-01 12:58:11 826,368 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
          + 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll
          + 2008-04-23 04:16:39 347,136 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll
          + 2008-04-23 04:16:39 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll
          + 2008-04-23 04:16:39 133,120 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll
          + 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll
          + 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
          + 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll
          + 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll
          + 2008-04-20 05:07:51 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll
          + 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
          + 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
          + 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
          + 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
          + 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
          + 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
          + 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
          + 2008-04-23 04:16:40 27,648 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
          + 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
          + 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
          + 2008-04-23 20:16:42 3,591,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
          + 2008-04-23 04:16:40 478,208 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
          + 2008-04-23 04:16:40 193,024 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
          + 2008-04-23 04:16:40 671,232 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
          + 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
          + 2008-04-23 04:16:40 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
          + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
          + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
          + 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
          + 2008-04-23 04:16:40 1,159,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
          + 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
          + 2008-04-23 04:16:40 826,368 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll
          - 2004-08-05 12:00:00 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
          + 2008-04-14 02:33:30 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
          - 2004-08-05 12:00:00 130,048 ----a-w C:\WINDOWS\ime\SOFTKBD.DLL
          + 2008-04-14 02:33:41 130,048 ----a-w C:\WINDOWS\ime\softkbd.dll
          - 2004-08-05 12:00:00 62,976 ----a-w C:\WINDOWS\ime\SPGRMR.dll
          + 2008-04-13 16:43:18 62,976 ----a-w C:\WINDOWS\ime\spgrmr.dll
          - 2004-08-05 12:00:00 272,384 ----a-w C:\WINDOWS\ime\SPTIP.dll
          + 2008-04-14 02:33:46 272,384 ----a-w C:\WINDOWS\ime\sptip.dll
          - 2005-01-28 13:22:12 192,512 ----a-w C:\WINDOWS\inf\unregmp2.exe
          + 2007-06-29 09:59:14 318,976 ----a-w C:\WINDOWS\inf\unregmp2.exe
          + 2006-12-10 17:14:40 2,560 ----a-r C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\cagicon.exe
          + 2007-12-12 13:06:42 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe
          + 2008-01-18 15:13:09 2,247 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscdsbl.bat
          + 2007-12-12 10:33:51 18,917 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscinst.vbs
          + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscuinst.vbs
          + 2008-04-14 02:33:06 25,600 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscupdc.dll
          - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
          + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
          - 2004-08-05 12:00:00 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
          + 2008-04-14 02:33:18 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
          - 2006-10-12 13:55:58 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
          + 2008-04-14 02:33:18 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
          - 2007-03-09 14:00:38 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
          + 2008-04-14 02:33:18 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
          - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
          + 2008-04-14 02:33:18 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
          - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
          + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
          - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
          + 2008-04-14 02:33:18 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
          - 2006-10-12 11:54:07 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
          + 2008-04-14 02:33:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
          - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
          + 2008-04-14 02:33:19 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
          + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
          + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
          - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
          + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
          - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
          + 2007-04-02 18:26:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
          + 2008-04-13 17:32:28 19,968 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
          + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
          - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
          + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
          - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
          + 2007-04-02 18:26:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
          - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
          + 2007-04-02 18:26:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
          - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
          + 2007-04-02 18:26:01 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
          + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
          + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
          - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
          + 2007-04-02 18:26:01 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
          + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
          + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
          - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
          + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
          - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
          + 2007-04-02 18:26:02 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
          - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
          + 2007-04-02 18:26:02 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
          - 2004-08-05 12:00:00 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
          + 2008-04-14 02:33:32 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
          - 2006-06-02 19:32:20 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
          + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
          - 2006-10-10 12:44:50 557,568 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
          + 2008-04-13 18:53:32 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
          - 2007-06-16 22:11:58 51,200 ----a-w C:\WINDOWS\NirCmd.exe
          + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\NirCmd.exe
          - 2004-08-05 12:00:00 70,656 ----a-w C:\WINDOWS\NOTEPAD.EXE
          + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\notepad.exe
          - 2004-08-05 12:00:00 768,512 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
          + 2008-04-14 02:34:06 769,024 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
          - 2004-08-05 12:00:00 743,936 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe
          + 2008-04-14 02:34:06 744,448 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe
          - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe
          + 2008-04-14 02:34:06 18,432 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\hscupd.exe
          - 2004-08-05 12:00:00 160,768 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
          + 2008-04-14 02:34:12 172,544 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
          - 2004-08-05 12:00:00 381,952 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
          + 2008-04-14 02:33:32 382,464 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
          - 2004-08-05 12:00:00 102,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
          + 2008-04-14 02:33:38 102,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
          - 2004-08-05 12:00:00 38,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
          + 2008-04-14 02:33:38 38,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
          - 2005-12-25 20:46:10 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
          + 2008-09-24 15:35:56 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
          + 2008-09-24 15:35:56 2,998 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
          - 2004-08-05 12:00:00 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe
          + 2008-04-14 02:34:26 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\uploadm.exe
          - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
          + 2008-04-14 02:33:46 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
          - 2004-08-05 12:00:00 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
          + 2008-04-14 02:33:46 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
          - 2004-08-05 12:00:00 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
          + 2008-04-14 02:33:46 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
          - 2004-08-05 12:00:00 153,088 ----a-w C:\WINDOWS\regedit.exe
          + 2008-04-14 02:34:19 153,088 ----a-w C:\WINDOWS\regedit.exe
          + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
          + 2008-04-13 18:46:18 53,376 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
          + 2008-04-13 18:40:50 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
          + 2008-04-13 18:46:20 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys
          + 2008-04-14 02:33:18 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
          + 2008-04-14 02:33:18 136,192 ------w C:\WINDOWS\ServicePackFiles\i386\aaclient.dll
          + 2004-08-03 20:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
          + 2004-08-03 20:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
          + 2008-04-14 02:33:18 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\acadproc.dll
          + 2008-04-14 02:33:53 190,464 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
          + 2008-04-14 02:33:18 1,852,928 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
          + 2008-04-14 02:33:18 451,072 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
          + 2008-04-14 02:33:18 141,312 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll
          + 2008-04-14 02:33:18 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll
          + 2008-04-14 01:52:42 188,672 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys
          + 2008-04-14 02:33:18 245,248 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
          + 2008-04-14 02:33:18 193,536 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll
          + 2008-04-14 02:33:53 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
          + 2008-04-14 02:33:18 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
          + 2008-04-14 02:33:18 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
          + 2008-04-14 02:33:18 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll
          + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe
          + 2004-08-03 20:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
          + 2008-04-14 02:33:18 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
          + 2008-04-14 02:33:18 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
          + 2008-04-14 02:33:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
          + 2008-04-14 02:33:18 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
          + 2008-04-14 02:33:18 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
          + 2008-04-14 02:33:18 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
          + 2008-04-14 02:33:18 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
          + 2008-04-14 02:33:18 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
          + 2008-04-14 02:33:18 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
          + 2008-04-14 02:33:18 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
          + 2008-04-14 02:33:18 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
          + 2008-04-14 02:33:18 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
          + 2008-04-14 02:33:18 685,568 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
          + 2008-04-14 02:33:18 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll
          + 2008-04-13 16:39:23 142,592 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys
          + 2008-04-13 19:19:23 138,112 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys
          + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
          + 2008-04-14 02:33:18 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
          + 2008-04-14 02:33:18 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
          + 2008-04-14 02:33:18 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
          + 2008-04-14 02:33:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
          + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
          + 2008-04-14 02:33:18 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
          + 2008-04-14 02:33:53 256,512 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
          + 2008-04-13 18:36:38 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys
          + 2008-04-13 18:36:39 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
          + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0401.dll
          + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0404.dll
          + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0405.dll
          + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0406.dll
          + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt0407.dll
          + 2007-04-02 18:26:00 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\agt0408.dll
          + 2008-04-13 17:32:28 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt0409.dll
          + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040b.dll
          + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt040c.dll
          + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040d.dll
          + 2007-04-02 18:26:00 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt040e.dll
          + 2007-04-02 18:26:00 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0410.dll
          + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0411.dll
          + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0412.dll
          + 2007-04-02 18:26:01 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0413.dll
          + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0414.dll
          + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0415.dll
          + 2007-04-02 18:26:01 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0416.dll
          + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0419.dll
          + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041d.dll
          + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041f.dll
          + 2007-04-02 18:26:02 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0804.dll
          + 2007-04-02 18:26:02 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0816.dll
          + 2007-04-02 18:26:02 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0c0a.dll
          + 2008-04-14 02:33:19 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
          + 2008-04-14 02:33:53 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
          + 2008-04-14 02:33:53 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe
          + 2008-04-13 18:36:38 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
          + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
          + 2008-04-13 18:36:39 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
          + 2008-04-14 01:54:28 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
          + 2008-04-14 01:54:29 41,856 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
          + 2008-04-14 02:33:19 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll
          + 2004-08-03 20:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys
          + 2008-04-14 02:33:19 125,952 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
          + 2008-04-14 02:33:19 334,336 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
          + 2008-04-13 18:51:25 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
          + 2008-04-14 02:33:19 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
          + 2008-04-13 18:57:27 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
          + 2008-04-14 02:33:53 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe
          + 2008-04-13 18:40:30 96,512 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys
          + 2004-08-03 20:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
          + 2004-08-03 20:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
          + 2004-08-03 20:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
          + 2004-08-03 20:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
          + 2004-08-03 20:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
          + 2004-08-03 20:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
          + 2004-08-03 20:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
          + 2004-08-03 20:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
          + 2004-08-03 20:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
          + 2004-08-03 20:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
          + 2008-04-14 02:33:19 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
          + 2008-04-14 02:33:19 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
          + 2008-04-14 02:33:19 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
          + 2004-08-03 22:38:42 327,168 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
          + 2004-08-03 22:38:44 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
          + 2008-04-14 02:33:19 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
          + 2008-04-14 02:33:19 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
          + 2008-04-14 02:33:19 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
          + 2004-08-03 20:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
          + 2004-08-03 20:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
          + 2004-08-03 20:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
          + 2004-08-03 20:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
          + 2004-08-03 20:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
          + 2004-08-03 20:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
          + 2004-08-03 20:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
          + 2004-08-03 20:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
          + 2004-08-03 20:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
          + 2004-08-03 20:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
          + 2008-04-14 02:33:19 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
          + 2008-04-14 02:33:19 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
          + 2008-04-14 02:33:19 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll
          + 2008-04-14 02:33:53 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
          + 2008-04-13 18:51:25 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
          + 2008-04-14 02:31:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
          + 2008-04-13 18:51:30 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
          + 2008-04-14 02:33:19 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
          + 2008-04-14 02:33:53 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\attrib.exe
          + 2008-04-14 02:33:19 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
          + 2008-04-14 02:33:19 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
          + 2008-04-14 02:33:19 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
          + 2008-04-14 02:33:19 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
          + 2008-04-14 02:33:19 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
          + 2008-04-14 02:33:19 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
          + 2008-04-14 02:33:53 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
          + 2008-04-14 02:33:19 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll
          + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe
          + 2008-04-14 02:33:19 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll
          + 2008-04-14 02:33:53 625,152 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe
          + 2008-04-14 02:33:53 638,976 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
          + 2008-04-14 02:33:54 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
          + 2008-04-14 02:33:54 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
          + 2008-04-13 18:46:20 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys
          + 2008-04-13 18:46:07 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
          + 2008-04-14 02:33:19 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
          + 2008-04-14 02:33:19 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\azroles.dll
          + 2008-04-14 02:33:19 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
          + 2008-04-14 02:33:19 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
          + 2008-04-14 02:33:19 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll
          + 2008-04-13 18:36:32 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\battc.sys
          + 2008-04-13 18:46:21 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
          + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
          + 2008-04-14 02:33:19 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
          + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
          + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx4.dll
          + 2008-04-14 02:33:55 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
          + 2008-04-13 18:53:23 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys
          + 2008-04-14 01:57:48 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll
          + 2008-04-14 02:33:20 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll
          + 2008-04-14 02:33:20 1,025,024 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
          + 2008-04-14 02:33:20 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
          + 2008-04-14 02:33:20 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
          + 2008-04-13 18:46:33 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
          + 2008-04-13 18:46:33 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
          + 2008-04-13 18:51:34 101,120 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
          + 2008-04-14 01:58:00 273,664 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys
          + 2008-04-13 18:46:31 36,480 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
          + 2008-04-14 02:33:20 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
          + 2008-04-13 18:46:29 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
          + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
          + 2008-04-14 02:33:20 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\c_g18030.dll
          + 2008-04-14 02:33:20 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
          + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
          + 2008-04-14 02:33:55 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\cacls.exe
          + 2008-04-14 02:33:20 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll
          + 2008-04-14 02:33:20 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\camext30.dll
          + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll
          + 2008-04-14 02:33:20 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
          + 2008-04-14 02:33:20 226,304 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
          + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
          + 2008-04-14 02:33:20 625,664 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
          + 2008-04-13 18:46:23 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
          + 2008-04-13 19:14:21 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
          + 2008-04-14 02:33:20 152,064 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
          + 2008-04-14 02:33:20 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll
          + 2008-04-14 02:33:20 2,091,520 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
          + 2008-04-13 18:40:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
          + 2008-04-14 02:33:20 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll
          + 2008-04-14 02:33:20 467,968 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
          + 2008-04-14 02:33:20 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
          + 2008-04-14 02:31:03 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
          + 2008-04-14 02:33:56 188,480 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
          + 2008-04-14 02:33:20 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
          + 2008-04-13 18:40:58 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys
          + 2008-04-14 02:33:20 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\cic.dll
          + 2008-04-14 02:33:20 1,359,360 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
          + 2008-04-14 02:33:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
          + 2008-04-14 02:33:57 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
          + 2008-04-13 19:16:22 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
          + 2008-04-14 02:33:21 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
          + 2008-04-14 02:33:21 498,688 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
          + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
          + 2008-04-14 02:33:21 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
          + 2008-04-14 02:33:57 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
          + 2008-04-14 02:33:57 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
          + 2008-04-14 02:33:57 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
          + 2008-04-14 02:33:21 58,368 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
          + 2008-04-13 18:36:37 13,952 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
          + 2008-04-14 02:33:21 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
          + 2008-04-14 02:33:57 401,408 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
          + 2008-04-14 02:33:21 353,280 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
          + 2008-04-14 02:33:57 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
          + 2008-04-14 02:33:57 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
          + 2008-04-14 02:33:21 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
          + 2008-04-14 02:33:21 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
          + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
          + 2008-04-14 02:33:21 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
          + 2008-04-14 02:33:21 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
          + 2008-04-14 02:33:21 83,968 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
          + 2008-04-13 16:44:16 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\cobramsg.dll
          + 2008-04-14 02:33:21 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll
          + 2008-04-14 02:33:21 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\comaddin.dll
          + 2008-04-14 02:33:21 195,072 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
          + 2008-04-14 02:33:21 617,472 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
          + 2008-04-14 02:33:21 281,600 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
          + 2008-04-14 02:33:21 253,440 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
          + 2008-04-13 18:36:37 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\compbatt.sys
          + 2008-04-14 02:33:21 230,912 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
          + 2008-04-14 02:33:21 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.dll
          + 2008-04-14 02:33:57 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
          + 2008-04-14 02:33:57 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\comrereg.exe
          + 2008-04-14 02:33:21 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll
          + 2008-04-14 02:33:21 274,944 ------w C:\WINDOWS\ServicePackFiles\i386\comsetup.dll
          + 2008-04-14 02:33:21 167,424 ------w C:\WINDOWS\ServicePackFiles\i386\comsnap.dll
          + 2008-04-14 02:33:21 1,267,200 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
          + 2008-04-14 02:33:21 539,648 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll
          + 2008-04-14 02:33:58 1,044,480 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe
          + 2008-04-14 02:33:21 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
          + 2008-04-14 02:33:21 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\confmsp.dll
          + 2008-04-14 02:33:59 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe
          + 2008-04-14 02:33:21 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll
          + 2008-04-14 02:33:21 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\credssp.dll
          + 2008-04-14 02:33:21 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll
          + 2008-04-14 02:02:47 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
          + 2008-04-14 02:33:21 606,208 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
          + 2008-04-14 02:33:21 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
          + 2008-04-14 02:33:21 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
          + 2008-04-14 02:33:21 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
          + 2008-04-14 02:33:21 64,512 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
          + 2008-04-14 02:33:21 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
          + 2008-04-14 02:33:21 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
          + 2008-04-14 02:33:21 102,912 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
          + 2008-04-14 02:33:59 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
          + 2008-04-14 02:33:21 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
          + 2008-04-14 02:33:22 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
          + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe
          + 2008-04-14 02:33:59 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
          + 2008-04-14 02:33:22 252,416 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
          + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll
          + 2004-08-03 20:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
          + 2008-04-14 02:33:22 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
          + 2008-04-14 02:33:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
          + 2008-04-14 02:33:22 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
          + 2008-04-14 02:33:22 824,320 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
          + 2008-04-14 02:33:22 1,056,768 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll
          + 2008-03-25 04:50:25 554,008 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll
          + 2008-04-14 02:33:22 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
          + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\datime.dll
          + 2008-04-14 02:33:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
          + 2008-04-14 02:33:22 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
          + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
          + 2008-04-14 02:33:22 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
          + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
          + 2008-04-14 02:50:20 1,804 ------w C:\WINDOWS\ServicePackFiles\i386\dcache.bin
          + 2008-04-14 02:33:22 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
          + 2008-04-14 02:33:22 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
          + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\dcomcnfg.exe
          + 2008-04-14 02:33:59 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
          + 2008-04-14 02:33:22 279,552 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
          + 2008-04-14 02:33:22 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
          + 2008-04-14 02:33:59 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe
          + 2008-04-14 02:33:22 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll
          + 2008-04-14 02:33:22 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
          + 2008-04-14 02:33:59 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
          + 2008-04-14 02:33:59 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
          + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
          + 2008-04-14 02:33:22 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
          + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
          + 2008-04-14 02:33:22 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
          + 2008-04-14 02:33:22 127,488 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
          + 2008-04-14 02:33:22 411,136 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpmon.dll
          + 2008-04-14 02:33:22 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpqec.dll
          + 2008-04-14 02:33:59 548,352 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
          + 2008-04-14 02:34:00 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe
          + 2004-08-05 12:00:00 887,784 ------w C:\WINDOWS\ServicePackFiles\i386\digcore.exe
          + 2008-04-14 02:33:22 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll
          + 2008-04-14 02:33:22 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\dimsntfy.dll
          + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dimsroam.dll
          + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll
          + 2008-04-14 02:33:22 187,904 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
          + 2008-04-14 02:33:22 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\directdb.dll
          + 2008-04-13 18:40:47 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\disk.sys
          + 2008-04-14 02:33:22 1,504,768 ------w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
          + 2008-04-13 18:40:44 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\diskdump.sys
          + 2008-04-14 02:34:00 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\diskpart.exe
          + 2008-04-14 02:33:22 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\dispex.dll
          + 2008-04-14 02:34:00 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\dllhost.exe
          + 2008-04-13 18:40:51 8,320 ------w C:\WINDOWS\ServicePackFiles\i386\dlttape.sys
          + 2008-04-14 02:34:00 225,280 ------w C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe
          + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dmband.dll
          + 2008-04-14 02:05:07 800,256 ------w C:\WINDOWS\ServicePackFiles\i386\dmboot.sys
          + 2008-04-14 02:33:22 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll
          + 2008-04-14 02:33:22 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
          + 2008-04-14 02:33:22 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll
          + 2008-04-14 02:33:22 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\dmime.dll
          + 2008-04-14 02:05:12 154,496 ------w C:\WINDOWS\ServicePackFiles\i386\dmio.sys
          + 2008-04-14 02:33:22 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\dmloader.dll
          + 2008-04-14 02:34:00 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\dmremote.exe
          + 2008-04-14 02:33:22 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dmscript.dll
          + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dmserver.dll
          + 2008-04-14 02:33:22 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll
          + 2008-04-14 02:33:22 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll
          + 2008-04-14 02:33:22 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.dll
          + 2008-04-13 18:45:01 52,864 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.sys
          + 2008-04-14 02:33:22 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\dmutil.dll
          + 2008-04-14 02:33:22 147,968 ------w C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll
          + 2008-04-14 02:33:22 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll
          + 2008-04-14 02:33:22 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\docprop2.dll
          + 2004-08-05 12:00:00 54,080 ------w C:\WINDOWS\ServicePackFiles\i386\dosx.exe
          + 2008-04-14 02:33:22 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\dot3api.dll
          + 2008-04-14 02:33:22 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dot3cfg.dll
          + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dot3clnt.dll
          + 2008-04-14 02:33:22 9,216 ------w C:\WINDOWS\ServicePackFiles\i386\dot3dlg.dll
          + 2008-04-14 02:33:22 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\dot3msm.dll
          + 2008-04-14 02:33:22 133,120 ------w C:\WINDOWS\ServicePackFiles\i386\dot3svc.dll
          + 2008-04-14 02:33:22 651,264 ------w C:\WINDOWS\ServicePackFiles\i386\dot3ui.dll
          + 2008-04-13 18:39:46 206,976 ------w C:\WINDOWS\ServicePackFiles\i386\dot4.sys
          + 2008-04-14 01:54:17 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll
          + 2008-04-14 02:34:01 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe
          + 2008-04-14 02:33:22 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\dplayx.dll
          + 2008-04-14 02:33:23 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
          + 2008-04-14 02:31:14 3,072 ------w C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll
          + 2008-04-14 02:33:23 375,296 ------w C:\WINDOWS\ServicePackFiles\i386\dpnet.dll
          + 2008-04-14 02:33:23 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll
          + 2008-04-14 02:33:23 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll
          + 2008-04-14 02:31:14 3,072 ------w C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll
          + 2008-04-14 02:34:01 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe
          + 2008-04-14 02:33:23 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll
          + 2008-04-14 02:33:23 213,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
          + 2008-04-14 02:34:01 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe
          + 2008-04-14 02:33:23 116,736 ------w C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll
          1. kurar Auteur
            c'est ultra long !!!!!
            desolé j'envoi la suite en morceau...

            + 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
            + 2008-06-14 17:33:37 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
            + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
            - 2007-03-13 08:57:10 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
            + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
            + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
            + 2007-09-29 13:24:08 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000001\NTUSER.DAT
            + 2007-09-29 13:24:08 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
            + 2007-09-27 20:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
            + 2007-09-29 13:24:05 5,554,176 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\NTUSER.DAT
            + 2007-09-29 13:24:05 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
            - 2007-06-13 13:10:53 1,037,312 ----a-w C:\WINDOWS\explorer.exe
            + 2008-04-14 02:34:03 1,037,824 ----a-w C:\WINDOWS\explorer.exe
            + 2000-08-31 06:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe
            + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
            - 2004-08-05 12:00:00 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
            + 2008-04-14 02:33:41 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
            - 2004-08-05 12:00:00 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
            + 2008-04-14 02:33:46 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
            - 2004-08-05 12:00:00 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
            + 2008-04-14 02:33:46 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
            - 2005-05-26 23:22:01 10,752 ----a-w C:\WINDOWS\hh.exe
            + 2008-04-14 02:34:06 10,752 ----a-w C:\WINDOWS\hh.exe
            + 2004-08-05 12:00:00 2,589 ----a-w C:\WINDOWS\I386\RUNW32.BAT
            + 2007-06-27 13:22:39 124,928 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\advpack.dll
            + 2006-10-17 10:57:50 214,528 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\dxtrans.dll
            + 2007-06-27 13:22:40 132,608 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\extmgr.dll
            + 2006-10-17 10:58:20 61,952 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\icardie.dll
            + 2007-06-27 08:27:04 63,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ie4uinit.exe
            + 2007-06-27 13:22:40 153,088 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakeng.dll
            + 2007-06-27 13:22:42 230,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieaksie.dll
            + 2007-06-27 07:00:33 161,792 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieakui.dll
            + 2007-06-27 13:22:45 383,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieapfltr.dll
            + 2007-06-27 13:22:48 384,512 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iedkcs32.dll
            + 2007-06-27 13:23:23 6,058,496 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieframe.dll
            + 2007-06-27 13:23:23 44,544 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iernonce.dll
            + 2007-06-27 13:23:25 267,776 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iertutil.dll
            + 2007-06-27 08:27:05 13,824 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\ieudinit.exe
            + 2007-06-27 08:28:24 625,152 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe
            + 2007-06-27 13:23:31 27,648 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\jsproxy.dll
            + 2007-06-27 13:23:32 459,264 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeeds.dll
            + 2007-06-27 13:23:32 52,224 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msfeedsbs.dll
            + 2007-07-19 06:58:09 3,583,488 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtml.dll
            + 2007-06-27 13:24:06 477,696 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mshtmled.dll
            + 2007-06-27 13:24:07 193,024 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\msrating.dll
            + 2007-06-27 13:24:09 671,232 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\mstime.dll
            + 2007-06-27 13:24:09 102,400 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\occache.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\updspapi.dll
            + 2007-06-27 13:24:10 105,984 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\url.dll
            + 2007-06-27 13:24:14 1,152,000 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\urlmon.dll
            + 2007-06-27 13:24:15 232,960 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\webcheck.dll
            + 2007-06-27 13:24:19 823,808 -c----w C:\WINDOWS\ie7updates\KB939653-IE7\wininet.dll
            + 2007-08-20 09:59:29 124,928 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
            + 2007-08-20 09:59:29 214,528 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
            + 2007-08-20 09:59:29 132,608 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
            + 2007-08-20 09:59:29 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
            + 2007-08-17 10:22:11 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
            + 2007-08-20 09:59:29 153,088 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
            + 2007-08-20 09:59:29 230,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
            + 2007-08-17 07:34:25 161,792 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
            + 2007-08-20 09:59:29 383,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
            + 2007-08-20 09:59:29 384,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
            + 2007-08-20 09:59:29 6,058,496 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
            + 2007-08-20 09:59:29 44,544 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
            + 2007-08-20 09:59:30 267,776 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
            + 2007-08-17 10:22:11 13,824 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
            + 2007-08-17 10:22:32 625,152 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
            + 2007-08-20 09:59:30 27,648 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
            + 2007-08-20 09:59:30 459,264 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
            + 2007-08-20 09:59:30 52,224 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
            + 2007-08-20 09:59:30 3,584,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
            + 2007-08-20 09:59:30 477,696 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
            + 2007-08-20 09:59:30 193,024 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
            + 2007-08-20 09:59:30 671,232 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
            + 2007-08-20 09:59:31 102,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
            + 2007-08-20 09:59:31 105,984 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
            + 2007-08-20 09:59:31 1,152,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
            + 2007-08-20 09:59:31 232,960 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
            + 2007-08-20 09:59:31 824,832 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
            + 2007-10-10 23:49:42 124,928 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll
            + 2006-10-17 10:58:06 346,624 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll
            + 2007-10-10 23:49:42 214,528 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll
            + 2007-10-10 23:49:42 132,608 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll
            + 2007-10-10 23:49:42 63,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll
            + 2007-10-10 11:00:41 70,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
            + 2007-10-10 23:49:42 153,088 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll
            + 2007-10-10 23:49:42 230,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll
            + 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll
            + 2007-10-10 23:49:42 383,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll
            + 2007-10-10 23:49:42 384,512 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll
            + 2007-10-10 23:49:43 6,065,664 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll
            + 2007-10-10 23:49:43 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll
            + 2007-10-10 23:49:43 267,776 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll
            + 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
            + 2007-10-10 11:00:59 625,152 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
            + 2007-10-10 23:49:44 27,648 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll
            + 2007-10-10 23:49:44 459,264 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll
            + 2007-10-10 23:49:44 52,224 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll
            + 2007-10-30 23:23:48 3,590,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll
            + 2007-10-10 23:49:44 478,208 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll
            + 2007-10-10 23:49:44 193,024 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll
            + 2007-10-10 23:49:45 671,232 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll
            + 2007-10-10 23:49:45 102,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll
            + 2006-10-17 10:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll
            + 2007-10-10 23:49:45 105,984 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\url.dll
            + 2007-10-10 23:49:45 1,159,680 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll
            + 2007-10-10 23:49:45 232,960 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll
            + 2007-10-10 23:49:45 824,832 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
            + 2007-12-07 02:08:32 124,928 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
            + 2007-12-19 22:53:23 347,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
            + 2007-12-07 02:08:32 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
            + 2007-12-07 02:08:32 133,120 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
            + 2007-12-07 02:08:32 63,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
            + 2007-12-06 11:02:31 70,656 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
            + 2007-12-07 02:08:32 153,088 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
            + 2007-12-07 02:08:32 230,400 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
            + 2007-12-06 04:59:51 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
            + 2007-12-07 02:08:32 383,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
            + 2007-12-07 02:08:32 384,512 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
            + 2007-12-07 02:08:33 6,066,176 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
            + 2007-12-07 02:08:33 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
            + 2007-12-07 02:08:33 267,776 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
            + 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
            + 2007-12-06 11:03:16 625,664 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
            + 2007-12-07 02:08:33 27,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
            + 2007-12-07 02:08:33 459,264 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
            + 2007-12-07 02:08:33 52,224 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
            + 2007-12-08 05:08:36 3,592,192 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
            + 2007-12-07 02:08:34 478,208 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
            + 2007-12-07 02:08:34 193,024 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
            + 2007-12-07 02:08:34 671,232 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
            + 2007-12-07 02:08:34 102,912 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
            + 2008-01-11 05:36:55 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
            + 2007-12-07 02:08:34 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
            + 2007-12-07 02:08:34 1,159,680 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
            + 2007-12-07 02:08:34 233,472 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
            + 2007-12-07 02:08:34 824,832 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
            + 2008-03-01 12:58:06 124,928 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
            + 2008-03-01 12:58:06 347,136 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
            + 2008-03-01 12:58:06 214,528 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
            + 2008-03-01 12:58:06 133,120 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
            + 2008-03-01 12:58:06 63,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
            + 2008-02-29 08:56:41 70,656 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
            + 2008-03-01 12:58:06 153,088 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
            + 2008-03-01 12:58:06 230,400 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
            + 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
            + 2008-03-01 12:58:07 383,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
            + 2008-03-01 12:58:07 384,512 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
            + 2008-03-01 12:58:08 6,066,176 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
            + 2008-03-01 12:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
            + 2008-03-01 12:58:08 267,776 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
            + 2008-02-22 10:00:51 13,824 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
            + 2008-02-29 08:57:05 625,664 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
            + 2008-03-01 12:58:08 27,648 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
            + 2008-03-01 12:58:08 459,264 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
            + 2008-03-01 12:58:08 52,224 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
            + 2008-03-01 16:28:10 3,591,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
            + 2008-03-01 12:58:09 478,208 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
            + 2008-03-01 12:58:10 193,024 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
            + 2008-03-01 12:58:10 671,232 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
            + 2008-03-01 12:58:10 102,912 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
            + 2008-03-01 12:58:10 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
            + 2008-03-01 12:58:10 105,984 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
            + 2008-03-01 12:58:10 1,159,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
            + 2008-03-01 12:58:11 233,472 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
            + 2008-03-01 12:58:11 826,368 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
            + 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll
            + 2008-04-23 04:16:39 347,136 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll
            + 2008-04-23 04:16:39 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll
            + 2008-04-23 04:16:39 133,120 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll
            + 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll
            + 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
            + 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll
            + 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll
            + 2008-04-20 05:07:51 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll
            + 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
            + 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
            + 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
            + 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
            + 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
            + 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
            + 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
            + 2008-04-23 04:16:40 27,648 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
            + 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
            + 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
            + 2008-04-23 20:16:42 3,591,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
            + 2008-04-23 04:16:40 478,208 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
            + 2008-04-23 04:16:40 193,024 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
            + 2008-04-23 04:16:40 671,232 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
            + 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
            + 2008-04-23 04:16:40 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
            + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
            + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
            + 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
            + 2008-04-23 04:16:40 1,159,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
            + 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
            + 2008-04-23 04:16:40 826,368 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll
            - 2004-08-05 12:00:00 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
            + 2008-04-14 02:33:30 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
            - 2004-08-05 12:00:00 130,048 ----a-w C:\WINDOWS\ime\SOFTKBD.DLL
            + 2008-04-14 02:33:41 130,048 ----a-w C:\WINDOWS\ime\softkbd.dll
            - 2004-08-05 12:00:00 62,976 ----a-w C:\WINDOWS\ime\SPGRMR.dll
            + 2008-04-13 16:43:18 62,976 ----a-w C:\WINDOWS\ime\spgrmr.dll
            - 2004-08-05 12:00:00 272,384 ----a-w C:\WINDOWS\ime\SPTIP.dll
            + 2008-04-14 02:33:46 272,384 ----a-w C:\WINDOWS\ime\sptip.dll
            - 2005-01-28 13:22:12 192,512 ----a-w C:\WINDOWS\inf\unregmp2.exe
            + 2007-06-29 09:59:14 318,976 ----a-w C:\WINDOWS\inf\unregmp2.exe
            + 2006-12-10 17:14:40 2,560 ----a-r C:\WINDOWS\Installer\{9028040C-6000-11D3-8CFE-0050048383C9}\cagicon.exe
            + 2007-12-12 13:06:42 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe
            + 2008-01-18 15:13:09 2,247 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscdsbl.bat
            + 2007-12-12 10:33:51 18,917 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscinst.vbs
            + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscuinst.vbs
            + 2008-04-14 02:33:06 25,600 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscupdc.dll
            - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
            + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
            - 2004-08-05 12:00:00 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
            + 2008-04-14 02:33:18 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
            - 2006-10-12 13:55:58 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
            + 2008-04-14 02:33:18 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
            - 2007-03-09 14:00:38 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
            + 2008-04-14 02:33:18 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
            - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
            + 2008-04-14 02:33:18 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
            - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
            + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
            - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
            + 2008-04-14 02:33:18 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
            - 2006-10-12 11:54:07 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
            + 2008-04-14 02:33:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
            - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
            + 2008-04-14 02:33:19 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
            + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
            + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
            - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
            + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
            - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
            + 2007-04-02 18:26:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
            + 2008-04-13 17:32:28 19,968 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
            + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
            - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
            + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
            - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
            + 2007-04-02 18:26:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
            - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
            + 2007-04-02 18:26:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
            - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
            + 2007-04-02 18:26:01 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
            + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
            + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
            - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
            + 2007-04-02 18:26:01 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
            + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
            + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
            - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
            + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
            - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
            + 2007-04-02 18:26:02 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
            - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
            + 2007-04-02 18:26:02 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
            - 2004-08-05 12:00:00 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
            + 2008-04-14 02:33:32 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
            - 2006-06-02 19:32:20 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
            + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
            - 2006-10-10 12:44:50 557,568 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
            + 2008-04-13 18:53:32 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
            - 2007-06-16 22:11:58 51,200 ----a-w C:\WINDOWS\NirCmd.exe
            + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\NirCmd.exe
            - 2004-08-05 12:00:00 70,656 ----a-w C:\WINDOWS\NOTEPAD.EXE
            + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\notepad.exe
            - 2004-08-05 12:00:00 768,512 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
            + 2008-04-14 02:34:06 769,024 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
            - 2004-08-05 12:00:00 743,936 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe
            + 2008-04-14 02:34:06 744,448 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe
            - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe
            + 2008-04-14 02:34:06 18,432 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\hscupd.exe
            - 2004-08-05 12:00:00 160,768 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
            + 2008-04-14 02:34:12 172,544 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
            - 2004-08-05 12:00:00 381,952 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
            + 2008-04-14 02:33:32 382,464 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
            - 2004-08-05 12:00:00 102,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
            + 2008-04-14 02:33:38 102,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
            - 2004-08-05 12:00:00 38,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
            + 2008-04-14 02:33:38 38,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
            - 2005-12-25 20:46:10 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
            + 2008-09-24 15:35:56 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
            + 2008-09-24 15:35:56 2,998 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
            - 2004-08-05 12:00:00 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe
            + 2008-04-14 02:34:26 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\uploadm.exe
            - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
            + 2008-04-14 02:33:46 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
            - 2004-08-05 12:00:00 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
            + 2008-04-14 02:33:46 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
            - 2004-08-05 12:00:00 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
            + 2008-04-14 02:33:46 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
            - 2004-08-05 12:00:00 153,088 ----a-w C:\WINDOWS\regedit.exe
            + 2008-04-14 02:34:19 153,088 ----a-w C:\WINDOWS\regedit.exe
            + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
            + 2008-04-13 18:46:18 53,376 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
            + 2008-04-13 18:40:50 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
            + 2008-04-13 18:46:20 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys
            + 2008-04-14 02:33:18 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
            + 2008-04-14 02:33:18 136,192 ------w C:\WINDOWS\ServicePackFiles\i386\aaclient.dll
            + 2004-08-03 20:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
            + 2004-08-03 20:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
            + 2008-04-14 02:33:18 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\acadproc.dll
            + 2008-04-14 02:33:53 190,464 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
            + 2008-04-14 02:33:18 1,852,928 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
            + 2008-04-14 02:33:18 451,072 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
            + 2008-04-14 02:33:18 141,312 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll
            + 2008-04-14 02:33:18 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll
            + 2008-04-14 01:52:42 188,672 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys
            + 2008-04-14 02:33:18 245,248 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
            + 2008-04-14 02:33:18 193,536 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll
            + 2008-04-14 02:33:53 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
            + 2008-04-14 02:33:18 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
            + 2008-04-14 02:33:18 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
            + 2008-04-14 02:33:18 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll
            + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe
            + 2004-08-03 20:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
            + 2008-04-14 02:33:18 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
            + 2008-04-14 02:33:18 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
            + 2008-04-14 02:33:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
            + 2008-04-14 02:33:18 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
            + 2008-04-14 02:33:18 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
            + 2008-04-14 02:33:18 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
            + 2008-04-14 02:33:18 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
            + 2008-04-14 02:33:18 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
            + 2008-04-14 02:33:18 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
            + 2008-04-14 02:33:18 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
            + 2008-04-14 02:33:18 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
            + 2008-04-14 02:33:18 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
            + 2008-04-14 02:33:18 685,568 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
            + 2008-04-14 02:33:18 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll
            + 2008-04-13 16:39:23 142,592 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys
            + 2008-04-13 19:19:23 138,112 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys
            + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
            + 2008-04-14 02:33:18 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
            + 2008-04-14 02:33:18 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
            + 2008-04-14 02:33:18 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
            + 2008-04-14 02:33:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
            + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
            + 2008-04-14 02:33:18 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
            + 2008-04-14 02:33:53 256,512 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
            + 2008-04-13 18:36:38 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys
            + 2008-04-13 18:36:39 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
            + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0401.dll
            + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0404.dll
            + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0405.dll
            + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0406.dll
            + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt0407.dll
            + 2007-04-02 18:26:00 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\agt0408.dll
            + 2008-04-13 17:32:28 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt0409.dll
            + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040b.dll
            + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt040c.dll
            + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040d.dll
            + 2007-04-02 18:26:00 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt040e.dll
            + 2007-04-02 18:26:00 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0410.dll
            + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0411.dll
            + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0412.dll
            + 2007-04-02 18:26:01 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0413.dll
            + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0414.dll
            + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0415.dll
            + 2007-04-02 18:26:01 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0416.dll
            + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0419.dll
            + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041d.dll
            + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041f.dll
            + 2007-04-02 18:26:02 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0804.dll
            + 2007-04-02 18:26:02 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0816.dll
            + 2007-04-02 18:26:02 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0c0a.dll
            + 2008-04-14 02:33:19 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
            + 2008-04-14 02:33:53 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
            + 2008-04-14 02:33:53 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe
            + 2008-04-13 18:36:38 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
            + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
            + 2008-04-13 18:36:39 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
            + 2008-04-14 01:54:28 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
            + 2008-04-14 01:54:29 41,856 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
            + 2008-04-14 02:33:19 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll
            + 2004-08-03 20:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys
            + 2008-04-14 02:33:19 125,952 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
            + 2008-04-14 02:33:19 334,336 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
            + 2008-04-13 18:51:25 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
            + 2008-04-14 02:33:19 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
            + 2008-04-13 18:57:27 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
            + 2008-04-14 02:33:53 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe
            + 2008-04-13 18:40:30 96,512 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys
            + 2004-08-03 20:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
            + 2004-08-03 20:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
            + 2004-08-03 20:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
            + 2004-08-03 20:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
            + 2004-08-03 20:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
            + 2004-08-03 20:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
            + 2004-08-03 20:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
            + 2004-08-03 20:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
            + 2004-08-03 20:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
            + 2004-08-03 20:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
            + 2008-04-14 02:33:19 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
            + 2008-04-14 02:33:19 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
            + 2008-04-14 02:33:19 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
            + 2004-08-03 22:38:42 327,168 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
            + 2004-08-03 22:38:44 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
            + 2008-04-14 02:33:19 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
            + 2008-04-14 02:33:19 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
            + 2008-04-14 02:33:19 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
            + 2004-08-03 20:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
            + 2004-08-03 20:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
            + 2004-08-03 20:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
            + 2004-08-03 20:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
            + 2004-08-03 20:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
            + 2004-08-03 20:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
            + 2004-08-03 20:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
            + 2004-08-03 20:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
            + 2004-08-03 20:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
            + 2004-08-03 20:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
            + 2008-04-14 02:33:19 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
            + 2008-04-14 02:33:19 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
            + 2008-04-14 02:33:19 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll
            + 2008-04-14 02:33:53 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
            + 2008-04-13 18:51:25 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
            + 2008-04-14 02:31:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
            + 2008-04-13 18:51:30 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
            + 2008-04-14 02:33:19 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
            + 2008-04-14 02:33:53 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\attrib.exe
            + 2008-04-14 02:33:19 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
            + 2008-04-14 02:33:19 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
            + 2008-04-14 02:33:19 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
            + 2008-04-14 02:33:19 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
            + 2008-04-14 02:33:19 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
            + 2008-04-14 02:33:19 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
            + 2008-04-14 02:33:53 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
            + 2008-04-14 02:33:19 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll
            + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe
            + 2008-04-14 02:33:19 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll
            + 2008-04-14 02:33:53 625,152 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe
            + 2008-04-14 02:33:53 638,976 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
            + 2008-04-14 02:33:54 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
            + 2008-04-14 02:33:54 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
            + 2008-04-13 18:46:20 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys
            + 2008-04-13 18:46:07 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
            + 2008-04-14 02:33:19 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
            + 2008-04-14 02:33:19 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\azroles.dll
            + 2008-04-14 02:33:19 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
            + 2008-04-14 02:33:19 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
            + 2008-04-14 02:33:19 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll
            + 2008-04-13 18:36:32 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\battc.sys
            + 2008-04-13 18:46:21 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
            + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
            + 2008-04-14 02:33:19 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
            + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
            + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx4.dll
            + 2008-04-14 02:33:55 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
            + 2008-04-13 18:53:23 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys
            + 2008-04-14 01:57:48 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll
            + 2008-04-14 02:33:20 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll
            + 2008-04-14 02:33:20 1,025,024 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
            + 2008-04-14 02:33:20 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
            + 2008-04-14 02:33:20 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
            + 2008-04-13 18:46:33 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
            + 2008-04-13 18:46:33 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
            + 2008-04-13 18:51:34 101,120 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
            + 2008-04-14 01:58:00 273,664 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys
            + 2008-04-13 18:46:31 36,480 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
            + 2008-04-14 02:33:20 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
            + 2008-04-13 18:46:29 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
            + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
            + 2008-04-14 02:33:20 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\c_g18030.dll
            + 2008-04-14 02:33:20 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
            + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
            + 2008-04-14 02:33:55 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\cacls.exe
            + 2008-04-14 02:33:20 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll
            + 2008-04-14 02:33:20 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\camext30.dll
            + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll
            + 2008-04-14 02:33:20 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
            + 2008-04-14 02:33:20 226,304 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
            + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
            + 2008-04-14 02:33:20 625,664 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
            + 2008-04-13 18:46:23 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
            + 2008-04-13 19:14:21 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
            + 2008-04-14 02:33:20 152,064 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
            + 2008-04-14 02:33:20 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll
            + 2008-04-14 02:33:20 2,091,520 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
            + 2008-04-13 18:40:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
            + 2008-04-14 02:33:20 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll
            + 2008-04-14 02:33:20 467,968 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
            + 2008-04-14 02:33:20 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
            + 2008-04-14 02:31:03 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
            + 2008-04-14 02:33:56 188,480 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
            + 2008-04-14 02:33:20 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
            + 2008-04-13 18:40:58 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys
            + 2008-04-14 02:33:20 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\cic.dll
            + 2008-04-14 02:33:20 1,359,360 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
            + 2008-04-14 02:33:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
            + 2008-04-14 02:33:57 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
            + 2008-04-13 19:16:22 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
            + 2008-04-14 02:33:21 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
            + 2008-04-14 02:33:21 498,688 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
            + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
            + 2008-04-14 02:33:21 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
            + 2008-04-14 02:33:57 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
            + 2008-04-14 02:33:57 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
            + 2008-04-14 02:33:57 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
            + 2008-04-14 02:33:21 58,368 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
            + 2008-04-13 18:36:37 13,952 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
            + 2008-04-14 02:33:21 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
            + 2008-04-14 02:33:57 401,408 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
            + 2008-04-14 02:33:21 353,280 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
            + 2008-04-14 02:33:57 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
            + 2008-04-14 02:33:57 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
            + 2008-04-14 02:33:21 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
            + 2008-04-14 02:33:21 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
            + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
            + 2008-04-14 02:33:21 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
            + 2008-04-14 02:33:21 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
            + 2008-04-14 02:33:21 83,968 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
            + 2008-04-13 16:44:16 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\cobramsg.dll
            + 2008-04-14 02:33:21 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll
            + 2008-04-14 02:33:21 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\comaddin.dll
            + 2008-04-14 02:33:21 195,072 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
            + 2008-04-14 02:33:21 617,472 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
            + 2008-04-14 02:33:21 281,600 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
            + 2008-04-14 02:33:21 253,440 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
            + 2008-04-13 18:36:37 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\compbatt.sys
            + 2008-04-14 02:33:21 230,912 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
            + 2008-04-14 02:33:21 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.dll
            + 2008-04-14 02:33:57 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
            + 2008-04-14 02:33:57 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\comrereg.exe
            + 2008-04-14 02:33:21 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll
            + 2008-04-14 02:33:21 274,944 ------w C:\WINDOWS\ServicePackFiles\i386\comsetup.dll
            + 2008-04-14 02:33:21 167,424 ------w C:\WINDOWS\ServicePackFiles\i386\comsnap.dll
            + 2008-04-14 02:33:21 1,267,200 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
            + 2008-04-14 02:33:21 539,648 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll
            + 2008-04-14 02:33:58 1,044,480 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe
            + 2008-04-14 02:33:21 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
            + 2008-04-14 02:33:21 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\confmsp.dll
            + 2008-04-14 02:33:59 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe
            + 2008-04-14 02:33:21 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll
            + 2008-04-14 02:33:21 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\credssp.dll
            + 2008-04-14 02:33:21 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll
            + 2008-04-14 02:02:47 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
            + 2008-04-14 02:33:21 606,208 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
            + 2008-04-14 02:33:21 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
            + 2008-04-14 02:33:21 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
            + 2008-04-14 02:33:21 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
            + 2008-04-14 02:33:21 64,512 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
            + 2008-04-14 02:33:21 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
            + 2008-04-14 02:33:21 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
            + 2008-04-14 02:33:21 102,912 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
            + 2008-04-14 02:33:59 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
            + 2008-04-14 02:33:21 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
            + 2008-04-14 02:33:22 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
            + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe
            + 2008-04-14 02:33:59 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
            + 2008-04-14 02:33:22 252,416 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
            + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll
            + 2004-08-03 20:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
            + 2008-04-14 02:33:22 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
            + 2008-04-14 02:33:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
            + 2008-04-14 02:33:22 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
            + 2008-04-14 02:33:22 824,320 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
            + 2008-04-14 02:33:22 1,056,768 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll
            + 2008-03-25 04:50:25 554,008 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll
            + 2008-04-14 02:33:22 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
            + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\datime.dll
            + 2008-04-14 02:33:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
            + 2008-04-14 02:33:22 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
            + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
            + 2008-04-14 02:33:22 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
            + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
            + 2008-04-14 02:50:20 1,804 ------w C:\WINDOWS\ServicePackFiles\i386\dcache.bin
            + 2008-04-14 02:33:22 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
            + 2008-04-14 02:33:22 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
            + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\dcomcnfg.exe
            + 2008-04-14 02:33:59 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
            + 2008-04-14 02:33:22 279,552 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
            + 2008-04-14 02:33:22 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
            + 2008-04-14 02:33:59 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe
            + 2008-04-14 02:33:22 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll
            + 2008-04-14 02:33:22 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
            + 2008-04-14 02:33:59 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
            + 2008-04-14 02:33:59 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
            + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
            + 2008-04-14 02:33:22 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
            + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
            + 2008-04-14 02:33:22 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
            + 2008-04-14 02:33:22 127,488 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
            + 2008-04-14 02:33:22 411,136 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpmon.dll
            + 2008-04-14 02:33:22 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpqec.dll
            + 2008-04-14 02:33:59 548,352 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
            + 2008-04-14 02:34:00 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe
            + 2004-08-05 12:00:00 887,784 ------w C:\WINDOWS\ServicePackFiles\i386\digcore.exe
            + 2008-04-14 02:33:22 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll
            + 2008-04-14 02:33:22 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\dimsntfy.dll
            + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dimsroam.dll
            + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll
            + 2008-04-14 02:33:22 187,904 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
            + 2008-04-14 02:33:22 86,528 ------w C:\WINDOWS\ServicePackFiles\i386\directdb.dll
            + 2008-04-13 18:40:47 36,352 ------w C:\WINDOWS\ServicePackFiles\i386\disk.sys
            + 2008-04-14 02:33:22 1,504,768 ------w C:\WINDOWS\ServicePackFiles\i386\diskcopy.dll
            + 2008-04-13 18:40:44 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\diskdump.sys
            + 2008-04-14 02:34:00 167,936 ------w C:\WINDOWS\ServicePackFiles\i386\diskpart.exe
            + 2008-04-14 02:33:22 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\dispex.dll
            + 2008-04-14 02:34:00 5,120 ------w C:\WINDOWS\ServicePackFiles\i386\dllhost.exe
            + 2008-04-13 18:40:51 8,320 ------w C:\WINDOWS\ServicePackFiles\i386\dlttape.sys
            + 2008-04-14 02:34:00 225,280 ------w C:\WINDOWS\ServicePackFiles\i386\dmadmin.exe
            + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dmband.dll
            + 2008-04-14 02:05:07 800,256 ------w C:\WINDOWS\ServicePackFiles\i386\dmboot.sys
            + 2008-04-14 02:33:22 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\dmcompos.dll
            + 2008-04-14 02:33:22 285,184 ------w C:\WINDOWS\ServicePackFiles\i386\dmdlgs.dll
            + 2008-04-14 02:33:22 200,704 ------w C:\WINDOWS\ServicePackFiles\i386\dmdskmgr.dll
            + 2008-04-14 02:33:22 181,248 ------w C:\WINDOWS\ServicePackFiles\i386\dmime.dll
            + 2008-04-14 02:05:12 154,496 ------w C:\WINDOWS\ServicePackFiles\i386\dmio.sys
            + 2008-04-14 02:33:22 35,840 ------w C:\WINDOWS\ServicePackFiles\i386\dmloader.dll
            + 2008-04-14 02:34:00 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\dmremote.exe
            + 2008-04-14 02:33:22 82,432 ------w C:\WINDOWS\ServicePackFiles\i386\dmscript.dll
            + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dmserver.dll
            + 2008-04-14 02:33:22 105,984 ------w C:\WINDOWS\ServicePackFiles\i386\dmstyle.dll
            + 2008-04-14 02:33:22 103,424 ------w C:\WINDOWS\ServicePackFiles\i386\dmsynth.dll
            + 2008-04-14 02:33:22 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.dll
            + 2008-04-13 18:45:01 52,864 ------w C:\WINDOWS\ServicePackFiles\i386\dmusic.sys
            + 2008-04-14 02:33:22 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\dmutil.dll
            + 2008-04-14 02:33:22 147,968 ------w C:\WINDOWS\ServicePackFiles\i386\dnsapi.dll
            + 2008-04-14 02:33:22 45,568 ------w C:\WINDOWS\ServicePackFiles\i386\dnsrslvr.dll
            + 2008-04-14 02:33:22 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\docprop2.dll
            + 2004-08-05 12:00:00 54,080 ------w C:\WINDOWS\ServicePackFiles\i386\dosx.exe
            + 2008-04-14 02:33:22 26,112 ------w C:\WINDOWS\ServicePackFiles\i386\dot3api.dll
            + 2008-04-14 02:33:22 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dot3cfg.dll
            + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dot3clnt.dll
            + 2008-04-14 02:33:22 9,216 ------w C:\WINDOWS\ServicePackFiles\i386\dot3dlg.dll
            + 2008-04-14 02:33:22 56,832 ------w C:\WINDOWS\ServicePackFiles\i386\dot3msm.dll
            + 2008-04-14 02:33:22 133,120 ------w C:\WINDOWS\ServicePackFiles\i386\dot3svc.dll
            + 2008-04-14 02:33:22 651,264 ------w C:\WINDOWS\ServicePackFiles\i386\dot3ui.dll
            + 2008-04-13 18:39:46 206,976 ------w C:\WINDOWS\ServicePackFiles\i386\dot4.sys
            + 2008-04-14 01:54:17 103,936 ------w C:\WINDOWS\ServicePackFiles\i386\dpcdll.dll
            + 2008-04-14 02:34:01 29,696 ------w C:\WINDOWS\ServicePackFiles\i386\dplaysvr.exe
            + 2008-04-14 02:33:22 229,888 ------w C:\WINDOWS\ServicePackFiles\i386\dplayx.dll
            + 2008-04-14 02:33:23 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\dpmodemx.dll
            + 2008-04-14 02:31:14 3,072 ------w C:\WINDOWS\ServicePackFiles\i386\dpnaddr.dll
            + 2008-04-14 02:33:23 375,296 ------w C:\WINDOWS\ServicePackFiles\i386\dpnet.dll
            + 2008-04-14 02:33:23 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhpast.dll
            + 2008-04-14 02:33:23 60,928 ------w C:\WINDOWS\ServicePackFiles\i386\dpnhupnp.dll
            + 2008-04-14 02:31:14 3,072 ------w C:\WINDOWS\ServicePackFiles\i386\dpnlobby.dll
            + 2008-04-14 02:34:01 18,432 ------w C:\WINDOWS\ServicePackFiles\i386\dpnsvr.exe
            + 2008-04-14 02:33:23 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvacm.dll
            + 2008-04-14 02:33:23 213,504 ------w C:\WINDOWS\ServicePackFiles\i386\dpvoice.dll
            + 2008-04-14 02:34:01 83,456 ------w C:\WINDOWS\ServicePackFiles\i386\dpvsetup.exe
            + 2008-04-14 02:33:23 116,736 ------w C:\WINDOWS\ServicePackFiles\i386\dpvvox.dll
            1. kurar Auteur
              ouf... j'en étais a un tiers....

              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
              REGEDIT4

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "fsc-reminder.exe"="C:\WINDOWS\reminder\fsc-reminder.exe" [2005-01-19 28672]
              "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 1695232]
              "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-03-10 5566464]
              "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2005-03-18 98393]
              "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-03-18 688217]
              "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
              "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2005-04-15 45056]
              "InstantOn"="C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe" [2005-05-11 93640]
              "OdTray.exe"="C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe" [2005-05-18 1015871]
              "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd.exe" [2003-06-25 49152]
              "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-06-26 212992]
              "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
              "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
              "Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 C:\WINDOWS\system32\HdAShCut.exe]
              "SoundMan"="SOUNDMAN.EXE" [2005-03-10 C:\WINDOWS\SOUNDMAN.EXE]
              "AlcWzrd"="ALCWZRD.EXE" [2005-03-10 C:\WINDOWS\ALCWZRD.EXE]
              "nwiz"="nwiz.exe" [2005-03-10 C:\WINDOWS\system32\nwiz.exe]

              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OdysseyClient]
              2005-12-25 23:38 106496 C:\WINDOWS\system32\odyEvent.dll

              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
              "EnableFirewall"= 0 (0x0)

              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
              "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
              "C:\\Program Files\\Azureus\\Azureus.exe"=
              "C:\\red faction\\rf.exe"=
              "C:\\Program Files\\Games-Masters.com\\CABAL Online (Europe)\\launcher\\update\\ESTdnheadless.exe"=
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
              "%windir%\\system32\\sessmgr.exe"=
              "C:\\Program Files\\Games-Masters.com\\CABAL Online (Europe)\\cabal.exe"=

              R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
              R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
              R3 odysseyIM4;Odyssey Network Agent Miniport;C:\WINDOWS\system32\DRIVERS\odysseyIM4.sys [2005-05-18 173056]
              R3 Slazldrv;SmartLink AMR_PCI Driver;C:\WINDOWS\system32\DRIVERS\SLDRV\slazldrv.sys [2005-02-07 230448]
              S3 DTVFW;DVB-T USB adapter firmware;C:\WINDOWS\system32\DRIVERS\dtvfw.sys [2005-11-30 22016]
              S3 P1130VID;Creative WebCam NX Pro;C:\WINDOWS\system32\DRIVERS\P1130Vid.sys [2003-05-08 90357]
              S3 usbdtv;DVB-T TV Tuner;C:\WINDOWS\system32\Drivers\usbdtv.sys [2005-11-30 31232]
              S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
              S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
              .
              Contenu du dossier 'Tâches planifiées'
              .
              - - - - ORPHELINS SUPPRIMES - - - -

              BHO-{47E7F0B3-DAD6-4C15-BA3E-D2144878D239} - C:\WINDOWS\system32\pmnlm.dll
              HKLM-Run-DXDllRegExe - dxdllreg.exe

              .
              ------- Examen supplémentaire -------
              .
              R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/
              R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
              R1 -: HKCU-Internet Connection Wizard,ShellNext = iexplore
              R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/keyword/%s
              O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
              .

              **************************************************************************

              catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2008-09-25 20:12:32
              Windows 5.1.2600 Service Pack 3 NTFS

              Recherche de processus cachés ...

              Recherche d'éléments en démarrage automatique cachés ...

              Recherche de fichiers cachés ...

              Scan terminé avec succès
              Fichiers cachés: 0

              **************************************************************************
              .
              ------------------------ Autres processus actifs ------------------------
              .
              C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
              C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
              C:\WINDOWS\system32\nvsvc32.exe
              C:\WINDOWS\system32\slserv.exe
              C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              .
              **************************************************************************
              .
              Heure de fin: 2008-09-25 20:22:50 - La machine a redémarré
              ComboFix-quarantined-files.txt 2008-09-25 18:22:41
              ComboFix2.txt 2007-09-27 10:46:07

              Avant-CF: 3ÿ323ÿ682ÿ816 octets libres
              Après-CF: 4,135,878,656 octets libres

              5935 --- E O F --- 2008-09-24 15:39:49
              1. sKe69 Contributeur sécurité
                Bien ....

                1- Télécharges : - CCleaner
                https://www.pcastuces.com/logitheque/ccleaner.htm
                Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corrigé ton registre .Lors de l'installation, avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 première.
                Une fois le prg instalé et lancé, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures"( Par la suite, laisse-le avec ses réglages par défaut. C'est tout ).

                Un tuto ( aide ):
                http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

                ---> Utilisation:
                ! déconnectes toi et fermes toutes applications en cours !
                * vas dans "nettoyeur" : fait analyse puis nettoyage
                * vas dans "registre" : fait chercher les erreurs et réparer ( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

                ( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )

                2- souligne>Télécharges OTMoveIt (de Old_Timer) sur ton Bureau</souligne>.
                http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe
                ou http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

                Déconnectes toi et fermes toute tes applications en cours .

                cliques double sur OTMoveIt.exe pour le lancer.
                copies ce qui se trouve en citation ci-dessous,

                C:\WINDOWS\system32\mlnmp.ini2

                et colles le dans le cadre de gauche de OTMoveIt2 :
                Paste standard List of Files/Folders to be moved.

                cliques sur MoveIt! pour lancer la suppression.
                le résultat apparaîtra dans le cadre Results.

                cliques sur Exit pour fermer.
                --->postes le rapport situé dans le dossier " C:\OTMoveIt\MovedFiles." ( c'est un .log )

                Note : il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
                si c'est le cas acceptes par "Yes".

                3- Avoir accès aux fichiers cachés :

                Vas dans Menu Démarrer->Poste de travail->Outils->Options des dossiers...->Affichage
                * "Afficher les fichiers et dossiers cachés" ---> coché
                * "Masquer les extensions des fichiers dont le type est connu" ---> décoché
                * "masquer les fichiers du système" ---> décoché
                -> valides la modif ( "appliquer" puis "ok" ).
                ( tu remetteras les paramètres de départ une fois la désinfection terminée , pas avant ... )

                4- Rends toi sur ce site :

                https://www.virustotal.com/gui/

                Copies ce qui suit et colles le dans l'espace pour la recherche :
                C:\WINDOWS\d3dx.dat

                Cliques sur Send File ( = " Envoyer le fichier " ).

                Un rapport va s'élaborer ligne à ligne.

                Attends bien la fin ... Il doit comprendre la taille du fichier envoyé.

                Sauvegarde le rapport avec le bloc-note.

                Copies le dans ta prochaine réponse ...

                ( Si VirusTotal indique que le fichier a déjà été analysé, clique sur le bouton Ré-analyse le fichier maintenant )

                1. kurar Auteur
                  rapport de OT moveIt!

                  C:\WINDOWS\system32\mlnmp.ini2 moved successfully.

                  OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 09252008_212231
                  3. kurar Auteur
                    rapport en ligne

                    Fichier d3dx.dat reçu le 2008.09.25 21:31:33 (CET)
                    Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE

                    Résultat: 0/36 (0%)
                    en train de charger les informations du serveur...
                    Votre fichier est dans la file d'attente, en position: 1.
                    L'heure estimée de démarrage est entre 37 et 53 secondes.
                    Ne fermez pas la fenêtre avant la fin de l'analyse.
                    L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
                    Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
                    Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
                    les résultats seront affichés au fur et à mesure de leur génération.
                    Formaté Impression des résultats
                    Votre fichier a expiré ou n'existe pas.
                    Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

                    Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
                    Email:

                    Antivirus Version Dernière mise à jour Résultat
                    AhnLab-V3 2008.9.25.0 2008.09.25 -
                    AntiVir 7.8.1.34 2008.09.25 -
                    Authentium 5.1.0.4 2008.09.25 -
                    Avast 4.8.1195.0 2008.09.25 -
                    AVG 8.0.0.161 2008.09.25 -
                    BitDefender 7.2 2008.09.25 -
                    CAT-QuickHeal 9.50 2008.09.25 -
                    ClamAV 0.93.1 2008.09.25 -
                    DrWeb 4.44.0.09170 2008.09.25 -
                    eSafe 7.0.17.0 2008.09.25 -
                    eTrust-Vet 31.6.6106 2008.09.25 -
                    Ewido 4.0 2008.09.25 -
                    F-Prot 4.4.4.56 2008.09.25 -
                    F-Secure 8.0.14332.0 2008.09.25 -
                    Fortinet 3.113.0.0 2008.09.25 -
                    GData 19 2008.09.25 -
                    Ikarus T3.1.1.34.0 2008.09.25 -
                    K7AntiVirus 7.10.473 2008.09.25 -
                    Kaspersky 7.0.0.125 2008.09.25 -
                    McAfee 5392 2008.09.25 -
                    Microsoft 1.3903 2008.09.25 -
                    NOD32 3471 2008.09.25 -
                    Norman 5.80.02 2008.09.25 -
                    Panda 9.0.0.4 2008.09.24 -
                    PCTools 4.4.2.0 2008.09.25 -
                    Prevx1 V2 2008.09.25 -
                    Rising 20.63.32.00 2008.09.25 -
                    Sophos 4.34.0 2008.09.25 -
                    Sunbelt 3.1.1668.1 2008.09.24 -
                    Symantec 10 2008.09.25 -
                    TheHacker 6.3.0.9.094 2008.09.25 -
                    TrendMicro 8.700.0.1004 2008.09.25 -
                    VBA32 3.12.8.6 2008.09.25 -
                    ViRobot 2008.9.25.1392 2008.09.25 -
                    VirusBuster 4.5.11.0 2008.09.25 -
                    Webwasher-Gateway 6.6.2 2008.09.25 -
                    Information additionnelle
                    File size: 4096 bytes
                    MD5...: 7229688f8b55e80d340f3897942fd5a0
                    SHA1..: 3eaef4c11390c87d55e5a309039445946562456d
                    SHA256: bcfa98bbae692116be3144d6250580ad00994cca00b2adebfe303d9a8fe3babc
                    SHA512: 52f03ca0cc1c24bfe533bdf4463f45cff00f81ba22ef7d5239c296464cbefaf7
                    8b90c05fdac0cf56c76d63dc908bca81a6c5de3272f548bd3b595f0f79a72ca6
                    PEiD..: -
                    TrID..: File type identification
                    Unknown!
                    PEInfo: -
                    1. sKe69 Contributeur sécurité
                      Bien ...

                      Bien ...

                      *supprimes combofix ainsi :

                      -->Cliques sur " Démarrer "( ou combine la touche Windows + R ) -> " Executer " -> copie/colles cette ligne :

                      ComboFix /u

                      ( laisses l'espace entre Combofix et /u )

                      -->Valides .

                      * refais un coup de CCleaner ( registre compris ) .

                      *********************************

                      Dis moi comment va le PC ... Encore des soucis ? ... ^^

                      *********************************

                      puis fais ce qui suit dans l'ordre :

                      1-Télécharges ToolsCleaner (de A.Rothstein) sur ton Bureau.
                      http://pc-system.fr/

                      Déconnectes toi et fermes bien toutes tes applications en cours .

                      Lances le .
                      *Cliques sur Recherche et laisses le scan se terminer (cela peut être long).
                      *Cliques sur Suppression pour finaliser.
                      *Tu peux, si tu le souhaites, te servir des Options facultatives
                      *Cliques sur "quitter" pour générer un rapport ( et pas sur la croix rouge !) :
                      ---> Postes ce rapport : il se trouve à la racine de ton disque dur -> C:\TCleaner.txt .

                      Note : Ce petit soft va te nettoyer tout les trucs dont on c'est servi pour la désinfection .
                      Supprimes tout les outils , dossiers ou rapports consernant la désinfection que Toolscleaner2 n'a pas supprimé .

                      ( gardes CCleaner et Malwarebytes : très utiles ! )

                      2- Refais un coup de CCleaner ( registre compris ) .

                      3- Retélécharges et réinstalles hijackthis ( car supprimé par Toolscleaner2 ) ,

                      Télécharges et installes le logiciel HijackThis :

                      ici ftp://ftp.commentcamarche.com/download/HJTInstall.exe
                      ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
                      ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

                      -> Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
                      A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
                      Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
                      "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

                      ( ne fais pas de scan pour le momment )

                      4- Purge de la restauration système
                      *Désactives ta restauration :
                      Cliques droit sur poste de travail/propriétés/Restauration système/coche la case désactiver la restauration, appliquer, OK
                      --->Redémarres ton PC
                      *Réactives ta restauration :
                      Cliques droit sur poste de travail/propriétés/Restauration système/décoche la case désactiver la restauration, appliquer, OK
                      --->Redémarres ton PC
                      ( Note : tu peux aussi y accéder via panneau de configuration->" système "->" restauration système " ).

                      5- Fais ce scan en ligne pour vérifier :

                      Fais un scan en ligne avec Kaspersky : https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                      - Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >.
                      Le scan ne marche que sous Internet Explorer(et pas sous firefox ou autre...).
                      - On va te demander de télécharger un contôle active x, accepte .
                      - Dans le menu Choisissez la cible de l'analyse, sélectionne Poste de travail. Le scan va commencer.
                      - Sauvegardes le rapport qui sera généré, puis copies/colles le dans ta prochaine réponse pour analyse et attends la suite ...

                      S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : http://www.inoculer.com/activex.php3
                      Rappel : le scan est à faire sous Internet Explorer !

                      --> tuto :
                      https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

                      1. kurar Auteur
                        [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

                        -->- Recherche:

                        C:\VundoFix.txt: trouvé !
                        C:\Combofix.txt: trouvé !
                        C:\fixnavi.txt: trouvé !
                        C:\Combofix: trouvé !
                        C:\HijackThis: trouvé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
                        C:\Documents and Settings\kurar\Bureau\HijackThis.lnk: trouvé !
                        C:\Documents and Settings\kurar\Bureau\OtMoveIt2.exe: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\SdFix.exe: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\Navilog1.exe: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\Navilog1.lnk: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\ComboFix.exe: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\vundoFix.exe: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\SDFIX: trouvé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\sdfix\SDFIX: trouvé !
                        C:\Documents and Settings\kurar\Mes documents\HJTInstall.exe: trouvé !
                        C:\hijackthis\HijackThis.exe: trouvé !
                        C:\hijackthis\hijackthis.log: trouvé !
                        C:\Nouveau dossier\MsnFix: trouvé !
                        C:\Program Files\Navilog1: trouvé !
                        C:\Program Files\Navilog1\Navilog1.bat: trouvé !
                        C:\Program Files\Trend Micro\HijackThis: trouvé !
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
                        C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
                        C:\WINDOWS\msnfix.txt: trouvé !

                        ---------------------------------
                        -->- Suppression:

                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
                        C:\Documents and Settings\kurar\Bureau\HijackThis.lnk: supprimé !
                        C:\Documents and Settings\kurar\Bureau\OtMoveIt2.exe: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\SdFix.exe: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\Navilog1.exe: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\Navilog1.lnk: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\ComboFix.exe: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\vundoFix.exe: supprimé !
                        C:\Documents and Settings\kurar\Mes documents\HJTInstall.exe: supprimé !
                        C:\hijackthis\HijackThis.exe: supprimé !
                        C:\Program Files\Navilog1\Navilog1.bat: supprimé !
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
                        C:\VundoFix.txt: supprimé !
                        C:\Combofix.txt: supprimé !
                        C:\fixnavi.txt: supprimé !
                        C:\hijackthis\hijackthis.log: supprimé !
                        C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
                        C:\WINDOWS\msnfix.txt: supprimé !
                        C:\Combofix: supprimé !
                        C:\HijackThis: supprimé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
                        C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
                        C:\Documents and Settings\kurar\Bureau\1ER fois virus\SDFIX: supprimé !
                        C:\Nouveau dossier\MsnFix: supprimé !
                        C:\Program Files\Navilog1: supprimé !
                        C:\Program Files\Trend Micro\HijackThis: supprimé !

                        Le soucis pour l'ordinateur c'était le jeu cabal online qui ne voulait plus se connecter car j'avais des fichier corrompu, étant donné que je ne l'ai pas relancé depuis... je ne sais toujours pas
                        Mais néanmoins j'ai moins de pub sur les sites du genre VOUS ETES infecté!!!!! cliqué vite...
                        merci
                        1. sKe69 Contributeur sécurité
                          Salut,

                          j'ai moins de pub sur les sites du genre VOUS ETES infecté!!!!!
                          --> j'espère que tu n'en as plus surtout ... ^^

                          Fais la suite donc ...
                          1. kurar Auteur
                            J'ai fait l'analyse en ligne mais au bout de 2 h 20 quand c'étais terminé il y a eu un problème... impossible de récupérer le rapport donc je vais le refaire mais je peux deja dire que ca avait trouvé 9 virus et quelque 18 fichier infecté...
                            Je poursuis et suis les étapes...
                            Merci
                        2. sKe69 Contributeur sécurité
                          Salut,

                          Ok , j'attends le rapport ... tiens moi au courrant si il y a un prb ...
                          1. kurar Auteur
                            voici le rapport du site permettant l'analyse:

                            C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Cookies\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From MAILER-DAEMON@orange.fr (Mail Delivery System)][Date Tue, 24 Oct 2006 10:53:43 +0200 (CEST)]/readme.pif Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From MAILER-DAEMON@orange.fr (Mail Delivery System)][Date Tue, 24 Oct 2006 15:54:36 +0200 (CEST)]/readme.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From jlgagnaire@wanadoo.fr][Date Mon, 23 Oct 2006 21:34:46 +0200]/UNNAMED/text.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From jlgagnaire@wanadoo.fr][Date Mon, 23 Oct 2006 21:34:46 +0200]/UNNAMED Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Undelivered/[From MAILER-DAEMON@orange.fr (Mail Delivery System)][Date Tue, 24 Oct 2006 10:53:43 +0200 (CEST)]/readme.pif Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Undelivered Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Undelivered/[From MAILER-DAEMON@orange.fr (Mail Delivery System)][Date Tue, 24 Oct 2006 15:54:36 +0200 (CEST)]/readme.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Undelivered Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/test.eml/[From jlgagnaire@wanadoo.fr][Date Mon, 23 Oct 2006 21:34:46 +0200]/text.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/test.eml Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Hi.eml/[From mhriamon@rhonealpes.fr][Date Wed, 25 Oct 2006 09:27:54 +0200]/fgmjlo.zip/fgmjlo.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Hi.eml/[From mhriamon@rhonealpes.fr][Date Wed, 25 Oct 2006 09:27:54 +0200]/fgmjlo.zip Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/Hi.eml Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/HI.eml/[From f15_eagle@infonie.fr][Date Fri, 27 Oct 2006 07:55:36 +0200]/body.zip/body.txt .exe Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/HI.eml/[From f15_eagle@infonie.fr][Date Fri, 27 Oct 2006 07:55:36 +0200]/body.zip Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From "sebastien" ][Date Sun, 29 Oct 2006 18:41:20 +0100]/HI.eml Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From jlgagnaire@wanadoo.fr][Date Mon, 23 Oct 2006 21:34:46 +0200]/text.scr Infecté : Net-Worm.Win32.Mytob.c ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Identities\{3AC62C5B-5D56-410D-9E75-00D527A98410}\Microsoft\Outlook Express\Éléments supprimés.dbx MailMSOutlook5: infecté - 17 ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Historique\History.IE5\MSHist012008092920080930\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\Local Settings\Temporary Internet Files\Content.IE5\YS23T8S0\728x90_cplus_football_150908[1].swf L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\ntuser.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\kurar\ntuser.dat.LOG L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré

                            C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré

                            C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

                            C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

                            C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré

                            C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré

                            C:\hpcmerr.log L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\log\selfdef.log L'objet est verrouillé ignoré

                            C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré

                            C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

                            C:\System Volume Information\_restore{BBC488E9-4BA8-41A6-B77A-8C9BE2AC4105}\RP2\change.log L'objet est verrouillé ignoré

                            C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré

                            C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré

                            C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\aescceva.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\ahiiftva.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\ajokilxd.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\amwklpsi.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\axvswoar.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\ayxhrnfl.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\bmjyagtj.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\cbunobre.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\cdongqtd.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\cuoycgfl.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\cvsdplxl.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\cyyytdrk.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\deffujxv.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\dtnsa.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\dulcelbb.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\efcaaay.dll Infecté : Trojan.Win32.Pakes.ds ignoré

                            C:\WINDOWS\system32\efcywvs.dll Infecté : Trojan.Win32.Pakes.ds ignoré

                            C:\WINDOWS\system32\elgahkyo.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\ertknafh.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\fdnpghoe.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\fm.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\fmrhxqdw.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\fttmpkmp.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\fvehcbtm.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\fvkjyjghfrej.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\gouqnnoo.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\gtuptpqr.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\gxwdfiyk.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\gxzbchc.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\hdnuidoo.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\hggdeec.dll Infecté : Trojan.Win32.Pakes.ds ignoré

                            C:\WINDOWS\system32\hqkjuoyy.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\idvdladc.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\iihvwpuk.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\iorztwyq.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\ivjiqbxl.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\iwshdcwo.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\jabhbybp.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\jcefpiyx.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\jisimkch.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\jtinnscg.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\kccbuind.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\kdolhimd.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\kwclnkpl.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\lib.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\liwnrfjs.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\ljsdcrqg.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\lxenwsrd.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\lyfthokn.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\mccdmjej.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\mdnqshwb.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\mfqerslg.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\mjhwijqm.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\mpoqhyfr.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\mqlvmxfo.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\mtt.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\ndvinjnu.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\nsbaaxwt.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\oadcjiku.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\oglmpqlo.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\ognno.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\okrjnywk.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\omdxndom.dll Infecté : Trojan.Win32.Monder.cp ignoré

                            C:\WINDOWS\system32\omstjmuc.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\opbkefuv.dll Infecté : Trojan.Win32.Monder.cp ignoré

                            C:\WINDOWS\system32\orivkfwv.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\orypvygj.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\otwlvdhn.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\rqrsstq.dll Infecté : Trojan.Win32.Pakes.ds ignoré

                            C:\WINDOWS\system32\rughvgie.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\rwndvrht.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\sb.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\sihhlexq.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\sluddite.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\swjxxitg.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\syvxuhpc.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\tfiextms.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\tsbjpfxf.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\tuycsctv.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\udvcacfr.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\ufai.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\system32\uhspfdyu.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\uinyatai.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\uplgditr.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\urvyaqvh.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\usedjgwk.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\uyojjrux.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\vktwafsd.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\vlwfqidy.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\vpdatvjq.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré

                            C:\WINDOWS\system32\wnxcewnx.exe Infecté : Trojan.Win32.Agent.bck ignoré

                            C:\WINDOWS\system32\woelvmms.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\wsbwlbel.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\xhcbrhpl.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\xkeuhexa.exe Infecté : Trojan-Downloader.Win32.Agent.gwe ignoré

                            C:\WINDOWS\system32\xwxuadaw.dll Infecté : Trojan.Win32.Monder.cp ignoré

                            C:\WINDOWS\system32\xxjgwirm.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\xxyaxuu.dll Infecté : Trojan.Win32.Pakes.ds ignoré

                            C:\WINDOWS\system32\yirkwcex.exe Infecté : Trojan.Win32.Obfuscated.kp ignoré

                            C:\WINDOWS\system32\ystdbshk.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\yuuxqejk.dll Infecté : Trojan.Win32.Monder.gen ignoré

                            C:\WINDOWS\system32\yymudioa.exe Infecté : Trojan-Downloader.Win32.Tiny.id ignoré

                            C:\WINDOWS\system32\ziaq.exe Infecté : Trojan-Dropper.Win32.Delf.ajo ignoré

                            C:\WINDOWS\TEMP\Perflib_Perfdata_274.dat L'objet est verrouillé ignoré

                            C:\WINDOWS\TEMP\_avast4_\Webshlock.txt L'objet est verrouillé ignoré

                            C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré

                            C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré

                            C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré

                            Analyse terminée.

                            juste une question je n'ai pas selectionner les fichier lors de l'analyse
                            le site pouvait me les analyser... c'est grave ??
                            (lors de la page m'indiquant les fichier verrouillé et ceux infecté)
                            1. sKe69 Contributeur sécurité
                              Bon ...tu es encore bien infecté ( delf et Vundo ... :-/ )

                              Fais ceci pour voir où on en est :

                              Télécharges et installes le logiciel HijackThis :

                              ici : ftp://ftp.commentcamarche.com/download/HJTInstall.exe
                              ou ici : http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
                              ou ici : https://www.clubic.com/telecharger-fiche17891-hijackthis.html

                              1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
                              A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
                              Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme : "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .
                              Supprimes le raccourcis stp ...

                              Important :
                              Renommer le prg HijackThis (pour contrer une éventuelle infection Vundo):
                              Rends toi sur ton PC ici "C:\ program files\Trend Micro\HijackThis\HijackThis.exe"<---cliques droit sur ce dernier et choisis "renommer" : tapes monjack et valides .
                              Puis cliques droit sur "monjack.exe" et choisis "envoyer vers" -> le bureau ( créer un raccourci ).

                              tuto pour utilisation
                              Regardes ici, c'est parfaitement expliqué en images (merci balltrap34) :
                              http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
                              ( Ne fixes encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement )

                              2-!! Déconnectes toi et fermes toute tes applications en cours !!

                              Cliques sur le raccourci du bureau pour lancer le prg :
                              fais un scan "monjack" (ou HijackThis renommé) en cliquant sur : "Do a system scan and save a logfile"

                              ---> Postes le rapport généré pour analyse ...

                              • 1
                              • 2
                              • 3
                              • 4

                              Discussions similaires

                              Softonic,est-ce un virus ?
                              techmel1

                              6 réponses
                              Chrome://newtab
                              Nova

                              14 réponses
                              Désinstaller Softonic
                              Diguimette

                              5 réponses
                              Supprimer New Tab
                              tysaozon

                              8 réponses
                              Bouton pause/break
                              frans003

                              3 réponses