matardy428

Bien, il ne me reste plus qu'à te remercier beaucoup pour toute ton aide... Bonne continuation

Bonsoir Oui, j'avais redémarré le PC après l'analyse MBAM, mais le malware était revenu, et il y était encore au moment où j'ai décidé d'éteindre mon PC. C'est alors que Windows m'a indiqué qu'il faisait les mises à jour. Au redémarrage, plus d'Antimalware Doctor! L'analyse MBAM que j'avais faite m'avait indiqué la présence du malware, mais au redémarrage, Antimalware Doctor était toujours là Ah ça ne je ne le savais pas Du coup, je ne suis pas correctement protégé contre les malwares? Ou Antivir suffit-il? Dois-je utiliser un autre antimalware (gratuit) en complément de MBAM? Je dis ça parce que ça fait quand même plusieurs infections en peu de temps....

Et bien ça a l'air d'aller. Je n'ai plus aucune trace de ces cochonneries Merci beaucoup !!!!! Ce que je ne comprends pas, c'est que Antimalware Doctor a disparu _avant_ que j'utilise ComboFix; il a disparu dès que j'ai redémarré mon PC pour mettre à jour des composants Windows Par ailleurs, ça fait 3 fois en un mois que je suis embêté: -Antispyware Soft il y'a un mois -des fichiers .exe dans le dossier 'temp' dont je t'ai parlé -et donc Antimalware Doctor Le dernier malware est apparu alors que je surfais sur Yahoo!!! J'utilise Avira Antivir et Malwarebytes, qui sont parmi les meilleurs pourtant...

Bonsoir Alors voilà log.txt: Logfile of random's system information tool 1.07 (written by random/random) Run by jepa at 2010-06-12 23:28:43 Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1 System drive C: has 14 GB (10%) free of 148 GB Total RAM: 3071 MB (58% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:29:04, on 12/06/2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe C:\Program Files\OrangeHSS\Systray\SystrayApp.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Maxtor\OneTouch\Utils\OneTouch.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Windows\System32\rundll32.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Windows\System32\rundll32.exe C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\OrangeHSS\Launcher\Launcher.exe C:\Windows\System32\mobsync.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\OrangeHSS\Deskboard\deskboard.exe C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe C:\Program Files\OrangeHSS\browser\browser.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\wuauclt.exe C:\Users\jepa\Desktop\RSIT.exe C:\Program Files\trend micro\jepa.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Global Startup: Empowering Technology Launcher.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.3.cab O16 - DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB50} (Sony SNC-CS3 Image Viewer) - http://82.127.17.206/home/SonySncCs3View.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos-beta/OnlineScanner.cab O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerVistaADP-1.1.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: hpqcxs08 - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service HP CUE DeviceDiscovery (hpqddsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 25403 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Google Software Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore1cac6852d702762.job C:\Windows\tasks\User_Feed_Synchronization-{27A948C9-304F-48F0-9A48-D55EF14CFE09}.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}] ContributeBHO Class - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-27 118784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}] ShowBarObj Class - C:\Windows\system32\ActiveToolBand.dll [2007-04-25 299008] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-18 764912] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-30 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Windows\system32\eDStoolbar.dll [2007-04-25 151552] {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-27 118784] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-06-20 4493312] "Acer Empowering Technology Monitor"=C:\Acer\Empowering Technology\SysMonitor.exe [2007-05-31 326440] "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-04-25 457216] "PCMMediaSharing"=C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [2007-06-21 204908] "WarReg_PopUp"=C:\Acer\WR_PopUp\WarReg_PopUp.exe [2006-11-05 57344] "Acer Tour Reminder"=C:\Acer\AcerTour\Reminder.exe [2007-05-22 151552] "SystrayORAHSS"=C:\Program Files\OrangeHSS\Systray\SystrayApp.exe [2006-12-12 90112] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152] "NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352] "MaxtorOneTouch"=C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe [2003-05-21 45056] "Adobe_ID0EYTHM"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696] "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-30 149280] "Skytel"=C:\Windows\Skytel.exe [2007-06-15 1826816] "NvSvc"=C:\Windows\system32\nvsvc.dll [2007-11-06 86016] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-11-06 8530464] "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-11-06 81920] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136] "AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-03-20 217544] "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-04-09 68856] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240] "Acer Tour Reminder"= [] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe Outil de mise à jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=255 "NoDrives"=0 "_NoDriveTypeAutoRun"=149 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"="C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS" "C:\Program Files\River Past\Video Cleaner\VideoCleaner.exe"="C:\Program Files\River Past\Video Cleaner\VideoCleaner.exe:*:Enabled:River Past Video Cleaner" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 months====== 2010-06-12 23:28:43 ----D---- C:\rsit 2010-06-11 14:41:01 ----SHD---- C:\$RECYCLE.BIN 2010-06-11 14:40:58 ----A---- C:\ComboFix.txt 2010-06-11 14:15:05 ----D---- C:\matardy428 2010-06-11 14:14:31 ----A---- C:\Windows\SWXCACLS.exe 2010-06-11 03:13:25 ----A---- C:\Windows\system32\ieui.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\iesysprep.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\iesetup.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\iertutil.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\iernonce.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\ieframe.dll 2010-06-11 03:13:24 ----A---- C:\Windows\system32\ie4uinit.exe 2010-06-11 03:13:23 ----A---- C:\Windows\system32\occache.dll 2010-06-11 03:13:23 ----A---- C:\Windows\system32\mshtml.dll 2010-06-11 03:13:23 ----A---- C:\Windows\system32\msfeedssync.exe 2010-06-11 03:13:23 ----A---- C:\Windows\system32\msfeedsbs.dll 2010-06-11 03:13:23 ----A---- C:\Windows\system32\ieUnatt.exe 2010-06-11 03:13:22 ----A---- C:\Windows\system32\wininet.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\urlmon.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\mstime.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\msfeeds.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\jsproxy.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\iepeers.dll 2010-06-11 03:13:22 ----A---- C:\Windows\system32\iedkcs32.dll 2010-06-11 03:13:19 ----A---- C:\Windows\system32\asycfilt.dll 2010-06-11 03:13:18 ----A---- C:\Windows\system32\atmlib.dll 2010-06-11 03:13:18 ----A---- C:\Windows\system32\atmfd.dll 2010-06-11 03:13:16 ----A---- C:\Windows\system32\quartz.dll 2010-06-06 22:19:20 ----A---- C:\Windows\NeroDigital.ini 2010-06-06 22:18:43 ----D---- C:\Program Files\InterActual 2010-05-26 09:03:04 ----A---- C:\Windows\system32\tzres.dll 2010-05-15 15:26:07 ----D---- C:\Users\jepa\AppData\Roaming\StoneTrip ======List of files/folders modified in the last 1 months====== 2010-06-12 23:29:04 ----D---- C:\Program Files\Trend Micro 2010-06-12 23:28:55 ----D---- C:\Windows\Prefetch 2010-06-12 23:28:50 ----D---- C:\Windows\Temp 2010-06-12 23:27:15 ----D---- C:\Windows\Tasks 2010-06-12 23:27:08 ----D---- C:\ProgramData\Google Updater 2010-06-12 18:12:17 ----D---- C:\Windows\System32 2010-06-12 18:12:17 ----D---- C:\Windows\inf 2010-06-12 18:12:17 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-06-12 10:39:59 ----SHD---- C:\System Volume Information 2010-06-11 22:39:52 ----D---- C:\Windows\system32\catroot2 2010-06-11 22:38:27 ----SHD---- C:\Windows\Installer 2010-06-11 22:38:27 ----D---- C:\ProgramData\Microsoft Help 2010-06-11 14:41:35 ----D---- C:\Program Files\Mozilla Firefox 2010-06-11 14:41:00 ----D---- C:\Qoobox 2010-06-11 14:38:51 ----D---- C:\Windows 2010-06-11 14:38:51 ----A---- C:\Windows\system.ini 2010-06-11 14:25:23 ----D---- C:\Windows\system32\drivers 2010-06-11 14:25:23 ----D---- C:\Windows\AppPatch 2010-06-11 14:25:22 ----D---- C:\Program Files\Common Files 2010-06-11 14:13:49 ----D---- C:\Windows\winsxs 2010-06-11 14:06:39 ----D---- C:\Windows\Microsoft.NET 2010-06-11 14:06:36 ----RSD---- C:\Windows\assembly 2010-06-11 14:03:39 ----D---- C:\Windows\system32\catroot 2010-06-11 14:01:42 ----D---- C:\Windows\system32\wbem 2010-06-11 14:01:40 ----D---- C:\Windows\system32\migration 2010-06-11 14:01:40 ----D---- C:\Program Files\Windows Mail 2010-06-11 14:01:40 ----D---- C:\Program Files\Internet Explorer 2010-06-11 01:56:06 ----D---- C:\Users\jepa\AppData\Roaming\Adobe 2010-06-10 02:36:12 ----D---- C:\Windows\Users 2010-06-09 23:41:51 ----D---- C:\Users\jepa\AppData\Roaming\dvdcss 2010-06-06 22:18:43 ----RD---- C:\Program Files 2010-06-06 11:38:00 ----D---- C:\Users\jepa\AppData\Roaming\TransRender 2010-06-05 11:13:31 ----D---- C:\Program Files\Microsoft Silverlight 2010-06-05 03:02:17 ----SD---- C:\ProgramData\Microsoft 2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe 2010-05-26 21:05:21 ----D---- C:\Windows\rescache 2010-05-26 19:21:37 ----D---- C:\Windows\system32\fr-FR 2010-05-21 03:25:14 ----D---- C:\Windows\Speech 2010-05-20 23:34:33 ----D---- C:\Windows\Panther 2010-05-15 01:43:39 ----D---- C:\Program Files\Google ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2006-07-24 5632] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-10 56816] R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 76584] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-06-22 1788056] R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-07-10 6144] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-11-06 8230496] R3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSGB6.sys [2007-01-22 46592] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328] S3 ax9s2do1;ax9s2do1; C:\Windows\system32\drivers\ax9s2do1.sys [] S3 catchme;catchme; \??\C:\Users\jepa\AppData\Local\Temp\catchme.sys [] S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584] S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864] S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224] S3 SiS6350;SiS6350; C:\Windows\system32\DRIVERS\SISGRKMD.sys [2007-06-05 454520] S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352] S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272] S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872] S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328] S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2007-06-21 269448] R2 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2007-04-16 28672] R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089] R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376] R2 eDataSecurity Service;eDSService.exe; C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [2007-04-25 457512] R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-07-03 53248] R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2006-12-12 57344] R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2006-07-19 262247] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504] R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704] S2 gupdate;Service Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-07 135664] S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-23 182768] S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [] S3 Adobe Version Cue CS3;Adobe Version Cue CS3 {fr_FR}; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-11-05 654848] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] -----------------EOF----------------- Et info.txt info.txt logfile of random's system information tool 1.06 2010-06-12 23:29:06 ======Uninstall list====== -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER -->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL -->C:\Program Files\OrangeHSS\Uninstall\Bas_Debit_CustoUpdate\Shell.exe MainUninstall.shl -->C:\Windows\UNNeroBackItUp.exe /UNINSTALL -->C:\Windows\UNNeroMediaHome.exe /UNINSTALL -->C:\Windows\UNNeroShowTime.exe /UNINSTALL -->C:\Windows\UNNeroVision.exe /UNINSTALL -->C:\Windows\UNRecode.exe /UNINSTALL 32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7} Acer Arcade Live Main Page-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.exe" -uninstall Acer DV Magician-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6EFFB76-4A07-11DA-9D78-000129760D75}\setup.exe" -uninstall Acer DVDivine-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.exe" -uninstall Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDSnstHelper.exe -Operation UNINSTALL Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x40c -removeonly Acer ePerformance Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}\setup.exe" -l0x40c -removeonly Acer HomeMedia Connect-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}\Setup.exe" -uninstall Acer HomeMedia-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe" -uninstall Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly Acer SlideShow DVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41581EF5-45A7-11DA-9D78-000129760D75}\Setup.exe" -uninstall Acer Tour-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94389919-B0AA-4882-9BE8-9F0B004ECA35}\setup.exe" -l0x40c -removeonly Acer VideoMagician-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.exe" -uninstall Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95} Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61} Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394} Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23} Adobe BridgeTalk Plugin CS3-->MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E} Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C} Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C} Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E} Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9} Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2} Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029} Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A} Adobe Contribute CS3-->MsiExec.exe /I{F84ADE4E-9220-4324-994D-801EDD9DD251} Adobe Creative Suite 3 Web Premium-->MsiExec.exe /I{69B6B4A5-1C4D-4F16-BB11-A4EB9A439116} Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D} Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD} Adobe Dreamweaver CS3-->MsiExec.exe /I{4BDB76C6-902E-41D5-9064-68768E02886B} Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2} Adobe Extension Manager CS3-->MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3} Adobe Fireworks CS3-->MsiExec.exe /I{21C4D775-368A-46C4-8DC3-4207165B7115} Adobe Flash CS3-->MsiExec.exe /I{80FD3971-8482-49C8-BA8C-B6464A15882F} Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe Adobe Flash Video Encoder-->MsiExec.exe /I{1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E} Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B} Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245} Adobe Illustrator CS3-->MsiExec.exe /I{6E08CE13-C2AB-4749-9335-5900B958929E} Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078} Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77} Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C} Adobe Photoshop CS3-->MsiExec.exe /I{C1FA4B3B-1625-4922-9C9D-780E8FCE161A} Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001} Adobe Setup-->MsiExec.exe /I{BE136F60-5D0F-4663-8B32-938A3EFD3FCB} Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe" Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183} Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312} Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8} Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5} Adobe Version Cue CS3 Server-->MsiExec.exe /I{1D58229F-C505-45CA-8223-F35F3A34B963} Adobe WAS CS3-->MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE} Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6} Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923} AHV content for Acrobat and Flash-->MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD} Ajouter ou supprimer Adobe Creative Suite 3 Web Premium-->C:\Program Files\Common Files\Adobe\Installers\e7f691c6f2bf7b70c25ea19f3d73b6e\Setup.exe Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2} Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe" Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE Combined Community Codec Pack 2008-09-21 16:18-->"C:\Program Files\Combined Community Codec Pack\unins000.exe" DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN DjVu Solo 3.1-->C:\Windows\IsUninst.exe -f"C:\Program Files\LizardTech\DjVu Solo 3.1\Uninst.isu" EasyPHP 1.8-->"C:\Program Files\EasyPHP1-8\unins000.exe" eMule-->"C:\Program Files\eMule\Uninstall.exe" ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x040c FTP Expert 3-->"C:\Program Files\Visicom Media\FTP Expert 3\uninst-ftp.exe" Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Google Earth-->MsiExec.exe /X{F7B0939E-58DF-11DF-B3A6-005056806466} GulliLand 1.0.0.74-->"C:\Program Files\Gulliland\unins000.exe" Haali Media Splitter-->"C:\Program Files\Matroska Pack\haali\uninstall.exe" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" HP Customer Participation Program 8.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Imaging Device Functions 8.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP OCR Software 8.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat HP Photosmart Essential-->MsiExec.exe /X{EB21A812-671B-4D08-B974-2A347F0D8F70} HP Photosmart.All-In-One Driver Software 8.0 .A-->C:\Program Files\HP\Digital Imaging\{282E5AB2-8E47-4571-B6FA-6B512555B557}\setup\hpzscr01.exe -datfile hposcr18.dat -onestop -showdisconnect -forcereboot HP Solution Center 8.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat HP Update-->MsiExec.exe /X{8C6027FD-53DC-446D-BB75-CACD7028A134} HPSSupply-->MsiExec.exe /X{EB75DE50-5754-4F6F-875D-126EDF8E4CB3} InterActual Player-->C:\Program Files\InterActual\InterActual Player\inuninst.exe Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF} Les Affaires Perdues de Sherlock Holmes-->MsiExec.exe /I{AC523DDA-3104-40C4-AA17-879FE54773C2} Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" Matroska Pack-->C:\Program Files\Matroska Pack\uninstall.exe Maxtor OneTouch-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3EC91FDF-FE9A-43D5-96C4-8A9C24372500} /l1036 MediaCoder 0.6.2-->C:\Program Files\MediaCoder\uninst.exe Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31} Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0044-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C} Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0} Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE} Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE} Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE} Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE} Microsoft Office Professional Plus 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE} Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9} Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE} Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE} Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\Windows\INF\wmv9vcm.inf, Uninstall Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C} Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C} Mise à jour Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21} Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3} Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223} Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe Mozilla Firefox (3.5.9)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} Navigateur Orange-->C:\Program Files\OrangeHSS\Uninstall\Browser\Shell.exe MainUninstall.shl Nero 8-->MsiExec.exe /X{BE282C23-5484-47FF-B2C1-EBEA5C891036} neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} Notepad++-->C:\Program Files\Notepad++\uninstall.exe NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{67ADE9AF-5CD9-4089-8825-55DE4B366799}\setup.exe" -removeonly NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7 NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI Orange - Logiciels Internet-->C:\Program Files\OrangeHSS\installation\core\Installgui.exe -u Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5} QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F} Real Alternative 1.9.0-->"C:\Program Files\Real Alternative\unins000.exe" Realtek High Definition Audio Driver-->RtlUpd.exe -r -m River Past Video Cleaner-->"C:\Windows\Video Cleaner Uninstaller.exe" SAMSUNG CDMA Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe Samsung Mobile phone USB driver Drive Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c -removeonly Samsung PC Studio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A} Security Update for 2007 Microsoft Office System (KB982312)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B0EC5722-241F-4CDA-83B4-AA5846B6F9F4} Security Update for 2007 Microsoft Office System (KB982331)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {E8766951-2B6C-4022-86E8-80D2D1762B76} Security Update for Microsoft Office Excel 2007 (KB982308)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C3F9A0DC-A5D1-4BB6-870E-2953E5A2487B} Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {1109D0B3-EFA3-4553-AAED-4C3E9AD130E8} Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB} Security Update for Microsoft Office Outlook 2007 (KB972363)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0} Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46} Security Update for Microsoft Office Publisher 2007 (KB982124)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {289FA8BC-6A8E-4341-B194-EB26B49E9F5D} Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Word 2007 (KB982135)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {0112C750-A06F-4F92-9C40-E5C1EA9A70EB} SUPER © Version 2009.bld.36 (June 10, 2009)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0 TerraExplorer-->C:\Program Files\Skyline\TerraExplorer\Setup.exe [OP]/U TVUPlayer 2.3.7.1-->C:\Program Files\TVUPlayer\uninst.exe Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT="" Update for Outlook 2007 Junk Email Filter (kb983486)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {913DFE19-32EC-4099-89AC-27FC493A7A2E} VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B} VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027} VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ======System event log====== Computer Name: paje Event Code: 15016 Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur. Record Number: 385316 Source Name: Microsoft-Windows-HttpEvent Time Written: 20100612130123.439937-000 Event Type: Erreur User: Computer Name: paje Event Code: 7000 Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur : Le chemin d'accès spécifié est introuvable. Record Number: 385372 Source Name: Service Control Manager Time Written: 20100612130300.000000-000 Event Type: Erreur User: Computer Name: paje Event Code: 7011 Message: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service Netman. Record Number: 385447 Source Name: Service Control Manager Time Written: 20100612161050.000000-000 Event Type: Erreur User: Computer Name: paje Event Code: 15016 Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur. Record Number: 385485 Source Name: Microsoft-Windows-HttpEvent Time Written: 20100612212428.251742-000 Event Type: Erreur User: Computer Name: paje Event Code: 7000 Message: Le service Planificateur LiveUpdate automatique n'a pas pu démarrer en raison de l'erreur : Le chemin d'accès spécifié est introuvable. Record Number: 385541 Source Name: Service Control Manager Time Written: 20100612212605.000000-000 Event Type: Erreur User: =====Application event log===== Computer Name: paje Event Code: 1000 Message: Application défaillante SystrayApp.exe, version 1.0.29.47, horodatage 0x457ef1fa, module défaillant SystrayApp.exe, version 1.0.29.47, horodatage 0x457ef1fa, code d’exception 0xc0000005, décalage d’erreur 0x00001b6a, ID du processus 0x838, heure de début de l’application 0x01cb0a2f5ecabf7d. Record Number: 487003 Source Name: Application Error Time Written: 20100612130454.000000-000 Event Type: Erreur User: Computer Name: paje Event Code: 1530 Message: Windows a détecté que votre fichier de Registre est toujours utilisé par d'autres applications ou services. Le fichier va être déchargé. Les applications ou services qui ont accès à votre Registre risquent de ne pas fonctionner correctement après cela. DÉTAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-1431605009-1662845966-2266027222-1000_Classes: Process 1812 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-1431605009-1662845966-2266027222-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache Record Number: 487016 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20100612161316.000000-000 Event Type: Avertissement User: AUTORITE NT\SYSTEM Computer Name: paje Event Code: 11 Message: Échec de l'extraction de la liste racine tierce partie depuis le fichier CAB de mise à jour automatique à : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> avec l'erreur : Un certificat requis n'est pas dans sa période de validité selon la vérification par rapport à l'horloge système en cours ou le tampon daté dans le fichier signé. . Record Number: 487046 Source Name: Microsoft-Windows-CAPI2 Time Written: 20100612212459.000000-000 Event Type: Erreur User: Computer Name: paje Event Code: 11 Message: Échec de l'extraction de la liste racine tierce partie depuis le fichier CAB de mise à jour automatique à : <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> avec l'erreur : Un certificat requis n'est pas dans sa période de validité selon la vérification par rapport à l'horloge système en cours ou le tampon daté dans le fichier signé. . Record Number: 487047 Source Name: Microsoft-Windows-CAPI2 Time Written: 20100612212459.000000-000 Event Type: Erreur User: Computer Name: paje Event Code: 1000 Message: Application défaillante SystrayApp.exe, version 1.0.29.47, horodatage 0x457ef1fa, module défaillant SystrayApp.exe, version 1.0.29.47, horodatage 0x457ef1fa, code d’exception 0xc0000005, décalage d’erreur 0x00001b6a, ID du processus 0x424, heure de début de l’application 0x01cb0a75a69acd32. Record Number: 487048 Source Name: Application Error Time Written: 20100612212501.000000-000 Event Type: Erreur User: =====Security event log===== Computer Name: paje Event Code: 4624 Message: L’ouverture de session d’un compte s’est correctement déroulée. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PAJE$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 Type d’ouverture de session : 5 Nouvelle ouverture de session : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Informations sur le processus : ID du processus : 0x258 Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Nom de la station de travail : Adresse du réseau source : - Port source : - Informations détaillées sur l’authentification : Processus d’ouverture de session : Advapi Package d’authentification : Negotiate Services en transit : - Nom du package (NTLM uniquement) : - Longueur de la clé : 0 Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée. Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe. Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau). Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté. Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas. Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique. - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC . - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session. - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM. - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée. Record Number: 129976 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100224020021.952031-000 Event Type: Succès de l'audit User: Computer Name: paje Event Code: 4672 Message: Privilèges spéciaux attribués à la nouvelle ouverture de session. Sujet : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 Privilèges : SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 129977 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100224020021.952031-000 Event Type: Succès de l'audit User: Computer Name: paje Event Code: 4648 Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PAJE$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Compte dont les informations d’identification ont été utilisées : Nom du compte : SYSTEM Domaine du compte : AUTORITE NT GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Serveur cible : Nom du serveur cible : localhost Informations supplémentaires : localhost Informations sur le processus : ID du processus : 0x258 Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Adresse du réseau : - Port : - Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS. Record Number: 129978 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100224020120.911031-000 Event Type: Succès de l'audit User: Computer Name: paje Event Code: 4624 Message: L’ouverture de session d’un compte s’est correctement déroulée. Sujet : ID de sécurité : S-1-5-18 Nom du compte : PAJE$ Domaine du compte : WORKGROUP ID d’ouverture de session : 0x3e7 Type d’ouverture de session : 5 Nouvelle ouverture de session : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000} Informations sur le processus : ID du processus : 0x258 Nom du processus : C:\Windows\System32\services.exe Informations sur le réseau : Nom de la station de travail : Adresse du réseau source : - Port source : - Informations détaillées sur l’authentification : Processus d’ouverture de session : Advapi Package d’authentification : Negotiate Services en transit : - Nom du package (NTLM uniquement) : - Longueur de la clé : 0 Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée. Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe. Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau). Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté. Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas. Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique. - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC . - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session. - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM. - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée. Record Number: 129979 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100224020120.911031-000 Event Type: Succès de l'audit User: Computer Name: paje Event Code: 4672 Message: Privilèges spéciaux attribués à la nouvelle ouverture de session. Sujet : ID de sécurité : S-1-5-18 Nom du compte : SYSTEM Domaine du compte : AUTORITE NT ID d’ouverture de session : 0x3e7 Privilèges : SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 129980 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20100224020120.911031-000 Event Type: Succès de l'audit User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\Samsung\Samsung PC Studio 3;C:\Program Files\QuickTime\QTSystem "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=x86 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel "PROCESSOR_REVISION"=0f0d "NUMBER_OF_PROCESSORS"=2 "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF-----------------

Ca marche Merci beaucoup et bonne nuit Tu penses que je suis débarassé d'Antimalware Doctor? Il n'apparaît plus...Et c'est arrivé à la suite de mon redémarrage après mise à jour Windows, donc avant l'action de ComboFix...Bizarre...

Non Ca ne le fait pas/plus... PS: si tu veux aller te coucher... On peut continuer demain, si tu es là

Ca ressemble étrangement à ce genre d'avertissement Antivir que j'ai depuis 15 jours (dont j'ai parlé dans mon post initial du topic), et qui m'avertit souvent d'un trojan dans C:\Users\jepa\AppData\Local\temp Il s'agit souvent d'un fichier .exe J'ajoute que même quand il ne se passe rien, il suffit que j'aille naviguer dans le dossier "temp" pour déclencher une alerte Antivir et faire apparaître un fichier .exe !!!

Voilà: Dans le fichier 'C:\Qoobox\Quarantine\C\Users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\setupupdater0000.exe.vir' un virus ou un programme indésirable 'TR/Spy.1043968.2' [trojan] a été détecté. Action exécutée : Refuser l'accès

Aucun élément nuisible n'a été détecté Pendant l'analyse Malwarebytes, Antivir m'a encore averti de l'infection par un troyen !! J'ai "empêché l'accès" car Malwarebytes ne continuait pas l'analyse et s'était mis en pause Voilà le rapport: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4190 Windows 6.0.6001 Service Pack 1 Internet Explorer 8.0.6001.18928 12/06/2010 02:59:49 mbam-log-2010-06-12 (02-59-49).txt Type d'examen: Examen complet (C:\|D:\|) Elément(s) analysé(s): 382304 Temps écoulé: 2 heure(s), 49 minute(s), 21 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

Ca marche; je lance l'analyse J'espère que je peux rester connecté à Internet pendant l'analyse, pour lire un peu...J'espère que ça ne la perturbe pas @+

Je n'arrive pas à poster mon rapport ComboFix autrement que comme ça; dès que je mets les balises code (ou quote), ça ne marche pas ! Analyse ComboFix: ComboFix 10-06-10.04 - jepa 11/06/2010 14:20:07.3.2 - x86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3071.1884 [GMT 2:00] Lancé depuis: c:\users\jepa\Desktop\matardy428.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\enemies-names.txt c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\local.ini c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\lsrslt.ini c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\setupupdater0000.exe c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\cid.dll c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\DBOLE.sys c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\delfile.tmp c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\Download more books....url c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\dudl.exe c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\eb.dll c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\energy.dll c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\fan.exe c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\grid.sys c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\hymt.drv c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\kernel32.sys c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\pal.dll c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\pal.tmp c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\PE.sys c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\PE.tmp c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\runddl.drv c:\users\jepa\AppData\Roaming\Microsoft\Windows\Recent\std.exe c:\users\jepa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antimalware Doctor c:\users\jepa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antimalware Doctor\Antimalware Doctor.lnk c:\users\jepa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Antimalware Doctor\Uninstall.lnk . ((((((((((((((((((((((((((((( Fichiers créés du 2010-05-11 au 2010-06-11 )))))))))))))))))))))))))))))))))))) . 2010-06-11 12:38 . 2010-06-11 12:38 -------- d-----w- c:\users\jepa\AppData\Local\temp 2010-06-11 12:38 . 2010-06-11 12:38 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-06-06 20:18 . 2010-06-06 20:18 -------- d-----w- c:\program files\InterActual 2010-05-26 07:03 . 2010-04-23 13:55 2048 ----a-w- c:\windows\system32\tzres.dll 2010-05-15 13:26 . 2010-05-15 13:26 6107136 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Player\S3DClient.dll 2010-05-15 13:26 . 2010-05-15 13:26 53312 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Player\S3DOptions.exe 2010-05-15 13:26 . 2010-05-15 13:26 409600 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Player\wrap_oal.dll 2010-05-15 13:26 . 2010-05-15 13:26 204864 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Player\S3DCrashReporter.exe 2010-05-15 13:26 . 2010-05-15 13:26 114688 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Player\OpenAL32.dll 2010-05-15 13:26 . 2010-05-15 13:27 -------- d-----w- c:\users\jepa\AppData\Roaming\StoneTrip 2010-05-15 13:26 . 2010-05-15 13:26 60758 ----a-w- c:\users\jepa\AppData\Roaming\StoneTrip\Web Player\S3D Web Player-uninst.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-06-11 12:01 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-06-11 01:59 . 2007-07-10 13:14 -------- d-----w- c:\programdata\Microsoft Help 2010-06-10 13:35 . 2008-04-09 09:31 -------- d-----w- c:\programdata\Google Updater 2010-06-09 21:41 . 2009-02-04 00:44 -------- d-----w- c:\users\jepa\AppData\Roaming\dvdcss 2010-06-06 09:42 . 2006-11-02 15:48 672084 ----a-w- c:\windows\system32\perfh00C.dat 2010-06-06 09:42 . 2006-11-02 15:48 124228 ----a-w- c:\windows\system32\perfc00C.dat 2010-06-06 09:38 . 2009-01-07 17:52 -------- d-----w- c:\users\jepa\AppData\Roaming\TransRender 2010-06-05 09:13 . 2010-01-10 12:04 -------- d-----w- c:\program files\Microsoft Silverlight 2010-05-26 16:16 . 2010-06-11 01:13 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:25 . 2010-06-11 01:13 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-14 23:43 . 2008-04-09 09:31 -------- d-----w- c:\program files\Google 2010-05-12 09:21 . 2009-10-02 23:31 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-05-08 09:49 . 2010-03-30 19:53 -------- d-----w- c:\users\jepa\AppData\Roaming\MysteryStudio 2010-05-06 10:34 . 2010-05-06 10:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-05-05 15:04 . 2008-04-22 11:07 2016 ----a-w- c:\users\jepa\AppData\Roaming\wklnhst.dat 2010-05-04 05:59 . 2010-06-11 01:13 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55 . 2010-06-11 01:13 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55 . 2010-06-11 01:13 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31 . 2010-06-11 01:13 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-02 07:59 . 2008-07-07 00:54 680 ----a-w- c:\users\jepa\AppData\Local\d3d9caps.dat 2010-05-01 13:53 . 2010-06-11 01:13 2036224 ----a-w- c:\windows\system32\win32k.sys 2010-04-29 13:39 . 2010-05-06 10:34 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 13:39 . 2010-05-06 10:34 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-20 13:29 . 2009-01-07 17:52 -------- d-----w- c:\users\jepa\AppData\Roaming\ConvertTemp 2010-04-16 16:10 . 2010-06-11 01:13 1314816 ----a-w- c:\windows\system32\quartz.dll 2010-04-05 16:07 . 2010-06-11 01:13 67072 ----a-w- c:\windows\system32\asycfilt.dll 2006-05-03 09:06 . 2009-11-23 01:44 163328 --sh--r- c:\windows\System32\flvDX.dll 2007-02-21 10:47 . 2009-11-23 01:44 31232 --sh--r- c:\windows\System32\msfDX.dll 2008-03-16 12:30 . 2009-11-23 01:44 216064 --sh--r- c:\windows\System32\nbDX.dll 2007-12-10 19:24 . 2007-12-10 19:24 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((( SnapShot@2010-03-11_17.42.46 ))))))))))))))))))))))))))))))))))))))))) . + 2010-06-11 01:58 . 2010-04-12 12:22 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.22668_none_a62ece5e64e56ec8\ServiceMonikerSupport.dll + 2010-06-11 01:58 . 2010-04-12 12:20 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6001.18457_none_a5aeff4f4bc09c8f\ServiceMonikerSupport.dll + 2010-06-11 01:57 . 2010-03-29 12:42 30544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22476_none_ae21a90aa5eae7fc\aspnet_wp.exe + 2010-06-11 01:57 . 2010-03-29 11:57 30544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18294_none_c4f17e128c418711\aspnet_wp.exe + 2010-04-17 20:31 . 2010-02-18 11:51 22016 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\netiougc.exe + 2010-04-17 20:31 . 2010-02-18 14:00 49152 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\netiomig.dll + 2010-04-17 20:31 . 2010-02-18 12:04 22016 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\netiougc.exe + 2010-04-17 20:31 . 2010-02-18 14:21 49152 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\netiomig.dll + 2010-04-17 20:31 . 2010-02-23 11:16 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.22346_none_8d25cfd8a024cf75\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 11:10 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18213_none_8cb9a1f386f18fd3\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 11:30 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.22641_none_8b3a5c7ea302fb9e\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 11:32 78848 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.18431_none_8abb8db989dd42bc\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 11:30 58368 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.21230_none_895dc3b6a5d56b80\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 13:14 58368 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6000.17025_none_88e3f6638cab3151\mrxsmb20.sys + 2010-06-11 01:13 . 2010-04-05 17:14 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.22377_none_78f4d4e8cf978645\asycfilt.dll + 2010-06-11 01:13 . 2010-04-05 17:01 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.18236_none_78957783b65a5d60\asycfilt.dll + 2010-06-11 01:13 . 2010-04-05 16:28 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.22665_none_77173258d26ae282\asycfilt.dll + 2010-06-11 01:13 . 2010-04-05 16:07 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.18454_none_76976349b9461049\asycfilt.dll + 2010-04-17 20:31 . 2010-02-18 17:36 98192 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22636_none_cd93a82a43bb5573\FWPKCLNT.SYS + 2010-04-17 20:31 . 2010-02-18 11:50 85504 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21226_none_cbb80fac468cdeac\FWPKCLNT.SYS + 2010-05-12 09:43 . 2010-01-29 13:49 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.22325_none_7c10a4356edc41af\INETRES.dll + 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18197_none_7b3d56a455f59b03\INETRES.dll + 2010-05-12 09:43 . 2010-01-29 13:56 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22621_none_7a26312571b9872f\INETRES.dll + 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18416_none_79ac63d2588f4d00\INETRES.dll + 2010-04-17 20:31 . 2010-02-18 11:43 31232 c:\windows\winsxs\x86_microsoft-windows-l..istry-support-tcpip_31bf3856ad364e35_6.0.6002.22341_none_88630ed21bd06a58\tcpipreg.sys + 2010-03-30 19:41 . 2010-03-09 16:27 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.21242_none_2a6fca57813ef7f4\iebrshim.dll + 2010-03-30 19:41 . 2010-03-09 16:50 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.17037_none_29f5fd046814bdc5\iebrshim.dll + 2010-05-06 18:19 . 2009-03-08 11:32 94720 c:\windows\winsxs\x86_microsoft-windows-ie-setup_31bf3856ad364e35_8.0.6001.18702_none_7c2a7e005d93bd9b\inseng.dll + 2010-06-11 01:13 . 2010-05-04 06:30 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iesetup.dll + 2010-06-11 01:13 . 2010-05-04 06:30 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iernonce.dll + 2010-05-06 18:20 . 2010-02-23 15:00 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22995_none_a8e727c18da89e3a\iesetup.dll + 2010-05-06 18:20 . 2010-02-23 15:00 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22995_none_a8e727c18da89e3a\iernonce.dll + 2010-06-11 01:13 . 2010-05-04 05:55 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iesetup.dll + 2010-06-11 01:13 . 2010-05-04 05:55 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iernonce.dll + 2010-05-06 18:20 . 2010-02-23 06:33 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18904_none_a8bddbde7442e6c7\iesetup.dll + 2010-05-06 18:20 . 2010-02-23 06:33 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18904_none_a8bddbde7442e6c7\iernonce.dll + 2010-05-06 18:19 . 2009-03-08 11:32 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18702_none_a8bbd77e7444b9cb\iesetup.dll + 2010-05-06 18:19 . 2009-03-08 11:32 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18702_none_a8bbd77e7444b9cb\iernonce.dll + 2010-03-30 19:41 . 2010-03-09 16:27 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21242_none_c44ab3e77a8f2297\iesetup.dll + 2010-03-30 19:41 . 2010-03-09 16:27 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21242_none_c44ab3e77a8f2297\iernonce.dll + 2010-03-30 19:41 . 2010-03-09 14:02 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21242_none_c44ab3e77a8f2297\ie4uinit.exe + 2010-03-30 19:41 . 2010-03-09 16:50 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.17037_none_c3d0e6946164e868\iesetup.dll + 2010-03-30 19:41 . 2010-03-09 16:50 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.17037_none_c3d0e6946164e868\iernonce.dll + 2010-03-30 19:41 . 2010-03-09 14:17 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.17037_none_c3d0e6946164e868\ie4uinit.exe + 2010-03-30 19:41 . 2010-03-11 14:52 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_2fb897943341ea10\ieUnatt.exe + 2010-03-30 19:41 . 2010-03-09 14:01 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_2f3ac9191a1b4a85\ieUnatt.exe + 2010-03-30 19:41 . 2010-03-09 14:02 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_2ddbfecc361459f2\ieUnatt.exe + 2010-03-30 19:41 . 2010-03-09 14:17 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_2d6231791cea1fc3\ieUnatt.exe + 2010-05-06 18:19 . 2009-03-08 11:31 59904 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_8.0.6001.18702_none_3d86a1c07a097782\icardie.dll + 2010-03-30 19:41 . 2010-03-09 16:27 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.21242_none_59157e298053e04e\icardie.dll + 2010-03-30 19:41 . 2010-03-09 16:50 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.17037_none_589bb0d66729a61f\icardie.dll + 2010-05-06 18:19 . 2009-03-08 11:31 34816 c:\windows\winsxs\x86_microsoft-windows-ie-imagesupport_31bf3856ad364e35_8.0.6001.18702_none_20dfeb2e08d9ec0a\imgutil.dll + 2010-05-06 18:19 . 2009-03-08 11:32 66560 c:\windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.6001.18702_none_4766ff3b547d623d\wextract.exe + 2010-05-26 07:02 . 2010-04-16 00:06 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23013_none_845a52015fda99b1\iecompat.dll + 2010-05-06 18:21 . 2010-02-18 12:44 64000 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.22993_none_8403fa7f601b45f7\iecompat.dll + 2010-05-26 07:02 . 2010-04-15 04:20 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18922_none_83c50ec446c5c666\iecompat.dll + 2010-05-06 18:21 . 2010-02-18 04:45 64000 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18902_none_83daae9c46b58e84\iecompat.dll + 2010-05-06 18:19 . 2009-03-08 11:31 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_8.0.6001.18702_none_d658a8dacff20c9e\mshtmler.dll + 2010-03-30 19:41 . 2010-03-11 14:51 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22653_none_f3c41e0bd36a0588\mshtmler.dll + 2010-03-30 19:41 . 2010-03-11 16:38 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22653_none_f3c41e0bd36a0588\ieencode.dll + 2006-11-02 07:33 . 2006-11-02 07:33 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18444_none_f3464f90ba4365fd\mshtmler.dll + 2010-03-30 19:41 . 2010-03-09 16:25 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18444_none_f3464f90ba4365fd\ieencode.dll + 2010-03-30 19:41 . 2010-03-09 12:36 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21242_none_f1e78543d63c756a\mshtmler.dll + 2010-03-30 19:41 . 2010-03-09 16:27 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21242_none_f1e78543d63c756a\ieencode.dll + 2010-03-30 19:41 . 2010-03-09 12:43 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.17037_none_f16db7f0bd123b3b\mshtmler.dll + 2010-03-30 19:41 . 2010-03-09 16:50 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.17037_none_f16db7f0bd123b3b\ieencode.dll + 2010-05-06 18:19 . 2009-03-08 11:31 66560 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_8.0.6001.18702_none_2b140bc159303551\mshtmled.dll + 2010-05-06 18:18 . 2009-03-08 11:31 45568 c:\windows\winsxs\x86_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.6001.18702_none_3c45119b1f28ff3d\mshta.exe + 2010-06-11 01:13 . 2010-05-04 04:58 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedssync.exe + 2010-06-11 01:13 . 2010-05-04 06:30 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedsbs.dll + 2010-05-06 18:20 . 2010-02-23 13:25 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22995_none_df6461a709f15891\msfeedssync.exe + 2010-05-06 18:20 . 2010-02-23 15:01 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22995_none_df6461a709f15891\msfeedsbs.dll + 2010-06-11 01:13 . 2010-05-04 04:30 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedssync.exe + 2010-06-11 01:13 . 2010-05-04 05:56 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedsbs.dll + 2010-05-06 18:20 . 2010-02-23 04:54 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18904_none_df3b15c3f08ba11e\msfeedssync.exe + 2010-05-06 18:20 . 2010-02-23 06:34 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18904_none_df3b15c3f08ba11e\msfeedsbs.dll + 2010-05-06 18:19 . 2009-03-08 11:31 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18702_none_df391163f08d7422\msfeedssync.exe + 2010-05-06 18:19 . 2009-03-08 11:31 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18702_none_df391163f08d7422\msfeedsbs.dll + 2010-05-06 18:19 . 2009-03-08 11:34 43008 c:\windows\winsxs\x86_microsoft-windows-ie-controls_31bf3856ad364e35_8.0.6001.18702_none_accc7a4465be292a\licmgr10.dll + 2010-05-06 18:19 . 2009-03-08 11:32 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_8.0.6001.18702_none_911d44271c9159e9\admparse.dll + 2010-03-30 19:41 . 2010-03-11 16:36 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22653_none_ae88b958200952d3\admparse.dll + 2008-06-20 23:51 . 2008-01-19 07:33 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18444_none_ae0aeadd06e2b348\admparse.dll + 2010-03-30 19:41 . 2010-03-09 16:24 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21242_none_acac209022dbc2b5\admparse.dll + 2010-03-30 19:41 . 2010-03-09 16:48 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.17037_none_ac32533d09b18886\admparse.dll + 2010-06-11 01:13 . 2010-05-04 06:31 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\WininetPlugin.dll + 2010-06-11 01:13 . 2010-05-04 06:30 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\jsproxy.dll + 2010-05-06 18:20 . 2010-02-23 15:06 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22995_none_e4ff661ad10266b2\WininetPlugin.dll + 2010-05-06 18:20 . 2010-02-23 15:01 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22995_none_e4ff661ad10266b2\jsproxy.dll + 2010-06-11 01:13 . 2010-05-04 05:59 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\WininetPlugin.dll + 2010-06-11 01:13 . 2010-05-04 05:55 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\jsproxy.dll + 2010-05-06 18:20 . 2010-02-23 06:39 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18904_none_e4d61a37b79caf3f\WininetPlugin.dll + 2010-05-06 18:20 . 2010-02-23 06:34 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18904_none_e4d61a37b79caf3f\jsproxy.dll + 2010-05-06 18:18 . 2009-03-08 11:33 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18702_none_e4d415d7b79e8243\WininetPlugin.dll + 2010-05-06 18:19 . 2009-03-08 11:33 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18702_none_e4d415d7b79e8243\jsproxy.dll + 2010-03-30 19:41 . 2010-03-11 16:52 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22360_none_04182c26b847a03d\WininetPlugin.dll + 2010-03-30 19:41 . 2010-03-11 16:50 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22360_none_04182c26b847a03d\jsproxy.dll + 2009-06-11 08:56 . 2009-04-11 06:28 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18226_none_03bfd0c79f0428b9\WininetPlugin.dll + 2009-06-11 08:56 . 2009-04-11 06:28 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18226_none_03bfd0c79f0428b9\jsproxy.dll + 2010-03-30 19:41 . 2010-03-11 16:40 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22653_none_023f8b08bb167b2d\WininetPlugin.dll + 2010-03-30 19:41 . 2010-03-11 16:38 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22653_none_023f8b08bb167b2d\jsproxy.dll + 2008-04-09 09:36 . 2008-02-22 05:01 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18444_none_01c1bc8da1efdba2\WininetPlugin.dll + 2010-03-30 19:41 . 2010-03-09 16:25 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18444_none_01c1bc8da1efdba2\jsproxy.dll + 2010-03-30 19:41 . 2010-03-09 16:31 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21242_none_0062f240bde8eb0f\WininetPlugin.dll + 2010-03-30 19:41 . 2010-03-09 16:27 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21242_none_0062f240bde8eb0f\jsproxy.dll + 2010-03-30 19:41 . 2010-03-09 16:54 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.17037_none_ffe924eda4beb0e0\WininetPlugin.dll + 2010-03-30 19:41 . 2010-03-09 16:51 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.17037_none_ffe924eda4beb0e0\jsproxy.dll + 2010-05-06 18:19 . 2009-03-08 11:33 18944 c:\windows\winsxs\x86_microsoft-windows-i..tivexpolicyprovider_31bf3856ad364e35_8.0.6001.18702_none_6f561c09617d9439\corpol.dll + 2010-05-26 07:03 . 2010-04-23 14:23 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22391_none_17571fa5201e0c64\tzupd.exe + 2010-02-24 01:55 . 2010-01-23 09:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18248_none_170a947c06d19246\tzupd.exe + 2010-05-26 07:03 . 2010-04-23 14:02 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22677_none_158c4f5122e21768\tzupd.exe + 2010-02-24 01:55 . 2010-01-23 09:44 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18464_none_150a7fae09bf1281\tzupd.exe + 2010-04-17 20:31 . 2010-02-18 11:42 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.22341_none_1428eb9d92bddb72\tunnel.sys + 2010-04-17 20:31 . 2010-02-18 11:42 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.22341_none_1428eb9d92bddb72\TUNMP.SYS + 2010-04-17 20:31 . 2010-02-18 11:28 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18209_none_13d290d27978969c\tunnel.sys + 2008-06-20 23:51 . 2008-01-19 05:55 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18209_none_13d290d27978969c\TUNMP.SYS + 2010-04-17 20:31 . 2010-02-18 12:00 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.22636_none_12524b13958ae910\tunnel.sys + 2010-04-17 20:31 . 2010-02-18 12:00 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.22636_none_12524b13958ae910\TUNMP.SYS + 2010-04-17 20:31 . 2010-02-18 11:52 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.18427_none_11d47c987c644985\tunnel.sys + 2008-06-20 23:51 . 2008-01-19 05:55 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.18427_none_11d47c987c644985\TUNMP.SYS + 2010-04-17 20:31 . 2010-02-18 11:50 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.21226_none_1076b295985c7249\tunnel.sys + 2010-04-17 20:31 . 2010-02-18 11:50 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.21226_none_1076b295985c7249\TUNMP.SYS + 2010-04-17 20:31 . 2010-02-18 12:04 25088 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.17021_none_0fe812727f4356a5\tunnel.sys + 2010-04-17 20:31 . 2010-02-18 12:04 15360 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.17021_none_0fe812727f4356a5\TUNMP.SYS + 2010-05-06 18:18 . 2009-03-08 11:31 46592 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_8.0.6001.18702_none_d0b191832934e44c\pngfilt.dll + 2010-03-30 19:41 . 2010-03-09 16:30 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21242_none_ec406dec2f7f4d18\pngfilt.dll + 2010-03-30 19:41 . 2010-03-09 16:54 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.17037_none_ebc6a099165512e9\pngfilt.dll + 2010-06-11 01:13 . 2010-05-26 17:10 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\lpk.dll + 2010-06-11 01:13 . 2010-05-26 17:09 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\fontsub.dll + 2010-06-11 01:13 . 2010-05-26 17:08 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\dciman32.dll + 2010-06-11 01:13 . 2010-05-26 17:08 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmlib.dll + 2009-07-16 10:37 . 2009-06-15 14:52 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\lpk.dll + 2010-01-20 01:36 . 2009-10-19 13:35 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\fontsub.dll + 2009-07-16 10:37 . 2009-06-15 14:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\dciman32.dll + 2010-06-11 01:13 . 2010-05-26 17:06 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmlib.dll + 2010-06-11 01:13 . 2010-05-26 16:20 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\lpk.dll + 2010-06-11 01:13 . 2010-05-26 16:19 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\fontsub.dll + 2010-06-11 01:13 . 2010-05-26 16:18 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\dciman32.dll + 2010-06-11 01:13 . 2010-05-26 16:17 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmlib.dll + 2008-06-20 23:52 . 2008-01-19 07:34 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\lpk.dll + 2010-01-20 01:36 . 2009-10-19 14:24 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\fontsub.dll + 2009-07-16 10:37 . 2009-06-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\dciman32.dll + 2010-06-11 01:13 . 2010-05-26 16:16 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmlib.dll + 2010-04-17 20:28 . 2010-01-13 17:48 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6002.22311_none_3a689ec7f7c9ca5e\cabview.dll + 2010-04-17 20:28 . 2010-01-13 17:34 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6002.18184_none_39965180dee23d09\cabview.dll + 2010-04-17 20:28 . 2010-01-13 18:51 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6001.22605_none_3890fdf3fa97bea5\cabview.dll + 2010-04-17 20:28 . 2010-01-15 00:04 98304 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6001.18404_none_38065ef8e17b085d\cabview.dll + 2010-04-17 20:28 . 2010-01-13 18:12 97792 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6000.21203_none_36a894f5fd733121\cabview.dll + 2010-04-17 20:28 . 2010-01-13 18:23 97792 c:\windows\winsxs\x86_microsoft-windows-cabview_31bf3856ad364e35_6.0.6000.17002_none_361df5fae4567ad9\cabview.dll + 2010-06-11 01:58 . 2010-04-12 12:22 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6001.22668_none_a7 46b6d8fb016e0c\System.ServiceModel.WasHosting.dll + 2010-06-11 01:58 . 2010-04-12 12:20 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6001.18457_none_be 13743ae15adabd\System.ServiceModel.WasHosting.dll + 2010-05-06 18:19 . 2009-03-08 11:32 66560 c:\windows\System32\wextract.exe + 2007-07-10 13:14 . 2010-06-11 12:18 82324 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2008-02-23 21:19 . 2010-06-11 12:18 14816 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1431605009-1662845966-2266027222-1000_UserData.bin + 2010-05-06 18:18 . 2009-03-08 11:31 46592 c:\windows\System32\pngfilt.dll - 2006-11-02 07:33 . 2006-11-02 07:33 48128 c:\windows\System32\mshtmler.dll + 2010-05-06 18:19 . 2009-03-08 11:31 48128 c:\windows\System32\mshtmler.dll + 2010-05-06 18:19 . 2009-03-08 11:31 66560 c:\windows\System32\mshtmled.dll - 2008-06-20 23:51 . 2008-01-19 07:33 45568 c:\windows\System32\mshta.exe + 2010-05-06 18:18 . 2009-03-08 11:31 45568 c:\windows\System32\mshta.exe + 2010-06-11 01:13 . 2010-05-04 04:30 13312 c:\windows\System32\msfeedssync.exe + 2010-06-11 01:13 . 2010-05-04 05:56 55296 c:\windows\System32\msfeedsbs.dll + 2010-06-11 01:13 . 2010-05-04 05:59 64512 c:\windows\System32\migration\WininetPlugin.dll - 2008-04-09 09:36 . 2008-02-22 05:01 64512 c:\windows\System32\migration\WininetPlugin.dll + 2010-01-12 07:17 . 2010-01-12 07:17 98304 c:\windows\System32\Macromed\Shockwave 10\SwOnce.dll - 2008-04-14 14:20 . 2008-03-14 21:31 98304 c:\windows\System32\Macromed\Shockwave 10\SwOnce.dll - 2008-04-14 14:20 . 2008-03-15 09:38 86016 c:\windows\System32\Macromed\Shockwave 10\SwMenuX.dll + 2010-01-12 07:17 . 2010-01-12 07:17 86016 c:\windows\System32\Macromed\Shockwave 10\SwMenuX.dll - 2008-04-14 14:20 . 2008-03-14 21:31 77824 c:\windows\System32\Macromed\Shockwave 10\SwInit.exe + 2010-01-12 07:17 . 2010-01-12 07:17 77824 c:\windows\System32\Macromed\Shockwave 10\SwInit.exe + 2010-01-12 07:17 . 2010-01-12 07:17 79488 c:\windows\System32\Macromed\Shockwave 10\gtapi.dll + 2010-01-12 07:17 . 2010-01-12 07:17 24576 c:\windows\System32\Macromed\Shockwave 10\DynaPlayer.dll - 2008-04-14 14:20 . 2008-03-14 21:29 24576 c:\windows\System32\Macromed\Shockwave 10\DynaPlayer.dll + 2010-01-12 07:17 . 2010-01-12 07:17 49152 c:\windows\System32\Macromed\Shockwave 10\BCInstallPinger.dll + 2010-05-06 18:19 . 2009-03-08 11:34 43008 c:\windows\System32\licmgr10.dll + 2010-06-11 01:13 . 2010-05-04 05:55 25600 c:\windows\System32\jsproxy.dll + 2010-05-06 18:19 . 2009-03-08 11:32 94720 c:\windows\System32\inseng.dll + 2010-05-06 18:19 . 2009-03-08 11:31 34816 c:\windows\System32\imgutil.dll + 2010-06-11 01:13 . 2010-05-04 05:55 55808 c:\windows\System32\iernonce.dll + 2010-05-06 18:19 . 2009-03-08 11:31 59904 c:\windows\System32\icardie.dll + 2010-04-17 20:31 . 2010-02-18 11:52 25088 c:\windows\System32\drivers\tunnel.sys - 2008-06-20 23:55 . 2008-01-19 05:28 78848 c:\windows\System32\drivers\mrxsmb20.sys + 2010-04-17 20:31 . 2010-02-23 11:32 78848 c:\windows\System32\drivers\mrxsmb20.sys + 2010-05-06 18:19 . 2009-03-08 11:33 18944 c:\windows\System32\corpol.dll - 2007-12-14 22:11 . 2010-03-11 12:48 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2007-12-14 22:11 . 2010-06-11 12:16 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-06 13:59 . 2010-06-11 12:16 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2007-12-14 22:11 . 2010-03-11 12:48 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2007-12-14 22:11 . 2010-06-11 12:16 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-17 20:28 . 2010-01-15 00:04 98304 c:\windows\System32\cabview.dll + 2010-05-06 18:19 . 2009-03-08 11:32 72704 c:\windows\System32\admparse.dll - 2009-04-15 09:19 . 2008-01-19 07:33 72704 c:\windows\System32\admparse.dll + 2009-11-26 01:15 . 2010-06-10 22:36 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-11-26 01:15 . 2010-03-11 17:05 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-11-26 01:15 . 2010-06-10 22:36 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-11-26 01:15 . 2010-03-11 17:05 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-11-26 01:15 . 2010-06-10 22:36 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-11-26 01:15 . 2010-03-11 17:05 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2008-03-05 00:06 . 2010-06-10 20:35 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-03-05 00:06 . 2010-03-11 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-14 14:02 . 2010-05-14 14:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat + 2010-05-14 14:02 . 2010-05-14 14:02 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat + 2010-05-14 14:02 . 2010-05-14 14:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat - 2008-03-05 00:06 . 2010-03-11 17:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2008-03-05 00:06 . 2010-06-10 20:35 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2008-03-05 00:06 . 2010-06-10 20:35 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-03-05 00:06 . 2010-03-11 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-08-21 12:36 . 2008-06-20 01:17 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2010-06-11 01:58 . 2010-04-12 12:20 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2010-06-11 01:58 . 2010-04-12 12:20 17256 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll + 2010-06-11 01:57 . 2010-03-29 11:57 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2010-03-18 10:24 . 2010-03-18 10:24 22528 c:\windows\Installer\1a0d5.msi + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe + 2010-05-14 23:44 . 2010-05-14 23:44 25214 c:\windows\Installer\{F7B0939E-58DF-11DF-B3A6-005056806466}\ARPPRODUCTICON.exe - 2008-06-04 08:56 . 2010-03-10 11:30 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2008-06-04 08:56 . 2010-03-10 11:30 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe - 2008-06-04 08:56 . 2010-03-10 11:30 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe + 2010-06-05 01:02 . 2010-06-05 01:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll + 2010-04-18 01:25 . 2010-04-18 01:25 25214 c:\windows\Installer\{08C0729E-3E50-11DF-9D81-005056806466}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe + 2010-06-11 01:58 . 2010-04-12 12:20 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll - 2009-08-21 12:36 . 2008-06-20 01:14 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2010-05-06 18:19 . 2009-03-08 11:35 2048 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18702_none_83daaad046b59436\iecompat.dll + 2010-05-26 07:03 . 2010-04-23 14:23 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22391_none_17571fa5201e0c64\tzres.dll + 2010-05-26 07:03 . 2010-04-23 14:13 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18248_none_170a947c06d19246\tzres.dll + 2010-05-26 07:03 . 2010-04-23 14:02 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22677_none_158c4f5122e21768\tzres.dll + 2010-05-26 07:03 . 2010-04-23 13:55 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18464_none_150a7fae09bf1281\tzres.dll + 2008-03-26 02:03 . 2010-05-27 02:04 2666 c:\windows\System32\WDI\ERCQueuedResolutions.dat + 2010-06-11 12:16 . 2010-06-11 12:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-03-11 17:31 . 2010-03-11 17:31 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-03-11 17:31 . 2010-03-11 17:31 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-06-11 12:16 . 2010-06-11 12:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-03-30 19:53 . 2010-03-30 19:53 4608 c:\windows\Installer\{AC523DDA-3104-40C4-AA17-879FE54773C2}\IconAC523DDA.exe + 2010-06-11 01:58 . 2010-04-12 12:21 970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22668_none_f0784b9f3a578e e1\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:19 970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18457_none_0745090120b0fb 92\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:21 442368 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.22668_none_0ee004565a21087a\System.IdentityModel.dll + 2010-06-11 01:58 . 2010-04-12 12:19 438272 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6001.18457_none_25acc1b8407a752b\System.IdentityModel.dll + 2010-06-11 01:57 . 2010-03-29 12:42 436048 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22476_none_1fd81385518d6e82\webengine.dll + 2010-06-11 01:57 . 2010-03-29 11:57 435024 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18294_none_36a7e88d37e40d97\webengine.dll + 2010-04-17 20:30 . 2009-12-23 12:12 172032 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6002.22293_none_f1c001a2b09b160b\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 11:33 172032 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6002.18169_none_f15cd657975fba78\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 12:29 171520 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6001.22588_none_efe96118b36823a9\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 12:43 171520 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6001.18387_none_ef5ec21d9a4b6d61\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 12:14 171520 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6000.21186_none_ee00f81ab6439625\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 12:45 171520 c:\windows\winsxs\x86_microsoft-windows-wintrust-dll_31bf3856ad364e35_6.0.6000.16984_none_ed7582999d27906b\wintrust.dll + 2010-04-17 20:31 . 2010-02-18 14:01 167424 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\tcpipcfg.dll + 2010-04-17 20:31 . 2010-02-18 11:51 818688 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\tcpip.sys + 2010-04-17 20:31 . 2010-02-18 14:22 167424 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\tcpipcfg.dll + 2010-04-17 20:31 . 2010-02-18 12:05 815104 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\tcpip.sys + 2010-04-17 20:31 . 2010-02-18 14:22 910216 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22341_none_b563eb1d7cc9b0c2\tcpip.sys + 2010-04-17 20:31 . 2010-02-18 14:07 904576 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18209_none_b50d905263846bec\tcpip.sys + 2010-04-17 20:31 . 2010-02-18 17:36 902024 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys + 2010-04-17 20:31 . 2010-02-18 14:49 898952 c:\windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18427_none_b30f7c1866701ed5\tcpip.sys + 2010-04-17 20:31 . 2010-02-23 11:16 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6002.22346_none_81dc4772677c5da2\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 11:10 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6002.18213_none_8170198d4e491e00\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 11:30 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6001.22641_none_7ff0d4186a5a89cb\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 11:32 105984 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6001.18431_none_7f7205535134d0e9\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 11:30 102912 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6000.21230_none_7e143b506d2cf9ad\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 13:14 102400 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6000.17025_none_7d9a6dfd5402bf7e\mrxsmb.sys + 2010-04-17 20:31 . 2010-02-23 11:16 212992 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6002.22346_none_8aef65c661cd9c04\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:10 212992 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6002.18213_none_8a8337e1489a5c62\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:30 212992 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.22641_none_8903f26c64abc82d\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:32 212992 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.18431_none_888523a74b860f4b\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:30 211968 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6000.21230_none_872759a4677e380f\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 13:14 211968 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6000.17025_none_86ad8c514e53fde0\mrxsmb10.sys + 2010-05-07 11:42 . 2010-03-05 22:19 420352 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_8.0.6001.23000_none_2bcc9be85cd2112b\vbscript.dll + 2010-05-07 11:42 . 2010-03-05 14:01 420352 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_8.0.6001.18909_none_2b4c2b7b43ac1f55\vbscript.dll + 2010-05-06 18:18 . 2009-03-08 11:33 420352 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_8.0.6001.18702_none_2b4525a943b273a6\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 17:50 430080 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6002.22354_none_4a980d0c444fdb0b\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 17:33 430080 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6002.18222_none_4a2cdf712b1bb4c0\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 17:56 434176 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.22648_none_48c06c38471dcf52\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 18:54 430080 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.18440_none_482ecb372e0767a9\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 19:07 434176 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6000.21238_none_46e4d3ba49ef588b\vbscript.dll + 2010-04-17 20:31 . 2010-03-04 19:24 434176 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6000.17033_none_4656339730d63ce7\vbscript.dll + 2010-05-07 11:42 . 2009-12-04 16:15 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22960_none_6611c986263fd953\jscript.dll + 2010-05-07 11:42 . 2009-06-06 12:55 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.22886_none_66022984264aac18\jscript.dll + 2010-05-07 11:42 . 2009-12-04 07:19 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18869_none_65912f550d1a1d98\jscript.dll + 2010-05-07 11:42 . 2009-06-06 05:01 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18795_none_656cbc830d360ee8\jscript.dll + 2010-05-06 18:18 . 2009-03-08 11:33 726528 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_8.0.6001.18702_none_65cb0af10cefc76a\jscript.dll + 2010-04-17 20:31 . 2010-02-18 13:59 438272 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22636_none_cd93a82a43bb5573\IKEEXT.DLL + 2010-04-17 20:31 . 2010-02-18 13:59 595456 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22636_none_cd93a82a43bb5573\FWPUCLNT.DLL + 2010-04-17 20:31 . 2010-02-18 13:57 328704 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22636_none_cd93a82a43bb5573\BFE.DLL + 2010-04-17 20:31 . 2010-02-18 13:56 416768 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21226_none_cbb80fac468cdeac\IKEEXT.DLL + 2010-04-17 20:31 . 2010-02-18 13:56 543232 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21226_none_cbb80fac468cdeac\FWPUCLNT.DLL + 2010-04-17 20:31 . 2010-02-18 13:55 317440 c:\windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6000.21226_none_cbb80fac468cdeac\BFE.DLL + 2010-04-17 20:31 . 2010-02-18 17:36 220040 c:\windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6001.22636_none_570aa516ce7e04c9\netio.sys + 2010-04-17 20:31 . 2010-02-18 14:34 213896 c:\windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.21226_none_552f0c98d14f8e02\netio.sys + 2010-05-06 18:19 . 2009-03-08 11:22 156160 c:\windows\winsxs\x86_microsoft-windows-msls31_31bf3856ad364e35_8.0.6001.18702_none_aeeaf610b83f2e48\msls31.dll + 2010-05-12 09:43 . 2010-01-29 16:07 738816 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.22325_none_7c10a4356edc41af\inetcomm.dll + 2010-05-12 09:43 . 2010-01-29 15:40 738816 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18197_none_7b3d56a455f59b03\inetcomm.dll + 2010-05-12 09:43 . 2010-01-29 16:08 738304 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22621_none_7a26312571b9872f\inetcomm.dll + 2010-05-12 09:43 . 2010-01-29 16:21 738304 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18416_none_79ac63d2588f4d00\inetcomm.dll + 2010-05-06 18:18 . 2009-03-08 11:35 121344 c:\windows\winsxs\x86_microsoft-windows-js-debuggeride_31bf3856ad364e35_8.0.6001.18702_none_1de359b6148047cc\jsdebuggeride.dll + 2010-03-30 19:41 . 2010-03-09 14:03 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.21242_none_0bbe0cfdf032f65c\ieuser.exe + 2010-03-30 19:41 . 2010-03-09 14:18 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.17037_none_0b443faad708bc2d\ieuser.exe + 2010-05-06 18:18 . 2009-03-08 11:33 256000 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.6001.18702_none_cb86fb78a76dcdde\ieinstal.exe + 2010-03-30 19:41 . 2010-03-09 14:03 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.21242_none_e715d7e1adb836aa\ieinstal.exe + 2010-03-30 19:41 . 2010-03-09 14:18 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.17037_none_e69c0a8e948dfc7b\ieinstal.exe + 2010-06-11 01:13 . 2010-05-04 06:30 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23019_none_481337e6dd0a172b\ieui.dll + 2010-05-06 18:20 . 2010-02-23 15:00 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22995_none_47b8df3cdd4e5e15\ieui.dll + 2010-06-11 01:13 . 2010-05-04 05:55 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18928_none_477df4a9c3f543e0\ieui.dll + 2010-05-06 18:20 . 2010-02-23 06:33 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18904_none_478f9359c3e8a6a2\ieui.dll + 2010-05-06 18:19 . 2009-03-08 11:22 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18702_none_478d8ef9c3ea79a6\ieui.dll + 2010-03-30 19:41 . 2010-03-11 16:49 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22360_none_66d1a548c49397a0\ieui.dll + 2010-03-30 19:41 . 2010-03-09 15:39 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18226_none_667949e9ab50201c\ieui.dll + 2010-03-30 19:41 . 2010-03-11 16:38 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22653_none_64f9042ac7627290\ieui.dll + 2008-06-20 23:53 . 2008-01-19 07:34 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18444_none_647b35afae3bd305\ieui.dll + 2010-03-30 19:41 . 2010-03-09 16:27 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21242_none_631c6b62ca34e272\ieui.dll + 2010-03-30 19:41 . 2010-03-09 16:50 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.17037_none_62a29e0fb10aa843\ieui.dll + 2010-05-06 18:18 . 2009-03-08 11:34 105984 c:\windows\winsxs\x86_microsoft-windows-ie-winsockautodialstub_31bf3856ad364e35_8.0.6001.18702_none_d315f3a07395d0ed\url.dll + 2010-05-06 18:19 . 2009-03-08 11:34 208384 c:\windows\winsxs\x86_microsoft-windows-ie-winfxdocobj_31bf3856ad364e35_8.0.6001.18702_none_d4a239fe30224f93\WinFXDocObj.exe + 2010-05-06 18:18 . 2009-03-08 11:33 759296 c:\windows\winsxs\x86_microsoft-windows-ie-vgx_31bf3856ad364e35_8.0.6001.18702_none_d02233c4fe8667df\VGX.dll + 2010-06-11 01:13 . 2010-05-04 06:30 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.23019_none_ff02e517e8e79415\iesysprep.dll + 2010-05-06 18:20 . 2010-02-23 15:00 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22995_none_fea88c6de92bdaff\iesysprep.dll + 2010-06-11 01:13 . 2010-05-04 05:55 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18928_none_fe6da1dacfd2c0ca\iesysprep.dll + 2010-05-06 18:20 . 2010-02-23 06:33 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18904_none_fe7f408acfc6238c\iesysprep.dll + 2010-05-06 18:18 . 2009-03-08 11:33 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18702_none_fe7d3c2acfc7f690\iesysprep.dll + 2010-06-11 01:13 . 2010-05-04 04:59 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\ie4uinit.exe + 2010-05-06 18:20 . 2010-02-23 13:25 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22995_none_a8e727c18da89e3a\ie4uinit.exe + 2010-06-11 01:13 . 2010-05-04 04:30 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\ie4uinit.exe + 2010-05-06 18:20 . 2010-02-23 04:55 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18904_none_a8bddbde7442e6c7\ie4uinit.exe + 2010-05-06 18:18 . 2009-03-08 11:32 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18702_none_a8bbd77e7444b9cb\ie4uinit.exe + 2010-06-11 01:13 . 2010-05-04 06:31 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23019_none_2b1475a0bb6f3e25\sqmapi.dll + 2010-05-06 18:20 . 2010-02-23 15:05 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.22995_none_2aba1cf6bbb3850f\sqmapi.dll + 2010-06-11 01:13 . 2010-05-04 05:58 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18928_none_2a7f3263a25a6ada\sqmapi.dll + 2010-05-06 18:20 . 2010-02-23 06:38 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18904_none_2a90d113a24dcd9c\sqmapi.dll + 2010-05-06 18:19 . 2009-03-08 21:09 140128 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18702_none_2a8eccb3a24fa0a0\sqmapi.dll + 2010-03-30 19:41 . 2010-03-11 16:39 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22653_none_47fa41e4a5c7998a\sqmapi.dll + 2010-03-30 19:41 . 2010-03-11 16:38 271360 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22653_none_47fa41e4a5c7998a\iertutil.dll + 2008-06-20 23:55 . 2008-01-19 07:36 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18444_none_477c73698ca0f9ff\sqmapi.dll + 2010-03-30 19:41 . 2010-03-09 16:25 270848 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18444_none_477c73698ca0f9ff\iertutil.dll + 2010-03-30 19:41 . 2010-03-09 16:31 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21242_none_461da91ca89a096c\sqmapi.dll + 2010-03-30 19:41 . 2010-03-09 16:27 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21242_none_461da91ca89a096c\iertutil.dll + 2010-03-30 19:41 . 2010-03-09 16:54 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.17037_none_45a3dbc98f6fcf3d\sqmapi.dll + 2010-03-30 19:41 . 2010-03-09 16:50 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.17037_none_45a3dbc98f6fcf3d\iertutil.dll + 2010-05-06 18:19 . 2009-03-08 11:34 193536 c:\windows\winsxs\x86_microsoft-windows-ie-ratings_31bf3856ad364e35_8.0.6001.18702_none_aa7d60ae7286ab24\msrating.dll + 2010-05-06 18:18 . 2009-03-08 11:33 109568 c:\windows\winsxs\x86_microsoft-windows-ie-pdm_31bf3856ad364e35_8.0.6001.18702_none_d0610d06fe575a49\PDMSetup.exe + 2010-05-06 18:18 . 2009-01-08 01:20 355832 c:\windows\winsxs\x86_microsoft-windows-ie-pdm_31bf3856ad364e35_8.0.6001.18702_none_d0610d06fe575a49\pdm.dll + 2010-05-06 18:18 . 2009-01-08 01:20 265720 c:\windows\winsxs\x86_microsoft-windows-ie-pdm_31bf3856ad364e35_8.0.6001.18702_none_d0610d06fe575a49\msdbg2.dll + 2010-05-06 18:19 . 2009-03-08 11:34 236544 c:\windows\winsxs\x86_microsoft-windows-ie-offlinefavorites_31bf3856ad364e35_8.0.6001.18702_none_44170552678500f2\webcheck.dll + 2010-06-11 01:13 . 2010-05-04 06:31 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23019_none_1a973373430e2393\occache.dll + 2010-05-06 18:20 . 2010-02-23 15:04 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.22995_none_1a3cdac943526a7d\occache.dll + 2010-06-11 01:13 . 2010-05-04 05:58 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18928_none_1a01f03629f95048\occache.dll + 2010-05-06 18:20 . 2010-02-23 06:37 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18904_none_1a138ee629ecb30a\occache.dll + 2010-05-06 18:19 . 2009-03-08 11:34 109568 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18702_none_1a118a8629ee860e\occache.dll + 2010-03-30 19:41 . 2010-03-11 16:39 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22653_none_377cffb72d667ef8\occache.dll + 2010-03-30 19:41 . 2010-03-09 16:27 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18444_none_36ff313c143fdf6d\occache.dll + 2010-03-30 19:41 . 2010-03-09 16:30 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21242_none_35a066ef3038eeda\occache.dll + 2010-03-30 19:41 . 2010-03-09 16:53 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.17037_none_3526999c170eb4ab\occache.dll + 2010-05-06 18:18 . 2009-03-08 11:35 233984 c:\windows\winsxs\x86_microsoft-windows-ie-jsprofilerui_31bf3856ad364e35_8.0.6001.18702_none_d5ea1c01e3fe67ea\jsprofilerui.dll + 2010-05-06 18:18 . 2009-03-08 11:35 118272 c:\windows\winsxs\x86_microsoft-windows-ie-jsprofilercore_31bf3856ad364e35_8.0.6001.18702_none_ed92bec9472aab53\JSProfilerCore.dll + 2010-05-06 18:18 . 2009-03-08 11:35 521216 c:\windows\winsxs\x86_microsoft-windows-ie-jscriptdebugui_31bf3856ad364e35_8.0.6001.18702_none_9d577137e370ad2c\jsdbgui.dll + 2010-06-11 01:13 . 2010-05-04 06:32 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\iexplore.exe + 2010-06-11 01:13 . 2010-05-04 04:59 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\ieUnatt.exe + 2010-05-06 18:20 . 2010-02-23 15:06 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_127872a6492dd595\iexplore.exe + 2010-05-06 18:20 . 2010-02-23 13:26 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22995_none_127872a6492dd595\ieUnatt.exe + 2010-06-11 01:13 . 2010-05-04 06:00 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\iexplore.exe + 2010-06-11 01:13 . 2010-05-04 04:31 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\ieUnatt.exe + 2010-05-06 18:20 . 2010-02-23 06:39 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_124f26c32fc81e22\iexplore.exe + 2010-05-06 18:20 . 2010-02-23 04:55 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18904_none_124f26c32fc81e22\ieUnatt.exe + 2010-05-06 18:18 . 2009-03-08 21:09 638816 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_124d22632fc9f126\iexplore.exe + 2010-05-06 18:18 . 2009-03-08 11:33 132608 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18702_none_124d22632fc9f126\ieUnatt.exe + 2010-03-30 19:41 . 2010-03-11 16:40 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_2fb897943341ea10\iexplore.exe + 2010-03-30 19:41 . 2010-03-09 16:30 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_2f3ac9191a1b4a85\iexplore.exe + 2010-03-30 19:41 . 2010-03-09 16:32 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_2ddbfecc361459f2\iexplore.exe + 2010-03-30 19:41 . 2010-03-09 16:56 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_2d6231791cea1fc3\iexplore.exe + 2010-05-06 18:18 . 2009-03-08 11:35 144384 c:\windows\winsxs\x86_microsoft-windows-ie-impexp-extexport_31bf3856ad364e35_8.0.6001.18702_none_10e8e2fad95106ab\ExtExport.exe + 2010-05-06 18:18 . 2009-03-08 11:32 169472 c:\windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.6001.18702_none_4766ff3b547d623d\iexpress.exe + 2010-06-11 01:13 . 2010-05-04 06:30 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.23019_none_2afdfb3cc92410b5\IEShims.dll + 2010-05-06 18:20 . 2010-02-23 15:00 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22995_none_2aa3a292c968579f\IEShims.dll + 2010-06-11 01:13 . 2010-05-04 05:55 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18928_none_2a68b7ffb00f3d6a\IEShims.dll + 2010-05-06 18:20 . 2010-02-23 06:33 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18904_none_2a7a56afb002a02c\IEShims.dll + 2010-05-06 18:19 . 2009-03-08 11:33 196096 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18702_none_2a78524fb0047330\IEShims.dll + 2010-06-11 01:13 . 2010-05-04 06:30 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.23019_none_739fafa6797baa47\ieproxy.dll + 2010-05-06 18:20 . 2010-02-23 15:00 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22995_none_734556fc79bff131\ieproxy.dll + 2010-06-11 01:13 . 2010-05-04 05:55 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18928_none_730a6c696066d6fc\ieproxy.dll + 2010-05-06 18:20 . 2010-02-23 06:33 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18904_none_731c0b19605a39be\ieproxy.dll + 2010-05-06 18:18 . 2009-03-08 11:33 246784 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18702_none_731a06b9605c0cc2\ieproxy.dll + 2010-05-06 18:18 . 2009-03-08 11:34 115712 c:\windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.6001.18702_none_e9612e8087062a88\ielowutil.exe + 2010-05-06 18:18 . 2009-03-08 11:33 125952 c:\windows\winsxs\x86_microsoft-windows-ie-iecleanup_31bf3856ad364e35_8.0.6001.18702_none_a0d17792aa595b3e\iecleanup.exe + 2010-03-30 19:41 . 2010-03-11 16:50 477184 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.22360_none_4a58221059d9534b\mshtmled.dll + 2010-03-30 19:41 . 2010-03-09 15:40 477184 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.18226_none_49ffc6b14095dbc7\mshtmled.dll + 2010-03-30 19:41 . 2010-03-11 16:39 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.22653_none_487f80f25ca82e3b\mshtmled.dll + 2010-03-30 19:41 . 2010-03-09 16:26 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.18444_none_4801b27743818eb0\mshtmled.dll + 2010-03-30 19:41 . 2010-03-09 16:29 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.21242_none_46a2e82a5f7a9e1d\mshtmled.dll + 2010-03-30 19:41 . 2010-03-09 16:52 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.17037_none_46291ad7465063ee\mshtmled.dll + 2010-05-06 18:18 . 2009-03-08 11:33 103936 c:\windows\winsxs\x86_microsoft-windows-ie-gc-setdepnx_31bf3856ad364e35_8.0.6001.18702_none_9396116207a33bbc\SetDepNx.exe + 2010-05-06 18:18 . 2009-03-08 11:33 107520 c:\windows\winsxs\x86_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_8.0.6001.18702_none_0ad3f877399acafc\RegisterIEPKEYs.exe + 2010-06-11 01:13 . 2010-05-04 06:30 599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23019_none_4357559369617280\msfeeds.dll + 2010-05-06 18:20 . 2010-02-23 15:01 594432 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.22995_none_42fcfce969a5b96a\msfeeds.dll + 2010-06-11 01:13 . 2010-05-04 05:56 599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18928_none_42c21256504c9f35\msfeeds.dll + 2010-05-06 18:20 . 2010-02-23 06:34 594432 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18904_none_42d3b106504001f7\msfeeds.dll + 2010-05-06 18:18 . 2009-03-08 11:32 594432 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18702_none_42d1aca65041d4fb\msfeeds.dll + 2010-03-30 19:41 . 2010-03-11 16:39 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22653_none_603d21d753b9cde5\msfeeds.dll + 2010-03-30 19:41 . 2010-03-09 16:26 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18444_none_5fbf535c3a932e5a\msfeeds.dll + 2010-03-30 19:41 . 2010-03-09 16:29 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21242_none_5e60890f568c3dc7\msfeeds.dll + 2010-03-30 19:41 . 2010-03-09 16:52 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.17037_none_5de6bbbc3d620398\msfeeds.dll + 2010-05-06 18:19 . 2009-03-08 11:31 216064 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_8.0.6001.18702_none_7ab17169976f82c4\dxtrans.dll + 2010-05-06 18:19 . 2009-03-08 11:31 348160 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_8.0.6001.18702_none_7ab17169976f82c4\dxtmsft.dll + 2010-03-30 19:41 . 2010-03-09 16:26 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21242_none_96404dd29db9eb90\dxtrans.dll + 2010-03-30 19:41 . 2010-03-09 16:26 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21242_none_96404dd29db9eb90\dxtmsft.dll + 2010-03-30 19:41 . 2010-03-09 16:49 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.17037_none_95c6807f848fb161\dxtrans.dll + 2010-03-30 19:41 . 2010-03-09 16:49 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.17037_none_95c6807f848fb161\dxtmsft.dll + 2010-06-11 01:13 . 2010-05-04 06:30 743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.23019_none_1f15d8176ec16c09\iedvtool.dll + 2010-06-11 01:13 . 2010-05-04 05:55 743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.18928_none_1e8094da55ac98be\iedvtool.dll + 2010-05-06 18:18 . 2009-03-08 11:35 742912 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.18702_none_1e902f2a55a1ce84\iedvtool.dll + 2010-06-11 01:13 . 2010-05-04 06:30 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.23019_none_20344ff620f8e82a\iepeers.dll + 2010-05-06 18:20 . 2010-02-23 15:00 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22995_none_1fd9f74c213d2f14\iepeers.dll + 2010-06-11 01:13 . 2010-05-04 05:55 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18928_none_1f9f0cb907e414df\iepeers.dll + 2010-05-06 18:20 . 2010-02-23 06:33 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18904_none_1fb0ab6907d777a1\iepeers.dll + 2010-05-06 18:19 . 2009-03-08 11:31 183808 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18702_none_1faea70907d94aa5\iepeers.dll + 2010-03-30 19:41 . 2010-03-11 16:49 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.22360_none_3ef2bd580882689f\iepeers.dll + 2010-03-30 19:41 . 2010-03-09 15:39 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.18226_none_3e9a61f8ef3ef11b\iepeers.dll + 2010-03-30 19:41 . 2010-03-11 16:38 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.22653_none_3d1a1c3a0b51438f\iepeers.dll + 2010-03-30 19:41 . 2010-03-09 16:25 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.18444_none_3c9c4dbef22aa404\iepeers.dll + 2010-03-30 19:41 . 2010-03-09 16:27 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6000.21242_none_3b3d83720e23b371\iepeers.dll + 2010-03-30 19:41 . 2010-03-09 16:50 192512 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6000.17037_none_3ac3b61ef4f97942\iepeers.dll + 2010-05-06 18:18 . 2009-03-08 11:11 445952 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_8.0.6001.18702_none_de7d38b18189fc96\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-11 16:49 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22360_none_fdc14f0082331a90\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-09 15:39 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18226_none_fd68f3a168efa30c\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-11 16:38 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22653_none_fbe8ade28501f580\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-09 16:25 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18444_none_fb6adf676bdb55f5\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-09 16:27 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21242_none_fa0c151a87d46562\ieapfltr.dll + 2010-03-30 19:41 . 2010-03-09 16:50 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.17037_none_f99247c76eaa2b33\ieapfltr.dll + 2010-05-06 18:19 . 2009-03-08 11:32 163840 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_8.0.6001.18702_none_911d44271c9159e9\ieakui.dll + 2010-05-06 18:19 . 2009-03-08 11:33 229376 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_8.0.6001.18702_none_911d44271c9159e9\ieaksie.dll + 2010-03-30 19:41 . 2010-03-11 16:38 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22653_none_ae88b958200952d3\ieakui.dll + 2010-03-30 19:41 . 2010-03-11 16:38 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22653_none_ae88b958200952d3\ieaksie.dll + 2006-11-02 07:27 . 2006-11-02 09:39 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18444_none_ae0aeadd06e2b348\ieakui.dll + 2010-03-30 19:41 . 2010-03-09 16:25 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18444_none_ae0aeadd06e2b348\ieaksie.dll + 2010-03-30 19:41 . 2010-03-09 16:27 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21242_none_acac209022dbc2b5\ieakui.dll + 2010-03-30 19:41 . 2010-03-09 16:27 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21242_none_acac209022dbc2b5\ieaksie.dll + 2010-03-30 19:41 . 2010-03-09 16:50 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.17037_none_ac32533d09b18886\ieakui.dll + 2010-03-30 19:41 . 2010-03-09 16:50 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.17037_none_ac32533d09b18886\ieaksie.dll + 2010-05-06 18:19 . 2009-03-08 11:33 125952 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitengine_31bf3856ad364e35_8.0.6001.18702_none_87015889ddff063f\ieakeng.dll + 2010-06-11 01:13 . 2010-05-04 06:30 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.23019_none_57c137c08668408f\iedkcs32.dll + 2010-05-06 18:20 . 2010-02-23 15:00 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.22995_none_5766df1686ac8779\iedkcs32.dll + 2010-06-11 01:13 . 2010-05-04 05:55 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18928_none_572bf4836d536d44\iedkcs32.dll + 2010-05-06 18:20 . 2010-02-23 06:33 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18904_none_573d93336d46d006\iedkcs32.dll + 2010-05-06 18:18 . 2009-03-08 21:09 391536 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18702_none_573b8ed36d48a30a\iedkcs32.dll + 2010-03-30 19:41 . 2010-03-11 16:38 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22653_none_74a7040470c09bf4\iedkcs32.dll + 2010-03-30 19:41 . 2010-03-09 16:25 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18444_none_742935895799fc69\iedkcs32.dll + 2010-03-30 19:41 . 2010-03-09 16:27 388608 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21242_none_72ca6b3c73930bd6\iedkcs32.dll + 2010-03-30 19:41 . 2010-03-09 16:50 385024 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.17037_none_72509de95a68d1a7\iedkcs32.dll + 2010-06-11 01:13 . 2010-05-04 06:31 919040 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\wininet.dll + 2010-05-06 18:20 . 2010-02-23 15:06 919040 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22995_none_e4ff661ad10266b2\wininet.dll + 2010-06-11 01:13 . 2010-05-04 05:59 916480 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\wininet.dll + 2010-05-06 18:20 . 2010-02-23 06:39 916480 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18904_none_e4d61a37b79caf3f\wininet.dll + 2010-05-06 18:18 . 2009-03-08 11:34 914944 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18702_none_e4d415d7b79e8243\wininet.dll + 2010-03-30 19:41 . 2010-03-11 16:52 834560 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22360_none_04182c26b847a03d\wininet.dll + 2010-03-30 19:41 . 2010-03-09 15:42 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18226_none_03bfd0c79f0428b9\wininet.dll + 2010-03-30 19:41 . 2010-03-11 16:40 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22653_none_023f8b08bb167b2d\wininet.dll + 2010-03-30 19:41 . 2010-03-09 16:28 833024 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18444_none_01c1bc8da1efdba2\wininet.dll + 2010-03-30 19:41 . 2010-03-09 16:31 841216 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21242_none_0062f240bde8eb0f\wininet.dll + 2010-03-30 19:41 . 2010-03-09 16:54 832512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.17037_none_ffe924eda4beb0e0\wininet.dll + 2010-04-17 20:31 . 2010-02-18 13:42 211456 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.22341_none_1428eb9d92bddb72\iphlpsvc.dll + 2010-04-17 20:31 . 2010-02-18 13:30 200704 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18209_none_13d290d27978969c\iphlpsvc.dll + 2010-04-17 20:31 . 2010-02-18 14:00 201216 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.22636_none_12524b13958ae910\iphlpsvc.dll + 2010-04-17 20:31 . 2010-02-18 14:11 190464 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6001.18427_none_11d47c987c644985\iphlpsvc.dll + 2010-04-17 20:31 . 2010-02-18 13:57 179712 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.21226_none_1076b295985c7249\iphlpsvc.dll + 2010-04-17 20:31 . 2010-02-18 14:19 179712 c:\windows\winsxs\x86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6000.17021_none_0fe812727f4356a5\iphlpsvc.dll + 2010-06-11 01:13 . 2010-05-04 06:30 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.23019_none_c43671ebab5db8a4\mstime.dll + 2010-05-06 18:20 . 2010-02-23 15:02 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.22995_none_c3dc1941aba1ff8e\mstime.dll + 2010-06-11 01:13 . 2010-05-04 05:56 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.18928_none_c3a12eae9248e559\mstime.dll + 2010-05-06 18:20 . 2010-02-23 06:35 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.18904_none_c3b2cd5e923c481b\mstime.dll + 2010-05-06 18:19 . 2009-03-08 11:32 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.18702_none_c3b0c8fe923e1b1f\mstime.dll + 2010-03-30 19:41 . 2010-03-11 16:39 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22653_none_e11c3e2f95b61409\mstime.dll + 2010-03-30 19:41 . 2010-03-09 16:26 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18444_none_e09e6fb47c8f747e\mstime.dll + 2010-03-30 19:41 . 2010-03-09 16:29 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21242_none_df3fa567988883eb\mstime.dll + 2010-03-30 19:41 . 2010-03-09 16:52 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.17037_none_dec5d8147f5e49bc\mstime.dll + 2010-05-06 18:18 . 2009-03-08 11:33 107008 c:\windows\winsxs\x86_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.6001.18702_none_eb622404d6d4cb81\SetIEInstalledDate.exe + 2010-06-11 01:13 . 2010-05-26 14:54 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmfd.dll + 2010-06-11 01:13 . 2010-05-26 14:47 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmfd.dll + 2010-06-11 01:13 . 2010-05-26 14:35 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmfd.dll + 2010-06-11 01:13 . 2010-05-26 14:25 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmfd.dll + 2010-03-11 18:24 . 2010-02-12 10:43 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6002.22337_none_6466abc783660745\browserchoice.exe + 2010-03-11 18:24 . 2010-02-12 10:32 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6002.18205_none_63fb7e2c6a31e0fa\browserchoice.exe + 2010-03-11 18:24 . 2010-02-12 10:46 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6001.22632_none_627b386d8644336e\browserchoice.exe + 2010-03-11 18:24 . 2010-02-12 10:48 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6001.18423_none_61fd69f26d1d93e3\browserchoice.exe + 2010-03-11 18:24 . 2010-02-12 10:42 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6000.21223_none_60a0a0398914d5fe\browserchoice.exe + 2010-03-11 18:24 . 2010-02-12 10:49 293376 c:\windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.0.6000.17017_none_6025d29c6feb8278\browserchoice.exe + 2010-05-06 18:18 . 2009-03-08 11:32 128512 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_8.0.6001.18702_none_8eb687d4089bfe4d\advpack.dll + 2010-03-30 19:41 . 2010-03-09 16:24 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.21242_none_aa45643d0ee66719\advpack.dll + 2010-03-30 19:41 . 2010-03-09 16:48 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.17037_none_a9cb96e9f5bc2cea\advpack.dll + 2010-06-11 01:53 . 2010-03-04 12:53 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.22474_none_85400e57e7e2aac4\System.Security.dll + 2010-06-11 01:53 . 2010-03-04 13:36 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.18292_none_9c0fe35fce3949d9\System.Security.dll + 2010-06-11 01:58 . 2010-04-12 12:21 970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.22668_none_eb9d 9fd1f980f49f\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:19 970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18457_none_026a 5d33dfda6150\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:22 970752 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.22668_none_ bb5a6a37d1d9f36c\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:20 970752 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18457_none_ d2272799b833601d\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:21 442368 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.22668_none_069212dc5db1 54b8\System.IdentityModel.dll + 2010-06-11 01:58 . 2010-04-12 12:19 438272 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6001.18457_none_1d5ed03e440a c169\System.IdentityModel.dll + 2010-06-11 01:58 . 2010-04-12 12:22 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.22668_none_87c9f820c9a4ff06\SMdiagnostics.dll + 2010-06-11 01:58 . 2010-04-12 12:20 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6001.18457_none_9e96b582affe6bb7\SMdiagnostics.dll - 2008-06-20 23:53 . 2008-01-19 07:36 171520 c:\windows\System32\wintrust.dll + 2010-04-17 20:30 . 2009-12-23 12:43 171520 c:\windows\System32\wintrust.dll - 2008-06-20 23:53 . 2008-01-19 07:33 208384 c:\windows\System32\WinFXDocObj.exe + 2010-05-06 18:19 . 2009-03-08 11:34 208384 c:\windows\System32\WinFXDocObj.exe + 2010-05-06 18:19 . 2009-03-08 11:34 236544 c:\windows\System32\webcheck.dll + 2008-02-23 21:20 . 2010-06-03 13:37 483764 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_FastS4.bin + 2006-11-02 13:05 . 2010-06-11 12:18 164670 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2010-05-07 11:42 . 2010-03-05 14:01 420352 c:\windows\System32\vbscript.dll - 2008-06-20 23:51 . 2008-01-19 07:36 105984 c:\windows\System32\url.dll + 2010-05-06 18:18 . 2009-03-08 11:34 105984 c:\windows\System32\url.dll + 2010-05-06 18:18 . 2009-03-08 11:33 107008 c:\windows\System32\SetIEInstalledDate.exe + 2010-05-06 18:18 . 2009-03-08 11:33 103936 c:\windows\System32\SetDepNx.exe + 2010-05-06 18:18 . 2009-03-08 11:33 107520 c:\windows\System32\RegisterIEPKEYs.exe + 2006-11-02 10:33 . 2010-06-06 09:42 589884 c:\windows\System32\perfh009.dat - 2006-11-02 10:33 . 2010-03-11 17:38 589884 c:\windows\System32\perfh009.dat + 2006-11-02 10:33 . 2010-06-06 09:42 101896 c:\windows\System32\perfc009.dat - 2006-11-02 10:33 . 2010-03-11 17:38 101896 c:\windows\System32\perfc009.dat + 2010-05-06 18:18 . 2009-03-08 11:33 109568 c:\windows\System32\PDMSetup.exe + 2010-06-11 01:13 . 2010-05-04 05:58 206848 c:\windows\System32\occache.dll + 2010-06-11 01:13 . 2010-05-04 05:56 611840 c:\windows\System32\mstime.dll + 2010-05-06 18:19 . 2009-03-08 11:34 193536 c:\windows\System32\msrating.dll + 2010-05-06 18:19 . 2009-03-08 11:22 156160 c:\windows\System32\msls31.dll - 2008-06-20 23:53 . 2008-01-19 07:35 156160 c:\windows\System32\msls31.dll + 2010-06-11 01:13 . 2010-05-04 05:56 599040 c:\windows\System32\msfeeds.dll + 2010-01-12 07:17 . 2010-01-12 07:17 136568 c:\windows\System32\Macromed\Shockwave 10\SYMCCHECKER.DLL + 2010-01-12 07:17 . 2010-01-12 07:17 180224 c:\windows\System32\Macromed\Shockwave 10\Proj.dll - 2008-04-14 14:20 . 2008-03-14 21:21 180224 c:\windows\System32\Macromed\Shockwave 10\Proj.dll - 2008-04-14 14:20 . 2008-03-14 21:28 475136 c:\windows\System32\Macromed\Shockwave 10\PluginPing.dll + 2010-01-12 07:17 . 2010-01-12 07:17 475136 c:\windows\System32\Macromed\Shockwave 10\PluginPing.dll + 2010-01-12 07:17 . 2010-01-12 07:17 339968 c:\windows\System32\Macromed\Shockwave 10\Plugin.dll - 2008-04-14 14:20 . 2008-03-14 21:28 339968 c:\windows\System32\Macromed\Shockwave 10\Plugin.dll - 2008-04-14 14:20 . 2008-03-14 21:10 606208 c:\windows\System32\Macromed\Shockwave 10\iml32X.dll + 2010-01-12 07:17 . 2010-01-12 07:17 606208 c:\windows\System32\Macromed\Shockwave 10\iml32X.dll + 2010-01-12 07:17 . 2010-01-12 07:17 753152 c:\windows\System32\Macromed\Shockwave 10\gi.dll + 2010-01-12 07:17 . 2010-01-12 07:17 471040 c:\windows\System32\Macromed\Shockwave 10\Control.dll + 2010-05-07 11:42 . 2009-12-04 07:19 726528 c:\windows\System32\jscript.dll + 2010-04-17 20:31 . 2010-02-18 14:11 190464 c:\windows\System32\iphlpsvc.dll + 2010-05-12 09:43 . 2010-01-29 16:21 738304 c:\windows\System32\inetcomm.dll - 2008-08-13 21:56 . 2008-04-10 05:12 738304 c:\windows\System32\inetcomm.dll + 2010-05-06 18:18 . 2009-03-08 11:32 169472 c:\windows\System32\iexpress.exe + 2010-06-11 01:13 . 2010-05-04 05:55 164352 c:\windows\System32\ieui.dll + 2010-06-11 01:13 . 2010-05-04 05:55 184320 c:\windows\System32\iepeers.dll + 2010-06-11 01:13 . 2010-05-04 05:55 387584 c:\windows\System32\iedkcs32.dll + 2010-05-06 18:18 . 2009-03-08 11:11 445952 c:\windows\System32\ieapfltr.dll + 2010-05-06 18:19 . 2009-03-08 11:32 163840 c:\windows\System32\ieakui.dll + 2010-05-06 18:19 . 2009-03-08 11:33 229376 c:\windows\System32\ieaksie.dll + 2010-05-06 18:19 . 2009-03-08 11:33 125952 c:\windows\System32\ieakeng.dll + 2010-06-11 01:13 . 2010-05-04 04:30 173056 c:\windows\System32\ie4uinit.exe + 2010-05-06 18:19 . 2009-03-08 11:31 216064 c:\windows\System32\dxtrans.dll + 2010-05-06 18:19 . 2009-03-08 11:31 348160 c:\windows\System32\dxtmsft.dll + 2010-04-17 20:31 . 2010-02-18 14:49 898952 c:\windows\System32\drivers\tcpip.sys - 2010-02-10 07:45 . 2009-12-04 16:12 212992 c:\windows\System32\drivers\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:32 212992 c:\windows\System32\drivers\mrxsmb10.sys + 2010-04-17 20:31 . 2010-02-23 11:32 105984 c:\windows\System32\drivers\mrxsmb.sys + 2010-05-06 18:28 . 2010-06-11 12:16 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2010-03-11 18:24 . 2010-02-12 10:48 293376 c:\windows\System32\browserchoice.exe + 2010-05-06 18:18 . 2009-03-08 11:32 128512 c:\windows\System32\advpack.dll + 2010-05-07 18:12 . 2010-05-07 18:12 245760 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2010-06-11 01:58 . 2010-04-12 12:20 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:20 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll - 2009-08-21 12:35 . 2008-06-20 01:17 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2010-06-11 01:57 . 2010-03-29 11:57 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll - 2009-08-21 12:24 . 2008-07-27 18:00 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2010-06-11 01:53 . 2010-03-04 13:36 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2010-03-30 19:53 . 2010-03-30 19:53 728064 c:\windows\Installer\11ebe7.msi - 2008-06-04 08:56 . 2010-03-10 11:30 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2008-06-04 08:56 . 2010-03-10 11:30 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe - 2008-06-04 08:56 . 2010-03-10 11:30 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe + 2008-06-04 08:56 . 2010-06-11 01:59 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe - 2008-06-04 08:56 . 2010-03-10 11:30 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe - 2008-06-04 08:56 . 2010-03-10 11:30 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe + 2008-06-04 08:56 . 2010-06-11 01:59 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe - 2008-06-04 08:56 . 2010-03-10 11:30 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe + 2008-06-04 08:56 . 2010-06-11 01:59 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe + 2010-06-11 01:58 . 2010-06-11 01:58 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\ca2ebe8643cb33ab4d5bd4938d3838df\System.Security.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\769ff2855be6b676b41e71276224d1b3\System.Drawing.Design.ni.dll + 2010-06-11 01:58 . 2010-06-11 01:58 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\64e3d408b5bedbd8a6f53b5210e65248\System.Configuration.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7b444c94cc1bff3d98aedbd6ad417dc9\PresentationFramework.Aero.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\789112145d2882957f0f291eb88f905a\PresentationFramework.Luna.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5ac03a411307b3c14f5876074159a943\PresentationFramework.Royale.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4aa8de44766609ba877ea43572122940\PresentationFramework.Classic.ni.dll - 2009-08-21 12:24 . 2008-07-27 18:03 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-06-11 01:53 . 2010-03-04 13:36 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2010-06-11 01:58 . 2010-04-12 12:19 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2010-06-11 01:58 . 2010-04-12 12:19 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2010-06-11 01:58 . 2010-04-12 12:20 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll - 2009-08-21 12:35 . 2008-06-20 01:14 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll + 2010-06-11 01:58 . 2010-04-12 12:21 5988352 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.22668_none_fe305b8b05174c93\System.ServiceModel.dll + 2010-06-11 01:58 . 2010-04-12 12:19 5967872 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6001.18457_none_14fd18eceb70b944\System.ServiceModel.dll + 2010-06-11 01:57 . 2010-03-29 12:42 5246976 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22476_none_e0607e3d3025762f\System.Web.dll + 2010-06-11 01:57 . 2010-03-29 11:57 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18294_none_f7305345167c1544\System.Web.dll + 2010-06-11 01:13 . 2010-05-01 14:26 2045440 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22396_none_bb08445bb10e43f4\win32k.sys + 2010-06-11 01:13 . 2010-05-01 14:13 2037248 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18253_none_baa6e66297d2e861\win32k.sys + 2010-06-11 01:13 . 2010-05-01 20:27 2036736 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22682_none_b928a137b3e36d83\win32k.sys + 2010-06-11 01:13 . 2010-05-01 13:53 2036224 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18468_none_b8baa41a9ab030ba\win32k.sys + 2010-04-17 20:31 . 2010-02-18 14:21 3550088 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22341_none_6e763a6bca868234\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:21 3601800 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22341_none_6e763a6bca868234\ntkrnlpa.exe + 2010-04-17 20:31 . 2010-02-18 14:07 3548040 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18209_none_6e1fdfa0b1413d5e\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:07 3600776 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18209_none_6e1fdfa0b1413d5e\ntkrnlpa.exe + 2010-04-17 20:31 . 2010-02-18 17:36 3548560 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22636_none_6c9f99e1cd538fd2\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 17:36 3600776 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22636_none_6c9f99e1cd538fd2\ntkrnlpa.exe + 2010-04-17 20:31 . 2010-02-18 14:49 3545992 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18427_none_6c21cb66b42cf047\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:49 3598216 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18427_none_6c21cb66b42cf047\ntkrnlpa.exe + 2010-04-17 20:31 . 2010-02-18 14:34 3470216 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21226_none_6ac40163d025190b\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:34 3504008 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.21226_none_6ac40163d025190b\ntkrnlpa.exe + 2010-04-17 20:31 . 2010-02-18 14:54 3468168 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.17021_none_6a356140b70bfd67\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:54 3502480 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.17021_none_6a356140b70bfd67\ntkrnlpa.exe + 2010-06-11 01:13 . 2010-05-07 11:51 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22409_none_f50136d581b61b0e\OESpamFilter.dat + 2010-06-11 01:13 . 2010-05-07 11:50 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18260_none_f42db60268d141b4\OESpamFilter.dat + 2010-06-11 01:13 . 2010-05-07 12:29 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22697_none_f2b7732784da918e\OESpamFilter.dat + 2010-06-11 01:13 . 2010-05-07 11:50 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18479_none_f24574e26baaef69\OESpamFilter.dat + 2010-05-12 09:43 . 2010-01-29 13:49 2836992 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6002.22325_none_5ade3b513b99bff2\MSOERES.dll + 2010-05-12 09:43 . 2010-01-29 16:08 1616384 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6002.22325_none_5ade3b513b99bff2\msoe.dll + 2006-11-02 12:34 . 2006-11-02 12:34 2836992 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6002.18197_none_5a0aedc022b31946\MSOERES.dll + 2010-05-12 09:43 . 2010-01-29 15:40 1616384 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6002.18197_none_5a0aedc022b31946\msoe.dll + 2010-05-12 09:43 . 2010-01-29 13:57 2836992 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6001.22621_none_58f3c8413e770572\MSOERES.dll + 2010-05-12 09:43 . 2010-01-29 16:09 1616384 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6001.22621_none_58f3c8413e770572\msoe.dll + 2006-11-02 12:34 . 2006-11-02 12:34 2836992 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6001.18416_none_5879faee254ccb43\MSOERES.dll + 2010-05-12 09:43 . 2010-01-29 16:22 1616384 c:\windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6001.18416_none_5879faee254ccb43\msoe.dll + 2010-03-30 19:41 . 2010-03-11 16:49 6081536 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22360_none_66d1a548c49397a0\ieframe.dll + 2010-03-30 19:41 . 2010-03-09 15:39 6080000 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18226_none_667949e9ab50201c\ieframe.dll + 2010-03-30 19:41 . 2010-03-11 14:55 6072832 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22653_none_64f9042ac7627290\ieframe.dll + 2010-03-30 19:41 . 2010-03-09 16:25 6069248 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18444_none_647b35afae3bd305\ieframe.dll + 2010-03-30 19:41 . 2010-03-09 16:27 6070784 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21242_none_631c6b62ca34e272\ieframe.dll + 2010-03-30 19:41 . 2010-03-09 16:50 6067200 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.17037_none_62a29e0fb10aa843\ieframe.dll + 2010-06-11 01:13 . 2010-05-04 06:30 1986048 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23019_none_2b1475a0bb6f3e25\iertutil.dll + 2010-05-06 18:20 . 2010-02-23 15:00 1986048 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.22995_none_2aba1cf6bbb3850f\iertutil.dll + 2010-06-11 01:13 . 2010-05-04 05:55 1985536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18928_none_2a7f3263a25a6ada\iertutil.dll + 2010-05-06 18:20 . 2010-02-23 06:33 1985536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18904_none_2a90d113a24dcd9c\iertutil.dll + 2010-05-06 18:18 . 2009-03-08 11:32 1985024 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18702_none_2a8eccb3a24fa0a0\iertutil.dll + 2010-06-11 01:13 . 2010-05-04 06:30 5953024 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23019_none_f6b3dde3511488fe\mshtml.dll + 2010-05-06 18:20 . 2010-02-23 15:01 5946880 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22995_none_f65985395158cfe8\mshtml.dll + 2010-06-11 01:13 . 2010-05-04 05:56 5950976 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18928_none_f61e9aa637ffb5b3\mshtml.dll + 2010-05-06 18:20 . 2010-02-23 06:34 5944832 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18904_none_f630395637f31875\mshtml.dll + 2010-05-06 18:18 . 2009-03-08 11:41 5937152 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18702_none_f62e34f637f4eb79\mshtml.dll + 2010-03-30 19:41 . 2010-03-11 16:50 3602944 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.22360_none_15724b45389e0973\mshtml.dll + 2010-03-30 19:41 . 2010-03-09 15:40 3601920 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.18226_none_1519efe61f5a91ef\mshtml.dll + 2010-03-30 19:41 . 2010-03-11 16:39 3587072 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22653_none_1399aa273b6ce463\mshtml.dll + 2010-03-30 19:41 . 2010-03-09 16:26 3586048 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18444_none_131bdbac224644d8\mshtml.dll + 2010-03-30 19:41 . 2010-03-09 16:29 3602944 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.21242_none_11bd115f3e3f5445\mshtml.dll + 2010-03-30 19:41 . 2010-03-09 16:52 3599872 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.17037_none_1143440c25151a16\mshtml.dll + 2010-05-06 18:18 . 2009-02-07 04:07 3698584 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_8.0.6001.18702_none_de7d38b18189fc96\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22360_none_fdc14f0082331a90\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18226_none_fd68f3a168efa30c\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22653_none_fbe8ade28501f580\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18444_none_fb6adf676bdb55f5\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21242_none_fa0c151a87d46562\ieapfltr.dat + 2009-07-29 10:58 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.17037_none_f99247c76eaa2b33\ieapfltr.dat + 2010-06-11 01:13 . 2010-05-04 06:31 1209856 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.23019_none_9853e32305b4f935\urlmon.dll + 2010-05-06 18:20 . 2010-02-23 15:05 1209856 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.22995_none_97f98a7905f9401f\urlmon.dll + 2010-06-11 01:13 . 2010-05-04 05:59 1209344 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.18928_none_97be9fe5eca025ea\urlmon.dll + 2010-05-06 18:20 . 2010-02-23 06:39 1209344 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.18904_none_97d03e95ec9388ac\urlmon.dll + 2010-05-06 18:18 . 2009-03-08 11:34 1206784 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.18702_none_97ce3a35ec955bb0\urlmon.dll + 2010-03-30 19:41 . 2010-03-11 16:52 1176576 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22360_none_b7125084ed3e79aa\urlmon.dll + 2010-03-30 19:41 . 2010-03-09 15:42 1176064 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18226_none_b6b9f525d3fb0226\urlmon.dll + 2010-03-30 19:41 . 2010-03-11 16:40 1175552 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22653_none_b539af66f00d549a\urlmon.dll + 2010-03-30 19:41 . 2010-03-09 16:28 1174528 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18444_none_b4bbe0ebd6e6b50f\urlmon.dll + 2010-03-30 19:41 . 2010-03-09 16:31 1171968 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21242_none_b35d169ef2dfc47c\urlmon.dll + 2010-03-30 19:41 . 2010-03-09 16:54 1168384 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.17037_none_b2e3494bd9b58a4d\urlmon.dll + 2010-06-11 01:13 . 2010-04-16 16:11 1314816 c:\windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.22672_none_a6b02f4a073ab35e\quartz.dll + 2010-06-11 01:13 . 2010-04-16 16:10 1314816 c:\windows\winsxs\x86_microsoft-windows-directshow-core_31bf3856ad364e35_6.0.6001.18461_none_a630603aee15e125\quartz.dll + 2010-06-11 01:57 . 2010-03-29 12:42 3182592 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.22476_none_c3c89e3b7599dec8\System.dll + 2010-06-11 01:57 . 2010-03-29 11:57 3182592 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.18294_none_da9873435bf07ddd\System.dll + 2010-06-11 01:58 . 2010-04-12 12:21 5988352 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.22668_none_8e21f3faa4484 5db\System.ServiceModel.dll + 2010-06-11 01:58 . 2010-04-12 12:19 5967872 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6001.18457_none_a4eeb15c8aa1b 28c\System.ServiceModel.dll + 2010-06-11 01:58 . 2010-04-12 12:22 5988352 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.22668_none_559d762e2 c56cce2\System.ServiceModel.dll + 2010-06-11 01:58 . 2010-04-12 12:20 5967872 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6001.18457_none_6c6a33901 2b03993\System.ServiceModel.dll + 2010-06-11 01:13 . 2010-05-04 05:59 1209344 c:\windows\System32\urlmon.dll + 2006-11-02 10:22 . 2010-06-11 12:15 6553600 c:\windows\System32\SMI\Store\Machine\schema.dat - 2006-11-02 10:22 . 2010-03-11 15:47 6553600 c:\windows\System32\SMI\Store\Machine\schema.dat + 2010-04-17 20:31 . 2010-02-18 14:49 3545992 c:\windows\System32\ntoskrnl.exe + 2010-04-17 20:31 . 2010-02-18 14:49 3598216 c:\windows\System32\ntkrnlpa.exe + 2010-06-11 01:13 . 2010-05-04 05:56 5950976 c:\windows\System32\mshtml.dll + 2010-01-12 07:17 . 2010-01-12 07:17 1975408 c:\windows\System32\Macromed\Shockwave 10\gt.exe + 2010-01-12 07:17 . 2010-01-12 07:17 1490944 c:\windows\System32\Macromed\Shockwave 10\dirapiX.dll - 2008-04-14 14:20 . 2008-03-14 21:12 1490944 c:\windows\System32\Macromed\Shockwave 10\dirapiX.dll + 2010-06-11 01:13 . 2010-05-04 05:55 1985536 c:\windows\System32\iertutil.dll + 2010-05-06 18:18 . 2009-02-07 04:07 3698584 c:\windows\System32\ieapfltr.dat + 2006-11-02 12:47 . 2010-06-11 12:03 1722576 c:\windows\System32\FNTCACHE.DAT - 2006-11-02 12:47 . 2010-02-24 02:53 1722576 c:\windows\System32\FNTCACHE.DAT + 2010-06-11 01:58 . 2010-04-12 12:20 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll + 2010-06-11 01:57 . 2010-03-29 11:57 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll - 2009-08-21 08:05 . 2008-10-13 22:23 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2010-06-11 01:57 . 2010-03-29 11:57 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2010-02-20 23:02 . 2010-02-20 23:02 4195840 c:\windows\Installer\ff6314.msp + 2010-03-11 21:59 . 2010-03-11 21:59 5031424 c:\windows\Installer\ff62ff.msp + 2009-10-16 05:08 . 2009-10-16 05:08 2237952 c:\windows\Installer\22915f.msp + 2010-04-09 13:21 . 2010-04-09 13:21 5025792 c:\windows\Installer\22914a.msp + 2010-05-14 23:44 . 2010-05-14 23:44 1235968 c:\windows\Installer\124d7ee.msi + 2010-04-24 15:07 . 2010-04-24 15:07 4667392 c:\windows\Installer\123c359.msp + 2010-04-24 15:05 . 2010-04-24 15:05 4199424 c:\windows\Installer\123c344.msp + 2010-05-18 21:35 . 2010-05-18 21:35 5023744 c:\windows\Installer\123c32f.msp - 2008-06-04 08:56 . 2010-03-10 11:30 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe + 2008-06-04 08:56 . 2010-06-11 01:59 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe - 2008-06-04 08:56 . 2010-03-10 11:30 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2008-06-04 08:56 . 2010-06-11 01:59 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe + 2008-08-25 21:50 . 2008-08-25 21:50 2585592 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6425\VBE6.DLL + 2010-06-11 01:54 . 2010-06-11 01:54 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\7dbbaaee40c0eaa1324907035274095b\WindowsBase.ni.dll + 2010-06-11 12:04 . 2010-06-11 12:04 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4a433b7f3fd8793d43387a07486aae8d\WindowsBase.ni.dll + 2010-06-11 12:03 . 2010-06-11 12:03 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\5177b93dac897c12b12167fa786bbdd0\System.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\0279340aa3f1bcbf2d8ee1b0cd438f86\System.Xml.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\4ae1d7d66429a4e790f92b822a79625d\System.Workflow.Runtime.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\987a60624f124ed454ce7ef60fde2da9\System.Workflow.ComponentModel.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\62611936f5b0c76ac63359609c7455f8\System.Workflow.Activities.ni.dll + 2010-06-11 01:58 . 2010-06-11 01:58 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\17a615c3ccbe2a004a0a078b5a916d93\System.IdentityModel.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2eb2e94ae8fd5a45071d6c7d9fa96f49\System.Drawing.ni.dll + 2010-06-11 01:58 . 2010-06-11 01:58 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\630455350c6d8835c05d71cf984bf3b5\System.Deployment.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\29ff69411dbe49a598c32e3872fd75bf\System.Data.ni.dll + 2010-06-11 01:59 . 2010-06-11 01:59 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\b9ce540f2b39a8c245c98ccd4ee9a9e5\PresentationUI.ni.dll + 2010-06-11 01:59 . 2010-06-11 01:59 6338560 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\f91cef243dbc16a48f4378394c87bf42\MIGUIControls.ni.dll + 2010-06-11 01:59 . 2010-06-11 01:59 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\741294191218be56a4bdff4dad16c265\Microsoft.Build.Tasks.v3.5.ni.dll + 2010-06-11 01:59 . 2010-06-11 01:59 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19f860812b339ed54778a290f867af0a\Microsoft.Build.Tasks.ni.dll + 2010-06-11 01:57 . 2010-03-29 11:57 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2010-06-11 01:58 . 2010-04-12 12:19 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2009-08-21 08:05 . 2008-10-13 22:26 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-06-11 01:57 . 2010-03-29 11:57 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2010-06-11 01:13 . 2010-05-04 06:30 11078144 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23019_none_481337e6dd0a172b\ieframe.dll + 2010-05-06 18:20 . 2010-02-23 15:00 11073024 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22995_none_47b8df3cdd4e5e15\ieframe.dll + 2010-06-11 01:13 . 2010-05-04 05:55 11076096 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18928_none_477df4a9c3f543e0\ieframe.dll + 2010-05-06 18:20 . 2010-02-23 06:33 11070976 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18904_none_478f9359c3e8a6a2\ieframe.dll + 2010-05-06 18:18 . 2009-03-08 11:39 11063808 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18702_none_478d8ef9c3ea79a6\ieframe.dll + 2006-11-02 10:24 . 2010-05-28 19:37 32472008 c:\windows\System32\mrt.exe + 2010-06-11 01:13 . 2010-05-04 05:55 11076096 c:\windows\System32\ieframe.dll + 2010-03-22 14:03 . 2010-03-22 14:03 11732992 c:\windows\Installer\ff6329.msp + 2010-06-05 01:01 . 2010-06-05 01:01 20242432 c:\windows\Installer\331b15c.msp + 2010-04-24 15:09 . 2010-04-24 15:09 11750912 c:\windows\Installer\123c36e.msp + 2010-04-24 15:07 . 2010-04-24 15:07 10118144 c:\windows\Installer\123c31a.msp + 2010-06-11 01:55 . 2010-06-11 01:55 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b51e434a1ecf296bd4997aecbbd5173e\System.Windows.Forms.ni.dll + 2010-06-11 12:06 . 2010-06-11 12:06 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0bb2a8e2374c59943da54078b609e38b\System.Windows.Forms.ni.dll + 2010-06-11 01:58 . 2010-06-11 01:58 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\93f4fca2862883981dae887d9ca6ae75\System.ServiceModel.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:06 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\406a509b9719386281672b4c5b3e7aea\System.Design.ni.dll + 2010-06-11 01:54 . 2010-06-11 01:54 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f4a62624e407a996e38fe7de22e1ecd4\PresentationFramework.ni.dll + 2010-06-11 12:05 . 2010-06-11 12:05 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0ca5c8f070af8e20c257c06b0f405989\PresentationFramework.ni.dll + 2010-06-11 12:04 . 2010-06-11 12:04 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9b37f74b6801b43fef5d86351c9c6082\PresentationCore.ni.dll + 2010-06-11 01:54 . 2010-06-11 01:54 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\2c974c99509e8037c19b697a046d1be1\PresentationCore.ni.dll + 2009-04-29 22:14 . 2010-06-11 01:58 390089009 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136] "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2008-03-20 217544] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-09 68856] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "Acer Tour Reminder"="" [bU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-06-20 4493312] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2007-05-31 326440] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216] "PCMMediaSharing"="c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2007-06-21 204908] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-05-22 151552] "SystrayORAHSS"="c:\program files\OrangeHSS\Systray\SystrayApp.exe" [2006-12-12 90112] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152] "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352] "MaxtorOneTouch"="c:\progra~1\Maxtor\OneTouch\Utils\OneTouch.exe" [2003-05-21 45056] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-30 149280] "Skytel"="Skytel.exe" [2007-06-15 1826816] "NvSvc"="c:\windows\system32\nvsvc.dll" [2007-11-06 86016] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8530464] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-06 81920] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-7-10 535336] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-1-2 210520] Outil de mise … jour Google.lnk - c:\program files\Google\Google Updater\GoogleUpdater.exe [2008-4-9 124400] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-06-03 717296] R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 135664] R3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\PCAMp50.sys [2006-11-28 28224] R3 SiS6350;SiS6350;c:\windows\system32\DRIVERS\SISGRKMD.sys [2007-06-05 454520] S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2007-06-21 269448] S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSGB6.sys [2007-01-22 46592] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Contenu du dossier 'Tâches planifiées' 2010-06-11 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-09 01:28] 2010-03-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cac6852d702762.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-07 08:03] 2010-05-06 c:\windows\Tasks\User_Feed_Synchronization-{27A948C9-304F-48F0-9A48-D55EF14CFE09}.job - c:\windows\system32\msfeedssync.exe [2010-06-11 04:30] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://fr.fr.acer.yahoo.com/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mStart Page = hxxp://fr.fr.acer.yahoo.com uSearchURL,(Default) = hxxp://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.com IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab DPF: {63DF43C2-469A-41F3-B119-17B1ACE8BB50} - hxxp://82.127.17.206/home/SonySncCs3View.cab DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerVistaADP-1.1.cab FF - ProfilePath - c:\users\jepa\AppData\Roaming\Mozilla\Firefox\Profiles\etrm8d07.default\ FF - prefs.js: network.proxy.type - 1 FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\users\jepa\AppData\LocalLow\StoneTrip\WebPlayer1.8.1\npShiVa3D_1.8.1.dll FF - plugin: c:\users\jepa\AppData\Roaming\Mozilla\Firefox\Profiles\etrm8d07.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- PARAMETRES FIREFOX ---- c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr ef", true); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-setupupdater0000.exe - c:\users\jepa\AppData\Roaming\A1937F92DBBC0609DA5E6876298AAADB\setupupdater0000.exe SafeBoot-klmdb.sys ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-06-11 14:38 Windows 6.0.6001 Service Pack 1 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Heure de fin: 2010-06-11 14:40:58 ComboFix-quarantined-files.txt 2010-06-11 12:40 Avant-CF: 21 939 376 128 octets libres Après-CF: 21 899 235 328 octets libres - - End Of File - - 6CF7D0136B242D9F49AFBC816B62B1D8

Je n'arrive pas à copier/coller mon analyse ComboFix :P Après envoi de mon message, le contenu sur le forum reste vide!

Bonjour Thanos, et tout d'abord un grand merci par avance de toute ton aide Alors plusieurs trucs bizarres me sont arrivés depuis hier soir: -hier soir, quand j'ai arrêté mon PC, Windows a fait des mises à jour (au nombre de 15), et quand j'ai redémarré le PC tout à l'heure, il a terminé l'installation de ces mises à jour. Et chose bizarre, Antimalware Doctor avait disparu, et il n'est pas réapparu -depuis cette mise à jour, j'ai gagné 10 Go sur mon disque dur -lors de l'analyse ComboFix, Avira m'a alerté plusieurs fois. Je ne touchais rien. Pourtant, ComboFix semblait resté bloqué à l'étape 33. J'ai donc fini par refuser les accès à un virus via Avira, et ComboFix a immédiatement terminé son analyse: Ex d'un des virus trouvé par Avira: "C:\Users\jepa\AppData\Local\temp\uldpq.exe Contient le cheval de troie TR/Agent.AO2078" Il y'en a eu d'autres Alors voilà l'analyse Malwarebytes effectuée l'autre jour: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4121 Windows 6.0.6001 Service Pack 1 Internet Explorer 8.0.6001.18904 10/06/2010 02:35:02 mbam-log-2010-06-10 (02-35-02).txt Type d'examen: Examen rapide Elément(s) analysé(s): 136302 Temps écoulé: 10 minute(s), 1 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 4 Valeur(s) du Registre infectée(s): 2 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 7 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\m5t8ql3yw3 (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mcexecwin (Trojan.Agent) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Windows\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job (Trojan.Downloader) -> Quarantined and deleted successfully. C:\Users\jepa\AppData\Local\temp\Mjc.exe (Trojan.FakeAlert) -> Delete on reboot. C:\Users\jepa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Antimalware Doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully. C:\Users\jepa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Antimalware Doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. C:\Users\jepa\Desktop\Antimalware Doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. C:\Users\jepa\AppData\Roaming\Microsoft\Windows\Start Menu\Antimalware Doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

Que se passe-t-il? Je n'arrive pas à poster mon message avec les analyses!

Merci Thanos Ce n'est pas grave si ce n'est pas Apollo, j'ai parlé de lui car je le connais parce qu'il m'a dépanné il y'a un mois (j'ai même gardé certains des logiciels de scan, mais peut être qu'il y'a de nouvelles versions) Je n'ai pas pu travailler de la journée, des fenêtres s'ouvrent sans cesse. Comme je bosse en grande partie sur le Net... J'ai fait, non sans difficulté, des sauvegardes de certaines de mes données au cas ou... ---> Smart91, merci également, mais je vais attendre d'être pris en charge