Ordinateur infecté par autorun

Résolu
modjo37 -  
Bonjour,
Voila le problème mon PC est visiblement infecté par autorun.inf
Je possède Avast Antivirus.
Comment faire pour me débarasser de ce vers??
Je vous remercie par avance pour l'aide que vous pourrez m'apporter!!
Configuration: Windows XP
Internet Explorer 7.0

54 réponses

Résumé de la discussion

L'infection par autorun.inf sur un PC Windows XP compromet le système et complique le nettoyage malgré Avast Antivirus et une connexion Livebox. Des mesures efficaces consistent à utiliser CCleaner pour nettoyer les traces, réparer le registre et supprimer les éléments résiduels, tout en évitant l'installation de barres ou outils indésirables. Pour la continuité de la connexion, la solution suggérée est de réinstaller la Livebox après le nettoyage afin de rétablir une association réseau stable et éviter les conflits. En cas de persistance, certains contributeurs ont partagé des rapports d’outils comme HiJackThis, SDFix ou ComboFix pour analyser les éléments avancés, bien que leur utilisation exige prudence et connaissances techniques.

Bobot (l’IA à votre service)
  1. jlpjlp Contributeur sécurité
    slt,

    Telecharge UsbFix sur ton bureau
    http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

    --> Lance l installation avec les parametres par default

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

    --> Double clic sur le raccourci UsbFix sur ton bureau

    --> Le pc va redémarer

    -->Apres redémarrage post le rapport UsbFix.txt

    Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
    Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides
    1. modjo37 Auteur
      Voici le rapport de USBfix
      Merci pour ta réactivité et ton aide

      -------------- UsbFix V2.409 ---------------

      * User : Mathieu - PORTABLE
      * Outils mis a jours le 18/11/2008 par Chiquitine29 et Chimay8
      * Recherche effectuée à 21:29:02 le 18/11/2008
      * Windows Xp - Internet Explorer 7.0.5730.11

      --------------- [ Processus actifs ] ----------------

      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
      C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
      C:\WINDOWS\system32\userinit.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\DOCUME~1\Mathieu\LOCALS~1\Temp\1.tmp\b2e.exe
      C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
      C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
      C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
      C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
      C:\WINDOWS\system32\DVDRAMSV.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
      C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\alg.exe

      --------------- [ Informations lecteurs ] ----------------

      C: - Lecteur fixe

      E: - Lecteur fixe

      F: - Lecteur fixe

      +- Contenu de l'autorun : E:\autorun.inf

      [autorun]
      shellexecute="resycled\boot.com e:"
      shell\Open\command="resycled\boot.com e:"
      shell=Open

      +- Contenu de l'autorun : F:\autorun.inf

      [autorun]
      shellexecute="resycled\boot.com f:"
      shell\Open\command="resycled\boot.com f:"
      shell=Open

      --------------- [ Lecteur C ] ----------------

      C: - Lecteur fixe

      +- Listing des fichiers présents :

      [17/01/2007 19:01][--a------] C:\AUTOEXEC.BAT
      [05/08/2004 11:00][-rahs----] C:\NTDETECT.COM
      [07/09/2006 01:22][-rahs----] C:\boot.ini
      [07/09/2006 01:22][-rahs----] C:\Settings.ini
      [07/09/2008 18:42][--a------] C:\ComboFix.txt
      [07/09/2008 18:42][--a------] C:\SWSTAMP.TXT
      [07/09/2008 18:42][--a------] C:\UsbFix.txt
      [07/09/2008 18:42][--a------] C:\xscan.txt
      [06/10/2005 12:29][--a------] C:\CONFIG.SYS
      [06/10/2005 12:29][--a------] C:\hiberfil.sys
      [06/10/2005 12:29][--a------] C:\IO.SYS
      [06/10/2005 12:29][--a------] C:\MSDOS.SYS
      [06/10/2005 12:29][--a------] C:\pagefile.sys

      --------------- [ Lecteur E ] ----------------

      E: - Lecteur fixe

      +- Listing des fichiers présents :

      [18/11/2008 21:27][-r-hs----] E:\autorun.inf

      --------------- [ Lecteur F ] ----------------

      F: - Lecteur fixe

      +- Listing des fichiers présents :

      [18/11/2008 21:27][-r-hs----] F:\autorun.inf

      --------------- [ Registre / Startup ] ----------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

      TOSCDSPD=C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
      ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
      WOOKIT=C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]

      00THotkey=C:\WINDOWS\system32\00THotkey.exe
      000StTHK=000StTHK.exe
      IgfxTray=C:\WINDOWS\system32\igfxtray.exe
      HotKeysCmds=C:\WINDOWS\system32\hkcmd.exe
      Persistence=C:\WINDOWS\system32\igfxpers.exe
      Apoint=C:\Program Files\Apoint2K\Apoint.exe
      TouchED=C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
      AGRSMMSG=AGRSMMSG.exe
      TFNF5=TFNF5.exe
      SmoothView=C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
      TPSMain=TPSMain.exe
      TPSODDCtl=TPSODDCtl.exe
      TMESRV.EXE=C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
      TMERzCtl.EXE=C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
      TOSDCR=TOSDCR.EXE
      TFncKy=TFncKy.exe
      IntelZeroConfig=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
      IntelWireless=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
      EOUApp=C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
      avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      RoxioDragToDisc="C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
      pdfw=C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
      AVFX Engine=C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
      LVCOMSX=C:\WINDOWS\system32\LVCOMSX.EXE
      LogitechVideoRepair=C:\Program Files\Logitech\Video\ISStart.exe
      LogitechVideoTray=C:\Program Files\Logitech\Video\LogiTray.exe
      SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      WOOWATCH=C:\PROGRA~1\Wanadoo\Watch.exe
      WOOTASKBARICON=C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
      QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
      Installed=1
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
      Installed=1
      NoChange=1
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
      Installed=1

      --------------- [ Registre / Mountpoint2 ] ----------------

      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\AutoRun\command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\explore\Command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{11f545d5-11da-11dd-a885-00166f7a4f6b}\Shell\open\Command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\AutoRun\command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\explore\Command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f9049-98d6-11dc-a7a5-000e7b981bdd}\Shell\open\Command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ad8f904c-98d6-11dc-a7a5-00166f7a4f6b}\Shell\AutoRun\command

      --------------- [ Nettoyage des disques ] ----------------

      E:\autorun.inf ~> fichier appelé : "E:\"resycled\boot.com e:"" ( absent ! )
      F:\autorun.inf ~> fichier appelé : "F:\"resycled\boot.com f:"" ( absent ! )
      Supprimé ! - [15/11/2008 03:52][-r-hs----] C:\resycled\boot.com
      Supprimé ! - [18/11/2008 21:30][dr-hs----] C:\resycled
      Supprimé ! - [18/11/2008 21:27][-r-hs----] E:\autorun.inf
      Supprimé ! - [15/11/2008 03:52][-r-hs----] E:\resycled\boot.com
      Supprimé ! - [18/11/2008 21:30][dr-hs----] E:\resycled
      Supprimé ! - [18/11/2008 21:27][-r-hs----] F:\autorun.inf
      Supprimé ! - [15/11/2008 03:52][-r-hs----] F:\resycled\boot.com
      Supprimé ! - [18/11/2008 21:27][dr-hs----] F:\resycled

      --------------- [ Resumé ] ----------------

      -> /!\ Le resultat doit etre interprété par un spécialiste /!\

      [17/01/2007 19:01][--a------] C:\AUTOEXEC.BAT
      [05/08/2004 11:00][-rahs----] C:\NTDETECT.COM
      [07/09/2006 01:22][-rahs----] C:\boot.ini
      [07/09/2006 01:22][-rahs----] C:\Settings.ini

      --------------- ! Fin du rapport ! ----------------
      1. jlpjlp Contributeur sécurité
        ok cela devrait être bon les autorun ont été virés

        encore des soucis ????

        colle un rapport hijackthis

        http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

        manuel :

        https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

        Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

        ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

        Ensuite avec Explorer créer un dossier c:\hijackthis
        Décompresser Hijackthis dans ce dossier.
        C'est important pour les sauvegardes."
        1. modjo37 Auteur
          A priori il n'y a plus de problèmes, Avast ne s'excite plus.
          Merci beaucoup!!!!!:))

          Voici le scan de HiJack

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 21:48:55, on 18/11/2008
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16735)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\system32\csrss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
          C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
          C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
          C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
          C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
          C:\WINDOWS\system32\DVDRAMSV.exe
          C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
          C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
          C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\System32\alg.exe
          C:\WINDOWS\explorer.exe
          C:\Program Files\Wanadoo\GestionnaireInternet.exe
          C:\Program Files\Wanadoo\ComComp.exe
          C:\PROGRA~1\Wanadoo\Toaster.exe
          C:\PROGRA~1\Wanadoo\Inactivity.exe
          C:\PROGRA~1\Wanadoo\PollingModule.exe
          C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
          C:\Program Files\Wanadoo\Watch.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\WINDOWS\system32\wbem\wmiprvse.exe

          O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
          2. jlpjlp Contributeur sécurité
            le rapport hijakhcits est incomplet

            pour protéger gratos ton ordi

            http://www.commentcamarche.net/telecharger/logiciel 4 securite

            mettre un antivirus

            AVAST en français ou ANTIVIR (en anglais mais très efficace)
            https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
            -------------
            des anti-espions :
            MalwareByte's Anti-Malware + SPYBOT

            +
            SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

            Rq : spybot et ad-aware ont sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
            --------
            un pare feu :
            celui de (Windows) ou mieux Online armor ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit) ou COMODO

            http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall
            https://www.01net.com/telecharger/windows/Securite/firewall/fiches/39911.html
            https://forum.pcastuces.com/sujet.asp?f=25&s=35606
            https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
            https://manuelsdaide.com/contact/
            http://www.open-files.com/forum/index.php?showtopic=29277
            http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

            -----------
            CCLEANER pour effacer les traces de surf
            ---------
            naviguer avec firefox ou safari ou opera et non internet explorer plus touché par les virus
            http://www.mozilla-europe.org/fr/products/firefox/
            1. modjo37 Auteur
              Voici un nouveau rapport de Hijack
              Encore merci pour ton aide

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 22:14:58, on 18/11/2008
              Platform: Windows XP SP3 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16735)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
              C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
              C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              C:\WINDOWS\system32\DVDRAMSV.exe
              C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
              C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
              C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
              C:\WINDOWS\system32\svchost.exe
              C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
              C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
              C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\system32\wbem\wmiprvse.exe
              C:\WINDOWS\system32\00THotkey.exe
              C:\WINDOWS\system32\hkcmd.exe
              C:\WINDOWS\system32\igfxpers.exe
              C:\WINDOWS\System32\alg.exe
              C:\Program Files\Apoint2K\Apoint.exe
              C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
              C:\WINDOWS\AGRSMMSG.exe
              C:\WINDOWS\system32\TFNF5.exe
              C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
              C:\WINDOWS\system32\TPSMain.exe
              C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
              C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE
              C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
              C:\WINDOWS\system32\TPSBattM.exe
              C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
              C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\Program Files\Apoint2K\Apntex.exe
              C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
              C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\Program Files\Logitech\Video\LogiTray.exe
              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
              C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              C:\WINDOWS\system32\RAMASST.exe
              C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
              C:\Program Files\Logitech\Video\FxSvr2.exe
              C:\PROGRA~1\Wanadoo\ComComp.exe
              C:\PROGRA~1\Wanadoo\Toaster.exe
              C:\PROGRA~1\Wanadoo\Inactivity.exe
              C:\PROGRA~1\Wanadoo\PollingModule.exe
              C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
              C:\PROGRA~1\Wanadoo\Watch.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
              C:\WINDOWS\system32\HPZipm12.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
              O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
              O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
              O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
              O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
              O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
              O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
              O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
              O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
              O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
              O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
              O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
              O4 - HKLM\..\Run: [TPSODDCtl] TPSODDCtl.exe
              O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
              O4 - HKLM\..\Run: [TMERzCtl.EXE] C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
              O4 - HKLM\..\Run: [TOSDCR] TOSDCR.EXE
              O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
              O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
              O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
              O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
              O4 - HKLM\..\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
              O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
              O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
              O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
              O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
              O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
              O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer = 85.255.112.110;85.255.112.172
              O17 - HKLM\System\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer = 85.255.112.110;85.255.112.172
              O20 - AppInit_DLLs: yaorhv.dll
              O23 - Service: ArcGIS License Manager - Unknown owner - C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
              O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
              O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
              O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
              O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
              O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
              O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
              1. jlpjlp Contributeur sécurité
                aie on a bien fais de chercher plus loin!!!! tu es détourné en ukraine :(

                smit fraud fix (colle le rapport)

                1/ telecharger :

                http://siri.urz.free.fr/Fix/SmitfraudFix.php

                2/ fais l'option 5 et colle le rapport
                1. modjo37 Auteur
                  Aie!!!Ca veut dire quoi??
                  D'autre part, depuis l'utilisation de SmitFraud je n'arrive plus me connecter à internet. J'envoie ce message d'un autre PC.
                  Voici le message:
                  C:\Programe files\wanadoo\gestionnaire internet.HPL est absent.
                  Est ce que je dois déinstaller et réinstaller Orange
                  Merci!!!!

                  SmitFraudFix v2.375

                  Rapport fait à 22:34:18,18, 18/11/2008
                  Executé à partir de C:\Documents and Settings\Mathieu\Bureau\SmitfraudFix
                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                  Le type du système de fichiers est NTFS
                  Fix executé en mode normal

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS Avant Fix

                  Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

                  Description: Intel(R) PRO/100 VE Network Connection - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 85.255.112.110;85.255.112.172

                  Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

                  Description: Intel(R) PRO/Wireless 2200BG Network Connection - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 85.255.112.110;85.255.112.172

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: DhcpNameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: DhcpNameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS2\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS2\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: NameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS2\Services\Tcpip\..\{4ADEC891-E2E1-4EC4-A64B-8FCE497BB46F}: NameServer=85.255.112.110;85.255.112.172

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS Après Fix

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{26766FCC-AB30-4E61-8F38-576221DC7EA4}: DhcpNameServer=85.255.112.110;85.255.112.172
                  1. jlpjlp Contributeur sécurité
                    oui reinstalle orange pour voir

                    _________________
                    aie car
                    comme indiqué par smitfraudfix:

                    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

                    Description: Intel(R) PRO/100 VE Network Connection - Miniport d'ordonnancement de paquets
                    DNS Server Search Order: 85.255.112.110;85.255.112.172

                    Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

                    ________________

                    scan avec
                    MalwareByte's Anti-Malware en mode normal et vire ce qui est trouvé et colle le rapport

                    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

                    _______________

                    remets ensuite un rapport hijakhits et dis tes soucis

                    rq:

                    Pour réparer la connexion internet:

                    1/
                    # Cliquez sur le bouton Démarrer.
                    # Cliquez sur l'option de menu Paramètres.
                    # Cliquez sur l'option Panneau de configuration.
                    # Après l'ouverture du Panneau de configuration, faites un double clic sur l'icône Connexions réseau. Si votre Panneau de configuration est paramétré pour un affichage en catégories, faites un double clic sur Connexions réseau et Internet puis cliquez sur Connexions réseau tout en bas.
                    # Vous verrez alors une liste de toutes les connexions réseau disponibles. Repérez la connexion vers votre adaptateur Sans Fil ou Réseau local et faites un clic droit dessus.
                    # Cliquez simplement sur l'option de menu Réparer.

                    2/
                    utilise lspfix
                    https://www.01net.com/telecharger/windows/Utilitaire/reseau/fiches/33379.html
                    http://lanceyien-info.com/index.php?page=utilitaires#lspfix
                    http://www.zdnet.fr/telecharger/windows/fiche/0,39021313,39138667s,00.htm

                    3/
                    -Télécharge cet outil d'ici:
                    WinSockFix
                    http://www.softpedia.com/progDownload/WinS...load-15337.html
                    (prends le deuxieme miroir)
                    -Une fois téléchargé,tu le lances

                    -Tu cliques sur"ReG-Backup" pour créer une sauvegarde du registre,dans un dossier de ton choix.

                    -Une fois la sauvegarde éffectuée,clique sur "Fix", au méssage "WinsockFix will now attempt to Repair your connection" tu reponds par "OUI"

                    -Il va travailler,tu le laisse faire,à la fin des corrections tu auras le méssage suivant"Repair completed Please Reboot", tu cliques sur "OK"

                    -Le PC va redémarrer,

                    -Communique les résultats.

                    ___________________

                    4/
                    erreur 1068 - Suite à infection virale de votre ordinateur avec un virus du type "bagle" ou "beagle" ...

                    Vous n'arrivez plus a vous connecter avec votre wifi. Si vous allez dans les outils administration sur la page "services" pour activer "configuration automatique sans fil" vous avez l'erreur 1068.

                    Si c'est votre cas et que vous vous etes arraché les cheveux, voici la solution:

                    Vous devez aller dans la base de registre avec regedit ou autre.

                    1. Demarrer > executer > Tapez : "regedit" en ok

                    2. Allez sur HKEY Local Machine > system > CurrentControlSet > Services > Ndisuio

                    Dans cette clé il y a une entrée nommée "START", double cliquez dessus. Cette entrée doit être 3 pour que le protocole NDIS E/S demarre correctement.

                    Un virus comme "bagle / Beagle" change cette entrée et la met sur 4 (disable) et cause le probleme que vous avez.

                    Reboutez ensuite votre PC et tout devrait rentrer dans l'ordre.

                    5/ utilise ZEB RESTORE

                    http://telechargement.zebulon.fr/zeb-restore.html

                    ____________

                    6/
                    ou repare windows

                    http://www.informatruc.com/reparer-windows-xp/

                    7/ sinon on verra pour restaurer avant l'utilisation de smitfraudfix
                    1. modjo37 Auteur
                      Merci
                      Pour l'instant je vais te laisser. Je t'envois tout ça demain. Encore merci pour ton aide
                      A demain
                      *Bonne soirée
                      1. modjo37 Auteur
                        Bonsoir
                        Alors voila, plusieurs problèmes:

                        1- Lorsque je lance Malwarebytes au bout de une ou 2 min un messagage d'erreur apparaît me disant que Malwarebytes a rencontré un prb et doit fermer. J'ai essayé plusieurs fois, j'ai désinstallé et réinstallé une fois...rien n'y fait (J'effectue bien le scan en mode sans échec).

                        2- J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
                        Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
                        Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
                        (la live box fonctionne puisque je l'utilise en ce moment)

                        3-A l'étape 3 de la réparation internet que tu m'as fourni, lorsque je veux créer une sauvegarde de registre avec Winsofix un message d'erreur apparait
                        "Warning Error saving file C:\ERDNT\SECURITY continue with the next file?
                        du coup je choisis NON

                        Voila, je suis complétement largué!!!
                        J'espère que tu pourras m'aider!!!!
                        Encore MERCI
                        1. modjo37 Auteur
                          >PS: je suis entrain de refaire un scan malwarebytes en mode normal ,ça a l'air de fonctionner .désolé
                          1. modjo37 Auteur
                            Voici le rapport de Malwarebyte

                            Malwarebytes' Anti-Malware 1.30
                            Version de la base de données: 1306
                            Windows 5.1.2600 Service Pack 3

                            19/11/2008 19:29:30
                            mbam-log-2008-11-19 (19-29-30).txt

                            Type de recherche: Examen complet (C:\|E:\|)
                            Eléments examinés: 139424
                            Temps écoulé: 36 minute(s), 50 second(s)

                            Processus mémoire infecté(s): 0
                            Module(s) mémoire infecté(s): 0
                            Clé(s) du Registre infectée(s): 2
                            Valeur(s) du Registre infectée(s): 1
                            Elément(s) de données du Registre infecté(s): 11
                            Dossier(s) infecté(s): 0
                            Fichier(s) infecté(s): 3

                            Processus mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Module(s) mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Clé(s) du Registre infectée(s):
                            HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

                            Valeur(s) du Registre infectée(s):
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

                            Elément(s) de données du Registre infecté(s):
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System (Rootkit.DNSChanger.H) -> Data: kddvu.exe -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
                            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Delete on reboot.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{26766fcc-ab30-4e61-8f38-576221dc7ea4}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.
                            HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4adec891-e2e1-4ec4-a64b-8fce497bb46f}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.110;85.255.112.172 -> Quarantined and deleted successfully.

                            Dossier(s) infecté(s):
                            (Aucun élément nuisible détecté)

                            Fichier(s) infecté(s):
                            C:\WINDOWS\system32\kddvu.exe (Rootkit.DNSChanger.H) -> Delete on reboot.
                            C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.
                            C:\Documents and Settings\Mathieu\Local Settings\Temp\~tmpa.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                            1. modjo37 Auteur
                              Et voici le rapport de Hijack comme prévu
                              Merci

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 19:40:39, on 19/11/2008
                              Platform: Windows XP SP3 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16735)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                              C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                              C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
                              C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                              C:\WINDOWS\system32\DVDRAMSV.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
                              C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
                              C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\PROGRA~1\ESRI\License\arcgis9x\ARCGIS.exe
                              C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
                              C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
                              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              C:\WINDOWS\system32\00THotkey.exe
                              C:\WINDOWS\system32\hkcmd.exe
                              C:\WINDOWS\system32\igfxpers.exe
                              C:\Program Files\Apoint2K\Apoint.exe
                              C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
                              C:\WINDOWS\AGRSMMSG.exe
                              C:\WINDOWS\system32\TFNF5.exe
                              C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                              C:\WINDOWS\system32\TPSMain.exe
                              C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE
                              C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
                              C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
                              C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
                              C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
                              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
                              C:\WINDOWS\system32\TPSBattM.exe
                              C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
                              C:\Program Files\Apoint2K\Apntex.exe
                              C:\WINDOWS\system32\LVCOMSX.EXE
                              C:\Program Files\Logitech\Video\LogiTray.exe
                              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                              C:\Program Files\QuickTime\qttask.exe
                              C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                              C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                              C:\WINDOWS\system32\RAMASST.exe
                              C:\Program Files\Logitech\Video\FxSvr2.exe
                              C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                              C:\WINDOWS\system32\wuauclt.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                              O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                              O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
                              O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
                              O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                              O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
                              O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
                              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                              O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
                              O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                              O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
                              O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                              O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
                              O4 - HKLM\..\Run: [TPSODDCtl] TPSODDCtl.exe
                              O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
                              O4 - HKLM\..\Run: [TMERzCtl.EXE] C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
                              O4 - HKLM\..\Run: [TOSDCR] TOSDCR.EXE
                              O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
                              O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
                              O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
                              O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
                              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
                              O4 - HKLM\..\Run: [pdfw] C:\Program Files\Amic Utilities\PDF Writer Pro\pdfwload.exe
                              O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
                              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                              O4 - HKLM\..\Run: [C:\WINDOWS\system32\kddvu.exe] C:\WINDOWS\system32\kddvu.exe
                              O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              O4 - Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
                              O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                              O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
                              O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                              O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.inoculer.com/antivirus/Msie/bitdefender.cab
                              O20 - AppInit_DLLs: yaorhv.dll
                              O23 - Service: ArcGIS License Manager - Unknown owner - C:\PROGRA~1\ESRI\License\arcgis9x\lmgrd.exe
                              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                              O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
                              O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                              O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
                              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                              O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                              O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                              O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
                              1. jlpjlp Contributeur sécurité
                                ok parfait malwarebyte a bien bossé!!! vire ce qui est en quarantaine dedans

                                _________________

                                télécharge combofix (par sUBs) ici :

                                http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                                et enregistre le sur le bureau.

                                déconnecte toi d'internet et ferme toutes tes applications.

                                désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                                double-clique sur combofix.exe et suis les instructions

                                à la fin, il va produire un rapport C:\ComboFix.txt

                                réactive ton parefeu, ton antivirus, la garde de ton antispyware

                                copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                                Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                                Tu as un tutoriel complet ici :

                                https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
                                1. modjo37 Auteur
                                  Voici le rapport de combofix

                                  Je n'arrive toujours pas à installer orange et par conséquent impossibilité de me connecter à internet
                                  <(J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
                                  Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
                                  Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
                                  (la live box fonctionne puisque je l'utilise en ce moment)
                                  <

                                  ComboFix 08-11-18.A2 - Mathieu 2008-11-19 20:59:13.2 - NTFSx86
                                  Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.163 [GMT 1:00]
                                  Lancé depuis: c:\documents and settings\Mathieu\Bureau\combofix.exe
                                  Commutateurs utilisés :: c:\documents and settings\Mathieu\Bureau\winxp_fr_per_bf.exe
                                  * Un nouveau point de restauration a été créé
                                  .

                                  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                  .

                                  c:\windows\IE4 Error Log.txt

                                  .
                                  ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-19 au 2008-11-19 ))))))))))))))))))))))))))))))))))))
                                  .

                                  2008-11-19 18:32 . 2008-11-19 20:28 <REP> d-------- C:\ERDNT
                                  2008-11-19 18:29 . 2008-11-19 18:29 <REP> d-------- C:\restau
                                  2008-11-19 18:18 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
                                  2008-11-19 18:17 . 2008-11-19 18:18 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
                                  2008-11-19 18:17 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
                                  2008-11-18 22:33 . 2007-09-05 23:22 289,144 --a------ c:\windows\system32\VCCLSID.exe
                                  2008-11-18 22:33 . 2006-04-27 16:49 288,417 --a------ c:\windows\system32\SrchSTS.exe
                                  2008-11-18 22:33 . 2008-10-01 14:51 87,552 --a------ c:\windows\system32\VACFix.exe
                                  2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\o4Patch.exe
                                  2008-11-18 22:33 . 2008-05-18 20:40 82,944 --a------ c:\windows\system32\IEDFix.exe
                                  2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\IEDFix.C.exe
                                  2008-11-18 22:33 . 2008-08-18 11:19 82,432 --a------ c:\windows\system32\404Fix.exe
                                  2008-11-18 22:33 . 2003-06-05 20:13 53,248 --a------ c:\windows\system32\Process.exe
                                  2008-11-18 22:33 . 2004-07-31 17:50 51,200 --a------ c:\windows\system32\dumphive.exe
                                  2008-11-18 22:33 . 2007-10-03 23:36 25,600 --a------ c:\windows\system32\WS2Fix.exe
                                  2008-11-18 21:24 . 2008-11-18 21:30 <REP> d-------- c:\program files\UsbFix
                                  2008-11-18 20:48 . 2008-11-18 20:48 27,904 --a------ c:\windows\system32\drivers\ndisprot.sys
                                  2008-11-13 16:19 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
                                  2008-11-13 16:18 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
                                  2008-11-06 16:16 . 2008-11-06 16:16 <REP> d-------- c:\program files\PDFCreator Toolbar
                                  2008-11-06 16:16 . 2008-11-06 16:18 <REP> d-------- c:\program files\PDFCreator
                                  2008-11-06 16:16 . 2008-11-06 16:16 253,139 --a------ c:\windows\PDFCreator_Toolbar_Uninstaller_2390.exe
                                  2008-11-06 16:16 . 1998-07-13 02:08 141,312 --a------ c:\windows\system32\MSCMCFR.DLL
                                  2008-11-06 16:16 . 1998-06-24 01:00 137,000 --a------ c:\windows\system32\MSMAPI32.OCX
                                  2008-11-06 16:16 . 1998-07-13 02:08 119,568 --a------ c:\windows\system32\VB6FR.DLL
                                  2008-11-06 16:16 . 2001-10-28 17:42 116,224 --a------ c:\windows\system32\pdfcmnnt.dll
                                  2008-11-06 16:16 . 1998-07-13 02:08 59,904 --a------ c:\windows\system32\MSCC2FR.DLL
                                  2008-11-06 16:16 . 1998-07-06 01:00 23,552 --a------ c:\windows\system32\MSMPIDE.DLL
                                  2008-11-01 14:35 . 2008-11-01 14:35 <REP> d-------- c:\program files\MSECache
                                  2008-10-27 12:43 . 2008-04-14 04:33 159,232 --a------ c:\windows\system32\ptpusd.dll
                                  2008-10-27 12:43 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll
                                  2008-10-24 12:34 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll

                                  .
                                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                  .
                                  2008-11-18 22:01 --------- d-----w c:\program files\Wanadoo
                                  2008-11-18 19:33 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
                                  2008-11-17 19:07 --------- d-----w c:\program files\eMule
                                  2008-11-17 18:40 --------- d-----w c:\program files\PowerArchiver
                                  2008-11-16 20:50 --------- d-----w c:\program files\SpywareBlaster
                                  2008-11-11 15:31 --------- d-----w c:\documents and settings\Mathieu\Application Data\uTorrent
                                  2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
                                  2008-10-05 12:55 --------- d-----w c:\program files\NOS
                                  2008-10-05 12:55 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
                                  2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
                                  2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Printer Info Cache
                                  2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Image Zone Express
                                  2008-09-17 18:41 69,689 ----a-w c:\windows\UNZIP.DLL
                                  2008-09-17 18:41 507,904 ----a-w c:\windows\TMUPDATE.DLL
                                  2008-09-17 18:41 286,720 ----a-w c:\windows\PATCH.EXE
                                  2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
                                  2008-09-14 20:47 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe
                                  2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll
                                  2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll
                                  2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll
                                  .

                                  ((((((((((((((((((((((((((((( snapshot@2008-09-07_19.41.45.50 )))))))))))))))))))))))))))))))))))))))))
                                  .
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
                                  + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
                                  + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
                                  + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
                                  + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
                                  + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
                                  + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
                                  + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
                                  + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
                                  + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
                                  + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
                                  + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
                                  + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
                                  + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
                                  + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
                                  + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
                                  + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
                                  + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
                                  + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
                                  + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
                                  + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
                                  + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
                                  + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
                                  + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
                                  + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
                                  + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
                                  + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
                                  + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
                                  + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
                                  + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
                                  + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
                                  + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
                                  + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
                                  + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
                                  + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
                                  + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
                                  + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
                                  + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
                                  + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
                                  + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
                                  + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
                                  + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
                                  + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
                                  + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
                                  + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
                                  + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
                                  + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
                                  + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
                                  + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
                                  + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
                                  + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
                                  + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
                                  + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
                                  + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
                                  + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
                                  + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
                                  + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
                                  + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
                                  + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
                                  + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
                                  + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
                                  + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
                                  + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
                                  + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
                                  + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
                                  + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
                                  + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
                                  + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
                                  + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
                                  + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
                                  + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
                                  + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
                                  + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
                                  + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
                                  + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
                                  + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
                                  + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
                                  + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
                                  + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
                                  + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
                                  + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
                                  + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
                                  + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
                                  + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
                                  + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
                                  + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
                                  + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
                                  + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
                                  + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
                                  + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
                                  + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
                                  + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
                                  + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
                                  + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
                                  + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
                                  + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
                                  + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
                                  + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
                                  + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
                                  + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
                                  + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
                                  + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
                                  + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
                                  + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
                                  + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
                                  + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
                                  + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
                                  + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
                                  + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
                                  + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
                                  + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
                                  + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
                                  + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
                                  + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
                                  + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
                                  + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
                                  + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
                                  + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
                                  + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
                                  + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
                                  + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
                                  + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
                                  + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
                                  + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
                                  + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
                                  + 2004-08-05 10:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
                                  + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
                                  + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
                                  + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
                                  + 2004-08-05 10:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
                                  + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
                                  + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
                                  + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
                                  + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
                                  + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
                                  + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
                                  + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
                                  + 2004-08-05 10:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
                                  + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
                                  + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
                                  + 2004-08-05 10:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
                                  + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
                                  + 2004-08-05 10:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
                                  + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
                                  + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
                                  + 2004-08-05 10:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
                                  + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
                                  + 2004-08-05 10:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
                                  + 2004-08-05 10:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
                                  + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
                                  + 2004-08-05 10:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
                                  + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
                                  + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
                                  + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
                                  + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
                                  + 2004-08-05 10:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
                                  + 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
                                  + 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
                                  + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
                                  + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
                                  + 2004-08-05 10:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
                                  + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
                                  + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
                                  + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
                                  + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
                                  + 2004-08-05 10:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
                                  + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
                                  + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
                                  + 2004-08-05 10:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
                                  + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
                                  + 2004-08-05 10:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
                                  + 2004-08-05 10:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
                                  + 2004-08-05 10:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
                                  + 2004-08-05 10:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
                                  + 2004-08-05 10:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
                                  + 2004-08-05 10:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
                                  + 2004-08-05 10:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
                                  + 2001-03-02 19:52:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
                                  + 2004-08-05 10:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
                                  + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
                                  + 2004-08-05 10:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
                                  + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
                                  + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
                                  + 2004-08-03 20:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
                                  + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
                                  + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
                                  + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
                                  + 2004-08-05 10:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
                                  + 2004-08-05 10:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
                                  + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
                                  + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
                                  + 2004-08-05 10:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
                                  + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
                                  + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
                                  + 2004-08-05 10:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
                                  + 2004-08-05 10:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
                                  + 2004-08-05 10:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
                                  + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
                                  + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
                                  + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
                                  + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
                                  + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
                                  + 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
                                  + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
                                  + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
                                  + 2004-08-05 10:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
                                  + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
                                  + 2004-08-05 10:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
                                  + 2004-08-05 10:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
                                  + 2004-08-05 10:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
                                  + 2006-10-23 15:34:35 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
                                  + 2004-08-05 10:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
                                  + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
                                  + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
                                  + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
                                  + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
                                  + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
                                  + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
                                  + 2004-08-05 10:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
                                  + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
                                  + 2004-08-05 10:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
                                  + 2005-07-26 04:29:18 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
                                  + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
                                  + 2005-07-26 04:29:19 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
                                  + 2004-08-03 22:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
                                  + 2004-08-05 10:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
                                  + 2006-10-23 15:34:35 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
                                  + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
                                  + 2004-08-05 10:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
                                  + 2004-08-05 10:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
                                  + 2004-08-05 10:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
                                  + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
                                  + 2004-08-05 10:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
                                  + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
                                  + 2004-08-05 10:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
                                  + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
                                  + 2004-08-05 10:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
                                  + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
                                  + 2004-08-05 10:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
                                  + 2005-07-26 04:29:20 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
                                  + 2005-07-26 04:29:21 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
                                  + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
                                  + 2004-08-05 10:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
                                  + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
                                  + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
                                  + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
                                  + 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
                                  + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
                                  + 2004-08-05 10:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
                                  + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
                                  + 2004-08-05 10:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
                                  + 2004-08-05 10:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
                                  + 2004-08-05 10:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
                                  + 2004-08-05 10:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
                                  + 2004-08-05 10:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
                                  + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
                                  + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
                                  + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
                                  + 2005-07-26 04:29:21 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
                                  + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
                                  + 2005-07-26 04:29:22 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
                                  + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
                                  + 2004-08-05 10:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
                                  + 2004-08-05 10:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
                                  + 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
                                  + 2004-08-05 10:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
                                  + 2005-07-26 04:29:23 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
                                  + 2005-03-08 01:29:38 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
                                  + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
                                  + 2004-08-05 10:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
                                  + 2004-08-05 10:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
                                  + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
                                  + 2005-07-26 04:29:25 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
                                  + 2005-07-26 04:29:27 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
                                  + 2004-08-05 10:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
                                  + 2004-08-05 10:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
                                  + 2004-08-05 10:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
                                  + 2004-08-05 10:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
                                  + 2007-01-08 18:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
                                  + 2004-08-05 10:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
                                  + 2004-08-05 10:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
                                  + 2004-08-05 10:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
                                  + 2004-08-05 10:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
                                  + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
                                  + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
                                  + 2004-08-05 10:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
                                  + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
                                  + 2004-08-05 10:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
                                  + 2004-08-05 10:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
                                  + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
                                  + 2004-08-05 10:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
                                  + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
                                  + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
                                  + 2004-08-05 10:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
                                  + 2004-05-11 22:18:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
                                  + 2004-08-05 10:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
                                  + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
                                  + 2004-08-05 10:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
                                  + 2004-08-05 10:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
                                  + 2006-10-23 15:34:36 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
                                  + 2004-08-05 10:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
                                  + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
                                  + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
                                  + 2004-08-05 10:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
                                  + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
                                  + 2004-08-05 10:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
                                  + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
                                  + 2004-08-05 10:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
                                  + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
                                  + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
                                  + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
                                  + 2004-08-05 10:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
                                  + 2004-08-05 10:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
                                  + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
                                  + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
                                  + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
                                  + 2004-08-05 10:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
                                  + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
                                  + 2004-08-05 10:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
                                  + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
                                  + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
                                  + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
                                  + 2004-08-05 10:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
                                  + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
                                  + 2004-08-05 10:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
                                  + 2004-08-05 10:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
                                  + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
                                  + 2004-08-05 10:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
                                  + 2004-08-05 10:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
                                  + 2004-08-05 10:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
                                  + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
                                  + 2004-08-05 10:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
                                  + 2004-08-05 10:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
                                  + 2004-08-05 10:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
                                  + 2004-08-05 10:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
                                  + 2004-08-05 10:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
                                  + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
                                  + 2004-08-05 10:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
                                  + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
                                  + 2004-08-05 10:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
                                  + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
                                  + 2004-08-05 10:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
                                  + 2004-08-05 10:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
                                  + 2004-08-05 10:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
                                  + 2004-08-05 10:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
                                  + 2004-08-05 10:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
                                  + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
                                  + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
                                  + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
                                  + 2004-08-05 10:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
                                  + 2004-08-05 10:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
                                  + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
                                  + 2004-08-03 21:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
                                  + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
                                  + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
                                  + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
                                  + 2004-08-05 10:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
                                  + 2004-08-05 10:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
                                  + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
                                  + 2004-08-05 10:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
                                  + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
                                  + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
                                  + 2004-08-05 10:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
                                  + 2004-08-05 10:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
                                  + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
                                  + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
                                  + 2004-08-05 10:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
                                  + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
                                  + 2004-08-05 10:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
                                  + 2004-08-05 10:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
                                  + 2004-08-05 10:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
                                  + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
                                  + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
                                  + 2004-08-03 21:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
                                  + 2004-08-03 21:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
                                  + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
                                  + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
                                  + 2004-08-05 10:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
                                  + 2004-08-05 10:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
                                  + 2004-08-05 10:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
                                  + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
                                  + 2004-08-05 10:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
                                  + 2004-08-05 10:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
                                  + 2004-08-05 10:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
                                  + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
                                  + 2004-08-05 10:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
                                  + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
                                  + 2004-08-05 10:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
                                  + 2004-08-05 10:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
                                  + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
                                  + 2004-08-05 10:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
                                  + 2004-08-05 10:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
                                  + 2004-08-05 10:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
                                  + 2004-08-05 10:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
                                  + 2004-08-05 10:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
                                  + 2004-08-05 10:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
                                  + 2004-08-05 10:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
                                  + 2004-08-05 10:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
                                  + 2004-08-05 10:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
                                  + 2006-08-24 12:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
                                  + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
                                  + 2004-08-05 10:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
                                  + 2004-08-05 10:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
                                  + 2004-08-05 10:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
                                  + 2008-07-07 20:18:27 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
                                  + 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
                                  + 2004-08-05 10:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
                                  + 2004-08-05 10:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
                                  + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
                                  + 2004-08-05 10:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
                                  + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
                                  + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
                                  + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
                                  + 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
                                  + 2004-08-05 10:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
                                  + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
                                  + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
                                  + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
                                  + 2004-08-05 10:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
                                  + 2004-08-05 10:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
                                  + 2004-08-05 10:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
                                  + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
                                  + 2004-08-05 10:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
                                  + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
                                  + 2004-08-05 10:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
                                  + 2004-08-05 10:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
                                  + 2004-08-05 10:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
                                  + 2004-08-05 10:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
                                  + 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
                                  + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
                                  + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
                                  + 2004-08-05 10:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
                                  + 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
                                  + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
                                  + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
                                  + 2004-08-05 10:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
                                  + 2003-03-24 13:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
                                  + 2004-08-05 10:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
                                  + 2004-08-05 10:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
                                  + 2004-08-05 10:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
                                  + 2004-08-05 10:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
                                  + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
                                  + 2004-08-05 10:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
                                  + 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
                                  + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
                                  + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
                                  + 2004-08-05 10:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
                                  + 2004-08-05 10:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
                                  + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
                                  + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
                                  + 2004-08-05 10:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
                                  + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
                                  + 2004-08-05 10:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
                                  + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
                                  + 2004-08-05 10:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
                                  + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
                                  + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
                                  + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
                                  + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
                                  + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
                                  + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
                                  + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
                                  + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
                                  + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
                                  + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
                                  + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
                                  + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
                                  + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
                                  + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
                                  + 2004-08-05 10:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
                                  + 2004-08-05 10:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
                                  + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
                                  + 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
                                  + 2004-08-05 10:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
                                  + 2004-08-05 10:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
                                  + 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
                                  + 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
                                  + 2004-08-05 10:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
                                  + 2004-08-05 10:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
                                  + 2004-08-05 10:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
                                  + 2004-08-05 10:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
                                  + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
                                  + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
                                  + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
                                  + 2004-08-05 10:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
                                  + 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
                                  + 2004-08-03 22:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
                                  + 2004-08-05 10:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
                                  + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
                                  + 2004-08-05 10:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
                                  + 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
                                  + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
                                  + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
                                  + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
                                  + 2004-08-05 10:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
                                  + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
                                  + 2004-08-05 10:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
                                  + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
                                  + 2004-08-05 10:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
                                  + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
                                  + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
                                  + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
                                  + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
                                  + 2006-10-17 11:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
                                  + 2004-08-05 10:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
                                  + 2004-08-05 10:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
                                  + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
                                  + 2004-08-05 10:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
                                  + 2004-08-05 10:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
                                  + 2004-08-05 10:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
                                  + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
                                  + 2004-08-05 10:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
                                  + 2004-08-05 10:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
                                  + 2004-08-05 10:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
                                  + 2004-08-05 10:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
                                  + 2004-08-05 10:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
                                  + 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
                                  + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
                                  + 2004-08-05 10:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
                                  + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
                                  + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
                                  + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
                                  + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
                                  + 2004-08-05 10:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
                                  + 2004-08-04 00:43:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
                                  + 2004-08-05 10:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
                                  + 2004-08-05 10:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
                                  + 2004-08-05 10:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
                                  + 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
                                  + 2004-08-05 10:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
                                  + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
                                  + 2004-08-05 10:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
                                  + 2004-08-05 10:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
                                  + 2004-08-05 10:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
                                  + 2004-08-05 10:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
                                  + 2004-08-05 10:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
                                  + 2004-08-05 10:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
                                  + 2004-08-05 10:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
                                  + 2004-08-05 10:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
                                  + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
                                  + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
                                  + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
                                  + 1998-03-22 11:34:14 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
                                  + 1998-03-22 11:34:14 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
                                  + 1998-10-07 15:46:18 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
                                  + 1998-10-07 15:50:22 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
                                  + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
                                  + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll
                                  + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll.000
                                  + 2001-08-23 14:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
                                  + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
                                  + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
                                  + 2005-05-27 02:08:06 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
                                  + 2005-05-27 02:08:06 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
                                  + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
                                  + 2004-08-03 23:54:30 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
                                  + 2006-06-01 18:48:44 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
                                  + 2006-06-01 18:48:44 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
                                  + 2006-10-17 11:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
                                  + 2004-08-05 10:00:00 25,216 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
                                  + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
                                  + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
                                  + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
                                  + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
                                  + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
                                  + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
                                  + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
                                  + 2004-08-05 10:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
                                  + 2004-08-05 10:00:00 7,680 -c----w c:\windows\
                                  1. modjo37 Auteur
                                    Voici le rapport de combofix

                                    Je n'arrive toujours pas à installer orange et par conséquent impossibilité de me connecter à internet
                                    <(J'ai essayé de réinstaller Orange et la ça ne fonctionne pas non plus:
                                    Avec le Wi fi: l'association entre PC et livebox ne se fait pas."Nous avons détecté que vous etes équipé de Windows XP service pack 3,..la connexion ne s'établie pas et je ne peut passer à l'étape suivante (reste des plombes comme ça)
                                    Avec cable ethernet, idem sauf que le message d'erreur est le suivant: ordinateur n'a pu obtenir adresse IP.
                                    (la live box fonctionne puisque je l'utilise en ce moment)
                                    <

                                    ComboFix 08-11-18.A2 - Mathieu 2008-11-19 20:59:13.2 - NTFSx86
                                    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.163 [GMT 1:00]
                                    Lancé depuis: c:\documents and settings\Mathieu\Bureau\combofix.exe
                                    Commutateurs utilisés :: c:\documents and settings\Mathieu\Bureau\winxp_fr_per_bf.exe
                                    * Un nouveau point de restauration a été créé
                                    .

                                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                    .

                                    c:\windows\IE4 Error Log.txt

                                    .
                                    ((((((((((((((((((((((((((((( Fichiers créés du 2008-10-19 au 2008-11-19 ))))))))))))))))))))))))))))))))))))
                                    .

                                    2008-11-19 18:32 . 2008-11-19 20:28 <REP> d-------- C:\ERDNT
                                    2008-11-19 18:29 . 2008-11-19 18:29 <REP> d-------- C:\restau
                                    2008-11-19 18:18 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
                                    2008-11-19 18:17 . 2008-11-19 18:18 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
                                    2008-11-19 18:17 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
                                    2008-11-18 22:33 . 2007-09-05 23:22 289,144 --a------ c:\windows\system32\VCCLSID.exe
                                    2008-11-18 22:33 . 2006-04-27 16:49 288,417 --a------ c:\windows\system32\SrchSTS.exe
                                    2008-11-18 22:33 . 2008-10-01 14:51 87,552 --a------ c:\windows\system32\VACFix.exe
                                    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\o4Patch.exe
                                    2008-11-18 22:33 . 2008-05-18 20:40 82,944 --a------ c:\windows\system32\IEDFix.exe
                                    2008-11-18 22:33 . 2008-10-10 07:58 82,944 --a------ c:\windows\system32\IEDFix.C.exe
                                    2008-11-18 22:33 . 2008-08-18 11:19 82,432 --a------ c:\windows\system32\404Fix.exe
                                    2008-11-18 22:33 . 2003-06-05 20:13 53,248 --a------ c:\windows\system32\Process.exe
                                    2008-11-18 22:33 . 2004-07-31 17:50 51,200 --a------ c:\windows\system32\dumphive.exe
                                    2008-11-18 22:33 . 2007-10-03 23:36 25,600 --a------ c:\windows\system32\WS2Fix.exe
                                    2008-11-18 21:24 . 2008-11-18 21:30 <REP> d-------- c:\program files\UsbFix
                                    2008-11-18 20:48 . 2008-11-18 20:48 27,904 --a------ c:\windows\system32\drivers\ndisprot.sys
                                    2008-11-13 16:19 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
                                    2008-11-13 16:18 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
                                    2008-11-06 16:16 . 2008-11-06 16:16 <REP> d-------- c:\program files\PDFCreator Toolbar
                                    2008-11-06 16:16 . 2008-11-06 16:18 <REP> d-------- c:\program files\PDFCreator
                                    2008-11-06 16:16 . 2008-11-06 16:16 253,139 --a------ c:\windows\PDFCreator_Toolbar_Uninstaller_2390.exe
                                    2008-11-06 16:16 . 1998-07-13 02:08 141,312 --a------ c:\windows\system32\MSCMCFR.DLL
                                    2008-11-06 16:16 . 1998-06-24 01:00 137,000 --a------ c:\windows\system32\MSMAPI32.OCX
                                    2008-11-06 16:16 . 1998-07-13 02:08 119,568 --a------ c:\windows\system32\VB6FR.DLL
                                    2008-11-06 16:16 . 2001-10-28 17:42 116,224 --a------ c:\windows\system32\pdfcmnnt.dll
                                    2008-11-06 16:16 . 1998-07-13 02:08 59,904 --a------ c:\windows\system32\MSCC2FR.DLL
                                    2008-11-06 16:16 . 1998-07-06 01:00 23,552 --a------ c:\windows\system32\MSMPIDE.DLL
                                    2008-11-01 14:35 . 2008-11-01 14:35 <REP> d-------- c:\program files\MSECache
                                    2008-10-27 12:43 . 2008-04-14 04:33 159,232 --a------ c:\windows\system32\ptpusd.dll
                                    2008-10-27 12:43 . 2001-08-23 17:47 5,632 --a------ c:\windows\system32\ptpusb.dll
                                    2008-10-24 12:34 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll

                                    .
                                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                                    .
                                    2008-11-18 22:01 --------- d-----w c:\program files\Wanadoo
                                    2008-11-18 19:33 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
                                    2008-11-17 19:07 --------- d-----w c:\program files\eMule
                                    2008-11-17 18:40 --------- d-----w c:\program files\PowerArchiver
                                    2008-11-16 20:50 --------- d-----w c:\program files\SpywareBlaster
                                    2008-11-11 15:31 --------- d-----w c:\documents and settings\Mathieu\Application Data\uTorrent
                                    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
                                    2008-10-05 12:55 --------- d-----w c:\program files\NOS
                                    2008-10-05 12:55 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
                                    2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
                                    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Printer Info Cache
                                    2008-09-24 14:09 --------- d-----w c:\documents and settings\Mathieu\Application Data\Image Zone Express
                                    2008-09-17 18:41 69,689 ----a-w c:\windows\UNZIP.DLL
                                    2008-09-17 18:41 507,904 ----a-w c:\windows\TMUPDATE.DLL
                                    2008-09-17 18:41 286,720 ----a-w c:\windows\PATCH.EXE
                                    2008-09-15 15:26 1,846,528 ----a-w c:\windows\system32\win32k.sys
                                    2008-09-14 20:47 278,528 ----a-w c:\program files\Fichiers communs\FDEUnInstaller.exe
                                    2008-09-10 01:15 1,307,648 ------w c:\windows\system32\msxml6.dll
                                    2008-09-04 17:16 1,106,944 ----a-w c:\windows\system32\msxml3.dll
                                    2008-08-26 08:11 826,368 ----a-w c:\windows\system32\wininet.dll
                                    .

                                    ((((((((((((((((((((((((((((( snapshot@2008-09-07_19.41.45.50 )))))))))))))))))))))))))))))))))))))))))
                                    .
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
                                    + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
                                    + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
                                    + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
                                    + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
                                    + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
                                    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
                                    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
                                    + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
                                    + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
                                    + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
                                    + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
                                    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
                                    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
                                    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
                                    + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
                                    + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
                                    + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
                                    + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
                                    + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
                                    + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
                                    + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
                                    + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
                                    + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
                                    + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
                                    + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
                                    + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
                                    + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
                                    + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
                                    + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
                                    + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
                                    + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
                                    + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
                                    + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
                                    + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
                                    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
                                    + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
                                    + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
                                    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
                                    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
                                    + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
                                    + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
                                    + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
                                    + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
                                    + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
                                    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
                                    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
                                    + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
                                    + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
                                    + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
                                    + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
                                    + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
                                    + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
                                    + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
                                    + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
                                    + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
                                    + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
                                    + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
                                    + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
                                    + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
                                    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
                                    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
                                    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
                                    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
                                    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
                                    + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
                                    + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
                                    + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
                                    + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
                                    + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
                                    + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
                                    + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
                                    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
                                    + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
                                    + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
                                    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
                                    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
                                    + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
                                    + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
                                    + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
                                    + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
                                    + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
                                    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
                                    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
                                    + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
                                    + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
                                    + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
                                    + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
                                    + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
                                    + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
                                    + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
                                    + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
                                    + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
                                    + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
                                    + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
                                    + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
                                    + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
                                    + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
                                    + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
                                    + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
                                    + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
                                    + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
                                    + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
                                    + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
                                    + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
                                    + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
                                    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
                                    + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
                                    + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
                                    + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
                                    + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
                                    + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
                                    + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
                                    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
                                    + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
                                    + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
                                    + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
                                    + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
                                    + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
                                    + 2004-08-05 10:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
                                    + 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
                                    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
                                    + 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
                                    + 2004-08-05 10:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
                                    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
                                    + 2004-08-05 10:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
                                    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
                                    + 2004-08-05 10:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
                                    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
                                    + 2004-08-05 10:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
                                    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
                                    + 2004-08-05 10:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
                                    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
                                    + 2004-08-05 10:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
                                    + 2004-08-05 10:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
                                    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
                                    + 2004-08-05 10:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
                                    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
                                    + 2004-08-05 10:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
                                    + 2004-08-05 10:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
                                    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
                                    + 2004-08-05 10:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
                                    + 2004-08-05 10:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
                                    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
                                    + 2004-08-05 10:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
                                    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
                                    + 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
                                    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
                                    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
                                    + 2004-08-05 10:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
                                    + 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
                                    + 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
                                    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
                                    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
                                    + 2004-08-05 10:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
                                    + 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
                                    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
                                    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
                                    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
                                    + 2004-08-05 10:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
                                    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
                                    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
                                    + 2004-08-05 10:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
                                    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
                                    + 2004-08-05 10:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
                                    + 2004-08-05 10:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
                                    + 2004-08-05 10:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
                                    + 2004-08-05 10:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
                                    + 2004-08-05 10:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
                                    + 2004-08-05 10:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
                                    + 2004-08-05 10:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
                                    + 2001-03-02 19:52:40 15,360 -c----w c:\windows\$NtServicePackUninstall$\asfsipc.dll
                                    + 2004-08-05 10:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
                                    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
                                    + 2004-08-05 10:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
                                    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
                                    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
                                    + 2004-08-03 20:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
                                    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
                                    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
                                    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
                                    + 2004-08-05 10:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
                                    + 2004-08-05 10:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
                                    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
                                    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
                                    + 2004-08-05 10:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
                                    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
                                    + 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
                                    + 2004-08-05 10:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
                                    + 2004-08-05 10:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
                                    + 2004-08-05 10:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
                                    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
                                    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
                                    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
                                    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
                                    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
                                    + 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
                                    + 2004-08-05 10:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
                                    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
                                    + 2004-08-05 10:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
                                    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
                                    + 2004-08-05 10:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
                                    + 2004-08-05 10:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
                                    + 2004-08-05 10:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
                                    + 2006-10-23 15:34:35 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
                                    + 2004-08-05 10:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
                                    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
                                    + 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
                                    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
                                    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
                                    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
                                    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
                                    + 2004-08-05 10:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
                                    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
                                    + 2004-08-05 10:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
                                    + 2005-07-26 04:29:18 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
                                    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
                                    + 2005-07-26 04:29:19 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
                                    + 2004-08-03 22:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
                                    + 2004-08-05 10:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
                                    + 2006-10-23 15:34:35 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
                                    + 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
                                    + 2004-08-05 10:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
                                    + 2004-08-05 10:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
                                    + 2004-08-05 10:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
                                    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
                                    + 2004-08-05 10:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
                                    + 2004-08-05 10:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
                                    + 2004-08-05 10:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
                                    + 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
                                    + 2004-08-05 10:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
                                    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
                                    + 2004-08-05 10:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
                                    + 2005-07-26 04:29:20 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
                                    + 2005-07-26 04:29:21 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
                                    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
                                    + 2004-08-05 10:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
                                    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
                                    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
                                    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
                                    + 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
                                    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
                                    + 2004-08-05 10:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
                                    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
                                    + 2004-08-05 10:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
                                    + 2004-08-05 10:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
                                    + 2004-08-05 10:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
                                    + 2004-08-05 10:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
                                    + 2004-08-05 10:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
                                    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
                                    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
                                    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
                                    + 2005-07-26 04:29:21 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
                                    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
                                    + 2005-07-26 04:29:22 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
                                    + 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
                                    + 2004-08-05 10:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
                                    + 2004-08-05 10:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
                                    + 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
                                    + 2004-08-05 10:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
                                    + 2005-07-26 04:29:23 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
                                    + 2005-03-08 01:29:38 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
                                    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
                                    + 2004-08-05 10:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
                                    + 2004-08-05 10:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
                                    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
                                    + 2005-07-26 04:29:25 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
                                    + 2005-07-26 04:29:27 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
                                    + 2004-08-05 10:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
                                    + 2004-08-05 10:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
                                    + 2004-08-05 10:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
                                    + 2004-08-05 10:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
                                    + 2007-01-08 18:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
                                    + 2004-08-05 10:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
                                    + 2004-08-05 10:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
                                    + 2004-08-05 10:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
                                    + 2004-08-05 10:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
                                    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
                                    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
                                    + 2004-08-05 10:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
                                    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
                                    + 2004-08-05 10:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
                                    + 2004-08-05 10:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
                                    + 2004-08-05 10:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
                                    + 2004-08-05 10:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
                                    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
                                    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
                                    + 2004-08-05 10:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
                                    + 2004-05-11 22:18:58 28,672 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
                                    + 2004-08-05 10:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
                                    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
                                    + 2004-08-05 10:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
                                    + 2004-08-05 10:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
                                    + 2006-10-23 15:34:36 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
                                    + 2004-08-05 10:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
                                    + 2004-08-05 10:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
                                    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
                                    + 2004-08-05 10:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
                                    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
                                    + 2004-08-05 10:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
                                    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
                                    + 2004-08-05 10:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
                                    + 2004-08-05 10:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
                                    + 2004-08-05 10:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
                                    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
                                    + 2004-08-05 10:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
                                    + 2004-08-05 10:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
                                    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
                                    + 2004-08-05 10:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
                                    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
                                    + 2004-08-05 10:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
                                    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
                                    + 2004-08-05 10:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
                                    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
                                    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
                                    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
                                    + 2004-08-05 10:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
                                    + 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
                                    + 2004-08-05 10:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
                                    + 2004-08-05 10:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
                                    + 2004-08-05 10:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
                                    + 2004-08-05 10:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
                                    + 2004-08-05 10:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
                                    + 2004-08-05 10:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
                                    + 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
                                    + 2004-08-05 10:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
                                    + 2004-08-05 10:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
                                    + 2004-08-05 10:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
                                    + 2004-08-05 10:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
                                    + 2004-08-05 10:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
                                    + 2004-08-05 10:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
                                    + 2004-08-05 10:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
                                    + 2004-08-05 10:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
                                    + 2004-08-05 10:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
                                    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
                                    + 2004-08-05 10:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
                                    + 2004-08-05 10:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
                                    + 2004-08-05 10:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
                                    + 2004-08-05 10:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
                                    + 2004-08-05 10:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
                                    + 2004-08-05 10:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
                                    + 2004-08-05 10:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
                                    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
                                    + 2004-08-05 10:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
                                    + 2004-08-05 10:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
                                    + 2004-08-05 10:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
                                    + 2004-08-03 21:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
                                    + 2004-08-05 10:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
                                    + 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
                                    + 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
                                    + 2004-08-05 10:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
                                    + 2004-08-05 10:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
                                    + 2004-08-05 10:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
                                    + 2004-08-05 10:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
                                    + 2004-08-05 10:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
                                    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
                                    + 2004-08-05 10:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
                                    + 2004-08-05 10:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
                                    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
                                    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
                                    + 2004-08-05 10:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
                                    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
                                    + 2004-08-05 10:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
                                    + 2004-08-05 10:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
                                    + 2004-08-05 10:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
                                    + 2004-08-05 10:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
                                    + 2004-08-05 10:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
                                    + 2004-08-03 21:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
                                    + 2004-08-03 21:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
                                    + 2004-08-05 10:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
                                    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
                                    + 2004-08-05 10:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
                                    + 2004-08-05 10:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
                                    + 2004-08-05 10:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
                                    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
                                    + 2004-08-05 10:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
                                    + 2004-08-05 10:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
                                    + 2004-08-05 10:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
                                    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
                                    + 2004-08-05 10:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
                                    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
                                    + 2004-08-05 10:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
                                    + 2004-08-05 10:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
                                    + 2004-08-05 10:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
                                    + 2004-08-05 10:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
                                    + 2004-08-05 10:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
                                    + 2004-08-05 10:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
                                    + 2004-08-05 10:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
                                    + 2004-08-05 10:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
                                    + 2004-08-05 10:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
                                    + 2004-08-05 10:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
                                    + 2004-08-05 10:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
                                    + 2004-08-05 10:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
                                    + 2006-08-24 12:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
                                    + 2004-08-05 10:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
                                    + 2004-08-05 10:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
                                    + 2004-08-05 10:00:00 186,368 -c----w c:\windows\$NtServicePackUninstall$\encdec.dll
                                    + 2004-08-05 10:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
                                    + 2008-07-07 20:18:27 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
                                    + 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
                                    + 2004-08-05 10:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
                                    + 2004-08-05 10:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
                                    + 2004-08-05 10:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
                                    + 2004-08-05 10:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
                                    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
                                    + 2004-08-05 10:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
                                    + 2004-08-05 10:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\evtrig.exe
                                    + 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
                                    + 2004-08-05 10:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
                                    + 2004-08-05 10:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
                                    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
                                    + 2004-08-05 10:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
                                    + 2004-08-05 10:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
                                    + 2004-08-05 10:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
                                    + 2004-08-05 10:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
                                    + 2004-08-05 10:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
                                    + 2004-08-05 10:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
                                    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
                                    + 2004-08-05 10:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
                                    + 2004-08-05 10:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
                                    + 2004-08-05 10:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
                                    + 2004-08-05 10:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
                                    + 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
                                    + 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
                                    + 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
                                    + 2004-08-05 10:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
                                    + 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
                                    + 2004-08-05 10:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
                                    + 2004-08-05 10:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
                                    + 2004-08-05 10:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
                                    + 2003-03-24 13:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
                                    + 2004-08-05 10:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
                                    + 2004-08-05 10:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
                                    + 2004-08-05 10:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
                                    + 2004-08-05 10:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
                                    + 2004-08-05 10:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
                                    + 2004-08-05 10:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
                                    + 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
                                    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
                                    + 2004-08-05 10:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
                                    + 2004-08-05 10:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
                                    + 2004-08-05 10:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
                                    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
                                    + 2004-08-05 10:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gprslt.exe
                                    + 2004-08-05 10:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
                                    + 2004-08-05 10:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
                                    + 2004-08-05 10:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
                                    + 2004-08-05 10:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
                                    + 2004-08-05 10:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
                                    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
                                    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll
                                    + 2004-11-16 01:37:04 131,712 -c----w c:\windows\$NtServicePackUninstall$\halaacpi.dll.000
                                    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll
                                    + 2004-11-16 01:37:04 81,152 -c----w c:\windows\$NtServicePackUninstall$\halacpi.dll.000
                                    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll
                                    + 2004-11-16 01:37:04 150,400 -c----w c:\windows\$NtServicePackUninstall$\halapic.dll.000
                                    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
                                    + 2004-11-16 01:37:04 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
                                    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll
                                    + 2004-11-16 01:37:04 152,576 -c----w c:\windows\$NtServicePackUninstall$\halmps.dll.000
                                    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll
                                    + 2004-11-16 01:37:04 77,696 -c----w c:\windows\$NtServicePackUninstall$\halsp.dll.000
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
                                    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
                                    + 2004-08-05 10:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
                                    + 2004-08-05 10:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
                                    + 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
                                    + 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
                                    + 2004-08-05 10:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
                                    + 2004-08-05 10:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
                                    + 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
                                    + 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
                                    + 2004-08-05 10:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
                                    + 2004-08-05 10:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
                                    + 2004-08-05 10:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
                                    + 2004-08-05 10:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
                                    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
                                    + 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
                                    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
                                    + 2004-08-05 10:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
                                    + 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
                                    + 2004-08-03 22:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
                                    + 2004-08-05 10:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
                                    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
                                    + 2004-08-05 10:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
                                    + 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
                                    + 2004-08-05 10:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
                                    + 2004-08-05 10:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
                                    + 2004-08-05 10:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
                                    + 2004-08-05 10:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
                                    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
                                    + 2004-08-05 10:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
                                    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
                                    + 2004-08-05 10:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
                                    + 2004-08-05 10:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
                                    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
                                    + 2004-08-05 10:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
                                    + 2004-08-05 10:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
                                    + 2006-10-17 11:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
                                    + 2004-08-05 10:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
                                    + 2004-08-05 10:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
                                    + 2004-08-05 10:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
                                    + 2004-08-05 10:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
                                    + 2004-08-05 10:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
                                    + 2004-08-05 10:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
                                    + 2004-08-05 10:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
                                    + 2004-08-05 10:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
                                    + 2004-08-05 10:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
                                    + 2004-08-05 10:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
                                    + 2004-08-05 10:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
                                    + 2004-08-05 10:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
                                    + 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
                                    + 2004-08-05 10:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
                                    + 2004-08-05 10:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
                                    + 2004-08-05 10:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
                                    + 2004-08-05 10:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
                                    + 2004-08-05 10:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
                                    + 2004-08-05 10:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
                                    + 2004-08-05 10:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
                                    + 2004-08-04 00:43:40 5,504 -c----w c:\windows\$NtServicePackUninstall$\intelide.sys
                                    + 2004-08-05 10:00:00 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
                                    + 2004-08-05 10:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
                                    + 2004-08-05 10:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
                                    + 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
                                    + 2004-08-05 10:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
                                    + 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
                                    + 2004-08-05 10:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
                                    + 2004-08-05 10:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
                                    + 2004-08-05 10:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
                                    + 2004-08-05 10:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
                                    + 2004-08-05 10:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
                                    + 2004-08-05 10:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
                                    + 2004-08-05 10:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
                                    + 2004-08-05 10:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
                                    + 2004-08-05 10:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
                                    + 2004-08-05 10:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
                                    + 2004-08-05 10:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
                                    + 1998-03-22 11:34:14 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
                                    + 1998-03-22 11:34:14 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
                                    + 1998-10-07 15:46:18 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
                                    + 1998-10-07 15:50:22 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
                                    + 2004-08-05 10:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
                                    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll
                                    + 2004-09-30 17:50:53 28,160 -c----w c:\windows\$NtServicePackUninstall$\irmon.dll.000
                                    + 2001-08-23 14:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
                                    + 2004-08-05 10:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
                                    + 2004-08-05 10:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
                                    + 2005-05-27 02:08:06 155,136 -c----w c:\windows\$NtServicePackUninstall$\itircl.dll
                                    + 2005-05-27 02:08:06 137,216 -c----w c:\windows\$NtServicePackUninstall$\itss.dll
                                    + 2004-08-05 10:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\ixsso.dll
                                    + 2004-08-03 23:54:30 47,616 -c----w c:\windows\$NtServicePackUninstall$\iyuv_32.dll
                                    + 2006-06-01 18:48:44 163,840 -c----w c:\windows\$NtServicePackUninstall$\jgdw400.dll
                                    + 2006-06-01 18:48:44 27,648 -c----w c:\windows\$NtServicePackUninstall$\jgpl400.dll
                                    + 2006-10-17 11:00:00 491,520 -c----w c:\windows\$NtServicePackUninstall$\jscript.dll
                                    + 2004-08-05 10:00:00 25,216 -c----w c:\windows\$NtServicePackUninstall$\kbdclass.sys
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdfi1.dll
                                    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdinbe1.dll
                                    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinben.dll
                                    + 2004-08-05 10:00:00 6,656 -c----w c:\windows\$NtServicePackUninstall$\kbdinmal.dll
                                    + 2004-08-05 10:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\kbdmaori.dll
                                    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt47.dll
                                    + 2004-08-05 10:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\kbdmlt48.dll
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdnec.dll
                                    + 2004-08-05 10:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\kbdno1.dll
                                    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\$NtServicePackUninstall$\kbdsmsfi.dll
                                    + 2004-08-05 10:00:00 7,680 -c----w c:\windows\
                                    1. jlpjlp Contributeur sécurité
                                      as tu tenté les reparations proposées? pour le net
                                      1. modjo37 Auteur
                                        Sinon tous les virus ont ils été supprimés de mon ordinateur???
                                        Merci
                                    2. modjo37 Auteur
                                      A l'étape 3 de la réparation internet que tu m'as fourni, lorsque je veux créer une sauvegarde de registre avec Winsofix un message d'erreur apparait
                                      "Warning Error saving file C:\ERDNT\SECURITY continue with the next file?
                                      du coup je choisis NON
                                      1. yor1-44
                                        désolé d'intervenir dans votre sujet, mais je n'est plus de contact avec un membre qui me guidait et j'ai des logiciels qui sont restés sur mon bureau (c-fix et ad-remover) alors qu'un autre logiciel (toolcleaner2)était censé les désinstaller. Faut-il relancer une discussion ? merci de votre réponse.
                                        • 1
                                        • 2
                                        • 3

                                        Discussions similaires

                                        Tukif bloqué ? Solutions express !
                                        Paparazzi

                                        5 réponses