

Mathilde P
Membres-
Compteur de contenus
18 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par Mathilde P
-
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Un Grand Merci à notre ange gardien !! Bonne continuation -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Tout semble fonctionner correctement, plus de plainte. Voici le lien pour le ZHPDiag : Lien CJoint.com BHrwndLE5Is -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Voici ZHPFixReport.tx; Où est que ça ce cache "A tenir à jour" dans ta signature (y'a des gens beaucoup moins doués que d'autres...)? Rapport de ZHPFix 1.2.07 par Nicolas Coolman, Update du 20/07/2012 Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-17-08-2012-21-02-59.txt Run by laurent at 17/08/2012 21:02:59 Windows XP Home Edition Service Pack 3 (Build 2600) Web site : ZHPFix Fix de rapport Web site : Blog de NicolasCoolman - ZebHelpProcess - Skyrock.com ========== Logiciel(s) ========== SUPPRIME MyWay Search Assistant ========== Clé(s) du Registre ========== SUPPRIME Key*: CLSID BHO: {6A87B991-A31F-4130-AE72-6D0C294BF082} SUPPRIME Key*: CLSID BHO: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} SUPPRIME Driver Key: flashsmt SUPPRIME Key*: HKCU\Software\Dealio SUPPRIME Key*: HKCU\Software\MyWaySA ABSENT Key: HKLM\Software\MyWaySA SUPPRIME Key*: HKLM\Software\TENCENT SUPPRIME Key*: SearchScopes :{F1F384B1-DD26-4423-943B-2120A0EE858A} SUPPRIME Key*: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer SUPPRIME Key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082} ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082} SUPPRIME Key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} SUPPRIME Key*: HKCU\Software\Microsoft\Internet Explorer\MenuExt\compare prices with &dealio ABSENT Key: HKCU\Software\dealio ABSENT Key: HKLM\Software\Tencent ========== Valeur(s) du Registre ========== SUPPRIME FirewallRaz (SP) : %windir%\system32\sessmgr.exe SUPPRIME FirewallRaz (DP) : %windir%\system32\sessmgr.exe Aucune valeur présente dans la clé d'exception du registre (FirewallRaz) ========== Dossier(s) ========== SUPPRIME Temporaires Windows: SUPPRIME Flash Cookies: ========== Fichier(s) ========== SUPPRIME Temporaires Windows: SUPPRIME Flash Cookies: ========== Récapitulatif ========== 16 : Clé(s) du Registre 3 : Valeur(s) du Registre 2 : Dossier(s) 2 : Fichier(s) 1 : Logiciel(s) End of clean in 00mn 21s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 17/08/2012 21:02:59 [2204] -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
voici le lien Lien CJoint.com BHruz6RqYU3 -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Il semblerait que l'on tienne le bon bout. Une petite question : Malwarebytes et antivir sont activés simultanément : est ce un problème ? je "lance" spyboat régulièrement, est encore conseillé ? Un Grand Grand Merci. -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Voili voilou (il reste le dossier Combofix sur le bureau, ComboFixNSISInstaller a disparu). # DelFix v8.9 - Rapport créé le 17/08/2012 à 19:38:14 # Mis à jour le 27/07/12 par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : laurent - D1LLN12J (Administrateur) # Exécuté depuis : C:\Documents and Settings\laurent\Mes documents\Téléchargements\delfix.exe # Option [suppression] ~~~~~~ Dossiers(s) ~~~~~~ Supprimé : C:\Qoobox Supprimé : C:\Combofix Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hijackthis Supprimé : C:\Documents and Settings\laurent\Bureau\RK_Quarantine Supprimé : C:\Program Files\Trend Micro\Hijackthis ~~~~~~ Fichier(s) ~~~~~~ Supprimé : C:\AdwCleaner[s1].txt Supprimé : C:\TDSSKiller.2.8.6.0_17.08.2012_00.06.37_log.txt Supprimé : C:\TDSSKiller.2.8.6.0_17.08.2012_00.22.59_log.txt Supprimé : C:\Documents and Settings\laurent\Bureau\adwcleaner.exe Supprimé : C:\Documents and Settings\laurent\Bureau\combofix.exe Supprimé : C:\Documents and Settings\laurent\Bureau\HijackThis.lnk Supprimé : C:\Documents and Settings\laurent\Bureau\hijackthis.log Supprimé : C:\Documents and Settings\laurent\Bureau\RKreport[1].txt Supprimé : C:\Documents and Settings\laurent\Bureau\RKreport[2].txt Supprimé : C:\Documents and Settings\laurent\Bureau\RogueKiller.exe Supprimé : C:\Documents and Settings\laurent\Bureau\tdsskiller.exe Supprimé : C:\Documents and Settings\laurent\Bureau\TDSSKiller.txt Supprimé : C:\Documents and Settings\laurent\Mes documents\Téléchargements\HijackThis.exe Supprimé : C:\Documents and Settings\laurent\Mes documents\Téléchargements\HJTInstall.exe Supprimé : C:\WINDOWS\grep.exe Supprimé : C:\WINDOWS\PEV.exe Supprimé : C:\WINDOWS\NIRCMD.exe Supprimé : C:\WINDOWS\MBR.exe Supprimé : C:\WINDOWS\SED.exe Supprimé : C:\WINDOWS\SWREG.exe Supprimé : C:\WINDOWS\SWSC.exe Supprimé : C:\WINDOWS\SWXCACLS.exe Supprimé : C:\WINDOWS\Zip.exe ~~~~~~ Registre ~~~~~~ Clé Supprimée : HKCU\console_combofixbackup Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\HijackThis Clé Supprimée : HKLM\SOFTWARE\AdwCleaner Clé Supprimée : HKLM\SOFTWARE\Swearware Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys ~~~~~~ Autres ~~~~~~ -> Prefetch Vidé ************************* DelFix[s1].txt - [2906 octets] - [17/08/2012 19:38:14] ########## EOF - C:\DelFix[s1].txt - [3030 octets] ########## A bientôt. -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Re, j'ai copié/collé cette commande dans executer "%userprofile%\Bureau\combofix.exe" /u. ComboFix s'éxécute alors comme hier (mal, avec des "choses du genre antivir détecté, console ininstallable " et plantage du PC lors de la création du rapport, que je ne trouve pas). L'explorateur Windows m'indique sous Poste de Travail l'existence d'un dossier Combofix sous lequel je trouve le disque local C, lecteur DVD D, disque amovible E, panneau de configuration, documents partagé et document de ma session. Je retrouve ce dossier sous C ? Sur le bureau j'ai toujours ComboFixNSISInstaller et le dossier ComboFix ? Est ce normal docteur ? Merci pour votre patience et disponibilité -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
re bonjour, Ci-joint le lien pour le rapport avira Lien CJoint.com BHrr5C0Ixuz Merci -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Re, Voici le rapport MBAM (il m'a demandé le redémarrage) Malwarebytes Anti-Malware (Essai) 1.62.0.1300 www.malwarebytes.org Version de la base de données: v2012.08.17.02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 laurent :: D1LLN12J [administrateur] Protection: Activé 17/08/2012 07:11:17 mbam-log-2012-08-17 (07-11-17).txt Type d'examen: Examen complet (C:\|D:\|E:\|) Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 320732 Temps écoulé: 1 heure(s), 48 minute(s), 2 seconde(s) Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 3 HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75} (PUP.MyWebSearch) -> Aucune action effectuée. HKCR\MyWaySearchAssistantDE.Auxiliary (Adware.MyWaySearch) -> Mis en quarantaine et supprimé avec succès. HKCR\MyWaySearchAssistantDE.Auxiliary.1 (Adware.MyWaySearch) -> Mis en quarantaine et supprimé avec succès. Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 8 C:\Documents and Settings\laurent\Mes documents\Téléchargements\SoftonicDownloader_pour_free-mp3-wma-converter.exe (PUP.OfferBundler.ST) -> Aucune action effectuée. C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP1731\A0107089.exe (PUP.Dealio.TB) -> Aucune action effectuée. C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP1731\A0107091.exe (PUP.Dealio.TB) -> Aucune action effectuée. C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP1731\A0107092.dll (PUP.Dealio.TB) -> Aucune action effectuée. C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP1731\A0107093.dll (PUP.Dealio.TB) -> Aucune action effectuée. C:\Qoobox\Quarantine\C\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\n.vir (RootKit.0Access) -> Mis en quarantaine et supprimé avec succès. C:\Qoobox\Quarantine\C\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\U\800000cb.@.vir (Rootkit.0Access) -> Mis en quarantaine et supprimé avec succès. C:\Qoobox\Quarantine\C\WINDOWS\Installer\{20291ac2-2068-3442-4139-a20c363c06d6}\U\800000cb.@.vir (Rootkit.0Access) -> Mis en quarantaine et supprimé avec succès. (fin) Avira Free Antivirus m'informe avoir mis en quarantaine aujourd'hui à 9H49 TR/FakeAV.avg, BDS/ZAccess.v, TR/ATRAPS.gen ..... c'est une impression ou ce n'est pas gagné ? -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
bonjour, voici le lien pour SFT Lien CJoint.com BHrhbXC6YAN Bonne journée. -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
C'est une version familiale. Merci pour tout, mes paupières réclament leur lit. A+ -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
J'ai repassé ComboFix en mode sans échec avec réseau, j'ai accepté de télécharger la console mais il n'a pas réussi à le faire. Mais cette fois pas de plantage. Ci-joint le rapport Lien CJoint.com BHra44vEPhX +++ -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
TDSS Killer (là ça fait peur !!!) est passé, pas de reboot Lien CJoint.com BHraonbPHZk +++ -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
j'ai suivi tes instructions et celles de RogueKiller qui m'a fait supprimer des trucs dans l'onglet registre je mets les 2 rapports qui m'ont l'air léger RogueKiller V7.6.6 [10/08/2012] par Tigzy mail: tigzyRK<at>gmail<dot>com Remontees: [RogueKiller] Remontées (1/57) Blog: tigzy-RK Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version Demarrage : Mode normal Utilisateur: laurent [Droits d'admin] Mode: Recherche -- Date: 16/08/2012 23:51:53 ¤¤¤ Processus malicieux: 0 ¤¤¤ ¤¤¤ Entrees de registre: 1 ¤¤¤ [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver: [CHARGE] ¤¤¤ SSDT[25] : NtClose @ 0x805BC538 -> HOOKED (Unknown @ 0xF7C44D8C) SSDT[41] : NtCreateKey @ 0x80623FD6 -> HOOKED (Unknown @ 0xF7C44D46) SSDT[50] : NtCreateSection @ 0x805AB3D0 -> HOOKED (Unknown @ 0xF7C44D96) SSDT[53] : NtCreateThread @ 0x805D1038 -> HOOKED (Unknown @ 0xF7C44D3C) SSDT[63] : NtDeleteKey @ 0x80624472 -> HOOKED (Unknown @ 0xF7C44D4B) SSDT[65] : NtDeleteValueKey @ 0x80624642 -> HOOKED (Unknown @ 0xF7C44D55) SSDT[68] : NtDuplicateObject @ 0x805BE010 -> HOOKED (Unknown @ 0xF7C44D87) SSDT[98] : NtLoadKey @ 0x806261FA -> HOOKED (Unknown @ 0xF7C44D5A) SSDT[122] : NtOpenProcess @ 0x805CB456 -> HOOKED (Unknown @ 0xF7C44D28) SSDT[128] : NtOpenThread @ 0x805CB6E2 -> HOOKED (Unknown @ 0xF7C44D2D) SSDT[177] : NtQueryValueKey @ 0x806221FA -> HOOKED (Unknown @ 0xF7C44DAF) SSDT[193] : NtReplaceKey @ 0x806260AA -> HOOKED (Unknown @ 0xF7C44D64) SSDT[200] : NtRequestWaitReplyPort @ 0x805A2D7E -> HOOKED (Unknown @ 0xF7C44DA0) SSDT[204] : NtRestoreKey @ 0x806259B6 -> HOOKED (Unknown @ 0xF7C44D5F) SSDT[213] : NtSetContextThread @ 0x805D2C1A -> HOOKED (Unknown @ 0xF7C44D9B) SSDT[237] : NtSetSecurityObject @ 0x805C0636 -> HOOKED (Unknown @ 0xF7C44DA5) SSDT[247] : NtSetValueKey @ 0x80622548 -> HOOKED (Unknown @ 0xF7C44D50) SSDT[255] : NtSystemDebugControl @ 0x80617FAA -> HOOKED (Unknown @ 0xF7C44DAA) SSDT[257] : NtTerminateProcess @ 0x805D22D8 -> HOOKED (Unknown @ 0xF7C44D37) S_SSDT[549] : Unknown -> HOOKED (Unknown @ 0xF7C44DBE) S_SSDT[552] : Unknown -> HOOKED (Unknown @ 0xF7C44DC3) ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD1600JS-75NCB1 +++++ --- User --- [MBR] 11812d52813c704638c3eb61de77623f [bSP] 4b5476bfe23fcf8ab4d4fabcf0e83553 : MBR Code unknown Partition table: 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 62 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 128520 | Size: 149448 Mo 2 - [XXXXXX] UNKNOWN (0xdb) [VISIBLE] Offset (sectors): 306198900 | Size: 3074 Mo User = LL1 ... OK! User = LL2 ... OK! +++++ PhysicalDrive1: 3S6677D5 USB Flash Disk USB Device +++++ --- User --- [MBR] fc96b828ad26fd902d92a13d7d1a2b68 [bSP] fb60a6876fd3a7020310a17500b98540 : MBR Code unknown Partition table: 0 - [XXXXXX] FAT16 (0x06) [VISIBLE] Offset (sectors): 63 | Size: 999 Mo User = LL1 ... OK! Error reading LL2 MBR! +++++ PhysicalDrive2: HP Photosmart Plus USB Device +++++ Error reading User MBR! User = LL1 ... OK! Error reading LL2 MBR! Termine : << RKreport[1].txt >> RKreport[1].txt le rapport de la suppression : RogueKiller V7.6.6 [10/08/2012] par Tigzy mail: tigzyRK<at>gmail<dot>com Remontees: [RogueKiller] Remontées (1/57) Blog: tigzy-RK Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version Demarrage : Mode normal Utilisateur: laurent [Droits d'admin] Mode: Suppression -- Date: 16/08/2012 23:52:34 ¤¤¤ Processus malicieux: 0 ¤¤¤ ¤¤¤ Entrees de registre: 1 ¤¤¤ [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0) ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver: [CHARGE] ¤¤¤ SSDT[25] : NtClose @ 0x805BC538 -> HOOKED (Unknown @ 0xF7C44D8C) SSDT[41] : NtCreateKey @ 0x80623FD6 -> HOOKED (Unknown @ 0xF7C44D46) SSDT[50] : NtCreateSection @ 0x805AB3D0 -> HOOKED (Unknown @ 0xF7C44D96) SSDT[53] : NtCreateThread @ 0x805D1038 -> HOOKED (Unknown @ 0xF7C44D3C) SSDT[63] : NtDeleteKey @ 0x80624472 -> HOOKED (Unknown @ 0xF7C44D4B) SSDT[65] : NtDeleteValueKey @ 0x80624642 -> HOOKED (Unknown @ 0xF7C44D55) SSDT[68] : NtDuplicateObject @ 0x805BE010 -> HOOKED (Unknown @ 0xF7C44D87) SSDT[98] : NtLoadKey @ 0x806261FA -> HOOKED (Unknown @ 0xF7C44D5A) SSDT[122] : NtOpenProcess @ 0x805CB456 -> HOOKED (Unknown @ 0xF7C44D28) SSDT[128] : NtOpenThread @ 0x805CB6E2 -> HOOKED (Unknown @ 0xF7C44D2D) SSDT[177] : NtQueryValueKey @ 0x806221FA -> HOOKED (Unknown @ 0xF7C44DAF) SSDT[193] : NtReplaceKey @ 0x806260AA -> HOOKED (Unknown @ 0xF7C44D64) SSDT[200] : NtRequestWaitReplyPort @ 0x805A2D7E -> HOOKED (Unknown @ 0xF7C44DA0) SSDT[204] : NtRestoreKey @ 0x806259B6 -> HOOKED (Unknown @ 0xF7C44D5F) SSDT[213] : NtSetContextThread @ 0x805D2C1A -> HOOKED (Unknown @ 0xF7C44D9B) SSDT[237] : NtSetSecurityObject @ 0x805C0636 -> HOOKED (Unknown @ 0xF7C44DA5) SSDT[247] : NtSetValueKey @ 0x80622548 -> HOOKED (Unknown @ 0xF7C44D50) SSDT[255] : NtSystemDebugControl @ 0x80617FAA -> HOOKED (Unknown @ 0xF7C44DAA) SSDT[257] : NtTerminateProcess @ 0x805D22D8 -> HOOKED (Unknown @ 0xF7C44D37) S_SSDT[549] : Unknown -> HOOKED (Unknown @ 0xF7C44DBE) S_SSDT[552] : Unknown -> HOOKED (Unknown @ 0xF7C44DC3) ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD1600JS-75NCB1 +++++ --- User --- [MBR] 11812d52813c704638c3eb61de77623f [bSP] 4b5476bfe23fcf8ab4d4fabcf0e83553 : MBR Code unknown Partition table: 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 62 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 128520 | Size: 149448 Mo 2 - [XXXXXX] UNKNOWN (0xdb) [VISIBLE] Offset (sectors): 306198900 | Size: 3074 Mo User = LL1 ... OK! User = LL2 ... OK! +++++ PhysicalDrive1: 3S6677D5 USB Flash Disk USB Device +++++ --- User --- [MBR] fc96b828ad26fd902d92a13d7d1a2b68 [bSP] fb60a6876fd3a7020310a17500b98540 : MBR Code unknown Partition table: 0 - [XXXXXX] FAT16 (0x06) [VISIBLE] Offset (sectors): 63 | Size: 999 Mo User = LL1 ... OK! Error reading LL2 MBR! +++++ PhysicalDrive2: HP Photosmart Plus USB Device +++++ Error reading User MBR! User = LL1 ... OK! Error reading LL2 MBR! Termine : << RKreport[2].txt >> RKreport[1].txt ; RKreport[2].txt Je suis en aveuglen je ne sais pas du tout ce que je fais !! Merci de ta réponse -
[Résolu] ATRAPS.Gen2
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
ci-joint le lien pour accéder au rapport Lien CJoint.com BHqxN1gyL1F Le redémarrage du PC a été long, est-ce normal ? Merci encore pour ton aide -
Dur dur !! J'ai eu des problèmes pour exécuter combofix (désactiver les protections....) finalement j'ai quand même eu un rapport Lien CJoint.com BHqxpSxiX18 Maintenant j'ai un nouveau TR/Dropper.gen Merci pour ton aide
-
ATRAPS.Gen2 [sujet planté, héberger rapport]
Mathilde P a répondu à un(e) sujet de Mathilde P dans Analyses et éradication malwares
Oups, après de multiples péripéties (difficultés à désactiver les protection..etc..) je suis passée en mode sans échec et l'ai exécuté combofix. Ci-joint le rapport Depuis antivir ne s'active plus. Je suis perdue, merci de votre aide ComboFix 12-08-16.01 - Administrateur 16/08/2012 21:33:42.1.2 - x86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.805 [GMT 2:00] Lancé depuis: C:\Documents and Settings\laurent\Bureau\ComboFix.exe AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) C:\Documents and Settings\All Users\Application Data\TEMP C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6} C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\@ C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\n C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\U\00000001.@ C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\U\80000000.@ C:\Documents and Settings\laurent\Local Settings\Application Data\{20291ac2-2068-3442-4139-a20c363c06d6}\U\800000cb.@ C:\Documents and Settings\laurent\WINDOWS C:\Program Files\MyWaySA C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\SearchSettings.exe C:\WINDOWS\Installer\{20291ac2-2068-3442-4139-a20c363c06d6} C:\WINDOWS\system32\ksl48.bin C:\WINDOWS\system32\URTTemp C:\WINDOWS\system32\URTTemp\fusion.dll C:\WINDOWS\system32\URTTemp\mscoree.dll C:\WINDOWS\system32\URTTemp\mscoree.dll.local C:\WINDOWS\system32\URTTemp\mscorsn.dll C:\WINDOWS\system32\URTTemp\mscorwks.dll C:\WINDOWS\system32\URTTemp\msvcr71.dll C:\WINDOWS\system32\URTTemp\regtlib.exe ((((((((((((((((((((((((((((( Fichiers créés du 2012-07-16 au 2012-08-16 )))))))))))))))))))))))))))))))))))) 2012-08-16 19:12:26 . 2012-08-16 19:13:26 -------- d-----w- C:\Documents and Settings\Administrateur 2012-08-14 19:21:10 . 2012-08-14 19:21:10 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Ask 2012-08-14 19:20:52 . 2012-08-14 19:20:38 73728 ----a-w- C:\WINDOWS\system32\javacpl.cpl 2012-08-14 19:20:52 . 2012-08-14 19:20:37 476976 ----a-w- C:\WINDOWS\system32\npdeployJava1.dll 2012-08-14 13:20:51 . 2012-08-14 13:33:04 -------- d-----w- C:\Documents and Settings\All Users\Application Data\036E18D42252C8CB153D2AE87B07D329 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) 2012-08-14 19:20:37 . 2010-05-30 13:56:04 472880 ----a-w- C:\WINDOWS\system32\deployJava1.dll 2012-07-06 13:59:05 . 2004-08-20 10:23:34 78336 ----a-w- C:\WINDOWS\system32\browser.dll 2012-07-04 14:05:18 . 2004-08-20 10:34:06 139784 ----a-w- C:\WINDOWS\system32\drivers\rdpwd.sys 2012-07-03 18:27:23 . 2004-08-20 10:24:08 1866240 ----a-w- C:\WINDOWS\system32\win32k.sys 2012-07-02 17:39:50 . 2004-08-20 10:24:09 916992 ----a-w- C:\WINDOWS\system32\wininet.dll 2012-07-02 17:39:48 . 2004-08-20 10:23:50 43520 ----a-w- C:\WINDOWS\system32\licmgr10.dll 2012-07-02 17:39:47 . 2004-08-20 10:23:49 1469440 ------w- C:\WINDOWS\system32\inetcpl.cpl 2012-07-02 12:05:43 . 2004-08-20 10:23:48 385024 ----a-w- C:\WINDOWS\system32\html.iec 2012-06-05 15:50:10 . 2008-04-14 02:33:34 1372672 ------w- C:\WINDOWS\system32\msxml6.dll 2012-06-05 15:50:10 . 2004-08-20 10:23:55 1172480 ----a-w- C:\WINDOWS\system32\msxml3.dll 2012-06-04 04:32:46 . 2004-08-20 10:24:02 152576 ----a-w- C:\WINDOWS\system32\schannel.dll 2012-06-02 13:19:48 . 2007-06-06 15:39:55 16408 ----a-w- C:\WINDOWS\system32\wuapi.dll.mui 2012-06-02 13:19:38 . 2004-08-20 10:35:28 329240 ----a-w- C:\WINDOWS\system32\wucltui.dll 2012-06-02 13:19:38 . 2004-08-20 10:35:28 219160 ----a-w- C:\WINDOWS\system32\wuaucpl.cpl 2012-06-02 13:19:38 . 2004-08-20 10:35:28 210968 ----a-w- C:\WINDOWS\system32\wuweb.dll 2012-06-02 13:19:34 . 2005-05-26 03:16:30 45080 ----a-w- C:\WINDOWS\system32\wups2.dll 2012-06-02 13:19:34 . 2004-08-20 10:35:28 53784 ----a-w- C:\WINDOWS\system32\wuauclt.exe 2012-06-02 13:19:34 . 2004-08-20 10:35:28 35864 ----a-w- C:\WINDOWS\system32\wups.dll 2012-06-02 13:19:34 . 2004-08-20 10:23:34 97304 ----a-w- C:\WINDOWS\system32\cdm.dll 2012-06-02 13:19:30 . 2007-06-06 15:39:55 19480 ----a-w- C:\WINDOWS\system32\wuaueng.dll.mui 2012-06-02 13:19:30 . 2007-06-06 15:39:55 16408 ----a-w- C:\WINDOWS\system32\wuaucpl.cpl.mui 2012-06-02 13:19:24 . 2004-08-20 10:35:28 577048 ----a-w- C:\WINDOWS\system32\wuapi.dll 2012-06-02 13:19:18 . 2007-06-06 15:39:56 25112 ----a-w- C:\WINDOWS\system32\wucltui.dll.mui 2012-06-02 13:19:18 . 2004-08-20 10:35:28 1933848 ----a-w- C:\WINDOWS\system32\wuaueng.dll 2012-06-02 13:18:58 . 2011-08-04 12:31:15 275696 ----a-w- C:\WINDOWS\system32\mucltui.dll 2012-06-02 13:18:58 . 2011-08-04 12:31:15 214256 ----a-w- C:\WINDOWS\system32\muweb.dll 2012-06-02 13:18:58 . 2011-08-04 12:31:15 18672 ----a-w- C:\WINDOWS\system32\mucltui.dll.mui 2012-05-31 13:22:03 . 2004-08-20 10:23:35 606208 ----a-w- C:\WINDOWS\system32\crypt32.dll 2006-05-16 17:00:24 . 2006-05-16 17:00:24 1953480 ----a-w- C:\Program Files\PPVIEWER.EXE 2012-07-19 15:56:49 . 2011-05-01 07:47:26 136672 ----a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. [7] 2008-04-13 18:40:30 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\atapi.sys [7] 2008-04-13 18:40:30 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\atapi.sys [7] 2004-08-03 22:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [7] 2004-08-03 22:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys [7] 2004-08-03 22:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\atapi.sys [7] 2008-04-13 18:57:27 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys [7] 2008-04-13 18:57:27 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\asyncmac.sys [7] 2004-08-05 12:00:00 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys [7] 2004-08-05 12:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\beep.sys [7] 2008-04-14 02:05:14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys [7] 2008-04-14 02:05:14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\kbdclass.sys [7] 2004-08-04 00:45:12 . E798705E8DC7FAB596EF6BFDF167E007 . 25216 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys [7] 2008-04-13 19:20:37 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ndis.sys [7] 2008-04-13 19:20:37 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ndis.sys [7] 2004-08-05 12:00:00 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ndis.sys [7] 2008-04-13 19:15:53 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntfs.sys [7] 2008-04-13 19:15:53 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\ntfs.sys [-] 2007-02-09 11:23:36 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081 (xpsp_sp2_qfe.070209-0034)] . . C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys [-] 2007-02-09 11:10:35 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081 (xpsp_sp2_gdr.070209-0028)] . . C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys [7] 2004-08-05 12:00:00 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys [7] 2004-08-05 12:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\null.sys [7] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys [7] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys [7] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys [7] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\tcpip.sys [7] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\drivers\tcpip.sys [7] 2008-06-20 10:45:13 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys [7] 2008-06-20 10:44:42 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394 (xpsp_sp2_qfe.080620-1259)] . . C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys [7] 2008-04-13 19:20:16 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys [7] 2008-04-13 19:20:16 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\tcpip.sys [-] 2007-10-30 17:20:55 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244 (xpsp_sp2_gdr.071030-1259)] . . C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys [-] 2007-10-30 16:53:32 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244 (xpsp_sp2_qfe.071030-1255)] . . C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys [-] 2006-04-20 12:18:35 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892 (xpsp.060420-0256)] . . C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys [-] 2006-04-20 11:51:50 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892 (xpsp_sp2_gdr.060420-0254)] . . C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys [-] 2006-01-13 17:07:08 . 5562CC0A47B2AEF06D3417B733F3C195 . 360448 . . [5.1.2600.2827 (xpsp.060112-2213)] . . C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys [-] 2006-01-13 02:28:14 . 583E063FDC888CA30D05C2724B0D7EF4 . 359808 . . [5.1.2600.2827 (xpsp_sp2_gdr.060112-1653)] . . C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys [-] 2005-05-25 19:07:12 . 63FDFEA54EB53DE2D863EE454937CE1E . 359936 . . [5.1.2600.2685 (xpsp.050525-1029)] . . C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys [-] 2005-05-25 19:04:02 . 88763A98A4C26C409741B4AA162720C9 . 359808 . . [5.1.2600.2685 (xpsp_sp2_gdr.050525-1028)] . . C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys [7] 2004-08-05 12:00:00 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys [7] 2012-07-06 13:59:05 . 952322AE7F95A21F3EEDA99C36C68663 . 78336 . . [5.1.2600.6260 (xpsp_sp3_gdr.120706-1619)] . . C:\WINDOWS\SoftwareDistribution\Download\b1b0af89f641cb61c4c1bd8707c73478\sp3gdr\browser.dll [7] 2012-07-06 13:59:05 . 952322AE7F95A21F3EEDA99C36C68663 . 78336 . . [5.1.2600.6260 (xpsp_sp3_gdr.120706-1619)] . . C:\WINDOWS\system32\browser.dll [7] 2012-07-06 13:59:05 . 952322AE7F95A21F3EEDA99C36C68663 . 78336 . . [5.1.2600.6260 (xpsp_sp3_gdr.120706-1619)] . . C:\WINDOWS\system32\dllcache\browser.dll [7] 2012-07-06 13:58:25 . 5BD75B0B2B2318D1CAFD99EECF7ED8A8 . 78336 . . [5.1.2600.6260 (xpsp_sp3_qfe.120706-1617)] . . C:\WINDOWS\$hf_mig$\KB2705219\SP3QFE\browser.dll [7] 2012-07-06 13:58:25 . 5BD75B0B2B2318D1CAFD99EECF7ED8A8 . 78336 . . [5.1.2600.6260 (xpsp_sp3_qfe.120706-1617)] . . C:\WINDOWS\SoftwareDistribution\Download\b1b0af89f641cb61c4c1bd8707c73478\sp3qfe\browser.dll [7] 2008-04-14 02:33:20 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\$NtUninstallKB2705219$\browser.dll [7] 2008-04-14 02:33:20 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\browser.dll [7] 2004-08-05 12:00:00 . CE9DC7CC6D75515EE62CA341473EC5F3 . 77312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\browser.dll [7] 2008-04-14 02:34:09 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\lsass.exe [7] 2008-04-14 02:34:09 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\lsass.exe [7] 2004-08-05 12:00:00 . 9F3744A5C6F49291A7A685040A013399 . 13312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\lsass.exe [7] 2008-04-14 02:33:34 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\netman.dll [7] 2008-04-14 02:33:34 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\netman.dll [-] 2005-08-22 18:35:10 . 0D55724D88488BBFC53BC2EA219240F3 . 197632 . . [5.1.2600.2743 (xpsp_sp2_gdr.050819-1525)] . . C:\WINDOWS\$NtServicePackUninstall$\netman.dll [-] 2005-08-22 18:26:27 . 31748843AD5811351B115CC52CEA8D77 . 197632 . . [5.1.2600.2743 (xpsp.050819-1528)] . . C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll [7] 2004-08-05 12:00:00 . 624CF700BBFD8BE4097AAA146E6BD363 . 198144 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB905414$\netman.dll [7] 2008-04-14 02:33:21 . F4B7146C7EED6C4E158DCD9B5266C25A . 851968 . . [2001.12.4414.700] . . C:\WINDOWS\ServicePackFiles\i386\comres.dll [7] 2008-04-14 02:33:21 . F4B7146C7EED6C4E158DCD9B5266C25A . 851968 . . [2001.12.4414.700] . . C:\WINDOWS\system32\comres.dll [7] 2004-08-05 12:00:00 . 19428638D8F4440F67519BD03A623BBB . 851968 . . [2001.12.4414.258] . . C:\WINDOWS\$NtServicePackUninstall$\comres.dll [7] 2008-04-14 02:33:39 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\qmgr.dll [7] 2008-04-14 02:33:39 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\qmgr.dll [7] 2008-04-14 02:33:39 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\bits\qmgr.dll [7] 2004-08-05 12:00:00 . 87424817F82CF6A7F55DAC01A20111A3 . 382464 . . [6.6.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll [7] 2009-02-09 10:56:34 . F83B964469D230F445613C44DF9FE25D . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll [7] 2009-02-09 10:53:55 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\rpcss.dll [7] 2009-02-09 10:53:55 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\rpcss.dll [7] 2009-02-09 10:53:55 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\rpcss.dll [7] 2009-02-09 10:03:39 . BA1EF616F55210820F6462D033088497 . 401408 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll [7] 2008-04-14 02:33:39 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll [7] 2008-04-14 02:33:39 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\rpcss.dll [-] 2005-07-26 04:40:00 . CB7D37602638369A516757E994CBB31D . 397824 . . [5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] . . C:\WINDOWS\$NtUninstallKB956572_0$\rpcss.dll [-] 2005-07-26 04:29:39 . B38D431ACE730452CD1FEE4FB7ECD6E2 . 398336 . . [5.1.2600.2726 (xpsp.050725-1531)] . . C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll [-] 2005-04-28 19:36:09 . FD292BFE003558F4C39AA3D44F420AC7 . 396288 . . [5.1.2600.2665 (xpsp.050427-1553)] . . C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll [-] 2005-04-28 19:32:30 . D0F724BDF4A0647F1A52985FD629EFCE . 395776 . . [5.1.2600.2665 (xpsp_sp2_gdr.050427-1553)] . . C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll [7] 2004-08-05 12:00:00 . 2477917B158327410E615C582A3A4C0B . 395776 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll [7] 2009-02-09 11:23:48 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe [7] 2009-02-09 11:23:48 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\services.exe [7] 2009-02-09 11:23:48 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\services.exe [7] 2009-02-09 11:16:53 . 62789101F9C2401ED598AA2CDE7450C0 . 111104 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe [7] 2009-02-09 09:53:11 . 51A24094F076961A7FF73E5F7E991D68 . 111104 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$NtServicePackUninstall$\services.exe [7] 2008-04-14 02:34:20 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB956572$\services.exe [7] 2008-04-14 02:34:20 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\services.exe [7] 2004-08-05 12:00:00 . 732E0B1ABAACE15D80EC19056B0A2AF9 . 108544 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB956572_0$\services.exe [7] 2010-08-17 13:19:36 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024 (xpsp_sp3_qfe.100817-1627)] . . C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe [7] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\spoolsv.exe [7] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\dllcache\spoolsv.exe [7] 2008-04-14 02:34:23 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe [7] 2008-04-14 02:34:23 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe [-] 2005-06-11 00:17:13 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696 (xpsp.050610-1527)] . . C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe [-] 2005-06-10 23:53:32 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] . . C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe [7] 2008-04-14 02:34:28 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\winlogon.exe [7] 2008-04-14 02:34:28 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\winlogon.exe [7] 2004-08-05 12:00:00 . D2DE785AEAB0BB8CA4C14A8A199DBE4E . 506368 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe [7] 2012-06-02 13:19:34 . 2E0B0A051FFAA86E358465BB0880D453 . 53784 . . [7.6.7600.256 (winmain_wtr_wsus3sp2(oobla).120602-1459)] . . C:\WINDOWS\system32\wuauclt.exe [7] 2012-06-02 13:19:34 . 2E0B0A051FFAA86E358465BB0880D453 . 53784 . . [7.6.7600.256 (winmain_wtr_wsus3sp2(oobla).120602-1459)] . . C:\WINDOWS\system32\dllcache\wuauclt.exe [7] 2008-04-14 02:34:29 . 7E3DEFE771CB451B0FF630BFA435417E . 112640 . . [5.4.3790.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\wuauclt.exe [7] 2008-04-13 19:19:42 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ipsec.sys [7] 2008-04-13 19:19:42 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ipsec.sys [7] 2004-08-05 12:00:00 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys [7] 2010-08-23 16:12:44 . 4C96AB448A3014EBC11E1D3868071391 . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\comctl32.dll [7] 2010-08-23 16:12:44 . 4C96AB448A3014EBC11E1D3868071391 . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\dllcache\comctl32.dll [7] 2010-08-23 16:12:39 . AD6F8920E9BC4ADF4F2844E3ED0D47AF . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [7] 2008-04-14 02:33:21 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll [7] 2008-04-14 02:33:21 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\comctl32.dll [7] 2008-04-14 02:30:54 . F92E6BEA9349D49341383F8403B4DFE5 . 1054208 . . [6.0 (xpsp.080413-2105)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [-] 2006-08-25 15:51:14 . 5BBCD65CFD7610F36BCA96B72BBAED4B . 617472 . . [5.82 (xpsp.060825-0040)] . . C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll [-] 2006-08-25 15:51:12 . 47ABF878B9AEC81B23BA5F89DE597B3A . 1054208 . . [6.0 (xpsp.060825-0040)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll [7] 2004-08-05 12:00:00 . A53B48B5AB9A5DA76ED247D61B0B0ADD . 611328 . . [5.82 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll [7] 2004-08-05 12:00:00 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll [7] 2004-08-05 12:00:00 . 97668958194B82F5B88EABC88ACA5AE1 . 1050624 . . [6.0 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [7] 2008-04-14 02:33:21 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll [7] 2008-04-14 02:33:21 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\cryptsvc.dll [7] 2004-08-05 12:00:00 . BDDF3723D95DC28D78B1E93119E0E6AB . 60416 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll [7] 2008-07-07 20:31:48 . A5B1B7C76134329AA7547F6E6DA35410 . 253952 . . [2001.12.4414.320] . . C:\WINDOWS\$NtServicePackUninstall$\es.dll [7] 2008-07-07 20:28:20 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll [7] 2008-07-07 20:28:20 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\es.dll [7] 2008-07-07 20:28:20 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\dllcache\es.dll [7] 2008-07-07 20:24:11 . 157F9C595FD0D10502497DC4C1348D17 . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll [7] 2008-07-07 20:18:27 . 74ECF4DDC685BD3249CAB323405FCC49 . 253952 . . [2001.12.4414.320] . . C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll [7] 2008-04-14 02:33:24 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\$NtUninstallKB950974$\es.dll [7] 2008-04-14 02:33:24 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\ServicePackFiles\i386\es.dll [-] 2005-07-26 04:39:57 . D9CDB9380E0EFC9E97CC589B5F484B94 . 243200 . . [2001.12.4414.308] . . C:\WINDOWS\$NtUninstallKB950974_0$\es.dll [-] 2005-07-26 04:29:28 . B56B69129181FF63BAED5EDE65DCC9B1 . 243200 . . [2001.12.4414.308] . . C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll [7] 2004-08-05 12:00:00 . BBA1D0A306ABE68A13F58FDBE97E9AF4 . 243200 . . [2001.12.4414.258] . . C:\WINDOWS\$NtUninstallKB902400$\es.dll [7] 2008-04-14 02:33:26 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\imm32.dll [7] 2008-04-14 02:33:26 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\imm32.dll [7] 2004-08-05 12:00:00 . 39EE5FAF56260EBB8D77A08F525EBBB4 . 110080 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\imm32.dll [7] 2009-03-21 14:20:10 . 534040750B9E70B156A98F5D0E8F6D2A . 1051136 . . [5.1.2600.3541 (xpsp_sp2_gdr.090321-1320)] . . C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll [7] 2009-03-21 14:07:58 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3GDR\kernel32.dll [7] 2009-03-21 14:07:58 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\kernel32.dll [7] 2009-03-21 14:07:58 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\dllcache\kernel32.dll [7] 2009-03-21 14:00:17 . C3AF0EEE26B59484E674673E3016AAB7 . 1056768 . . [5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll [7] 2009-03-21 13:58:25 . 2087E2764822A8D93A4CA7FA0FED35E8 . 1054208 . . [5.1.2600.3541 (xpsp_sp2_qfe.090321-1324)] . . C:\WINDOWS\$hf_mig$\KB959426\SP2QFE\kernel32.dll [7] 2008-04-14 02:33:28 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll [7] 2008-04-14 02:33:28 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\kernel32.dll [-] 2007-04-16 16:11:08 . 62E3F0E9ABFCBCEE62C51546F622C455 . 1051136 . . [5.1.2600.3119 (xpsp_sp2_qfe.070416-1259)] . . C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll [-] 2007-04-16 15:53:11 . 6F1FE2AE7B22EB9CED1BFF533C9455EA . 1049600 . . [5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)] . . C:\WINDOWS\$NtUninstallKB959426_0$\kernel32.dll [-] 2006-07-05 10:58:13 . FB85EF2A6713E3A58A497E093626B93C . 1050112 . . [5.1.2600.2945 (xpsp.060704-2357)] . . C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll [-] 2006-07-05 10:56:38 . CE4AF1FA47A29ADF97CB107775CE395C . 1049088 . . [5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)] . . C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll [7] 2004-08-05 12:00:00 . 7830E20C74611281B1BDAE5888CD50F5 . 1048576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll [7] 2008-04-14 02:33:28 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll [7] 2008-04-14 02:33:28 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\linkinfo.dll [-] 2005-09-01 01:46:30 . D9BD4CCA0533401B6609E47FF74F40DC . 19968 . . [5.1.2600.2751 (xpsp.050831-1531)] . . C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll [-] 2005-09-01 01:43:37 . 8D9A075C065DFE1228688D10155D6624 . 19968 . . [5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] . . C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll [7] 2004-08-05 12:00:00 . 9D21BC0235494F2B403026A1D3619E00 . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB900725$\linkinfo.dll [7] 2008-04-14 02:33:28 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\lpk.dll [7] 2008-04-14 02:33:28 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\lpk.dll [7] 2004-08-05 12:00:00 . 8C97E0E3DAA99659D4F4B44CC1F282A6 . 22016 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\lpk.dll [7] 2012-07-02 17:39:49 . 6C50243D80819FC09DECC9EAE1FE332A . 6008320 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\SoftwareDistribution\Download\b7510b529b5f6a36da15dda82850b68c\SP3GDR\mshtml.dll [7] 2012-07-02 17:39:49 . 6C50243D80819FC09DECC9EAE1FE332A . 6008320 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\system32\mshtml.dll [7] 2012-07-02 17:39:49 . 6C50243D80819FC09DECC9EAE1FE332A . 6008320 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\system32\dllcache\mshtml.dll [7] 2012-07-02 17:38:42 . F93C8D0974322DBDCC1394E8B5D123C6 . 6010368 . . [8.00.6001.23385 (longhorn_ie8_ldr.120627-1815)] . . C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\mshtml.dll [7] 2012-07-02 17:38:42 . F93C8D0974322DBDCC1394E8B5D123C6 . 6010368 . . [8.00.6001.23385 (longhorn_ie8_ldr.120627-1815)] . . C:\WINDOWS\SoftwareDistribution\Download\b7510b529b5f6a36da15dda82850b68c\SP3QFE\mshtml.dll [7] 2012-05-11 14:40:44 . 56BBF8F5B069CB08A7F302B822BBF599 . 6007808 . . [8.00.6001.19258 (longhorn_ie8_gdr.120423-1946)] . . C:\WINDOWS\ie8updates\KB2722913-IE8\mshtml.dll [7] 2012-05-11 14:39:39 . 25D61F63B32E6C7A28D46ACE8E52E9C4 . 6009344 . . [8.00.6001.23345 (longhorn_ie8_ldr.120423-2015)] . . C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\mshtml.dll [7] 2012-03-01 11:00:23 . A21203E0B7ABE25CD681169E01A64760 . 5978624 . . [8.00.6001.19222 (longhorn_ie8_gdr.120227-1715)] . . C:\WINDOWS\ie8updates\KB2699988-IE8\mshtml.dll [7] 2012-03-01 10:58:11 . 1227D2C0FC22AB2243B46EFA8912239C . 5980672 . . [8.00.6001.23318 (longhorn_ie8_ldr.120227-1815)] . . C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\mshtml.dll [7] 2011-12-17 19:43:31 . 27E807156942C40571A52C393780320D . 5979136 . . [8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)] . . C:\WINDOWS\ie8updates\KB2675157-IE8\mshtml.dll [7] 2011-12-17 19:42:36 . 8035C951C2A8F9288B012D03751EF357 . 5980160 . . [8.00.6001.23286 (longhorn_ie8_ldr.111214-1815)] . . C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll [7] 2011-11-04 19:13:29 . 09F0AF2BE3E126D87663290F542BC38E . 5978112 . . [8.00.6001.19170 (longhorn_ie8_gdr.111102-1715)] . . C:\WINDOWS\ie8updates\KB2647516-IE8\mshtml.dll [7] 2011-11-04 19:12:18 . 79B87304D0A09A48C7C0EB1712230509 . 5978624 . . [8.00.6001.23266 (longhorn_ie8_ldr.111102-1815)] . . C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll [7] 2011-10-03 08:34:10 . 74BED1542D59A83B1B13BCCF73A45D30 . 5971456 . . [8.00.6001.19154 (longhorn_ie8_gdr.110930-1002)] . . C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll [7] 2011-10-03 08:33:07 . 04B3377227CD337F740A1BE05A33E6D7 . 5972992 . . [8.00.6001.23250 (longhorn_ie8_ldr.110930-1035)] . . C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll [7] 2011-07-25 15:09:56 . B8F6D02D7BE68036675C7315460F3198 . 5969920 . . [8.00.6001.19120 (longhorn_ie8_gdr.110722-2155)] . . C:\WINDOWS\ie8updates\KB2586448-IE8\mshtml.dll [7] 2011-07-25 15:08:21 . D56D2C438D98AE7706E342C063FC8178 . 5971456 . . [8.00.6001.23216 (longhorn_ie8_ldr.110722-2225)] . . C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll [7] 2011-05-30 22:12:58 . 00A80397727F8D87B75916D32B002B32 . 5964800 . . [8.00.6001.19088 (longhorn_ie8_gdr.110527-1700)] . . C:\WINDOWS\ie8updates\KB2559049-IE8\mshtml.dll [7] 2011-05-30 22:11:36 . 4FA897D7C84EB0F5AB8429DFC98A5FB0 . 5967360 . . [8.00.6001.23181 (longhorn_ie8_ldr.110527-1800)] . . C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll [7] 2011-02-22 23:25:23 . 87AD8BE7B6A2AA21BD05BAEEC42ADE1C . 5964800 . . [8.00.6001.23141 (longhorn_ie8_ldr.110216-1756)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll [7] 2011-02-22 23:05:47 . 8B82D452F8BFCDC50D1C003957EB4C24 . 5962240 . . [8.00.6001.19046 (longhorn_ie8_gdr.110216-1700)] . . C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll [7] 2010-12-20 23:53:04 . 57840C53F8FA1928AD7A02A61C990401 . 5961216 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll [7] 2010-12-20 23:52:00 . 6CEA3DF10D6B27C2A98EBDD4DDBE7646 . 5962240 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll [7] 2010-11-06 00:25:05 . 04210EEC4675E1304C0F9BDCE7A6735F . 5960704 . . [8.00.6001.23091 (longhorn_ie8_ldr.101101-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll [7] 2010-11-06 00:21:44 . 77EF4923A564EE6415A0204B299C91C2 . 5959168 . . [8.00.6001.18999 (longhorn_ie8_gdr.101101-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll [7] 2010-09-10 05:50:17 . 07F85C15C4C0950DB8B5D4509D38182D . 5957120 . . [8.00.6001.18975 (longhorn_ie8_gdr.100907-1700)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll [7] 2010-09-10 05:47:25 . E97A32E6341D4ED609514D59EB5D0E3D . 5958656 . . [8.00.6001.23067 (longhorn_ie8_ldr.100907-1730)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll [7] 2010-06-24 12:28:32 . 7B63F9D998AF9FB1E147A71871773F9C . 5954560 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll [7] 2010-06-24 12:25:23 . D1829B36DF1006D2B0954910A757AF84 . 5951488 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll [7] 2010-05-06 10:33:42 . 58AF16DE738F10213E86FEF10836D0E5 . 5950976 . . [8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll [7] 2010-05-06 10:27:40 . 705DA0AFB48A9333747475AD5600A902 . 5953024 . . [8.00.6001.23019 (longhorn_ie8_ldr.100503-1800)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll [7] 2010-02-25 06:17:36 . 61216C223AF660E87DF5482C861A9DE2 . 5944832 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll [7] 2010-02-25 06:11:50 . B8B420A6EB2BB50AA014CD99C96CF983 . 5946880 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll [7] 2009-12-21 19:07:00 . FE1B72EA7D56047544F71E6561E92D6B . 5942784 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll [7] 2009-12-21 19:01:30 . 4C3B72EA3B0835689AB747AF08586F2D . 5945856 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll [7] 2009-10-29 07:42:32 . 09CF09FD79B523D72E63C7C87DA42B7B . 5940736 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll [7] 2009-10-29 07:37:04 . CAAC5BF7EB6B3D0E58C9E94C70ACA4FC . 5944320 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll [7] 2009-10-22 09:17:28 . 15AF288B61A2E017B18D7E185080AC49 . 5939712 . . [8.00.6001.18852 (longhorn_ie8_gdr.091020-1827)] . . C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll [7] 2009-10-22 09:14:22 . B6FCAFC596E6B91BBAACEAA65CBB3597 . 5943296 . . [8.00.6001.22942 (longhorn_ie8_ldr.091021-0230)] . . C:\WINDOWS\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll [7] 2009-08-29 07:56:52 . 590162EA07145D620FA95D2454364FC4 . 5940224 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976749-IE8\mshtml.dll [7] 2009-08-29 07:51:06 . 182C1908B26DD3BCEB58B735C3F97F7C . 5942272 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll [7] 2009-07-19 13:29:21 . 0E396FC8AED9D3D550DB38152F6A4FC7 . 3597824 . . [7.00.6000.16890 (vista_gdr.090717-2341)] . . C:\WINDOWS\ie8\mshtml.dll [7] 2009-07-19 13:21:32 . 73FFE289F14EDFBB22429E88ACF17016 . 3600384 . . [7.00.6000.21089 (vista_ldr.090717-2341)] . . C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll [7] 2009-07-19 13:15:02 . 29AA8EA1DAA83DBEC54916669BF09077 . 5937152 . . [8.00.6001.18812 (longhorn_ie8_gdr.090717-2100)] . . C:\WINDOWS\ie8updates\KB974455-IE8\mshtml.dll [7] 2009-07-19 13:15:02 . 29AA8EA1DAA83DBEC54916669BF09077 . 5937152 . . [8.00.6001.18812 (longhorn_ie8_gdr.090717-2100)] . . C:\WINDOWS\SoftwareDistribution\Download\bd9c0ba4365eb1bda025a0659531108c\SP3GDR\mshtml.dll [7] 2009-07-19 13:06:02 . 19C9FC84B91467171674D76EB0224D48 . 5938176 . . [8.00.6001.22902 (longhorn_ie8_ldr.090718-0500)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll [7] 2009-07-19 13:06:02 . 19C9FC84B91467171674D76EB0224D48 . 5938176 . . [8.00.6001.22902 (longhorn_ie8_ldr.090718-0500)] . . C:\WINDOWS\SoftwareDistribution\Download\bd9c0ba4365eb1bda025a0659531108c\SP3QFE\mshtml.dll [7] 2009-04-29 04:45:41 . 9B6478E6F9E83A04B6DA76FA61BB1FA7 . 3596288 . . [7.00.6000.16850 (vista_gdr.090423-0018)] . . C:\WINDOWS\ie7updates\KB972260-IE7\mshtml.dll [7] 2009-04-29 04:37:42 . 246F148CD2E4F5AE164C1890D0A06420 . 3598336 . . [7.00.6000.21045 (vista_ldr.090423-0018)] . . C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll [7] 2009-03-08 02:41:16 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB972260-IE8\mshtml.dll [7] 2009-02-21 06:48:52 . D79AEC545A98057155099FB69BB3C4D3 . 3596800 . . [7.00.6000.21015 (vista_ldr.090218-1505)] . . C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll [7] 2009-02-20 17:10:54 . 78068F040272D5EEF5198B3C75DD4D99 . 3595264 . . [7.00.6000.16825 (vista_gdr.090218-1505)] . . C:\WINDOWS\ie7updates\KB969897-IE7\mshtml.dll [7] 2009-01-16 20:15:42 . 0975BFBBCF2639C8BB5C0790F020DE6C . 3594752 . . [7.00.6000.16809 (vista_gdr.090114-1504)] . . C:\WINDOWS\ie7updates\KB963027-IE7\mshtml.dll [7] 2009-01-16 16:20:14 . F386435C5E0A5D86E9F90B659D4F6075 . 3596288 . . [7.00.6000.20996 (vista_ldr.090114-1504)] . . C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll [7] 2008-12-13 06:37:56 . 0AFB982529328ABAF64EFC6C85E0F09C . 3593216 . . [7.00.6000.16788 (vista_gdr.081211-1619)] . . C:\WINDOWS\ie7updates\KB961260-IE7\mshtml.dll [7] 2008-12-13 06:27:45 . CB7922B3AD4BC5BBEDA130F6C9E0656A . 3594752 . . [7.00.6000.20973 (vista_ldr.081211-1619)] . . C:\WINDOWS\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll [7] 2008-10-17 00:48:40 . 74BF6087086364FA96BF047DA7C9EB38 . 3593216 . . [7.00.6000.16762 (vista_gdr.081013-1507)] . . C:\WINDOWS\ie7updates\KB960714-IE7\mshtml.dll [7] 2008-10-16 19:33:19 . EB75C0C66C633D0EFD0176450F8857F8 . 3595264 . . [7.00.6000.20935 (vista_ldr.081013-1507)] . . C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll [7] 2008-08-27 09:11:52 . 3CCDB836BBAB800FDED3181AF7EED38F . 3593216 . . [7.00.6000.16735 (vista_gdr.080820-1506)] . . C:\WINDOWS\ie7updates\KB958215-IE7\mshtml.dll [7] 2008-08-26 09:10:28 . 0F345A2FE55C3DC9693AAAF2E983F4AD . 3594752 . . [7.00.6000.20900 (vista_ldr.080820-1506)] . . C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll [7] 2008-06-24 08:28:24 . 03F74B51CC156B0E78D998DDF0EF31C1 . 3592192 . . [7.00.6000.16705 (vista_gdr.080618-1506)] . . C:\WINDOWS\ie7updates\KB956390-IE7\mshtml.dll [7] 2008-06-23 15:40:07 . A01EF08ACFF24D6E4987804BFD306AA4 . 3594240 . . [7.00.6000.20861 (vista_ldr.080618-1506)] . . C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll [7] 2008-04-23 20:16:42 . D7A36FCE62649BD7146053C5E982EBF3 . 3591680 . . [7.00.6000.16674 (vista_gdr.080415-1732)] . . C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll [7] 2008-04-23 07:19:27 . EBF0440323874DDF97EF0CEC2D6DC9F4 . 3593728 . . [7.00.6000.20815 (vista_ldr.080415-1732)] . . C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll [7] 2008-04-14 02:33:31 . C4153F037157C7BE7C54FD88887F027D . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\mshtml.dll [7] 2008-03-01 16:28:10 . F745B291067B273909D87D9D84857F4D . 3591680 . . [7.00.6000.16640 (vista_gdr.080213-1606)] . . C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll [7] 2008-03-01 12:34:32 . B22EC9AE82E19818077E286FF1B82B72 . 3593216 . . [7.00.6000.20772 (vista_ldr.080213-1606)] . . C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll [7] 2007-12-08 05:08:36 . DA88BCD1CA467FE0464E896D01110E5A . 3592192 . . [7.00.6000.16608 (vista_gdr.071204-1500)] . . C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll [7] 2007-12-07 01:42:21 . 906D0EC58033A9475BF8C7F885B7ED45 . 3593216 . . [7.00.6000.20733 (vista_ldr.071204-1500)] . . C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll [7] 2007-10-30 23:40:57 . EB4E53C96D5FB4A9A3F1EAEB782D8862 . 3593216 . . [7.00.6000.20710 (vista_ldr.071026-1500)] . . C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll [7] 2007-10-30 23:23:48 . 89397AFC934A509580FF089035E71DA8 . 3590656 . . [7.00.6000.16587 (vista_gdr.071026-1500)] . . C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll [7] 2007-08-20 09:59:30 . 12357B36CB76D754FB9AE7822A64A03D . 3584512 . . [7.00.6000.16544 (vista_gdr.070814-1500)] . . C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll [7] 2007-08-20 09:49:26 . D9481E937D5BE0B2D5DBCD87745E925A . 3592192 . . [7.00.6000.20661 (vista_ldr.070814-1500)] . . C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll [7] 2007-07-19 06:58:09 . 5CA5101D0606245574D84B0520CFE780 . 3583488 . . [7.00.6000.16525 (vista_gdr.070716-1600)] . . C:\WINDOWS\ie7updates\KB939653-IE7\mshtml.dll [7] 2007-07-18 20:58:09 . CD3ED432FE932AFBB9AC55A57ADFE0D0 . 3584000 . . [7.00.6000.20641 (vista_ldr.070716-1600)] . . C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE\mshtml.dll [7] 2007-05-08 09:04:31 . B672A6772187AE5E63762A1B4EAAF2CA . 3584000 . . [7.00.6000.20591 (vista_ldr.070503-1540)] . . C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll [7] 2007-05-08 08:59:01 . 919232D791120960D3DA5F5880CC261C . 3583488 . . [7.00.6000.16481 (vista_gdr.070503-1540)] . . C:\WINDOWS\ie7updates\KB937143-IE7\mshtml.dll [7] 2007-03-23 01:29:40 . 0CF276F7C5D51F2BB92CCEF4A770EA30 . 3582976 . . [7.00.6000.20544 (vista_ldr.070223-1505)] . . C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE\mshtml.dll [7] 2007-02-27 13:25:58 . FC38B18A1AD106289BF4FEFC2670A9B5 . 3581952 . . [7.00.6000.16441 (vista_gdr.070219-1500)] . . C:\WINDOWS\ie7updates\KB933566-IE7\mshtml.dll [7] 2007-01-12 08:27:42 . 5D45318804A30CE9D6EA83066E84B4A7 . 3580416 . . [7.00.6000.16414 (vista_gdr.070108-1520)] . . C:\WINDOWS\ie7updates\KB931768-IE7\mshtml.dll [7] 2006-11-07 20:03:36 . CBF04597F9CF7739E572276A2698FDD3 . 3577856 . . [7.00.5730.11 (winmain(wmbla).061017-1135)] . . C:\WINDOWS\ie7updates\KB928090-IE7\mshtml.dll [-] 2006-10-23 15:34:38 . EE542871960ACFD459F4113B1BCC6C10 . 3082240 . . [6.00.2900.3020 (xpsp.061023-0222)] . . C:\WINDOWS\ie7\mshtml.dll [-] 2006-09-14 08:38:06 . DDF783ED4C24E7126E3FF25AD07CB25A . 3079680 . . [6.00.2900.2995 (xpsp.060913-0019)] . . C:\WINDOWS\$NtUninstallKB925454$\mshtml.dll [-] 2006-07-28 11:30:59 . DC9A660A7E39F90903B79E893B121FC9 . 3079168 . . [6.00.2900.2963 (xpsp.060728-0003)] . . C:\WINDOWS\$NtUninstallKB922760$\mshtml.dll [-] 2006-05-19 15:07:57 . D8952C9B9C9A9C6B480A4DFC506313D4 . 3076096 . . [6.00.2900.2912 (xpsp.060519-0021)] . . C:\WINDOWS\$NtUninstallKB918899$\mshtml.dll [-] 2006-03-23 20:32:00 . AC77AAD0D3F9D6490F7B5F697DDAD483 . 3076608 . . [6.00.2900.2873 (xpsp.060322-1626)] . . C:\WINDOWS\$NtUninstallKB916281$\mshtml.dll [-] 2005-11-24 00:08:35 . 2976260E57E506A162D8BBA87B520961 . 3013632 . . [6.00.2900.2802 (xpsp_sp2_gdr.051123-1230)] . . C:\WINDOWS\$NtUninstallKB912812$\mshtml.dll [-] 2005-11-23 23:52:32 . 6D215267660530629AE04032B7FFC610 . 3016192 . . [6.00.2900.2802 (xpsp.051123-1236)] . . C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\mshtml.dll [-] 2005-10-05 00:51:10 . 172E3CF0EF82C9A5B54621E536F0121B . 3015680 . . [6.00.2900.2769 (xpsp.051004-1419)] . . C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\mshtml.dll [-] 2005-10-04 17:26:06 . 0DF7AE0A8A3F52934FF026F7E1C28183 . 3013120 . . [6.00.2900.2769 (xpsp_sp2_gdr.051004-1415)] . . C:\WINDOWS\$NtUninstallKB905915$\mshtml.dll [7] 2008-04-14 02:33:33 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll [7] 2008-04-14 02:33:33 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\msvcrt.dll [7] 2008-04-14 02:30:54 . D33CD21D476C3A07DD88F83850A17432 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll [7] 2004-08-05 12:00:00 . 351B1AD22FD0EC70D889766E0B4F72ED . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll [7] 2004-08-05 12:00:00 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll [7] 2004-08-05 12:00:00 . 5C53FCABF891ECDC7156544E5B03FE71 . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll [7] 2008-06-20 17:47:22 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll [7] 2008-06-20 17:47:22 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll [7] 2008-06-20 17:44:02 . C759B3790D3BA760C52E218EF4886DAC . 247808 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll [7] 2008-06-20 17:44:02 . C759B3790D3BA760C52E218EF4886DAC . 247808 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll [7] 2008-06-20 17:41:06 . 8A52DE10680A40ECD04FA2C0FBC34190 . 247808 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll [7] 2008-06-20 17:37:01 . 4138FBDEDBC6FEAD215BB4C4B102F7DE . 247808 . . [5.1.2600.3394 (xpsp_sp2_qfe.080620-1259)] . . C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll [7] 2008-06-20 16:03:53 . 6F5F546A92C7B6AE45DB1D6910781EB0 . 247808 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\mswsock.dll [7] 2008-06-20 16:03:53 . 6F5F546A92C7B6AE45DB1D6910781EB0 . 247808 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\mswsock.dll [7] 2008-04-14 02:33:33 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll [7] 2008-04-14 02:33:33 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\mswsock.dll [7] 2004-08-05 12:00:00 . CCDD3433F3C3BD0D8502B38FD155B2F0 . 247808 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll [7] 2008-04-14 02:33:34 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [7] 2008-04-14 02:33:34 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\netlogon.dll [7] 2004-08-05 12:00:00 . FAF07FDCDE76000621A28D19F8E2E8EB . 407040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll [7] 2008-04-14 02:33:38 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\powrprof.dll [7] 2008-04-14 02:33:38 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\powrprof.dll [7] 2004-08-05 12:00:00 . B02E4DDBE0E98F42F3B61292DDB3A104 . 17408 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll [7] 2008-04-14 02:33:40 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\scecli.dll [7] 2008-04-14 02:33:40 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\scecli.dll [7] 2004-08-05 12:00:00 . DEC0397F35D027874804EC72979D03CC . 186368 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\scecli.dll [7] 2008-04-14 02:33:41 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfc.dll [7] 2008-04-14 02:33:41 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfc.dll [7] 2004-08-05 12:00:00 . 94559DE281DADCB58E6A3919C7EAC0B4 . 5120 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\sfc.dll [7] 2008-04-14 02:34:23 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\svchost.exe [7] 2008-04-14 02:34:23 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\svchost.exe [7] 2004-08-05 12:00:00 . 1BD6C2F707A275CB7C16FD99FE0F31CA . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\svchost.exe [7] 2008-04-14 02:33:46 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll [7] 2008-04-14 02:33:46 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\tapisrv.dll [-] 2005-07-08 16:30:34 . C9FA05D271A0066764FE75BE38E24D69 . 249344 . . [5.1.2600.2716 (xpsp.050707-1657)] . . C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll [-] 2005-07-08 16:28:58 . 720DA0C9DB8996AD9B7F5164B2242DAA . 249344 . . [5.1.2600.2716 (xpsp_sp2_gdr.050707-1657)] . . C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll [7] 2004-08-05 12:00:00 . 2490CAE37DB8B6EC55E7A9415473D0AB . 246272 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB893756$\tapisrv.dll [7] 2008-04-14 02:33:48 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\user32.dll [7] 2008-04-14 02:33:48 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\user32.dll [-] 2007-03-08 15:50:30 . 4D88AAF39ADABFE45958EA1384E2C4FF . 579072 . . [5.1.2600.3099 (xpsp_sp2_qfe.070308-0217)] . . C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll [-] 2007-03-08 15:37:50 . 753354F594809A9B96F73999B435A533 . 578560 . . [5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)] . . C:\WINDOWS\$NtServicePackUninstall$\user32.dll [-] 2005-03-02 18:20:32 . C34920EB988CE98910BD6B0417F334EB . 578048 . . [5.1.2600.2622 (xpsp.050301-1521)] . . C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll [-] 2005-03-02 18:10:36 . 0DF75FB73F705B011630159A43D7C354 . 578048 . . [5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)] . . C:\WINDOWS\$NtUninstallKB925902$\user32.dll [7] 2004-08-05 12:00:00 . E46FB493E3B33704F0715020CF52106B . 578048 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB890859$\user32.dll [7] 2008-04-14 02:34:26 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\userinit.exe [7] 2008-04-14 02:34:26 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\userinit.exe [7] 2004-08-05 12:00:00 . D6D65EA32B190401B57EDB6706F29669 . 25088 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\userinit.exe [7] 2012-07-02 17:39:50 . 3702C4555CE284742F80364D7904BA73 . 916992 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\SoftwareDistribution\Download\b7510b529b5f6a36da15dda82850b68c\SP3GDR\wininet.dll [7] 2012-07-02 17:39:50 . 3702C4555CE284742F80364D7904BA73 . 916992 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\system32\wininet.dll [7] 2012-07-02 17:39:50 . 3702C4555CE284742F80364D7904BA73 . 916992 . . [8.00.6001.19298 (longhorn_ie8_gdr.120627-1715)] . . C:\WINDOWS\system32\dllcache\wininet.dll [7] 2012-07-02 17:38:43 . 29FEC860C77934244D28213C24A6E110 . 920064 . . [8.00.6001.23385 (longhorn_ie8_ldr.120627-1815)] . . C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\wininet.dll [7] 2012-07-02 17:38:43 . 29FEC860C77934244D28213C24A6E110 . 920064 . . [8.00.6001.23385 (longhorn_ie8_ldr.120627-1815)] . . C:\WINDOWS\SoftwareDistribution\Download\b7510b529b5f6a36da15dda82850b68c\SP3QFE\wininet.dll [7] 2012-05-16 15:06:36 . 1A5B88015B3823D31C5842DE0DBFE842 . 916992 . . [8.00.6001.19272 (longhorn_ie8_gdr.120514-1250)] . . C:\WINDOWS\ie8updates\KB2722913-IE8\wininet.dll [7] 2012-05-16 15:05:31 . 55DEA0699C49199F80D41B8177708169 . 920064 . . [8.00.6001.23359 (longhorn_ie8_ldr.120514-1345)] . . C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\wininet.dll [7] 2012-03-01 11:00:23 . D44608FCA100A5C48053588517517028 . 916992 . . [8.00.6001.19222 (longhorn_ie8_gdr.120227-1715)] . . C:\WINDOWS\ie8updates\KB2699988-IE8\wininet.dll [7] 2012-03-01 10:58:11 . 7960ADFC62197E5262A8A72A9FE99C43 . 919552 . . [8.00.6001.23318 (longhorn_ie8_ldr.120227-1815)] . . C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\wininet.dll [7] 2011-12-17 19:43:31 . 5C72F65D2F038E0BF481326423F9D266 . 916992 . . [8.00.6001.19190 (longhorn_ie8_gdr.111214-1715)] . . C:\WINDOWS\ie8updates\KB2675157-IE8\wininet.dll [7] 2011-12-17 19:42:36 . FBF4D9A8AE222337063B7DF8881F5AE5 . 919552 . . [8.00.6001.23286 (longhorn_ie8_ldr.111214-1815)] . . C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll [7] 2011-11-04 19:13:29 . B0DF02C2326381D64149F3EEFAE5E09D . 916992 . . [8.00.6001.19165 (longhorn_ie8_gdr.111021-1715)] . . C:\WINDOWS\ie8updates\KB2647516-IE8\wininet.dll [7] 2011-11-04 19:12:19 . CC5816AA2B0EB20BA52D5622A7C1DED3 . 919552 . . [8.00.6001.23261 (longhorn_ie8_ldr.111021-1815)] . . C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll [7] 2011-08-22 23:41:31 . 7DF35C3D173E799F97F208CC5F3B1C93 . 916480 . . [8.00.6001.19131 (longhorn_ie8_gdr.110815-1715)] . . C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll [7] 2011-08-22 23:40:21 . 96F7E8DFF026E48DD7655DBFC47E7944 . 919552 . . [8.00.6001.23227 (longhorn_ie8_ldr.110815-1815)] . . C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll [7] 2011-06-23 18:31:31 . 3008D2F793F23FF0DDBC5A1FB9F8374F . 916480 . . [8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)] . . C:\WINDOWS\ie8updates\KB2586448-IE8\wininet.dll [7] 2011-06-23 18:29:27 . 66B28BE3DD3BDBD020B4317AD7051427 . 919552 . . [8.00.6001.23192 (longhorn_ie8_ldr.110617-1815)] . . C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll [7] 2011-04-25 16:06:11 . 42F5E14E33D79C236680468B1E4999F4 . 916480 . . [8.00.6001.19072 (longhorn_ie8_gdr.110420-1700)] . . C:\WINDOWS\ie8updates\KB2559049-IE8\wininet.dll [7] 2011-04-25 16:04:06 . E996F26337B0DEA2650CEAD393C15B82 . 919552 . . [8.00.6001.23165 (longhorn_ie8_ldr.110420-1800)] . . C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll [7] 2011-02-22 23:25:24 . 8B466303E57E69AC1F82849006BADAAD . 919552 . . [8.00.6001.23139 (longhorn_ie8_ldr.110211-1800)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll [7] 2011-02-22 23:05:48 . 77C66BD5CED4E555919A5FB713322CDD . 916480 . . [8.00.6001.19044 (longhorn_ie8_gdr.110211-1700)] . . C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll [7] 2010-12-20 23:53:04 . AF4EAA3B35A2D206E1902D7CA61B958A . 916480 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll [7] 2010-12-20 23:52:01 . 2F0037D24E82840EF1D47B635B37301A . 919552 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll [7] 2010-11-06 00:25:05 . 59EED8A2D9A36A824834E0CFDB403A71 . 919552 . . [8.00.6001.23084 (longhorn_ie8_ldr.101015-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll [7] 2010-11-06 00:21:45 . 85DCE8DAFD2AC492AFACC528161611BB . 916480 . . [8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll [7] 2010-09-10 05:50:18 . A7E08F8C451076D4234AEB380693E45A . 916480 . . [8.00.6001.18968 (longhorn_ie8_gdr.100824-1830)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll [7] 2010-09-10 05:47:27 . 73F26DB9C92C7A8259B534451E3B18F9 . 919552 . . [8.00.6001.23060 (longhorn_ie8_ldr.100824-1900)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll [7] 2010-06-24 12:28:32 . 9BB4D31E5EF3BA1FBA3ECBECD85B3360 . 919040 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll [7] 2010-06-24 12:25:24 . A91B0454DF71BDF4906EAB2D098A30EC . 916480 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll [7] 2010-05-06 10:33:44 . B98E84E2CD3EE25D6D41936352E93112 . 916480 . . [8.00.6001.18923 (longhorn_ie8_gdr.100419-1241)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll [7] 2010-05-06 10:27:42 . C906F4EA76E7BEC9255776E626086B95 . 919040 . . [8.00.6001.23014 (longhorn_ie8_ldr.100419-1507)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll [7] 2010-02-25 06:17:37 . 3897DB69B7ABF09C00406A249F8088D8 . 916480 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll [7] 2010-02-25 06:11:51 . B667625B38B5EA389044F90BDE80C4FD . 919040 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll [7] 2009-12-21 19:07:01 . A8D4AB4ECD850013612E2B6F96EF2394 . 916480 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll [7] 2009-12-21 19:01:32 . 413508B6F20DAA22074E3E1558850447 . 916480 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll [7] 2009-10-29 07:42:33 . AB28712FEB7BE2A52A9ABFA0FF94C1B6 . 916480 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll [7] 2009-10-29 07:37:06 . F461ACD33F06BF1FB28FFF1EF345FE63 . 916480 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll [7] 2009-08-29 07:56:53 . 4CFF479B02819293167F42940B5EF12B . 916480 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll [7] 2009-08-29 07:51:08 . 39E483C39E0EED381977EC1121ADD2BF . 916480 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll [7] 2009-07-03 17:01:30 . B0249F1B9F68E55CB7D2656339D13323 . 915456 . . [8.00.6001.22896 (longhorn_ie8_ldr.090702-0100)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll [7] 2009-07-03 17:01:30 . B0249F1B9F68E55CB7D2656339D13323 . 915456 . . [8.00.6001.22896 (longhorn_ie8_ldr.090702-0100)] . . C:\WINDOWS\SoftwareDistribution\Download\bd9c0ba4365eb1bda025a0659531108c\SP3QFE\wininet.dll [7] 2009-07-03 16:57:51 . 995E2754D7FB0203A45351A1376836ED . 915456 . . [8.00.6001.18806 (longhorn_ie8_gdr.090701-1700)] . . C:\WINDOWS\ie8updates\KB974455-IE8\wininet.dll [7] 2009-07-03 16:57:51 . 995E2754D7FB0203A45351A1376836ED . 915456 . . [8.00.6001.18806 (longhorn_ie8_gdr.090701-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\bd9c0ba4365eb1bda025a0659531108c\SP3GDR\wininet.dll [7] 2009-06-29 16:13:40 . 71333B8101B10CDEC4D58D949C97D3BA . 828928 . . [7.00.6000.21073 (vista_ldr.090625-2339)] . . C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll [7] 2009-06-29 15:57:48 . 9620CC3780D7279A48D3556860813587 . 827392 . . [7.00.6000.16876 (vista_gdr.090625-2339)] . . C:\WINDOWS\ie8\wininet.dll [7] 2009-04-29 04:45:44 . 08EFECB3F17F38F23F14148D374ACBC9 . 827392 . . [7.00.6000.16850 (vista_gdr.090423-0018)] . . C:\WINDOWS\ie7updates\KB972260-IE7\wininet.dll [7] 2009-04-29 04:37:45 . 754097815B575A721AB58B1C55476805 . 828928 . . [7.00.6000.21045 (vista_ldr.090423-0018)] . . C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll [7] 2009-03-08 02:34:58 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB972260-IE8\wininet.dll [7] 2009-03-03 00:15:54 . 39F71B559A97ED722F939A0EA7235323 . 828416 . . [7.00.6000.21020 (vista_ldr.090226-1506)] . . C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll [7] 2009-03-03 00:13:06 . 68A2567FDD62AE7E31D8A885C5173EF9 . 826368 . . [7.00.6000.16827 (vista_gdr.090226-1506)] . . C:\WINDOWS\ie7updates\KB969897-IE7\wininet.dll [7] 2008-12-20 23:47:36 . 4E192082A5FCE9EF19198A24CDEA3442 . 827904 . . [7.00.6000.20978 (vista_ldr.081217-1620)] . . C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll [7] 2008-12-20 22:47:04 . 0551C946E305CEE0A79BA744DC141BFC . 826368 . . [7.00.6000.16791 (vista_gdr.081217-1620)] . . C:\WINDOWS\ie7updates\KB963027-IE7\wininet.dll [7] 2008-10-16 20:18:43 . CFBFA47415E85018E2CDC509E5E3D011 . 826368 . . [7.00.6000.16762 (vista_gdr.081013-1507)] . . C:\WINDOWS\ie7updates\KB961260-IE7\wininet.dll [7] 2008-10-16 19:33:22 . 37D1A1BFE3D9904F2C3D11592456F9C0 . 827904 . . [7.00.6000.20935 (vista_ldr.081013-1507)] . . C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll [7] 2008-08-26 09:10:29 . 4B0E70D44297877A313045BD059770E1 . 827904 . . [7.00.6000.20900 (vista_ldr.080820-1506)] . . C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll [7] 2008-08-26 08:11:54 . E30CACD98479B36A3DBFA3267BF62DD0 . 826368 . . [7.00.6000.16735 (vista_gdr.080820-1506)] . . C:\WINDOWS\ie7updates\KB958215-IE7\wininet.dll [7] 2008-06-23 16:28:23 . AC0BD61DC2C64906FBFE50E005FEFA2C . 826368 . . [7.00.6000.16705 (vista_gdr.080618-1506)] . . C:\WINDOWS\ie7updates\KB956390-IE7\wininet.dll [7] 2008-06-23 15:40:08 . 52589BAE67DD9859724287372668690B . 827904 . . [7.00.6000.20861 (vista_ldr.080618-1506)] . . C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll [7] 2008-04-23 07:19:27 . 78D3D2B0BE6AD3E6D82CCB115CF74310 . 827392 . . [7.00.6000.20815 (vista_ldr.080415-1732)] . . C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll [7] 2008-04-23 04:16:40 . 02D6AABD5F5A32C61478B5CDFE50E4A8 . 826368 . . [7.00.6000.16674 (vista_gdr.080415-1732)] . . C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll [7] 2008-04-14 02:33:48 . 4A6E04EA20F48D750D9BFED8600D516B . 670208 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\wininet.dll [7] 2008-03-01 12:58:11 . 8E027981DDFFA690D456FE18B37415A0 . 826368 . . [7.00.6000.16640 (vista_gdr.080213-1606)] . . C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll [7] 2008-03-01 12:34:33 . 5A0093F59B505C008ED0CEE615563C72 . 827392 . . [7.00.6000.20772 (vista_ldr.080213-1606)] . . C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll [7] 2007-12-07 02:08:34 . 4FC90BECE54FAC81B0090B94E27BFB6B . 824832 . . [7.00.6000.16608 (vista_gdr.071204-1500)] . . C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll [7] 2007-12-07 01:42:22 . F4FD487241D3AC291046A22CEBD2CF71 . 825344 . . [7.00.6000.20733 (vista_ldr.071204-1500)] . . C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll [7] 2007-10-10 23:49:45 . BC5119C53BDD48DABC628D448A3BDCCB . 824832 . . [7.00.6000.16574 (vista_gdr.071008-1500)] . . C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll [7] 2007-10-10 23:22:19 . 871AE10D6AE8877E9636AE5017953D52 . 825344 . . [7.00.6000.20696 (vista_ldr.071008-1500)] . . C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll [7] 2007-08-20 09:59:31 . F6DFCEED3A7AA4C9EEB966D3F1ADC70A . 824832 . . [7.00.6000.16544 (vista_gdr.070814-1500)] . . C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll [7] 2007-08-20 09:49:28 . 2DD1B0F579C80562EDCB8848FF7EA9F6 . 825344 . . [7.00.6000.20661 (vista_ldr.070814-1500)] . . C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll [7] 2007-06-27 14:14:09 . 7201D19B81883B57D5FFE8EBB5A83E8B . 824320 . . [7.00.6000.20627 (vista_ldr.070625-1522)] . . C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE\wininet.dll [7] 2007-06-27 13:24:19 . 2274862267D7445E7010D9AF826E89C3 . 823808 . . [7.00.6000.16512 (vista_gdr.070625-1522)] . . C:\WINDOWS\ie7updates\KB939653-IE7\wininet.dll [7] 2007-04-25 08:26:36 . 47DDAD237F60729DEA2B9E0E2382B58F . 823808 . . [7.00.6000.20583 (vista_ldr.070420-1500)] . . C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll [7] 2007-04-25 07:40:25 . 2C138AB59E2FFA06E8952AE656E443C5 . 822784 . . [7.00.6000.16473 (vista_gdr.070420-1500)] . . C:\WINDOWS\ie7updates\KB937143-IE7\wininet.dll [7] 2007-03-23 09:29:39 . 375B58A68A016546535A84060092325C . 823296 . . [7.00.6000.20544 (vista_ldr.070223-1505)] . . C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE\wininet.dll [7] 2007-02-27 13:26:24 . 75DE73E328E300CAED5965FAEA2F5D3F . 822784 . . [7.00.6000.16441 (vista_gdr.070219-1500)] . . C:\WINDOWS\ie7updates\KB933566-IE7\wininet.dll [7] 2007-01-12 08:27:42 . BE43D00D802C92F01C8CC952C6F483F8 . 822784 . . [7.00.6000.16414 (vista_gdr.070108-1520)] . . C:\WINDOWS\ie7updates\KB931768-IE7\wininet.dll [7] 2006-11-07 20:03:36 . 92995334F993E6E49C25C6D02EC04401 . 818688 . . [7.00.5730.11 (winmain(wmbla).061017-1135)] . . C:\WINDOWS\ie7updates\KB928090-IE7\wininet.dll [-] 2006-10-23 15:34:38 . EFA0C2870CBA1747809A13E09F35BF82 . 668672 . . [6.00.2900.3020 (xpsp.061023-0222)] . . C:\WINDOWS\ie7\wininet.dll [-] 2006-09-14 08:38:07 . B8B6F05885A6F42724E8D6BFEDE6BD3F . 668672 . . [6.00.2900.2995 (xpsp.060913-0019)] . . C:\WINDOWS\$NtUninstallKB925454$\wininet.dll [-] 2006-06-23 11:25:42 . 582953780721AC5D38F98CAB229EC7B9 . 668672 . . [6.00.2900.2937 (xpsp.060623-0011)] . . C:\WINDOWS\$NtUninstallKB922760$\wininet.dll [-] 2006-05-10 05:26:50 . 44FCC339191ADB8892520DFA473C455F . 667648 . . [6.00.2900.2904 (xpsp.060509-0230)] . . C:\WINDOWS\$NtUninstallKB918899$\wininet.dll [-] 2006-03-04 04:00:31 . 241DBC4C2714B2F39AFDED49459ED420 . 667648 . . [6.00.2900.2861 (xpsp.060303-1528)] . . C:\WINDOWS\$NtUninstallKB916281$\wininet.dll [-] 2005-10-21 03:41:05 . E41E8FDF62CF20F2E2B16D800D96EB51 . 662528 . . [6.00.2900.2781 (xpsp_sp2_gdr.051020-1730)] . . C:\WINDOWS\$NtUninstallKB912812$\wininet.dll [-] 2005-10-21 03:39:19 . D327378CEEF9A141C7352691FC30A0DA . 665600 . . [6.00.2900.2781 (xpsp.051020-1728)] . . C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\wininet.dll [-] 2005-09-03 00:08:21 . 031CA1310E4CB23E5A4F747D763D0B49 . 664576 . . [6.00.2900.2753 (xpsp.050902-1331)] . . C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\wininet.dll [-] 2005-09-03 00:06:12 . A2DD7EC3AC1EAD13F65E2898FCABBD1A . 662528 . . [6.00.2900.2753 (xpsp_sp2_gdr.050902-1326)] . . C:\WINDOWS\$NtUninstallKB905915$\wininet.dll [7] 2008-04-14 02:33:49 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll [7] 2008-04-14 02:33:49 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2_32.dll [7] 2004-08-05 12:00:00 . BC41F51A39D3B255805FDB759B7814AE . 82944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll [7] 2008-04-14 02:33:49 . 36A608BF354FCC64AD6C0F2B5E2B8806 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2help.dll [7] 2008-04-14 02:33:49 . 36A608BF354FCC64AD6C0F2B5E2B8806 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2help.dll [7] 2004-08-05 12:00:00 . CB99D66483437E06286D4401A151D4E4 . 19968 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll [7] 2008-04-14 02:34:03 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\explorer.exe [7] 2008-04-14 02:34:03 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\explorer.exe [-] 2007-06-13 13:22:28 . D0288319660EDCFED07C7E74C4EA38A5 . 1037312 . . [6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] . . C:\WINDOWS\$NtServicePackUninstall$\explorer.exe [-] 2007-06-13 13:10:53 . B795475444D6D57A572C14B9E1A29839 . 1037312 . . [6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)] . . C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe [7] 2004-08-05 12:00:00 . 4C33E5B9A6197B6ED215F6CFBA0A2DAA . 1036288 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB938828$\explorer.exe [7] 2008-04-14 02:34:19 . ADF88D0996A634B5B13EE8FB9595647D . 153088 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\regedit.exe [7] 2008-04-14 02:34:19 . ADF88D0996A634B5B13EE8FB9595647D . 153088 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regedit.exe [7] 2004-08-05 12:00:00 . 47D9746DB5064D95DFB0E4D88A10C540 . 153088 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\regedit.exe [7] 2011-11-01 16:07:16 . C329366E0388493DD0003FF28D1B7EA6 . 1288192 . . [5.1.2600.6168 (xpsp_sp3_gdr.111101-1829)] . . C:\WINDOWS\system32\ole32.dll [7] 2011-11-01 16:07:16 . C329366E0388493DD0003FF28D1B7EA6 . 1288192 . . [5.1.2600.6168 (xpsp_sp3_gdr.111101-1829)] . . C:\WINDOWS\system32\dllcache\ole32.dll [7] 2011-11-01 16:05:44 . 614B59EE3C816F5957CE6F48658CA47F . 1288704 . . [5.1.2600.6168 (xpsp_sp3_qfe.111101-1828)] . . C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll [7] 2010-07-16 12:06:19 . A867E538CFD78CB10B3EEF2495C10F00 . 1287680 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll [7] 2010-07-16 12:04:22 . 210E7ADFEFA2879115612E5C02D410D6 . 1288704 . . [5.1.2600.6010 (xpsp_sp3_qfe.100712-1633)] . . C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll [7] 2008-04-14 02:33:38 . 9245FAF86A8235D5290A23C010DABD43 . 1287168 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\$NtUninstallKB979687$\ole32.dll [7] 2008-04-14 02:33:38 . 9245FAF86A8235D5290A23C010DABD43 . 1287168 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\ole32.dll [-] 2005-07-26 04:40:00 . 1C43C758C54C768250107F4C5D7CA054 . 1284608 . . [5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] . . C:\WINDOWS\$NtServicePackUninstall$\ole32.dll [-] 2005-07-26 04:29:37 . EED987351DDEB1B8AE7892A9AAEFF453 . 1285632 . . [5.1.2600.2726 (xpsp.050725-1531)] . . C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll [-] 2005-04-28 19:36:10 . A3063BE774D14B14ECC358D468821015 . 1286144 . . [5.1.2600.2665 (xpsp.050427-1553)] . . C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll [-] 2005-04-28 19:32:30 . 7DB31F7A40BDC4DFA9EF416676168403 . 1284608 . . [5.1.2600.2665 (xpsp_sp2_gdr.050427-1553)] . . C:\WINDOWS\$NtUninstallKB902400$\ole32.dll [7] 2004-08-05 12:00:00 . A2AD7FCB806A2035F506664883F45B32 . 1281024 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB894391$\ole32.dll [7] 2010-04-16 15:38:01 . E441C6889101BEEB1237855D0683C763 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\usp10.dll [7] 2010-04-16 15:38:01 . E441C6889101BEEB1237855D0683C763 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\dllcache\usp10.dll [7] 2010-04-16 15:30:42 . A044F43EACDB453AE6DA308DE9BBD51E . 406016 . . [1.0420.2600.5969 (xpsp_sp3_qfe.100416-1736)] . . C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll [7] 2008-04-14 02:33:48 . 8B9167A0A9E18E22F31FB4EE2563019A . 406016 . . [1.0420.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB981322$\usp10.dll [7] 2008-04-14 02:33:48 . 8B9167A0A9E18E22F31FB4EE2563019A . 406016 . . [1.0420.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\usp10.dll [7] 2004-08-05 12:00:00 . A879230B5B7CC091EAA3680EBBA262CE . 406528 . . [1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\usp10.dll [7] 2008-04-14 02:33:28 . C8B7941F9824E9F4D3D7B9B9BAE14FEE . 4096 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\ksuser.dll [7] 2008-04-14 02:33:28 . C8B7941F9824E9F4D3D7B9B9BAE14FEE . 4096 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\ksuser.dll [7] 2004-08-04 00:54:30 . 30648B4925A6797C05B364F64C3FB86A . 4096 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll [7] 2004-08-04 00:54:30 . 30648B4925A6797C05B364F64C3FB86A . 4096 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\ksuser.dll [7] 2004-08-04 00:54:30 . 30648B4925A6797C05B364F64C3FB86A . 4096 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\i386\ksuser.dll [7] 2008-04-14 02:33:59 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe [7] 2008-04-14 02:33:59 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\ctfmon.exe [7] 2004-08-05 12:00:00 . 5584247B568C2E53934873F4B655FE6A . 15360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe [7] 2009-07-27 23:17:34 . 1B8542F338CDD86929A084A455837158 . 135680 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\shsvcs.dll [7] 2009-07-27 23:17:34 . 1B8542F338CDD86929A084A455837158 . 135680 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\dllcache\shsvcs.dll [7] 2009-07-27 22:14:00 . 988DD1BCDD050B56F28DFCD16BF26C1B . 135680 . . [6.00.2900.5853 (xpsp_sp3_qfe.090727-1747)] . . C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll [7] 2008-04-14 02:33:41 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll [7] 2008-04-14 02:33:41 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll [-] 2006-12-19 21:49:47 . D7DFBD1EFA149EC158363B974DAE0C6B . 135168 . . [6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)] . . C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll [-] 2006-12-19 21:48:29 . 1839CDF416A5AA8BF2EFE377F57452CC . 135680 . . [6.00.2900.3051 (xpsp_sp2_qfe.061219-0311)] . . C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll [7] 2004-08-05 12:00:00 . B590E69A45AE8FCBF7DDADE89CCE3588 . 135168 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB928255$\shsvcs.dll [7] 2008-04-14 02:33:46 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll [7] 2008-04-14 02:33:46 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll [7] 2004-08-05 12:00:00 . 6469C53F4D16FA6055CCA265BC03DB66 . 171008 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll [7] 2008-04-14 02:34:29 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe [7] 2008-04-14 02:34:29 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\wscntfy.exe [7] 2004-08-05 12:00:00 . 54CDDAD404557ED98433D6ECBFC92691 . 13824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe [7] 2008-04-14 02:33:52 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll [7] 2008-04-14 02:33:52 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\xmlprov.dll [7] 2004-08-05 12:00:00 . 21056AEF44322C3E2DD5391B6AEFA75A . 129536 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll [7] 2008-04-14 02:33:24 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [7] 2008-04-14 02:33:24 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\eventlog.dll [7] 2004-08-05 12:00:00 . 21E83876A6287F15538EF187D286FE11 . 55808 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll [7] 2008-04-14 02:33:41 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll [7] 2008-04-14 02:33:41 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfcfiles.dll [7] 2004-08-05 12:00:00 . ACF04FB3448D2C2CD3A851C138EC8AB6 . 1548288 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll [7] 2008-04-13 19:19:42 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ipsec.sys [7] 2008-04-13 19:19:42 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ipsec.sys [7] 2004-08-05 12:00:00 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys [7] 2008-04-14 02:33:39 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regsvc.dll [7] 2008-04-14 02:33:39 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\regsvc.dll [7] 2004-08-05 12:00:00 . 345D02087F5696749C6120359B1E2988 . 59904 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll [7] 2008-04-14 02:33:40 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll [7] 2008-04-14 02:33:40 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\schedsvc.dll [7] 2004-08-05 12:00:00 . 4612EC6DAF695B87A2529FCBB95B75DE . 193024 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll [7] 2008-04-14 02:33:46 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll [7] 2008-04-14 02:33:46 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ssdpsrv.dll [7] 2004-08-05 12:00:00 . B636478A2569AE69CAF003254022A742 . 71680 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll [7] 2008-04-14 02:33:46 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\termsrv.dll [7] 2008-04-14 02:33:46 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\termsrv.dll [7] 2004-08-05 12:00:00 . 7D521B8CF926459E270D18C559323815 . 297984 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll [7] 2008-04-14 02:33:26 . E62B0BE3FC855066C872F5B50A6BCD1B . 347136 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll [7] 2008-04-14 02:33:26 . E62B0BE3FC855066C872F5B50A6BCD1B . 347136 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\hnetcfg.dll [7] 2004-08-05 12:00:00 . 9D39911675347318C17C68B2EA30CF2F . 347648 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll [7] 2004-08-05 12:00:00 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\drivers\acpiec.sys [7] 2008-04-13 16:39:23 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\ServicePackFiles\i386\aec.sys [7] 2008-04-13 16:39:23 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\drivers\aec.sys [-] 2006-02-15 00:30:07 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys [-] 2006-02-15 00:22:26 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . C:\WINDOWS\$NtServicePackUninstall$\aec.sys [7] 2004-08-03 22:39:38 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . C:\WINDOWS\$NtUninstallKB900485$\aec.sys [7] 2008-04-13 18:36:38 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\agp440.sys [7] 2008-04-13 18:36:38 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\agp440.sys [7] 2004-08-03 23:07:42 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\agp440.sys [7] 2008-04-13 18:53:34 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys [7] 2008-04-13 18:53:34 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ip6fw.sys [7] 2004-08-05 12:00:00 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys [7] 2010-09-18 07:18:37 . C27D0CD76C1982F36387F2E4F67E64A9 . 953856 . . [4.1.6151] . . C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll [7] 2010-09-18 06:53:24 . 8699BC5CF7FDE1292E7F9B56DD043D82 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\mfc40u.dll [7] 2010-09-18 06:53:24 . 8699BC5CF7FDE1292E7F9B56DD043D82 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\dllcache\mfc40u.dll [7] 2008-04-14 02:33:28 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll [7] 2008-04-14 02:33:28 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll [-] 2006-11-01 19:18:42 . FCD58951B3B2392007E0EE34D2CF944F . 927504 . . [4.1.0.61] . . C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll [-] 2004-08-05 12:00:00 . E1A34560BF6CE7C703BB67EC4FA70F43 . 924432 . . [4.1.6140] . . C:\WINDOWS\$NtUninstallKB924667$\mfc40u.dll [7] 2008-04-14 02:33:31 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll [7] 2008-04-14 02:33:31 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\msgsvc.dll [7] 2004-08-05 12:00:00 . 97939358ED4487CBB4A0D743CE958266 . 33792 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll [7] 2006-10-18 19:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll [7] 2006-10-18 19:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\dllcache\mspmsnsv.dll [7] 2004-08-11 01:45:04 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll [7] 2004-08-11 01:45:04 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll [7] 2004-08-05 12:00:00 . 762B2A5F0E8B0164A5DB6741959DFB0C . 52736 . . [9.0.1.56] . . C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll [7] 2012-05-05 03:15:01 . B28D9282B9042D4DCB6E4D97E56A5B30 . 2071168 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe [7] 2012-05-05 03:15:01 . B28D9282B9042D4DCB6E4D97E56A5B30 . 2071168 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\system32\dllcache\ntkrnlpa.exe [7] 2012-05-05 03:14:59 . AFF45120CA47BB6AA2619736A1B6D882 . 2028544 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\system32\ntkrnlpa.exe [7] 2012-05-05 03:14:13 . 5D1D102915882A497B89FB10984054DC . 2071168 . . [5.1.2600.6223 (xpsp_sp3_qfe.120504-1617)] . . C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe [7] 2012-04-11 13:51:44 . 211D3D262154F2B27BE17A15CE923368 . 2028544 . . [5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)] . . C:\WINDOWS\$NtUninstallKB2707511$\ntkrnlpa.exe [7] 2012-04-11 13:50:46 . 16DFD7BE5DCF3A203ED07E01200BD6B4 . 2071168 . . [5.1.2600.6206 (xpsp_sp3_qfe.120411-1615)] . . C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe [7] 2011-10-26 10:50:05 . 46E83E95657EDE55E17FD1094E1CCCCF . 2029056 . . [5.1.2600.6165 (xpsp_sp3_gdr.111025-1629)] . . C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe [7] 2011-10-26 10:49:20 . 63471E457082F415738F7F89ACB8FB4F . 2071424 . . [5.1.2600.6165 (xpsp_sp3_qfe.111025-1623)] . . C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe [7] 2010-12-09 19:45:06 . D27A5053A37FB85E8525F998CDC4DE19 . 2071424 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe [7] 2010-12-09 15:14:12 . C605031908817F723D0E779632DC763E . 2029056 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\$NtUninstallKB2633171$\ntkrnlpa.exe [7] 2010-04-28 21:17:44 . 4CC0777912FCF5EEDD6FB6ACBFCF75D8 . 2068992 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe [7] 2010-04-28 05:43:43 . E207E2A630F3A0B7901577B2141E89D5 . 2026496 . . [5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)] . . C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe [7] 2010-02-16 19:06:56 . D124950F1EF5EEEC0EEE02CD73FB6482 . 2026496 . . [5.1.2600.5938 (xpsp_sp3_gdr.100216-1514)] . . C:\WINDOWS\$NtUninstallKB981852$\ntkrnlpa.exe [7] 2010-02-16 19:00:44 . 6CB7C9A8C7103FEA51B0D478128CEFC0 . 2068992 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe [7] 2009-12-09 14:32:16 . 875EB5E5C8A6B3A2297D87029A880D23 . 2068224 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe [7] 2009-12-09 10:08:57 . 17DDA45C41C0E764899A8B1D49475EFE . 2025984 . . [5.1.2600.5913 (xpsp_sp3_gdr.091208-2036)] . . C:\WINDOWS\$NtUninstallKB979683$\ntkrnlpa.exe [7] 2009-08-04 20:52:26 . FE0C9C9035E3FDC193255C646BAC2C3D . 2068224 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe [7] 2009-08-04 17:27:54 . 2F860A8515599DD28350662F8E3AA0CA . 2025984 . . [5.1.2600.5857 (xpsp_sp3_gdr.090804-1435)] . . C:\WINDOWS\$NtUninstallKB977165$\ntkrnlpa.exe [7] 2009-02-10 17:06:30 . F751E041E682F53EAF34F7FAEA78994D . 2068096 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe [7] 2009-02-09 11:42:37 . B7E5994E1A974A55EB9F25AC91736D8A . 2022912 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe [7] 2009-02-09 11:23:57 . C9E530E1258352CC8689173AEFD3A3CF . 2025984 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$NtUninstallKB971486$\ntkrnlpa.exe [7] 2009-02-09 11:17:00 . ED5E20AE4AC5A63A4FF43FFE704A5153 . 2068224 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe [7] 2008-08-14 17:26:00 . 755B50949D0DBC0F0136B0DB58765331 . 2068096 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe [7] 2008-08-14 13:39:03 . 2D1A003D7FAB4741A3D0D388C21E2C69 . 2022912 . . [5.1.2600.3427 (xpsp_sp2_qfe.080814-1242)] . . C:\WINDOWS\$NtUninstallKB956572_0$\ntkrnlpa.exe [7] 2008-08-14 13:23:49 . 8DA71F1900721E1E4FCB5B02D55FB771 . 2068096 . . [5.1.2600.5657 (xpsp_sp3_gdr.080814-1236)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe [7] 2008-04-14 02:07:35 . 92E82482CDB39929CF7B541A9648AFAE . 2025984 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe [7] 2008-04-14 02:07:26 . B71A8F101CEFAF82FC5EC16130A54A3F . 2067968 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe [-] 2007-02-28 16:08:11 . 3E3DF9F5D56B719F055E7D652E79F96B . 2019328 . . [5.1.2600.3093 (xpsp_sp2_qfe.070227-2300)] . . C:\WINDOWS\$NtUninstallKB956841_0$\ntkrnlpa.exe [-] 2006-12-19 18:45:14 . C46168890982D41FB8ACCDBAC8E0A56C . 2019328 . . [5.1.2600.3051 (xpsp_sp2_qfe.061219-0311)] . . C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe [-] 2005-06-23 03:34:52 . 6B1F0A5A41646C87894D18A4D618F422 . 2017792 . . [5.1.2600.2705 (xpsp.050622-1524)] . . C:\WINDOWS\$NtUninstallKB929338$\ntkrnlpa.exe [-] 2005-03-02 18:13:12 . 5311776074B6C13F983DC75BAEAC9C0C . 2059008 . . [5.1.2600.2622 (xpsp.050301-1521)] . . C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe [7] 2008-04-14 02:33:36 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll [7] 2008-04-14 02:33:36 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . C:\WINDOWS\system32\ntmssvc.dll [7] 2004-08-05 12:00:00 . 3F82A4226289510DF300813B9B87F0E5 . 438272 . . [5.1.2400.2180] . . C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll [7] 2008-04-14 02:33:48 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\upnphost.dll [7] 2008-04-14 02:33:48 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\upnphost.dll [-] 2007-02-05 20:20:56 . 385DB2591BF11955F26E0A97728B1B31 . 185344 . . [5.1.2600.3077 (xpsp_sp2_qfe.070205-0007)] . . C:\WINDOWS\$hf_mig$\KB931261\SP2QFE\upnphost.dll [-] 2007-02-05 20:19:06 . 96B3C690ED82E36E04C130F916E3AE91 . 185344 . . [5.1.2600.3077 (xpsp_sp2_gdr.070204-2255)] . . C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll [7] 2004-08-05 12:00:00 . 168AE9938F6BE31D198AF92496CCFA33 . 185344 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB931261$\upnphost.dll [7] 2008-04-14 02:33:23 . 4BB396EA6CAA50F2208078602549F2F2 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\dsound.dll [7] 2008-04-14 02:33:23 . 4BB396EA6CAA50F2208078602549F2F2 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dsound.dll [7] 2004-08-05 12:00:00 . 0AE00CA307264649EE2F5FC1CB1B0F1F . 367616 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\dsound.dll [7] 2008-04-14 02:33:22 . 7EAEC24B85DD04EDAA04A51CB07DF870 . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\d3d9.dll [7] 2008-04-14 02:33:22 . 7EAEC24B85DD04EDAA04A51CB07DF870 . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\d3d9.dll [7] 2004-08-05 12:00:00 . EA9F86E5892D85E282311C53083903DC . 1689088 . . [5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll [7] 2008-04-14 02:33:22 . 75BD925DAB6E5323EDB6D5CFCDEB16D1 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\ddraw.dll [7] 2008-04-14 02:33:22 . 75BD925DAB6E5323EDB6D5CFCDEB16D1 . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\ddraw.dll [7] 2004-08-05 12:00:00 . 20A4E9DA85A1FF521AC5325FC3BADDF9 . 266240 . . [5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll [7] 2008-04-14 02:33:38 . 3BA21BD333A1B8B222006E5464D44F49 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\ServicePackFiles\i386\olepro32.dll [7] 2008-04-14 02:33:38 . 3BA21BD333A1B8B222006E5464D44F49 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\olepro32.dll [7] 2004-08-05 12:00:00 . 5860F5A42B67EC8BBB5AA3CE7ABC9976 . 83456 . . [5.1.2600.2180] . . C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll [7] 2008-04-14 02:33:38 . 08592889A219F7A60F9865B0EE7CAFF8 . 42496 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll [7] 2008-04-14 02:33:38 . 08592889A219F7A60F9865B0EE7CAFF8 . 42496 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\perfctrs.dll [7] 2004-08-05 12:00:00 . 719682744477D57B30248F4479EE8D0D . 42496 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll [7] 2008-04-14 02:33:48 . A71A42AD584FAD1A8D1EC5D807C6E528 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\version.dll [7] 2008-04-14 02:33:48 . A71A42AD584FAD1A8D1EC5D807C6E528 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\version.dll [7] 2004-08-05 12:00:00 . 8B142E6DAC3BD370637E8AF6E87C2321 . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\version.dll [7] 2009-06-29 08:35:10 . 3CFC56F73D494FC1AA2B6E981DF15ACD . 634632 . . [7.00.6000.16876 (vista_gdr.090625-2339)] . . C:\WINDOWS\ie8\iexplore.exe [7] 2009-06-29 07:25:31 . 02E2754D3E566C11A4934825920C47DD . 634632 . . [7.00.6000.21073 (vista_ldr.090625-2339)] . . C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\iexplore.exe [7] 2009-04-25 05:27:50 . 092A7F2B49A19ECCE5369D3CB2276148 . 636088 . . [7.00.6000.16850 (vista_gdr.090423-0018)] . . C:\WINDOWS\ie7updates\KB972260-IE7\iexplore.exe [7] 2009-04-25 05:27:39 . C0503FD8D163652735C1EE900672A75C . 636088 . . [7.00.6000.21045 (vista_ldr.090423-0018)] . . C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\iexplore.exe [7] 2009-03-08 12:09:26 . B60DDDD2D63CE41CB8C487FCFBB6419E . 638816 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\system32\dllcache\iexplore.exe [7] 2009-02-28 04:54:44 . BCD8E48709BE4A79606F0B6E8E9A6162 . 636088 . . [7.00.6000.21020 (vista_ldr.090226-1506)] . . C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\iexplore.exe [7] 2009-02-28 04:54:41 . A251068640DDB69FD7805B57D89D7FF7 . 636072 . . [7.00.6000.16827 (vista_gdr.090226-1506)] . . C:\WINDOWS\ie7updates\KB969897-IE7\iexplore.exe [7] 2008-12-19 05:25:30 . 15E8A89499741D5CF59A9CF6463A4339 . 634024 . . [7.00.6000.20978 (vista_ldr.081217-1620)] . . C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe [7] 2008-12-19 05:25:25 . 030D78FE84A086ED376EFCBD2D72C522 . 634024 . . [7.00.6000.16791 (vista_gdr.081217-1620)] . . C:\WINDOWS\ie7updates\KB963027-IE7\iexplore.exe [7] 2008-10-15 07:06:26 . 9D3DB9ADFABD2F0BC778EC03250A3ABB . 633632 . . [7.00.6000.16762 (vista_gdr.081013-1507)] . . C:\WINDOWS\ie7updates\KB961260-IE7\iexplore.exe [7] 2008-10-15 06:34:58 . 056C927CF7207857E8B34F7A8FFD9B9E . 633632 . . [7.00.6000.20935 (vista_ldr.081013-1507)] . . C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe [7] 2008-08-23 05:56:16 . E8305C30D35E85D6657ED3E9934CB302 . 635848 . . [7.00.6000.20900 (vista_ldr.080820-1506)] . . C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe [7] 2008-08-23 05:56:15 . 1F03216084447F990AE797317D0A6E70 . 635848 . . [7.00.6000.16735 (vista_gdr.080820-1506)] . . C:\WINDOWS\ie7updates\KB958215-IE7\iexplore.exe [7] 2008-06-23 09:21:49 . 64E376A47763DAEABCDA14BD5B6EA286 . 625664 . . [7.00.6000.16705 (vista_gdr.080618-1506)] . . C:\WINDOWS\ie7updates\KB956390-IE7\iexplore.exe [7] 2008-06-23 08:23:52 . C52A9EF571E91535EB78DB4B8B95EA07 . 625664 . . [7.00.6000.20861 (vista_ldr.080618-1506)] . . C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe [7] 2008-04-22 08:02:46 . 197B7E4030CFBD8D2979D375E1787AA2 . 625664 . . [7.00.6000.20815 (vista_ldr.080415-1732)] . . C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe [7] 2008-04-22 07:41:30 . 232B22817B90AE0AFF2D189E3E3735AC . 625664 . . [7.00.6000.16674 (vista_gdr.080415-1732)] . . C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe [7] 2008-04-14 02:34:06 . 3D3C316BD1E112F3B9C532D8B9939BDC . 93184 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\iexplore.exe [7] 2008-02-29 08:57:05 . 2D0E5592AB5A46C27DAF7CCAFF4F5B59 . 625664 . . [7.00.6000.16640 (vista_gdr.080213-1606)] . . C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe [7] 2008-02-22 09:40:22 . 6E0888626E0CAC79F57149814E22DB4D . 625664 . . [7.00.6000.20772 (vista_ldr.080213-1606)] . . C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe [7] 2007-12-06 11:03:16 . 2703D940A62B731AA220529DD7331A78 . 625664 . . [7.00.6000.16608 (vista_gdr.071204-1500)] . . C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe [7] 2007-12-06 08:34:45 . 809D17D8FA0FDAEE07778CD821CAFFDE . 625664 . . [7.00.6000.20733 (vista_ldr.071204-1500)] . . C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe [7] 2007-10-10 11:00:59 . E854D02E4231F704D9BE782A424E6D8B . 625152 . . [7.00.6000.16574 (vista_gdr.071008-1500)] . . C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe [7] 2007-10-10 08:16:56 . 632BDE0179847234433CA50945442ACB . 625664 . . [7.00.6000.20696 (vista_ldr.071008-1500)] . . C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe [7] 2007-08-17 10:22:32 . 3AC2BC667DA0AF2C968E96E1630F5AB5 . 625152 . . [7.00.6000.16544 (vista_gdr.070814-1500)] . . C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe [7] 2007-08-17 10:13:39 . 5577D0E3AC2F9F035ACD81B44AF5F511 . 625152 . . [7.00.6000.20661 (vista_ldr.070814-1500)] . . C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\iexplore.exe [7] 2007-06-27 09:16:52 . BD8502DFD53FC24FB8D6929DC46B8C2C . 625152 . . [7.00.6000.20627 (vista_ldr.070625-1522)] . . C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE\iexplore.exe [7] 2007-06-27 08:28:24 . 275CEE268B9E5D82474C43D5D249D111 . 625152 . . [7.00.6000.16512 (vista_gdr.070625-1522)] . . C:\WINDOWS\ie7updates\KB939653-IE7\iexplore.exe [7] 2007-04-24 14:20:41 . 9B3516C1F30DA17ADD3818573047D63C . 625152 . . [7.00.6000.20583 (vista_ldr.070420-1500)] . . C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\iexplore.exe [7] 2007-04-24 10:00:47 . 10BDB55982586A432A3951EB19A26009 . 625152 . . [7.00.6000.16473 (vista_gdr.070420-1500)] . . C:\WINDOWS\ie7updates\KB937143-IE7\iexplore.exe [7] 2007-03-08 04:36:37 . D321092F8529CDAE843D6E24E3CAC6CB . 625152 . . [7.00.6000.20544 (vista_ldr.070223-1505)] . . C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE\iexplore.exe [7] 2007-02-21 08:00:58 . 683DDE71BCF03B501B912D20CB93B549 . 623616 . . [7.00.6000.16441 (vista_gdr.070219-1500)] . . C:\WINDOWS\ie7updates\KB933566-IE7\iexplore.exe [7] 2007-01-08 17:08:42 . 93A6A4F5293AE19E3B37021AABCF0902 . 623616 . . [7.00.6000.16414 (vista_gdr.070108-1520)] . . C:\WINDOWS\ie7updates\KB931768-IE7\iexplore.exe [7] 2006-10-17 11:04:40 . 5334D4461AA92A7B008755FE6D13C5F2 . 622080 . . [7.00.5730.11 (winmain(wmbla).061017-1135)] . . C:\WINDOWS\ie7updates\KB928090-IE7\iexplore.exe [7] 2004-08-05 12:00:00 . 833E2B3F0E2484C0F2B804AE871B4381 . 93184 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\ie7\iexplore.exe [7] 2012-05-05 03:15:01 . 3D657C37117D6CE5B89A7942B3BDBE8F . 2194688 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe [7] 2012-05-05 03:15:01 . 3D657C37117D6CE5B89A7942B3BDBE8F . 2194688 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\system32\dllcache\ntoskrnl.exe [7] 2012-05-05 03:15:00 . BE38DF03C39AAF7F2339A822D0B6C6BA . 2150400 . . [5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)] . . C:\WINDOWS\system32\ntoskrnl.exe [7] 2012-05-05 03:14:12 . 4905B4A5F06D8F763A03DD66DA6C3683 . 2194688 . . [5.1.2600.6223 (xpsp_sp3_qfe.120504-1617)] . . C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe [7] 2012-04-11 13:51:40 . 5454C077A8A5FFBB62DB4287B7BD97BD . 2150400 . . [5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)] . . C:\WINDOWS\$NtUninstallKB2707511$\ntoskrnl.exe [7] 2012-04-11 13:50:46 . 87699B2568FF945306864A0FE9E96915 . 2194688 . . [5.1.2600.6206 (xpsp_sp3_qfe.120411-1615)] . . C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe [7] 2011-10-26 10:50:05 . 42C8A327ADF3B7C86DBCD57DDB8DA661 . 2150912 . . [5.1.2600.6165 (xpsp_sp3_gdr.111025-1629)] . . C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe [7] 2011-10-26 10:49:20 . F19BB8B35EB140558EDDB3CCA9241DF9 . 2194816 . . [5.1.2600.6165 (xpsp_sp3_qfe.111025-1623)] . . C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe [7] 2010-12-09 15:15:06 . 360612511AA332B8D3AB295ACA0192CD . 2194816 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe [7] 2010-12-09 15:14:10 . E8DE6CA43363B663645AE4639F2F41D6 . 2150912 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\$NtUninstallKB2633171$\ntoskrnl.exe [7] 2010-04-28 05:43:45 . B8A3B91AD2A266B6F53F0606503DEB2E . 2148352 . . [5.1.2600.5973 (xpsp_sp3_gdr.100427-1636)] . . C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe [7] 2010-04-28 05:17:40 . 220EFAF0106119F4A7CA598076EE14E6 . 2192128 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe [7] 2010-02-16 19:06:59 . 51534F39EEA63F0CD321C248D26514CF . 2148352 . . [5.1.2600.5938 (xpsp_sp3_gdr.100216-1514)] . . C:\WINDOWS\$NtUninstallKB981852$\ntoskrnl.exe [7] 2010-02-16 19:00:44 . 126C8FD13731649A7CD6F0A311CD49B8 . 2192128 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe [7] 2009-12-09 14:32:16 . 9EC870EAB7D08695E59579C7AAC3B23D . 2191360 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe [7] 2009-12-09 10:08:59 . 9A1F766DA1B7822AF822F13BE0D7DC8B . 2147328 . . [5.1.2600.5913 (xpsp_sp3_gdr.091208-2036)] . . C:\WINDOWS\$NtUninstallKB979683$\ntoskrnl.exe [7] 2009-08-04 17:27:57 . 4D22F47A3066B420A0F4612FC4E5A55F . 2147328 . . [5.1.2600.5857 (xpsp_sp3_gdr.090804-1435)] . . C:\WINDOWS\$NtUninstallKB977165$\ntoskrnl.exe [7] 2009-08-04 17:22:24 . 63864AF70CAC631077A6C1223617336B . 2191360 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe [7] 2009-02-10 17:16:44 . BEF458B8424553279E95E250D1E0CE7E . 2191232 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe [7] 2009-02-09 11:42:32 . A1FF4DE51A704E4E5E1DD9BEFCCB4C31 . 2144768 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe [7] 2009-02-09 11:24:03 . AB896577F35CF5FED7A9F87D3C3205ED . 2191104 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe [7] 2009-02-09 11:23:51 . 907C6FCD8D5FB812D74C204060911EA6 . 2147328 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe [7] 2008-08-14 17:26:02 . D79210549BBF09B7638E860440504299 . 2191232 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe [7] 2008-08-14 13:39:07 . B853AD3E9A1604596126D3BEFE0CC52A . 2144768 . . [5.1.2600.3427 (xpsp_sp2_qfe.080814-1242)] . . C:\WINDOWS\$NtUninstallKB956572_0$\ntoskrnl.exe [7] 2008-08-14 13:23:49 . C8D4D5974F9671DA0A37175650912960 . 2191232 . . [5.1.2600.5657 (xpsp_sp3_gdr.080814-1236)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe [7] 2008-04-14 02:08:03 . 099D639DA1EF6968D4E41795BB507E6B . 2191104 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe [7] 2008-04-14 02:07:16 . B10C36956EB7A8B1586DBE3B43875280 . 2147328 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe [-] 2007-02-28 16:08:15 . DE41F3B43B9F15E08CCD4B98A7BB2CA3 . 2139648 . . [5.1.2600.3093 (xpsp_sp2_qfe.070227-2300)] . . C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe [-] 2006-12-19 18:45:17 . D9F5291648962A1733F8D3E59DA47BEE . 2139648 . . [5.1.2600.3051 (xpsp_sp2_qfe.061219-0311)] . . C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe [-] 2005-06-23 03:34:44 . FEC4B999F434BDBC9C8B304D29A2A19C . 2138112 . . [5.1.2600.2705 (xpsp.050622-1524)] . . C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe [-] 2005-03-02 18:13:23 . 3E2A0A4A0C0B19FC113618A9562A3B2A . 2181632 . . [5.1.2600.2622 (xpsp.050301-1521)] . . C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe [7] 2008-04-14 02:33:46 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll [7] 2008-04-14 02:33:46 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll [7] 2004-08-05 12:00:00 . 6469C53F4D16FA6055CCA265BC03DB66 . 171008 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll [7] 2008-04-14 02:33:48 . C1F726EE0B043B074A68992BC4AEF8FD . 178176 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\w32time.dll [7] 2008-04-14 02:33:48 . C1F726EE0B043B074A68992BC4AEF8FD . 178176 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\w32time.dll [7] 2004-08-05 12:00:00 . FB89C8B1D6A3C260A39669320C5D5827 . 177664 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\w32time.dll [7] 2008-04-14 02:33:48 . D76B0E8A4ECAD1ADCC75FD14A7ACC54C . 334336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll [7] 2008-04-14 02:33:48 . D76B0E8A4ECAD1ADCC75FD14A7ACC54C . 334336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\wiaservc.dll [-] 2006-12-19 18:48:57 . A3FFA6A33BAAB25849FBE10392B3D9AD . 334336 . . [5.1.2600.3051 (xpsp_sp2_qfe.061219-0311)] . . C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll [-] 2006-12-19 18:17:50 . FE705FAE1E50436B06D7558D6A4E247E . 334336 . . [5.1.2600.3051 (xpsp_sp2_gdr.061219-0316)] . . C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll [7] 2004-08-05 12:00:00 . 52B7EC594152429DABA1261B2B68CA01 . 333824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB927802$\wiaservc.dll [7] 2008-04-14 02:33:29 . 5D469FE7D63CF5215AF80CFA37BE6897 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\midimap.dll [7] 2008-04-14 02:33:29 . 5D469FE7D63CF5215AF80CFA37BE6897 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\midimap.dll [7] 2004-08-05 12:00:00 . 5A9D6D36574FD4BBA06973B772DD7C7D . 18944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\midimap.dll [7] 2008-04-14 02:33:39 . E17BBF14DBE41CAB571BBD244F97C25F . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll [7] 2008-04-14 02:33:39 . E17BBF14DBE41CAB571BBD244F97C25F . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\rasadhlp.dll [-] 2006-06-26 17:47:08 . 38E8C06699352BD2EE9C3FA188650B68 . 7680 . . [5.1.2600.2938 (xpsp.060626-0041)] . . C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll [-] 2006-06-26 17:41:32 . 8371B4298101DA53BBE7AA3759299F49 . 8192 . . [5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] . . C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll [7] 2004-08-05 12:00:00 . DE86B64A569ECB73891BCE6B7D4D078B . 8192 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB920683$\rasadhlp.dll [7] 2008-04-14 02:33:50 . 395609BFE5A0D88DFCD93BE5AA35B46A . 19456 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\wshtcpip.dll [7] 2008-04-14 02:33:50 . 395609BFE5A0D88DFCD93BE5AA35B46A . 19456 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\wshtcpip.dll [7] 2004-08-05 12:00:00 . BFBE4AF0836AAEF0C182273735160989 . 19968 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtServicePackUninstall$\wshtcpip.dll ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}"= "C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll" [2012-01-12 04:44:56 1517368] [HKEY_CLASSES_ROOT\clsid\{81017ea9-9aa8-4a6a-9734-7af40e7d593f}] [HKEY_CLASSES_ROOT\yt.YTNavAssistPlugin.1] [HKEY_CLASSES_ROOT\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}] [HKEY_CLASSES_ROOT\yt.YTNavAssistPlugin] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2011-07-27 20:41:00 1493160 ----a-w- C:\Program Files\Ask.com\GenericAskToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "C:\Program Files\Ask.com\GenericAskToolbar.dll" [2011-07-27 20:41:00 1493160] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "C:\Program Files\Ask.com\GenericAskToolbar.dll" [2011-07-27 20:41:00 1493160] [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-19 19:35:30 39408] "AutoStartNPSAgent"="C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2011-01-19 14:32:25 102400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SigmatelSysTrayApp"="stsystra.exe" [2005-03-23 00:20:44 339968] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05:00 344064] "DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 16:19:56 53248] "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-06-10 10:44:02 81920] "DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-09-08 05:20:00 122940] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2010-09-08 09:17:42 421888] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2010-09-24 01:10:52 421160] "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2011-01-12 10:21:34 49208] "ApnUpdater"="C:\Program Files\Ask.com\Updater\Updater.exe" [2011-07-27 20:41:08 397992] "SunJavaUpdateSched"="C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe" [2012-01-18 12:02:04 254696] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 01:57:22 40368] "Adobe ARM"="C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 19:59:06 937920] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 02:33:59 15360] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\ Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-1-17 24576] HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt] 2010-08-17 12:38:55 281768 ----a-w- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "Apple Mobile Device"=2 (0x2) "AntiVirWebService"=2 (0x2) "AntiVirService"=2 (0x2) "AntiVirSchedulerService"=2 (0x2) "ALG"=3 (0x3) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [19/01/2011 16:20:30 233472] R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [19/01/2011 16:20:30 36608] S1 flashsmt;rege memory mapper;C:\WINDOWS\system32\flashsmt.sys [26/10/2007 09:15:35 0] S2 gupdate1ca08a828062620;Service Google Update (gupdate1ca08a828062620);C:\Program Files\Google\Update\GoogleUpdate.exe [19/07/2009 21:36:04 133104] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\WINDOWS\system32\drivers\ssudbus.sys [18/10/2011 02:43:42 78136] S3 gupdatem;Service Google Update (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [19/07/2009 21:36:04 133104] S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [28/04/2012 19:41:11 113120] S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\WINDOWS\system32\drivers\ss_bbus.sys [19/01/2011 16:20:54 90112] S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\WINDOWS\system32\drivers\ss_bmdfl.sys [19/01/2011 16:20:54 14976] S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\WINDOWS\system32\drivers\ss_bmdm.sys [19/01/2011 16:20:54 121856] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\WINDOWS\system32\drivers\ssudmdm.sys [18/10/2011 02:43:42 181432] S4 AntiVirSchedulerService;Avira AntiVir Planificateur;C:\Program Files\Avira\AntiVir Desktop\sched.exe [19/09/2009 10:42:30 136360] S4 AntiVirWebService;Avira AntiVir WebGuard;C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe [30/08/2011 19:41:01 428200] --- Autres Services/Pilotes en mémoire --- *NewlyCreated* - FSUSBEXDISK [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc Contenu du dossier 'Tâches planifiées' 2012-08-13 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34:12 . 2008-07-30 10:34:12] 2012-08-12 C:\WINDOWS\Tasks\Google Software Updater.job - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-08-16 09:25:40 . 2011-09-14 19:21:24] 2012-08-16 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19 19:36:04 . 2009-07-19 19:35:59] 2012-08-16 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-19 19:36:04 . 2009-07-19 19:35:59] 2006-01-24 C:\WINDOWS\Tasks\Rappel d'abonnement 1 auprès de l'ISP.job - C:\WINDOWS\system32\OOBE\oobebaln.exe [2004-08-20 10:35:27 . 2008-04-14 02:34:17] 2012-08-16 C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job - C:\Program Files\Ask.com\UpdateTask.exe [2011-07-27 20:41:04 . 2011-07-27 20:41:04] ------- Examen supplémentaire ------- uStart Page = hxxp://www.wanadoo.fr uDefault_Search_URL = hxxp://www.google.com/ie uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - C:\WINDOWS\system32\GPhotos.scr/200 IE: Compare Prices with &Dealio - C:\Documents and Settings\laurent\Application Data\Dealio\kb127\res\DealioSearch.html LSP: C:\Program Files\Avira\AntiVir Desktop\avsda.dll Trusted Zone: internet Trusted Zone: mcafee.com TCP: DhcpNameServer = 212.27.40.240 212.27.40.241 FF - ProfilePath - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\2tl6yat1.default\ - - - - ORPHELINS SUPPRIMES - - - - URLSearchHooks-{E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) HKCU-Run-WengoPhoneNG - C:\Program Files\WengoPhone\qtwengophone.exe HKCU-Run-Picasa Media Detector - C:\Program Files\Picasa2\PicasaMediaDetector.exe HKLM-Run-DMXLauncher - C:\Program Files\Dell\Media Experience\DMXLauncher.exe HKLM-Run-RealTray - C:\Program Files\Real\RealPlayer\RealPlay.exe HKLM-Run-adiras - adiras.exe HKLM-Run-SearchSettings - C:\Program Files\Search Settings\SearchSettings.exe HKLM-Run-LogitechQuickCamRibbon - C:\Program Files\Logitech\QuickCam10\QuickCam10.exe HKLM-Run-LVCOMSX - C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe HKLM-Run-LogitechCommunicationsManager - C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe HKLM-Run-NPSStartup - (no file) HKU-Default-RunOnce-^SetupICWDesktop - (no file) AddRemove-HijackThis - C:\DOCUME~1\laurent\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe AddRemove-ShockwaveFlash - C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -
ATRAPS.Gen2 [sujet planté, héberger rapport]
Mathilde P a posté un sujet dans Analyses et éradication malwares
Bonjour, Notre ordinateur est infecté par le Virus ATTRAPS.gen2 puis par 2 autres virus BDS/zAccess.V et Obfuscate.XQ.87 j'ai lu le sujet sur le forum mais il est dit qu'il faut un "agent de sécurité". J'hésite à lancer combo fox sans votre avis, ci-joint mon rappoert hijackthis Merci d'avance pour votre aide Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:54:18, on 16/08/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\stsystra.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Ask.com\Updater\Updater.exe C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\FsUsbExService.Exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\vssvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\dllhost.exe C:\Documents and Settings\laurent\Mes documents\Téléchargements\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = My Way R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Orange : téléphones, forfaits, Internet, actualité, sport, video R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Actualité, Sport, People, Femmes - MSN France R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [adiras] adiras.exe O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe" O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [WengoPhoneNG] C:\Program Files\WengoPhone\qtwengophone.exe -b O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-21-3849915246-2849429501-2028247820-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?') O4 - HKUS\S-1-5-21-3849915246-2849429501-2028247820-1006\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?') O4 - HKUS\S-1-5-21-3849915246-2849429501-2028247820-1006\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?') O4 - HKUS\S-1-5-21-3849915246-2849429501-2028247820-1006\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (User '?') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?') O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] (User '?') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] (User 'Default user') O4 - S-1-5-21-3849915246-2849429501-2028247820-1006 Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe (User '?') O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\laurent\Application Data\Dealio\kb127\res\DealioSearch.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://*.mcafee.com O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/fr/4,0,0,90/mcinsctl.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/fr/1,0,0,23/mcgdmgr.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: flashdma - flashdma.dll (file missing) O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe O23 - Service: Service Google Update (gupdate1ca08a828062620) (gupdate1ca08a828062620) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 16106 bytes