Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Bagle (2eme infections...)

scheuch

Par scheuch
dans Analyses et éradication malwares

 Partager

Messages recommandés

scheuch Member

scheuch

Posté(e)
Posté(e)

Bonjour

Je suis a nouveau sur le pc de mes parents qui est pour le seconde fois infecté par bagle,

Je résume la situation : mc afee a disparut de la barre des tache et je n'arrive plus a le lancer (symptome qui m'a rappelé bagle)

J'ai donc essayé de faire une passe avec Drweb CureIt (solution qui avait marché la dernière fois grace à l'aide d'Apollo) : ce dernier plante a chaque fois au bout de 5-10 minute...

J'ai également passé elibagla qui ne detecte rien..

Puis j'ai fais un scan en ligne avec kaspersky qui m'a detecté 91 element infecté et 15 virus (je crois) dont plusieurs win32.bagle.of et autre terminaisons je vous joins un rapport dans le prochain post.

 

Voila je ne sais plus quoi faire et je me permets de vous appeler au secours me souvenant de l'efficacité d'apollo la derniere fois je ne doutes pas que vous me trouverez la solution adequate.

 

merci d'avance

 

 

voici le rapport de kaspesky :

 

C:\Documents and Settings\Administrateur\Cookies\index.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012008112220081123\index.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\NTUSER.DAT L'objet est verrouillé ignoré

 

C:\Documents and Settings\Administrateur\NtUser.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp L'objet est verrouillé ignoré

 

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré

 

C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.zzn ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.zzn ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmp7E54.tmp NSIS: infecté - 2 ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.abaf ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.abaf ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpB4A5.tmp NSIS: infecté - 2 ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.aaff ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.aaff ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpBE77.tmp NSIS: infecté - 2 ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp/stream/data0002 Infecté : Trojan-Downloader.Win32.Zlob.zaz ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp/stream Infecté : Trojan-Downloader.Win32.Zlob.zaz ignoré

 

C:\Documents and Settings\Mireille\Local Settings\temp\tmpCB48.tmp NSIS: infecté - 2 ignoré

 

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\2WK5UK9V\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

 

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\GRELG5S6\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

 

C:\Documents and Settings\Mireille\Local Settings\Temporary Internet Files\Content.IE5\GRELG5S6\index[3].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

 

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré

 

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré

 

C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[5].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\6789A7UV\b64_3[6].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[4].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[5].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[6].jpg Infecté : Email-Worm.Win32.Bagle.vr ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_2[7].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[5].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[6].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[7].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\81B3DNOC\b64_3[8].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\ASE_Setup_Free_fr[1].exe Infecté : not-a-virus:FraudTool.Win32.Agent.cg ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[2].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[4].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_2[5].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\GHWS2LDN\b64_3[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[1].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[3].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64[4].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_2[1].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_2[3].jpg Infecté : Email-Worm.Win32.Bagle.majc ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\b64_3[2].jpg Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\Documents and Settings\Sylvain\Local Settings\Temporary Internet Files\Content.IE5\ZRABUME6\index[2].js Infecté : Trojan-Downloader.JS.Agent.cln ignoré

 

C:\Program Files\BitTorrent Fastest Tool\DWbrk03_0308.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe/stream/Script Infecté : Trojan-Downloader.NSIS.Agent.ax ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe/stream Infecté : Trojan-Downloader.NSIS.Agent.ax ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP40\A0008015.exe NSIS: infecté - 2 ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP80\A0021249.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP80\A0022249.exe Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027330.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027332.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027333.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027365.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP93\A0027402.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027642.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027643.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027644.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0027702.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028061.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028062.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028063.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028064.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028691.exe Infecté : not-a-virus:FraudTool.Win32.VirusRemover.k ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP94\A0028700.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028736.exe Infecté : Trojan-Downloader.Win32.Bagle.agb ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028911.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028912.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028913.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028917.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028918.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0028919.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP95\A0029933.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030326.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030327.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030328.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030329.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP96\A0030603.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031766.exe Infecté : Email-Worm.Win32.Bagle.of ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031767.sys Infecté : Trojan-Downloader.Win32.Bagle.afl ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031776.exe Infecté : Trojan-Downloader.Win32.Bagle.agb ignoré

 

C:\System Volume Information\_restore{EC5E7376-8FDB-4BBA-B893-839341FB7AA6}\RP97\A0031779.exe Infecté : not-a-virus:FraudTool.Win32.VirusRemover.k ignoré

 

C:\WINDOWS\CSC\00000001 L'objet est verrouillé ignoré

 

C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\ODiag.evt L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\OSession.evt L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\drivers\sptd3661.sys L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\g4.exe/stream/data0002 Infecté : Trojan-Clicker.Win32.Agent.cfq ignoré

 

C:\WINDOWS\system32\g4.exe/stream Infecté : Trojan-Clicker.Win32.Agent.cfq ignoré

 

C:\WINDOWS\system32\g4.exe NSIS: infecté - 2 ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré

 

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré

 

D:\Nouveau dossier (9)\setup.exe Infecté : Trojan-Downloader.Win32.Bagle.agh ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE/WISE0013.BIN Infecté : Trojan-Downloader.Win32.Agent.afyh ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE/WISE0016.BIN Infecté : not-a-virus:AdWare.Win32.Agent.bzo ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe/player_setup_CL_C2P_MS_DW_1911.EXE Infecté : not-a-virus:AdWare.Win32.Agent.bzo ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd2.exe ZIP: infecté - 3 ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd3.zip/setup.exe Infecté : Trojan-Downloader.Win32.Bagle.agh ignoré

 

D:\RECYCLER\S-1-5-21-1801674531-299502267-725345543-1003\Dd3.zip ZIP: infecté - 1 ignoré

 

D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

 

D:\System Volume Information\_restore{D651D4F3-45F8-4D1C-959F-7FDDA50705F1}\RP770\A0318806.exe Infecté : not-a-virus:FraudTool.Win32.Takedawnload.a ignoré

 

E:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Bonsoir, oublie EliBagla (et autres outils spéciaux) pour ça.

On va s'en occuper. :P

 

Le logiciel qui suit n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.

Ne pas utiliser en dehors de ce cas de figure : dangereux.

 

Attention à bien suivre ces instructions en détail, ne pas oublier de renommer combofix.exe AVANT qu'il ne soit téléchargé, quand on peut encore changer le nom du fichier et dire au navigateur où le télécharger.

 

Télécharge combofix.exe de sUBs et renomme-le combo-fix.exe avant de le sauvegarder sur ton bureau (et pas ailleurs).

  • Assure toi que tous les programmes sont fermés avant de commencer.
  • Double-clique combo-fix.exe afin de l'exécuter.
  • Clique sur "Oui" au message de Limitation de Garantie qui s'affiche.
  • Il est possible que ton parefeu te demande si tu acceptes ou non l'accès de nircmd.cfexe à la zone sûre: accepte.
  • Ne ferme pas la fenêtre qui vient de s'ouvrir, tu te retrouverais avec un bureau vide.
  • Lorsque l'analyse sera terminée, un rapport apparaîtra.
  • Copie-colle ce rapport dans ta prochaine réponse.
    Le rapport se trouve dans : C:\Combofix.txt (si jamais).

scheuch Member

scheuch

Posté(e)
  • Auteur
Posté(e)

Tout d'abord merci d'avoir répondu si vite

 

Ensuite les nouvelles sont mauvaises :

 

J'ai bien suivi ta procedure

J'ai bien cliqué sur ton lien

puis quand il a fallu choisir l'emplacement ou enregistre combofix je l'ai renommé Combo-Fix et mis sur le bureau

le téléchargement a eu lieu

puis je l'ai executé

une barre bleu a apparut et le msg suivant s'est affiché :

Vous ne pouvez pas renommer ComboFix en Combo-Fix

Veuillez choisir un autre nom, de préférence composé de caractère alphanumériques

 

(si je précise exactement le fait d'avoir suivi la procédure, c'est que la dernière fois cela avait fait la même chose et que cela était semble t'il tres surprenant)

 

voila ce qu'il en est

scheuch Member

scheuch

Posté(e)
  • Auteur
Posté(e)

Ok cette fois il se lance, il me propose de reinstaller la console de recup, j'ai accepté (pour info j'avais reussi a la retablir et suis en mode sans echec avec prise en charge reseau sur le pc en question)

je poste le rapport des qu'il a fini

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Il ne faut rien faire pendant que CF tuorne (voir procédure).

Ferme tout ça et laisse tourner.

 

Mode normal, c'était... mieux. Arf.

 

Poste le rapport quand il sera affiché, ça prend un moment.

Ne l'interromp pas.

scheuch Member

scheuch

Posté(e)
  • Auteur
Posté(e)

dsl pour le mode, mais cf m'a fait redémaré apres et now je suis en mode normal

 

voila le rapport

 

ComboFix 08-11-22.01 - Administrateur 2008-11-22 21:12:36.5 - NTFSx86 NETWORK

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.824 [GMT 1:00]

Lancé depuis: c:\documents and settings\Administrateur\Bureau\CF.exe

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert

c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert\AntiSpywareExpert.lnk

c:\documents and settings\All Users\Menu Démarrer\Programmes\AntiSpywareExpert\Uninstall AntiSpywareExpert.lnk

c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner

c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner\PCPrivacyCleaner.lnk

c:\documents and settings\All Users\Menu Démarrer\Programmes\PCPrivacyCleaner\Uninstall PCPrivacyCleaner.lnk

c:\documents and settings\Mireille\Menu Démarrer\Programmes\Démarrage\Deewoo.lnk

c:\documents and settings\Mireille\Menu Démarrer\Programmes\Démarrage\DW_Start.lnk

c:\documents and settings\Sylvain\Application Data\PCPrivacyCleaner

c:\documents and settings\Sylvain\Application Data\PCPrivacyCleaner\Logs\scns.log

C:\InfoSat.txt

c:\windows\bptswvdf.dll

c:\windows\clofghls.dll

c:\windows\IE4 Error Log.txt

c:\windows\qxdepnbs.dll

c:\windows\system32\Ati2evxx.dll

c:\windows\system32\drivers\srosa2.sys

c:\windows\system32\XwxHOnnn.ini

c:\windows\system32\XwxHOnnn.ini2

c:\windows\Tasks\flpdtunl.job

c:\windows\Tasks\sfyciggl.job

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_BOONTY_GAMES

-------\Legacy_SROSA

-------\Service_Boonty Games

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2008-10-22 au 2008-11-22 ))))))))))))))))))))))))))))))))))))

.

 

2008-11-22 17:03 . 2008-11-22 17:03 <REP> d-------- c:\program files\AxBx

2008-11-22 16:58 . 2008-11-22 16:58 <REP> d-------- c:\program files\Avira GmbH

2008-11-22 16:10 . 2008-11-22 16:10 <REP> d--h----- c:\windows\system32\GroupPolicy

2008-11-19 09:38 . 2008-11-19 09:38 <REP> d-------- c:\program files\McAfee.com

2008-11-19 09:37 . 2008-11-19 09:39 <REP> d-------- c:\program files\McAfee

2008-11-19 09:37 . 2008-11-19 09:38 <REP> d-------- c:\program files\Fichiers communs\McAfee

2008-11-18 20:27 . 2008-11-18 20:27 <REP> d-------- c:\documents and settings\Sylvain\Application Data\TmpRecentIcons

2008-11-18 20:27 . 2008-11-18 00:07 102,400 --a------ c:\windows\tskerxag.exe

2008-11-18 19:33 . 2008-11-19 09:49 <REP> d-------- c:\program files\GenoPro

2008-11-18 08:51 . 2008-11-18 08:51 119 --a------ C:\Delme.bat

2008-11-17 15:38 . 2008-11-18 08:50 12 --a------ c:\windows\WPOSTAL.INI

2008-11-17 15:38 . 2008-11-17 15:38 0 --a------ c:\windows\WD.INI

2008-11-17 15:37 . 2008-11-18 08:51 <REP> d-------- C:\WPOSTAL

2008-11-17 14:56 . 2008-11-17 14:56 <REP> d-------- C:\lccp

2008-11-17 12:22 . 2008-11-17 14:30 <REP> d-------- c:\program files\Codutil 59

2008-11-13 11:31 . 2008-11-13 12:14 <REP> d-------- c:\program files\Iminent

2008-11-04 15:18 . 2008-11-04 15:18 225 --a------ c:\windows\wininit.ini

2008-11-02 09:04 . 2008-11-02 09:04 <REP> d-------- C:\MWASPI

2008-11-02 09:04 . 1997-06-11 19:01 30,208 --------- c:\windows\system32\WNASPI32.DLL

2008-11-02 09:04 . 2000-03-29 17:11 8,096 --------- c:\windows\system32\drivers\MASPINT.SYS

2008-11-02 09:04 . 1999-10-22 17:58 4,030 --------- c:\windows\system\WINASPI.DLL

2008-11-02 09:04 . 1997-02-28 03:00 2,486 --------- c:\windows\system\AS16POST.BIN

2008-11-02 09:04 . 2008-11-02 09:04 291 --a------ c:\windows\msfsetup.ini

2008-11-02 08:49 . 2008-11-02 08:49 <REP> d-------- c:\program files\Sony Corporation

2008-11-02 08:25 . 2008-11-02 09:20 420 --a------ c:\windows\PCPHOTO.INI

2008-11-02 08:10 . 2008-11-02 08:10 <REP> d-------- c:\program files\PIXELA

2008-10-26 23:29 . 2008-11-14 13:31 <REP> d-------- c:\documents and settings\Sylvain\Application Data\dvdcss

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-11-22 15:58 --------- d--h--w c:\program files\InstallShield Installation Information

2008-11-21 16:45 --------- d-----w c:\program files\Jewel Quest

2008-11-20 11:14 --------- d-----w c:\program files\Dl_cats

2008-11-19 09:26 --------- d-----w c:\documents and settings\Sylvain\Application Data\WinButler

2008-11-19 08:53 --------- d-----w c:\program files\Malwarebytes' Anti-Malware

2008-11-19 08:04 --------- d-----w c:\documents and settings\All Users\Application Data\McAfee

2008-11-19 08:01 --------- d-----w c:\program files\Spybot - Search & Destroy

2008-11-19 08:01 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2008-11-18 16:38 --------- d-----w c:\program files\Code Postal

2008-11-18 10:50 --------- d-----w c:\program files\CDex_150

2008-11-12 23:11 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help

2008-11-12 18:36 --------- d-----w c:\documents and settings\Mireille\Application Data\AdobeUM

2008-11-07 08:00 --------- d-----w c:\documents and settings\LocalService\Application Data\SACore

2008-11-04 14:18 --------- d-----w c:\program files\Everest Poker

2008-11-03 19:54 --------- d-----w c:\program files\Web Hottest Videos Personal Player

2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys

2008-10-24 09:30 --------- d-----w c:\documents and settings\Sylvain\Application Data\AdobeUM

2008-10-22 15:10 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys

2008-10-22 15:10 15,504 ----a-w c:\windows\system32\drivers\mbam.sys

2008-10-22 07:47 --------- d-----w c:\program files\Abbyy FineReader 6.0 Sprint

2008-10-20 16:21 --------- d-----w c:\documents and settings\Sylvain\Application Data\DeepBurner

2008-10-20 16:11 --------- d-----w c:\program files\Astonsoft

2008-09-27 08:25 --------- d-----w c:\program files\Mario Forever

2008-09-26 08:40 --------- d-----w c:\program files\BufferZone

2008-09-01 21:50 45,056 ----a-w c:\windows\NCUNINST.EXE

2008-06-11 10:11 0 ----a-w c:\program files\temp01

2008-08-04 14:08 2 --shatr c:\windows\winstart.bat

.

 

((((((((((((((((((((((((((((( snapshot@2008-08-21_16.09.17.96 )))))))))))))))))))))))))))))))))))))))))

.

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB873339\update\update.exe

+ 2008-11-21 17:15:50 666,624 ----a-w c:\windows\$hf_mig$\KB873339\update\update.exe

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB885835\update\update.exe

+ 2008-11-21 17:15:51 666,624 ----a-w c:\windows\$hf_mig$\KB885835\update\update.exe

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB885836\update\update.exe

+ 2008-11-21 17:15:51 666,624 ----a-w c:\windows\$hf_mig$\KB885836\update\update.exe

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB886185\update\update.exe

+ 2008-11-21 17:15:52 666,624 ----a-w c:\windows\$hf_mig$\KB886185\update\update.exe

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB887472\update\update.exe

+ 2008-11-21 17:15:53 666,624 ----a-w c:\windows\$hf_mig$\KB887472\update\update.exe

- 2008-08-19 15:29:32 666,624 ----a-w c:\windows\$hf_mig$\KB888302\update\update.exe

+ 2008-11-21 17:15:54 666,624 ----a-w c:\windows\$hf_mig$\KB888302\update\update.exe

- 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe

+ 2008-11-21 17:15:55 730,336 ----a-w c:\windows\$hf_mig$\KB890046\update\update.exe

- 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB890859\update\update.exe

+ 2008-11-21 17:15:56 730,336 ----a-w c:\windows\$hf_mig$\KB890859\update\update.exe

- 2008-08-19 15:29:33 666,624 ----a-w c:\windows\$hf_mig$\KB891781\update\update.exe

+ 2008-11-21 17:15:57 666,624 ----a-w c:\windows\$hf_mig$\KB891781\update\update.exe

- 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB893756\update\update.exe

+ 2008-11-21 17:15:58 730,336 ----a-w c:\windows\$hf_mig$\KB893756\update\update.exe

- 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB894391\update\update.exe

+ 2008-11-21 17:15:59 730,336 ----a-w c:\windows\$hf_mig$\KB894391\update\update.exe

- 2008-08-19 15:29:33 730,336 ----a-w c:\windows\$hf_mig$\KB896358\update\update.exe

+ 2008-11-21 17:16:00 730,336 ----a-w c:\windows\$hf_mig$\KB896358\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB896423\update\update.exe

+ 2008-11-21 17:16:01 730,336 ----a-w c:\windows\$hf_mig$\KB896423\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB896428\update\update.exe

+ 2008-11-21 17:16:02 730,336 ----a-w c:\windows\$hf_mig$\KB896428\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB898461\update\update.exe

+ 2008-11-21 17:16:02 730,336 ----a-w c:\windows\$hf_mig$\KB898461\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB899587\update\update.exe

+ 2008-11-21 17:16:04 730,336 ----a-w c:\windows\$hf_mig$\KB899587\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB899591\update\update.exe

+ 2008-11-21 17:16:04 730,336 ----a-w c:\windows\$hf_mig$\KB899591\update\update.exe

- 2008-08-19 15:29:34 727,776 ----a-w c:\windows\$hf_mig$\KB900485\update\update.exe

+ 2008-11-21 17:16:05 727,776 ----a-w c:\windows\$hf_mig$\KB900485\update\update.exe

- 2008-08-19 15:29:34 730,336 ----a-w c:\windows\$hf_mig$\KB900725\update\update.exe

+ 2008-11-21 17:16:07 730,336 ----a-w c:\windows\$hf_mig$\KB900725\update\update.exe

- 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB901017\update\update.exe

+ 2008-11-21 17:16:08 730,336 ----a-w c:\windows\$hf_mig$\KB901017\update\update.exe

- 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB901214\update\update.exe

+ 2008-11-21 17:16:08 730,336 ----a-w c:\windows\$hf_mig$\KB901214\update\update.exe

- 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB902400\update\update.exe

+ 2008-11-21 17:16:10 730,336 ----a-w c:\windows\$hf_mig$\KB902400\update\update.exe

- 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB905414\update\update.exe

+ 2008-11-21 17:16:11 730,336 ----a-w c:\windows\$hf_mig$\KB905414\update\update.exe

- 2008-08-19 15:29:35 730,336 ----a-w c:\windows\$hf_mig$\KB905749\update\update.exe

+ 2008-11-21 17:16:12 730,336 ----a-w c:\windows\$hf_mig$\KB905749\update\update.exe

- 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB908519\update\update.exe

+ 2008-11-21 17:16:13 727,776 ----a-w c:\windows\$hf_mig$\KB908519\update\update.exe

- 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB908531\update\update.exe

+ 2008-11-21 17:16:14 727,776 ----a-w c:\windows\$hf_mig$\KB908531\update\update.exe

- 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB910437\update\update.exe

+ 2008-11-21 17:16:14 727,776 ----a-w c:\windows\$hf_mig$\KB910437\update\update.exe

- 2008-08-19 15:29:35 727,776 ----a-w c:\windows\$hf_mig$\KB911280\update\update.exe

+ 2008-11-21 17:16:15 727,776 ----a-w c:\windows\$hf_mig$\KB911280\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB911562\update\update.exe

+ 2008-11-21 17:16:16 727,776 ----a-w c:\windows\$hf_mig$\KB911562\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB911927\update\update.exe

+ 2008-11-21 17:16:17 727,776 ----a-w c:\windows\$hf_mig$\KB911927\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB913580\update\update.exe

+ 2008-11-21 17:16:18 727,776 ----a-w c:\windows\$hf_mig$\KB913580\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB914388\update\update.exe

+ 2008-11-21 17:16:19 727,776 ----a-w c:\windows\$hf_mig$\KB914388\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB914389\update\update.exe

+ 2008-11-21 17:16:20 727,776 ----a-w c:\windows\$hf_mig$\KB914389\update\update.exe

- 2008-08-19 15:29:36 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe

+ 2008-11-21 17:16:21 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB916595\update\update.exe

+ 2008-11-21 17:16:21 727,776 ----a-w c:\windows\$hf_mig$\KB916595\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB917344\update\update.exe

+ 2008-11-21 17:15:47 727,776 ----a-w c:\windows\$hf_mig$\KB917344\update\update.exe

- 2008-08-19 15:29:36 727,776 ----a-w c:\windows\$hf_mig$\KB918118\update\update.exe

+ 2008-11-21 17:16:22 727,776 ----a-w c:\windows\$hf_mig$\KB918118\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB918439\update\update.exe

+ 2008-11-21 17:16:23 727,776 ----a-w c:\windows\$hf_mig$\KB918439\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB919007\update\update.exe

+ 2008-11-21 17:16:24 727,776 ----a-w c:\windows\$hf_mig$\KB919007\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920213\update\update.exe

+ 2008-11-21 17:16:25 727,776 ----a-w c:\windows\$hf_mig$\KB920213\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920670\update\update.exe

+ 2008-11-21 17:16:26 727,776 ----a-w c:\windows\$hf_mig$\KB920670\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920683\update\update.exe

+ 2008-11-21 17:16:27 727,776 ----a-w c:\windows\$hf_mig$\KB920683\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920685\update\update.exe

+ 2008-11-21 17:16:28 727,776 ----a-w c:\windows\$hf_mig$\KB920685\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB920872\update\update.exe

+ 2008-11-21 17:16:29 727,776 ----a-w c:\windows\$hf_mig$\KB920872\update\update.exe

- 2008-08-19 15:29:37 727,776 ----a-w c:\windows\$hf_mig$\KB922582\update\update.exe

+ 2008-11-21 17:16:30 727,776 ----a-w c:\windows\$hf_mig$\KB922582\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB922819\update\update.exe

+ 2008-11-21 17:16:31 727,776 ----a-w c:\windows\$hf_mig$\KB922819\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB923414\update\update.exe

+ 2008-11-21 17:16:32 727,776 ----a-w c:\windows\$hf_mig$\KB923414\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB923980\update\update.exe

+ 2008-11-21 17:16:33 727,776 ----a-w c:\windows\$hf_mig$\KB923980\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB924270\update\update.exe

+ 2008-11-21 17:16:33 727,776 ----a-w c:\windows\$hf_mig$\KB924270\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB924496\update\update.exe

+ 2008-11-21 17:16:34 727,776 ----a-w c:\windows\$hf_mig$\KB924496\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB925902\update\update.exe

+ 2008-11-21 17:16:35 727,776 ----a-w c:\windows\$hf_mig$\KB925902\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB926255\update\update.exe

+ 2008-11-21 17:16:36 727,776 ----a-w c:\windows\$hf_mig$\KB926255\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB926436\update\update.exe

+ 2008-11-21 17:16:37 727,776 ----a-w c:\windows\$hf_mig$\KB926436\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB927779\update\update.exe

+ 2008-11-21 17:16:38 727,776 ----a-w c:\windows\$hf_mig$\KB927779\update\update.exe

- 2008-08-19 15:29:38 727,776 ----a-w c:\windows\$hf_mig$\KB927802\update\update.exe

+ 2008-11-21 17:16:39 727,776 ----a-w c:\windows\$hf_mig$\KB927802\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB927891\update\update.exe

+ 2008-11-21 17:16:40 727,776 ----a-w c:\windows\$hf_mig$\KB927891\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB928255\update\update.exe

+ 2008-11-21 17:16:41 727,776 ----a-w c:\windows\$hf_mig$\KB928255\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB928843\update\update.exe

+ 2008-11-21 17:16:42 727,776 ----a-w c:\windows\$hf_mig$\KB928843\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB929123\update\update.exe

+ 2008-11-21 17:16:43 727,776 ----a-w c:\windows\$hf_mig$\KB929123\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB930178\update\update.exe

+ 2008-11-21 17:16:44 727,776 ----a-w c:\windows\$hf_mig$\KB930178\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB930916\update\update.exe

+ 2008-11-21 17:16:45 727,776 ----a-w c:\windows\$hf_mig$\KB930916\update\update.exe

- 2008-08-19 15:29:39 727,776 ----a-w c:\windows\$hf_mig$\KB931261\update\update.exe

+ 2008-11-21 17:15:48 727,776 ----a-w c:\windows\$hf_mig$\KB931261\update\update.exe

- 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe

+ 2008-11-21 17:16:47 727,776 ----a-w c:\windows\$hf_mig$\KB931784\update\update.exe

- 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB932168\update\update.exe

+ 2008-11-21 17:16:47 727,776 ----a-w c:\windows\$hf_mig$\KB932168\update\update.exe

- 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe

+ 2008-11-21 17:16:48 727,776 ----a-w c:\windows\$hf_mig$\KB933729\update\update.exe

- 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB935839\update\update.exe

+ 2008-11-21 17:16:49 727,776 ----a-w c:\windows\$hf_mig$\KB935839\update\update.exe

- 2008-08-19 15:29:40 727,776 ----a-w c:\windows\$hf_mig$\KB935840\update\update.exe

+ 2008-11-21 17:16:50 727,776 ----a-w c:\windows\$hf_mig$\KB935840\update\update.exe

- 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB936021\update\update.exe

+ 2008-11-21 17:16:51 727,776 ----a-w c:\windows\$hf_mig$\KB936021\update\update.exe

- 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe

+ 2008-11-21 17:16:52 727,776 ----a-w c:\windows\$hf_mig$\KB937894\update\update.exe

- 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938127\update\update.exe

+ 2008-11-21 17:16:53 727,776 ----a-w c:\windows\$hf_mig$\KB938127\update\update.exe

+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll

+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe

+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll

+ 2008-11-21 17:16:54 767,352 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe

+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll

- 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938828\update\update.exe

+ 2008-11-21 17:16:55 727,776 ----a-w c:\windows\$hf_mig$\KB938828\update\update.exe

- 2008-08-19 15:29:41 727,776 ----a-w c:\windows\$hf_mig$\KB938829\update\update.exe

+ 2008-11-21 17:16:56 727,776 ----a-w c:\windows\$hf_mig$\KB938829\update\update.exe

- 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe

+ 2008-11-21 17:16:57 727,776 ----a-w c:\windows\$hf_mig$\KB941202\update\update.exe

- 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe

+ 2008-11-21 17:16:58 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe

- 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe

+ 2008-11-21 17:16:59 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe

- 2008-08-19 15:29:42 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe

+ 2008-11-21 17:17:00 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe

+ 2008-11-21 17:17:00 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe

+ 2008-11-21 17:17:02 727,776 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe

+ 2008-11-21 17:17:03 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe

+ 2008-11-21 17:17:04 727,776 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe

+ 2008-11-21 17:17:05 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe

+ 2008-11-21 17:15:49 727,776 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944533\update\update.exe

+ 2008-11-21 17:17:06 727,776 ----a-w c:\windows\$hf_mig$\KB944533\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe

+ 2008-11-21 17:17:07 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe

- 2008-08-19 15:29:43 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe

+ 2008-11-21 17:17:08 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe

- 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe

+ 2008-11-21 17:17:09 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe

- 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe

+ 2008-11-21 17:17:10 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe

- 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB947864\update\update.exe

+ 2008-11-21 17:17:12 727,776 ----a-w c:\windows\$hf_mig$\KB947864\update\update.exe

- 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe

+ 2008-11-21 17:17:13 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe

- 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe

+ 2008-11-21 17:17:14 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe

- 2008-08-19 15:29:44 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe

+ 2008-11-21 17:17:15 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe

- 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950759\update\update.exe

+ 2008-11-21 17:17:17 767,352 ----a-w c:\windows\$hf_mig$\KB950759\update\update.exe

- 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe

+ 2008-11-21 17:17:18 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe

- 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe

+ 2008-11-21 17:17:19 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe

- 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe

+ 2008-11-21 17:17:20 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe

- 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe

+ 2008-11-21 17:17:22 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe

- 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe

+ 2008-11-21 17:17:23 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe

- 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe

+ 2008-11-21 17:17:26 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe

- 2008-08-19 15:29:44 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe

+ 2008-11-21 17:17:24 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe

- 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe

+ 2008-11-21 17:17:27 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe

- 2008-08-19 15:29:45 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe

+ 2008-11-21 17:17:28 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe

- 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe

+ 2008-11-21 17:17:29 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe

- 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe

+ 2008-11-21 17:17:31 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe

- 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB953838\update\update.exe

+ 2008-11-21 17:17:33 767,352 ----a-w c:\windows\$hf_mig$\KB953838\update\update.exe

- 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe

+ 2008-11-21 17:17:34 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe

+ 2008-09-15 15:14:42 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP2QFE\win32k.sys

+ 2008-09-15 15:26:07 1,846,528 ----a-w c:\windows\$hf_mig$\KB954211\SP3GDR\win32k.sys

+ 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys

+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll

+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe

+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll

+ 2008-11-21 17:17:36 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe

+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll

+ 2008-08-20 05:33:47 1,024,512 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\browseui.dll

+ 2008-08-20 05:33:44 152,064 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\cdfview.dll

+ 2008-08-20 05:33:44 1,056,768 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\danim.dll

+ 2008-08-20 05:33:45 357,888 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\dxtmsft.dll

+ 2008-08-20 05:33:45 205,312 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\dxtrans.dll

+ 2008-08-20 05:33:45 55,808 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\extmgr.dll

+ 2008-08-19 09:38:57 18,432 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\iedw.exe

+ 2008-08-20 05:33:45 251,904 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\iepeers.dll

+ 2008-08-20 05:33:45 96,768 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\inseng.dll

+ 2008-08-20 05:33:46 16,384 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\jsproxy.dll

+ 2008-08-20 05:33:48 3,088,384 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mshtml.dll

+ 2008-08-20 05:33:46 449,024 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mshtmled.dll

+ 2008-08-20 05:33:45 146,432 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\msrating.dll

+ 2008-08-20 05:33:45 532,480 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\mstime.dll

+ 2008-08-20 05:33:45 39,424 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\pngfilt.dll

+ 2008-08-20 05:33:46 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\shdocvw.dll

+ 2008-08-20 05:33:46 474,624 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\shlwapi.dll

+ 2008-08-19 09:51:37 370,176 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\spru040c.dll

+ 2008-08-20 05:33:47 621,056 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\urlmon.dll

+ 2008-08-20 05:33:46 671,744 ----a-w c:\windows\$hf_mig$\KB956390\SP2QFE\wininet.dll

+ 2008-08-20 05:10:12 3,088,896 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\mshtml.dll

+ 2008-08-20 05:10:11 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\shdocvw.dll

+ 2008-08-20 05:10:11 620,544 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\urlmon.dll

+ 2008-08-20 05:10:11 670,208 ----a-w c:\windows\$hf_mig$\KB956390\SP3GDR\wininet.dll

+ 2008-08-20 05:07:31 3,088,896 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\mshtml.dll

+ 2008-08-20 05:07:27 1,499,648 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\shdocvw.dll

+ 2008-08-20 05:07:28 621,056 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\urlmon.dll

+ 2008-08-20 05:07:28 670,720 ----a-w c:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll

+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956390\spmsg.dll

+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956390\spuninst.exe

+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956390\update\spcustom.dll

+ 2008-11-21 17:17:40 767,352 ----a-w c:\windows\$hf_mig$\KB956390\update\update.exe

+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956390\update\updspapi.dll

+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll

+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe

+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll

+ 2008-11-21 17:17:41 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe

+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll

+ 2008-08-14 09:48:52 138,368 ----a-w c:\windows\$hf_mig$\KB956803\SP2QFE\afd.sys

+ 2008-08-14 10:04:36 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3GDR\afd.sys

+ 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys

+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll

+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe

+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll

+ 2008-11-21 17:17:42 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe

+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll

+ 2008-08-14 13:39:07 2,144,768 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlmp.exe

+ 2008-08-14 13:39:12 2,065,024 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe

+ 2008-08-14 13:39:03 2,022,912 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrpamp.exe

+ 2008-08-14 13:39:11 2,188,032 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe

+ 2008-08-14 13:23:44 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlmp.exe

+ 2008-08-14 13:23:49 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe

+ 2008-08-14 13:23:44 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrpamp.exe

+ 2008-08-14 13:23:49 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe

+ 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe

+ 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe

+ 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe

+ 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe

+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll

+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe

+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll

+ 2008-11-21 17:17:45 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe

+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll

+ 2008-08-28 10:35:33 333,056 ----a-w c:\windows\$hf_mig$\KB957095\SP2QFE\srv.sys

+ 2008-09-08 10:41:42 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3GDR\srv.sys

+ 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys

+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll

+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe

+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll

+ 2008-11-21 17:17:46 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe

+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll

+ 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe

+ 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll

+ 2007-07-27 06:28:58 234,872 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe

+ 2007-07-27 08:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll

+ 2006-10-18 20:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll

+ 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst.exe

+ 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi.dll

+ 2008-03-20 08:09:22 1,845,376 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys

+ 2008-06-23 15:39:58 1,024,000 -c----w c:\windows\$NtUninstallKB956390$\browseui.dll

+ 2008-06-23 15:39:58 152,064 -c----w c:\windows\$NtUninstallKB956390$\cdfview.dll

+ 2008-06-23 15:39:59 1,056,768 -c----w c:\windows\$NtUninstallKB956390$\danim.dll

+ 2008-06-23 15:40:00 357,888 -c----w c:\windows\$NtUninstallKB956390$\dxtmsft.dll

+ 2008-06-23 15:40:00 205,312 -c----w c:\windows\$NtUninstallKB956390$\dxtrans.dll

+ 2008-06-23 15:40:00 55,808 -c----w c:\windows\$NtUninstallKB956390$\extmgr.dll

+ 2008-06-23 09:49:29 18,432 -c----w c:\windows\$NtUninstallKB956390$\iedw.exe

+ 2008-06-23 15:40:00 251,392 -c----w c:\windows\$NtUninstallKB956390$\iepeers.dll

+ 2008-06-23 15:40:00 96,768 -c----w c:\windows\$NtUninstallKB956390$\inseng.dll

+ 2008-06-23 15:40:00 16,384 -c----w c:\windows\$NtUninstallKB956390$\jsproxy.dll

+ 2008-06-23 15:40:02 3,080,704 -c----w c:\windows\$NtUninstallKB956390$\mshtml.dll

+ 2008-06-23 15:40:03 449,024 -c----w c:\windows\$NtUninstallKB956390$\mshtmled.dll

+ 2008-06-23 15:40:03 146,432 -c----w c:\windows\$NtUninstallKB956390$\msrating.dll

+ 2008-06-23 15:40:04 532,480 -c----w c:\windows\$NtUninstallKB956390$\mstime.dll

+ 2008-06-23 15:40:04 39,424 -c----w c:\windows\$NtUninstallKB956390$\pngfilt.dll

+ 2008-06-23 15:40:05 1,495,040 -c----w c:\windows\$NtUninstallKB956390$\shdocvw.dll

+ 2008-06-23 15:40:06 474,624 -c----w c:\windows\$NtUninstallKB956390$\shlwapi.dll

+ 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956390$\spuninst\spuninst.exe

+ 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB956390$\spuninst\updspapi.dll

+ 2008-06-23 15:40:06 617,984 -c----w c:\windows\$NtUninstallKB956390$\urlmon.dll

+ 2008-06-23 15:40:08 663,552 -c----w c:\windows\$NtUninstallKB956390$\wininet.dll

+ 2008-07-03 09:42:35 370,176 -c----w c:\windows\$NtUninstallKB956390$\xpsp3res.dll

+ 2007-11-30 12:39:29 234,872 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst.exe

+ 2007-11-30 12:39:31 406,392 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi.dll

+ 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys

+ 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst.exe

+ 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi.dll

+ 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlmp.exe

+ 2007-02-28 16:02:36 2,059,648 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe

+ 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\$NtUninstallKB956841$\ntkrpamp.exe

+ 2007-02-28 16:02:36 2,182,400 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe

+ 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst.exe

+ 2008-07-09 07:40:35 406,392 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi.dll

+ 2007-11-30 11:19:06 234,872 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst.exe

+ 2007-11-30 11:19:10 406,392 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi.dll

+ 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys

+ 2008-09-03 16:02:58 7,680 ----a-w c:\windows\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2008-09-03 16:02:49 12,288 ----a-w c:\windows\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll

+ 2008-09-03 16:02:58 33,792 ----a-w c:\windows\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2008-09-03 16:10:30 8,192 ----a-w c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll

+ 2008-09-03 16:10:33 32,768 ----a-w c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll

+ 2008-09-03 16:02:58 4,608 ----a-w c:\windows\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2008-09-03 16:02:58 26,112 ----a-w c:\windows\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2008-09-03 16:10:44 720,896 ----a-w c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2008-09-03 16:02:48 28,672 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2008-09-03 16:10:33 299,008 ----a-w c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

+ 2008-09-03 16:02:50 6,144 ----a-w c:\windows\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll

+ 2008-09-03 16:02:48 11,264 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2008-09-03 16:02:48 32,768 ----a-w c:\windows\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

+ 2008-09-03 16:02:48 6,656 ----a-w c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

+ 2008-09-03 16:02:58 1,564,672 ----a-w c:\windows\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll

+ 2008-09-03 16:10:41 32,768 ----a-w c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll

+ 2008-09-03 16:02:58 77,824 ----a-w c:\windows\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2008-09-03 16:10:38 303,104 ----a-w c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll

+ 2008-09-03 16:10:41 1,294,336 ----a-w c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll

+ 2008-09-03 16:10:31 1,703,936 ----a-w c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll

+ 2008-09-03 16:10:43 90,112 ----a-w c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

+ 2008-09-03 16:02:59 65,536 ----a-w c:\windows\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

+ 2008-09-03 16:10:37 466,944 ----a-w c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2008-09-03 16:10:35 241,664 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2008-09-03 16:10:35 66,560 ----a-w c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll

+ 2008-09-03 16:10:40 372,736 ----a-w c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll

+ 2008-09-03 16:10:45 241,664 ----a-w c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2008-09-03 16:10:39 323,584 ----a-w c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll

+ 2008-09-03 16:10:36 131,072 ----a-w c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2008-09-03 16:10:37 77,824 ----a-w c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll

+ 2008-09-03 16:10:42 126,976 ----a-w c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

+ 2008-09-03 16:10:29 819,200 ----a-w c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

+ 2008-09-03 16:10:34 57,344 ----a-w c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

+ 2008-09-03 16:10:32 573,440 ----a-w c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2008-09-07 10:01:08 1,265,664 ----a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

+ 2008-09-03 16:10:36 2,052,096 ----a-w c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2008-09-03 16:10:39 1,339,392 ----a-w c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll

+ 2008-09-07 10:01:09 1,232,896 ----a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

+ 2008-11-13 10:27:28 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2008-11-13 10:27:39 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2008-11-13 10:27:40 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

+ 2008-11-13 10:27:40 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

+ 2008-11-13 10:27:35 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2008-11-13 10:27:23 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2008-11-13 10:27:23 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

+ 2008-11-13 10:27:48 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

+ 2008-11-13 10:27:31 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

+ 2008-11-13 10:27:27 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

+ 2008-11-13 10:27:22 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

+ 2008-11-13 10:27:24 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

+ 2008-11-13 10:27:37 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

+ 2008-11-13 10:27:38 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2008-11-13 10:27:38 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2008-11-13 10:27:25 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2008-11-13 10:27:26 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

+ 2008-11-13 10:27:26 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

+ 2008-11-13 10:27:27 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

+ 2008-11-13 10:27:25 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2008-11-13 10:27:51 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2008-11-13 10:27:50 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2008-11-13 10:27:20 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2008-11-13 10:27:49 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

+ 2008-11-13 10:27:52 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

+ 2008-11-13 10:27:22 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2008-11-13 10:27:21 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

+ 2008-11-13 10:27:21 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

+ 2008-11-13 10:27:44 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

+ 2008-11-13 10:27:29 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2008-11-13 10:27:45 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2008-11-13 10:27:41 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

+ 2008-11-13 10:27:23 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

+ 2008-11-13 10:27:36 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

+ 2008-11-13 10:27:30 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

+ 2008-11-13 10:27:29 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

+ 2008-11-13 10:27:30 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

+ 2008-11-13 10:27:46 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2008-11-13 10:27:42 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2008-11-13 10:27:47 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2008-11-13 10:27:42 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

+ 2008-11-13 10:27:43 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2008-11-13 10:27:28 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2008-11-13 10:27:31 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

+ 2008-11-13 10:27:48 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

+ 2008-11-13 10:27:32 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

+ 2008-11-13 10:27:33 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2008-11-13 10:27:33 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2008-11-13 10:27:34 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

+ 2008-11-13 10:27:45 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

+ 2008-11-13 10:33:05 26,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\7527619a8527124493b75df432f678ec\Accessibility.ni.dll

+ 2008-11-13 10:33:18 958,464 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\agsXMPP\f2a674f4971b8b408c721eb8bd534bb0\agsXMPP.ni.dll

+ 2008-11-13 10:47:44 860,160 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\0dcf76bf3805674ebba922446ff935e1\AspNetMMCExt.ni.dll

+ 2008-11-13 10:47:45 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\e91b028d4fc7274e94ad582424f54f6a\CustomMarshalers.ni.dll

+ 2008-11-13 10:47:44 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f3329b73547c844fa823b9334f2de5c9\dfsvc.ni.exe

+ 2008-11-13 10:32:00 671,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\IMBooster\9040ef9e3f314f439b826e0a8ac8e14e\IMBooster.ni.exe

+ 2008-11-13 10:33:23 561,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.AxImp\31fb71173182614db446f981891746fe\Iminent.AxImp.ni.dll

+ 2008-11-13 10:33:13 442,368 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Business\2a6747a25642164faa24cd08e73de851\Iminent.Business.ni.dll

+ 2008-11-13 10:33:22 2,760,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Services\a1d889f42123204ba2f0c005204250ee\Iminent.Services.ni.dll

+ 2008-11-13 10:32:05 888,832 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Windows\b97894f63b6d8041acc156de1402267e\Iminent.Windows.ni.dll

+ 2008-11-13 10:33:15 692,224 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Iminent.Workflow\59a24c3d364d2347bad346159a146e47\Iminent.Workflow.ni.dll

+ 2008-11-13 10:47:47 880,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\bdbdcd4dcb2cd64fae17c1bcc6715b12\Microsoft.Build.Engine.ni.dll

+ 2008-11-13 10:47:47 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\56b5329463f6554aaa678d5301f4605c\Microsoft.Build.Framework.ni.dll

+ 2008-11-13 10:47:51 1,691,648 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d8d4835b54f01a4ea805c1ec0aefb7da\Microsoft.Build.Tasks.ni.dll

+ 2008-11-13 10:47:51 163,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2420b95bf8ad73409eaa4de914563cab\Microsoft.Build.Utilities.ni.dll

+ 2008-11-13 10:33:24 208,896 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX.A#\2db1ed91104e324d97ca3b846376c3fd\Microsoft.DirectX.AudioVideoPlayback.ni.dll

+ 2008-11-13 10:33:26 1,036,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX.D#\6f2bec2204163948946ccb3194fee581\Microsoft.DirectX.Direct3D.ni.dll

+ 2008-11-13 10:33:27 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DirectX\d537dc4d5d646345a59fe212232141fa\Microsoft.DirectX.ni.dll

+ 2008-11-13 10:47:56 1,724,416 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c3729472bc21364cbd1e43c094253c29\Microsoft.VisualBasic.ni.dll

+ 2008-11-13 10:32:17 17,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\02bacde773f7474b92816fc5f6d92100\Microsoft.VisualC.ni.dll

+ 2008-11-13 10:28:39 11,411,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f627e31ff1d4fa4993935bb35144d16d\mscorlib.ni.dll

+ 2008-11-13 10:33:24 44,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\9e2e32c7e2b1ef45874d0dc34fde3feb\stdole.ni.dll

+ 2008-11-13 10:33:03 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\1ebbf31b5f81054485de16d6be007958\System.Configuration.Install.ni.dll

+ 2008-11-13 10:32:07 962,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\6c7fb6ed8486c741b9ea229a1ae13b2e\System.Configuration.ni.dll

+ 2008-11-13 10:33:11 1,183,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\e0127a5cc9197447960051f144fcfad1\System.Data.OracleClient.ni.dll

+ 2008-11-13 10:32:14 2,703,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\07d92ad2dfe8d642840bb88a9efb4635\System.Data.SqlXml.ni.dll

+ 2008-11-13 10:30:13 6,688,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\07bd339c0ac6bd43940389a876867bfa\System.Data.ni.dll

+ 2008-11-13 10:33:08 1,712,128 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\067b000155e116439b0beed643f38af4\System.Deployment.ni.dll

+ 2008-11-13 10:31:08 10,723,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\84122489d339534c8b906499cf6711a1\System.Design.ni.dll

+ 2008-11-13 10:33:02 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6f93fd26530b384ca1e6928be20db4de\System.DirectoryServices.Protocols.ni.dll

+ 2008-11-13 10:32:24 1,220,608 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ff105785fb642d42ac35e6bf63e1102d\System.DirectoryServices.ni.dll

+ 2008-11-13 10:29:08 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\bdea27b85df937428ec7e4ee6d6cbc4d\System.Drawing.Design.ni.dll

+ 2008-11-13 10:29:14 1,626,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\156ca32e17ed57429041551de0d61d3a\System.Drawing.ni.dll

+ 2008-11-13 10:32:21 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d3d866f80b3e54cacf986410abb6210\System.EnterpriseServices.ni.dll

+ 2008-11-13 10:32:21 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d3d866f80b3e54cacf986410abb6210\System.EnterpriseServices.Wrapper.dll

+ 2008-11-13 10:32:26 815,104 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\1f030996ed73be4e8aa688062daf56c6\System.Runtime.Remoting.ni.dll

+ 2008-11-13 10:33:04 339,968 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\0a7f897c7f488f4a866ccb9ffaae6268\System.Runtime.Serialization.Formatters.Soap.ni.dll

+ 2008-11-13 10:32:16 729,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\43d2c3c1f20f6247b012246f73ebfc43\System.Security.ni.dll

+ 2008-11-13 10:33:03 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a53c614c8cc7f04fbf9677f6575f866e\System.ServiceProcess.ni.dll

+ 2008-11-13 10:32:19 684,032 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4706d836616eec43b5e309d67027b13e\System.Transactions.ni.dll

+ 2008-11-13 10:48:02 2,310,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a4b90d17ae9aa4a9c39b7f4e4b89ea5\System.Web.Mobile.ni.dll

+ 2008-11-13 10:33:08 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b3b59c44902a804083df27f0b23876b6\System.Web.RegularExpressions.ni.dll

+ 2008-11-13 10:33:00 1,945,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f7df5e448710b7448b9e88e6f0267a0b\System.Web.Services.ni.dll

+ 2008-11-13 10:32:54 11,808,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\2085e28b90c4e94caf8760a731083982\System.Web.ni.dll

+ 2008-11-13 10:29:41 13,107,200 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2e9514fec985444da732c61eaf0bbec0\System.Windows.Forms.ni.dll

+ 2008-11-13 10:29:54 5,640,192 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\01ba4ab822edff4f9f115d559caec019\System.Xml.ni.dll

+ 2008-11-13 10:29:05 8,093,696 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\40eb45e0cb16bd4fafae2cadea212b08\System.ni.dll

+ 2008-09-07 10:01:24 61,440 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_6c10a18e\CustomMarshalers.dll

+ 2008-09-07 10:01:58 118,784 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_d5b7da66\CustomMarshalers.dll

+ 2008-09-07 10:01:52 3,391,488 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_1ab1eb87\mscorlib.dll

+ 2008-09-07 10:02:19 8,908,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_a3f1d3e2\mscorlib.dll

+ 2008-09-07 10:02:12 3,395,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2e0ba750\System.Design.dll

+ 2008-09-07 10:01:45 1,470,464 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_6cfbd4af\System.Design.dll

+ 2008-09-07 10:01:59 192,512 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b6456224\System.Drawing.Design.dll

+ 2008-09-07 10:01:26 90,112 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_e2fda4fa\System.Drawing.Design.dll

+ 2008-09-07 10:02:14 2,244,608 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_93cf9a54\System.Drawing.dll

+ 2008-09-07 10:01:47 835,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_d4d06b10\System.Drawing.dll

+ 2008-09-07 10:01:33 3,018,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4366c04d\System.Windows.Forms.dll

+ 2008-09-07 10:02:05 7,884,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_a4e66254\System.Windows.Forms.dll

+ 2008-09-07 10:02:09 5,513,216 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_1264eb63\System.Xml.dll

+ 2008-09-07 10:01:40 2,088,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_41f7e7c5\System.Xml.dll

+ 2008-09-07 10:01:58 4,788,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_202b9e1b\System.dll

+ 2008-09-07 10:01:21 1,966,080 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_331bf0ca\System.dll

+ 2002-07-25 17:13:18 24,576 ----a-w c:\windows\Downloaded Program Files\dwusplay.dll

+ 2002-07-25 17:13:12 196,608 ----a-w c:\windows\Downloaded Program Files\dwusplay.exe

+ 2004-06-16 05:02:10 323,584 ----a-w c:\windows\Downloaded Program Files\isusweb.dll

- 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys

+ 2008-10-24 11:10:42 453,632 ------w c:\windows\Driver Cache\i386\mrxsmb.sys

- 2007-02-28 16:02:21 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe

+ 2008-08-14 13:44:35 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe

- 2007-02-28 16:02:36 2,059,648 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe

+ 2008-08-14 13:44:39 2,059,776 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe

- 2007-02-28 16:02:21 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe

+ 2008-08-14 13:44:33 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe

- 2007-02-28 16:02:36 2,182,400 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe

+ 2008-08-14 13:44:37 2,182,400 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe

- 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE

+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE

+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE

+ 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE

+ 2008-08-22 15:16:48 3,457,024 ----a-w c:\windows\ERUNT\SDFIX\Users\00000001\ntuser.dat

+ 2008-08-22 15:16:48 61,440 ----a-w c:\windows\ERUNT\SDFIX\Users\00000002\UsrClass.dat

+ 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE

+ 2008-08-22 15:16:35 3,457,024 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat

+ 2008-08-22 15:16:35 61,440 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat

+ 2007-09-14 19:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\MSO.DLL

+ 2007-08-28 22:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6215\OGL.DLL

+ 2008-11-12 23:07:48 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe

- 2006-08-20 16:18:18 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe

+ 2008-11-12 23:12:00 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe

- 2006-08-20 16:18:19 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe

+ 2008-11-12 23:12:00 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe

- 2006-08-20 16:18:18 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe

+ 2008-11-12 23:12:00 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe

- 2006-08-20 16:18:19 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe

+ 2008-11-12 23:12:00 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe

- 2006-08-20 16:18:19 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe

+ 2008-11-12 23:12:00 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe

- 2006-08-20 16:18:19 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe

+ 2008-11-12 23:12:00 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe

- 2006-08-20 16:18:18 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe

+ 2008-11-12 23:12:00 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe

- 2006-08-20 16:18:18 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe

+ 2008-11-12 23:12:00 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe

- 2006-08-20 16:18:19 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe

+ 2008-11-12 23:12:00 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe

- 2006-08-20 16:18:19 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe

+ 2008-11-12 23:12:00 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe

- 2006-08-20 16:18:18 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe

+ 2008-11-12 23:12:00 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe

+ 2008-09-03 15:29:02 32,768 ----a-r c:\windows\Installer\{97407E09-4EA8-49F0-A513-2C1776A6DEC0}\_2646854DA5F3_11D4_8326_00D0B72E1DB9.exe

+ 2008-09-03 15:29:02 25,214 ----a-r c:\windows\Installer\{97407E09-4EA8-49F0-A513-2C1776A6DEC0}\ARPPRODUCTICON.exe

- 2008-02-25 10:31:32 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\_SHCT_Sprint.exe.exe

+ 2008-08-26 13:42:46 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\_SHCT_Sprint.exe.exe

- 2008-02-25 10:31:32 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\ARPPRODUCTICON.exe

+ 2008-08-26 13:42:46 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\ARPPRODUCTICON.exe

+ 2005-09-23 06:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_iehost.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll

+ 2002-05-14 07:42:38 5,632 ----a-w c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll

+ 2002-07-19 09:52:48 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.data.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll

+ 2002-06-27 10:45:32 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll

+ 2002-05-14 07:42:38 5,120 ----a-w c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll

+ 2005-09-23 06:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll

+ 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll

+ 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll

+ 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll

+ 2005-09-23 06:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll

+ 2003-02-21 00:59:44 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\alinkui.dll

+ 2003-02-21 01:55:06 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\cscompui.dll

+ 2003-02-21 01:02:16 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\vbc7ui.dll

+ 2003-02-21 03:04:20 155,648 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\Vsavb7rtUI.dll

+ 2003-02-21 05:24:08 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Accessibility.dll

+ 2003-02-21 03:00:36 98,304 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\alink.dll

+ 2003-02-20 17:19:42 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

+ 2007-04-13 19:30:52 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

+ 2003-02-20 17:19:22 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_rc.dll

+ 2004-07-14 23:49:18 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe

+ 2004-07-14 23:49:26 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe

+ 2007-04-13 19:30:52 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

+ 2002-07-29 09:11:50 219,136 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\c_g18030.dll

+ 2003-02-21 05:24:10 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CasPol.exe

+ 2003-02-21 05:24:32 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe

+ 2007-04-13 18:57:52 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

+ 2004-07-15 09:23:28 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe

+ 2004-07-15 09:23:44 626,688 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll

+ 2003-02-21 05:24:34 12,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cscompmgd.dll

+ 2003-02-21 05:24:36 33,792 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CustomMarshalers.dll

+ 2003-02-21 02:12:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe

+ 2003-02-21 08:21:40 524,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll

+ 2003-02-20 17:16:32 798,720 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\EventLogMessages.dll

+ 2004-07-14 22:24:30 282,624 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll

+ 2003-10-08 12:30:14 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe

+ 2003-02-21 05:24:38 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExec.exe

+ 2004-07-15 12:31:00 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll

+ 2004-07-15 12:31:04 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll

+ 2003-02-21 05:24:40 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\IIEHost.dll

+ 2004-07-14 22:35:30 196,608 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe

+ 2003-02-21 05:24:42 15,872 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe

+ 2003-02-20 17:22:24 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtilLib.dll

+ 2003-02-21 05:24:44 26,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ISymWrapper.dll

+ 2003-02-21 05:24:52 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\jsc.exe

+ 2004-07-15 12:28:58 720,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll

+ 2004-07-15 12:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll

+ 2003-02-21 05:24:54 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.Vsa.dll

+ 2003-02-21 05:25:02 6,144 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualC.Dll

+ 2003-02-21 05:24:58 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.dll

+ 2003-02-21 05:25:06 11,264 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2003-02-21 05:25:02 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft_VsaVb.dll

+ 2004-07-15 12:28:50 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe

+ 2004-07-15 12:28:50 49,152 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe

+ 2003-02-21 05:25:06 1,564,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorcfg.dll

+ 2004-07-14 22:32:44 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll

+ 2004-07-14 22:32:46 233,472 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll

+ 2007-04-13 18:57:58 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

+ 2007-04-13 18:56:30 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

+ 2007-04-13 18:58:00 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

+ 2007-04-13 18:50:46 2,142,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

+ 2003-02-20 16:43:52 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscormmc.dll

+ 2003-02-20 17:06:34 65,536 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorpe.dll

+ 2004-07-14 22:33:22 143,360 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll

+ 2004-07-14 22:33:24 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll

+ 2007-04-13 18:58:02 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

+ 2007-04-13 18:57:00 2,523,136 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll

+ 2003-02-20 17:09:24 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscortim.dll

+ 2007-04-13 18:57:28 2,514,944 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

+ 2003-02-21 02:42:22 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll

+ 2003-02-20 17:18:34 20,480 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mtxoci8.dll

+ 2003-02-20 16:43:36 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\0409\mscorsecr.dll

+ 2007-01-15 14:11:26 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe

+ 2003-02-20 17:09:46 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\ngen.exe

+ 2004-07-14 22:34:50 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll

+ 2003-02-21 05:25:24 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe

+ 2004-07-15 12:28:48 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll

+ 2003-02-21 05:25:30 12,288 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe

+ 2004-07-14 23:49:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_aspnet_isapi.dll

+ 2004-07-14 22:32:22 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_CORPerfMonExt.dll

+ 2004-07-14 22:24:30 282,624 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_fusion.dll

+ 2004-07-14 22:25:06 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_mscorjit.dll

+ 2004-07-15 12:29:02 2,138,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_mscorlib.dll

+ 2003-02-20 17:09:18 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_mscorsn.dll

+ 2004-07-14 22:26:52 2,510,848 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_mscorsvr.dll

+ 2004-07-14 22:28:34 2,502,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_mscorwks.dll

+ 2003-02-21 02:42:22 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_msvcr71.dll

+ 2004-07-14 22:34:50 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3024\_PerfCounter.dll

+ 2003-02-20 17:09:34 253,952 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusion.dll

+ 2003-02-20 17:09:34 122,880 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusres.dll

+ 2004-07-14 22:35:04 319,488 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll

+ 2003-02-21 05:26:38 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll

+ 2004-07-15 12:32:00 1,294,336 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll

+ 2004-07-15 12:31:14 303,104 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll

+ 2004-07-15 12:29:02 1,703,936 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll

+ 2004-07-15 12:28:54 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll

+ 2007-04-13 19:35:38 1,232,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

+ 2003-02-21 05:26:48 65,536 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll

+ 2004-07-15 12:28:58 466,944 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll

+ 2004-07-15 12:28:56 241,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll

+ 2004-07-14 22:35:12 66,560 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll

+ 2004-07-15 12:31:58 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll

+ 2004-07-15 12:31:12 241,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll

+ 2004-07-15 12:28:58 323,584 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll

+ 2004-07-15 12:31:54 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll

+ 2004-07-15 12:28:52 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

+ 2004-07-15 12:28:54 126,976 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll

+ 2007-04-13 19:35:46 1,265,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

+ 2004-07-15 12:28:58 819,200 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll

+ 2004-07-15 12:28:52 57,344 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll

+ 2004-07-15 12:31:16 573,440 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll

+ 2004-07-15 12:32:02 2,052,096 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll

+ 2004-07-15 12:29:00 1,339,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll

+ 2004-06-22 11:51:38 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe

+ 2004-07-15 09:23:20 737,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe

+ 2004-07-15 06:15:14 1,032,192 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll

+ 2004-07-15 00:11:56 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll

+ 2005-09-23 06:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll

+ 2005-09-23 06:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll

+ 2005-09-23 06:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll

+ 2005-09-23 06:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll

+ 2005-09-23 06:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll

+ 2005-09-23 06:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll

+ 2005-09-23 06:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll

+ 2005-09-23 06:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll

+ 2005-09-23 06:28:58 55,488 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe

+ 2005-09-23 06:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

+ 2005-09-23 06:28:32 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll

+ 2005-09-23 06:28:32 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll

+ 2005-09-23 06:28:32 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll

+ 2005-09-23 06:28:32 70,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll

+ 2005-09-23 06:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe

+ 2005-09-23 06:28:32 26,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe

+ 2005-09-23 06:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe

+ 2005-09-23 06:28:32 29,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

+ 2005-09-23 06:28:32 29,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe

+ 2005-09-23 06:28:32 503,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll

+ 2005-09-23 06:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe

+ 2005-09-23 06:28:56 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll

+ 2005-09-23 06:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe

+ 2005-09-23 06:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll

+ 2005-09-23 06:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll

+ 2005-09-23 06:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

+ 2005-09-23 06:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll

+ 2005-09-23 06:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe

+ 2005-09-23 06:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll

+ 2005-09-23 06:28:38 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe

+ 2005-09-23 06:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

+ 2005-09-23 06:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll

+ 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll

+ 2005-09-23 06:28:56 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe

+ 2005-09-23 06:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll

+ 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll

+ 2005-09-23 06:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll

+ 2005-09-23 06:28:56 224,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe

+ 2005-09-23 06:28:56 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe

+ 2005-09-23 06:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll

+ 2005-09-23 06:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll

+ 2005-09-23 06:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe

+ 2005-09-23 05:01:16 609,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe

+ 2005-09-23 04:29:48 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll

+ 2005-09-23 04:32:24 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll

+ 2005-09-23 04:34:10 82,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll

+ 2005-09-23 04:34:12 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll

+ 2005-09-23 04:34:44 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll

+ 2005-09-23 04:36:24 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll

+ 2005-09-23 01:46:14 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll

+ 2005-09-23 04:38:26 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll

+ 2005-09-23 04:38:52 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll

+ 2005-09-23 04:40:30 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll

+ 2005-09-23 04:40:32 83,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll

+ 2005-09-23 04:40:56 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll

+ 2005-09-23 04:42:58 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll

+ 2005-09-23 04:44:58 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll

+ 2005-09-23 04:46:38 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll

+ 2005-09-23 04:46:38 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll

+ 2005-09-23 04:46:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll

+ 2005-09-23 04:47:04 82,432 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll

+ 2005-09-23 04:47:30 82,432 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll

+ 2005-09-23 04:47:32 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll

+ 2005-09-23 04:47:32 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll

+ 2005-09-23 04:30:18 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll

+ 2005-09-23 04:47:06 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll

+ 2005-09-23 04:29:50 80,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll

+ 2005-09-23 04:36:48 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll

+ 2005-09-23 05:57:06 245,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll

+ 2005-09-23 06:28:48 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll

+ 2005-09-23 06:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll

+ 2005-09-23 06:28:48 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll

+ 2005-09-23 06:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll

+ 2005-09-23 06:28:48 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll

+ 2005-09-23 06:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2005-09-23 06:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll

+ 2005-09-23 06:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll

+ 2005-09-23 06:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll

+ 2005-09-23 06:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll

+ 2005-09-23 06:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll

+ 2005-09-23 06:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

+ 2005-09-23 06:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll

+ 2005-09-23 06:28:32 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll

+ 2005-09-23 06:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe

+ 2005-09-23 06:28:56 800,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

+ 2005-09-23 06:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll

+ 2005-09-23 06:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll

+ 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll

+ 2005-09-23 06:28:56 326,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

+ 2005-09-23 06:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll

+ 2005-09-23 06:28:56 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2005-09-23 06:28:56 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll

+ 2005-09-23 06:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

+ 2005-09-23 06:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

+ 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll

+ 2005-09-23 06:28:56 226,816 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll

+ 2005-09-23 06:28:56 66,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

+ 2005-09-23 06:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll

+ 2005-09-23 06:28:50 5,615,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

+ 2005-09-23 06:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll

+ 2005-09-23 06:28:56 96,440 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe

+ 2005-09-23 06:28:56 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll

+ 2005-09-23 06:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll

+ 2005-09-23 06:28:50 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll

+ 2005-09-23 06:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe

+ 2005-09-23 06:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe

+ 2005-09-23 06:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe

+ 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll

+ 2005-09-23 06:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll

+ 2005-09-23 06:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll

+ 2005-09-23 06:28:56 377,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

+ 2005-09-23 06:28:56 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll

+ 2005-09-23 06:28:58 389,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll

+ 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll

+ 2005-09-23 06:28:56 2,878,976 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll

+ 2005-09-23 06:28:56 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll

+ 2005-09-23 06:28:56 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll

+ 2005-09-23 06:28:38 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll

+ 2005-09-23 06:28:56 5,050,368 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll

+ 2005-09-23 06:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll

+ 2005-09-23 06:28:56 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll

+ 2005-09-23 06:28:56 3,018,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

+ 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll

+ 2005-09-23 06:28:56 700,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll

+ 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll

+ 2005-09-23 06:28:56 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll

+ 2005-09-23 06:28:56 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll

+ 2005-09-23 06:28:56 368,640 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll

+ 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll

+ 2005-09-23 06:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll

+ 2005-09-23 06:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll

+ 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll

+ 2005-09-23 06:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll

+ 2005-09-23 06:28:56 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll

+ 2005-09-23 06:28:56 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll

+ 2005-09-23 06:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll

+ 2005-09-23 06:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll

+ 2005-09-23 06:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll

+ 2005-09-23 06:28:56 5,316,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

+ 2005-09-23 06:28:56 2,035,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll

+ 2005-09-23 06:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL

+ 2005-09-23 06:29:06 1,140,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe

+ 2005-09-23 06:28:30 1,306,624 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll

+ 2005-09-23 06:28:32 298,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll

+ 2005-09-23 06:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll

- 2000-08-31 06:00:00 28,672 ----a-w c:\windows\Nircmd.exe

+ 2000-08-31 07:00:00 28,672 ----a-w c:\windows\Nircmd.exe

+ 2008-08-02 09:28:46 241,856 ----a-w c:\windows\PCHEALTH\HELPCTR\Config\Cache\Professional_32_1036.dat

+ 2008-08-02 09:28:46 241,856 ----a-w c:\windows\PCHEALTH\HELPCTR\Config\Cache\Professional_32_1036.dat.bak

- 2000-08-31 06:00:00 161,792 ----a-w c:\windows\swreg.exe

+ 2000-08-31 07:00:00 161,792 ----a-w c:\windows\swreg.exe

- 2008-06-23 15:39:58 1,024,000 ----a-w c:\windows\system32\browseui.dll

+ 2008-08-20 05:37:16 1,024,000 ----a-w c:\windows\system32\browseui.dll

+ 2005-02-04 04:00:40 28,672 ----a-w c:\windows\system32\callrun.dll

- 2008-06-23 15:39:58 152,064 ----a-w c:\windows\system32\cdfview.dll

+ 2008-08-20 05:37:14 152,064 ----a-w c:\windows\system32\cdfview.dll

- 2008-08-19 19:04:02 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat

+ 2008-11-17 13:07:58 32,768 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat

- 2008-08-19 19:04:02 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat

+ 2008-11-17 13:07:58 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat

- 2008-08-19 19:04:02 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

+ 2008-11-17 13:07:58 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

- 2008-06-23 15:39:59 1,056,768 ----a-w c:\windows\system32\danim.dll

+ 2008-08-20 05:37:14 1,056,768 ----a-w c:\windows\system32\danim.dll

+ 2005-09-23 06:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll

- 2008-06-20 10:44:38 138,368 -c----w c:\windows\system32\dllcache\afd.sys

+ 2008-08-14 09:51:43 138,368 -c----w c:\windows\system32\dllcache\afd.sys

- 2008-06-23 15:39:58 1,024,000 -c----w c:\windows\system32\dllcache\browseui.dll

+ 2008-08-20 05:37:16 1,024,000 -c----w c:\windows\system32\dllcache\browseui.dll

- 2008-06-23 15:39:58 152,064 -c----w c:\windows\system32\dllcache\cdfview.dll

+ 2008-08-20 05:37:14 152,064 -c----w c:\windows\system32\dllcache\cdfview.dll

- 2008-06-23 15:39:59 1,056,768 -c----w c:\windows\system32\dllcache\danim.dll

+ 2008-08-20 05:37:14 1,056,768 -c----w c:\windows\system32\dllcache\danim.dll

- 2008-06-23 15:40:00 357,888 -c----w c:\windows\system32\dllcache\dxtmsft.dll

+ 2008-08-20 05:37:14 357,888 -c----w c:\windows\system32\dllcache\dxtmsft.dll

- 2008-06-23 15:40:00 205,312 -c----w c:\windows\system32\dllcache\dxtrans.dll

+ 2008-08-20 05:37:14 205,312 -c----w c:\windows\system32\dllcache\dxtrans.dll

- 2008-06-23 15:40:00 55,808 -c----w c:\windows\system32\dllcache\extmgr.dll

+ 2008-08-20 05:37:14 55,808 -c----w c:\windows\system32\dllcache\extmgr.dll

- 2008-06-23 09:49:29 18,432 -c----w c:\windows\system32\dllcache\iedw.exe

+ 2008-08-19 09:30:39 18,432 -c----w c:\windows\system32\dllcache\iedw.exe

- 2008-06-23 15:40:00 251,392 -c----w c:\windows\system32\dllcache\iepeers.dll

+ 2008-08-20 05:37:14 251,392 -c----w c:\windows\system32\dllcache\iepeers.dll

- 2008-06-23 15:40:00 96,768 -c----w c:\windows\system32\dllcache\inseng.dll

+ 2008-08-20 05:37:14 96,768 -c----w c:\windows\system32\dllcache\inseng.dll

- 2008-06-23 15:40:00 16,384 -c----w c:\windows\system32\dllcache\jsproxy.dll

+ 2008-08-20 05:37:15 16,384 -c----w c:\windows\system32\dllcache\jsproxy.dll

- 2006-05-05 09:41:45 453,120 -c----w c:\windows\system32\dllcache\mrxsmb.sys

+ 2008-10-24 11:10:42 453,632 -c----w c:\windows\system32\dllcache\mrxsmb.sys

- 2008-06-23 15:40:02 3,080,704 -c----w c:\windows\system32\dllcache\mshtml.dll

+ 2008-08-20 05:37:21 3,081,216 -c----w c:\windows\system32\dllcache\mshtml.dll

- 2008-06-23 15:40:03 449,024 -c----w c:\windows\system32\dllcache\mshtmled.dll

+ 2008-08-20 05:37:15 449,024 -c----w c:\windows\system32\dllcache\mshtmled.dll

- 2008-06-23 15:40:03 146,432 -c----w c:\windows\system32\dllcache\msrating.dll

+ 2008-08-20 05:37:14 146,432 -c----w c:\windows\system32\dllcache\msrating.dll

- 2008-06-23 15:40:04 532,480 -c----w c:\windows\system32\dllcache\mstime.dll

+ 2008-08-20 05:37:14 532,480 -c----w c:\windows\system32\dllcache\mstime.dll

- 2007-06-26 06:09:14 1,104,896 -c----w c:\windows\system32\dllcache\msxml3.dll

+ 2008-09-04 16:45:11 1,106,944 -c----w c:\windows\system32\dllcache\msxml3.dll

- 2006-08-17 12:29:49 332,288 -c----w c:\windows\system32\dllcache\netapi32.dll

+ 2008-10-15 16:59:28 332,800 -c----w c:\windows\system32\dllcache\netapi32.dll

- 2007-02-28 16:02:21 2,138,112 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe

+ 2008-08-14 13:44:35 2,138,112 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe

- 2007-02-28 16:02:36 2,059,648 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe

+ 2008-08-14 13:44:39 2,059,776 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe

- 2007-02-28 16:02:21 2,017,792 -c----w c:\windows\system32\dllcache\ntkrpamp.exe

+ 2008-08-14 13:44:33 2,017,792 -c----w c:\windows\system32\dllcache\ntkrpamp.exe

- 2007-02-28 16:02:36 2,182,400 -c----w c:\windows\system32\dllcache\ntoskrnl.exe

+ 2008-08-14 13:44:37 2,182,400 -c----w c:\windows\system32\dllcache\ntoskrnl.exe

- 2008-06-23 15:40:04 39,424 -c----w c:\windows\system32\dllcache\pngfilt.dll

+ 2008-08-20 05:37:14 39,424 -c----w c:\windows\system32\dllcache\pngfilt.dll

- 2008-08-19 15:30:15 15,360 -c--a-w c:\windows\system32\dllcache\register.exe

+ 2008-11-21 17:13:13 15,360 -c--a-w c:\windows\system32\dllcache\register.exe

- 2008-06-23 15:40:05 1,495,040 -c----w c:\windows\system32\dllcache\shdocvw.dll

+ 2008-08-20 05:37:15 1,495,040 -c----w c:\windows\system32\dllcache\shdocvw.dll

- 2008-06-23 15:40:06 474,624 -c----w c:\windows\system32\dllcache\shlwapi.dll

+ 2008-08-20 05:37:15 474,624 -c----w c:\windows\system32\dllcache\shlwapi.dll

- 2006-08-14 10:34:41 332,928 -c----w c:\windows\system32\dllcache\srv.sys

+ 2008-08-28 10:04:17 333,056 -c----w c:\windows\system32\dllcache\srv.sys

- 2008-08-19 15:30:15 70,656 -c--a-w c:\windows\system32\dllcache\sysinfo.exe

+ 2008-11-21 17:13:16 70,656 -c--a-w c:\windows\system32\dllcache\sysinfo.exe

- 2008-06-23 15:40:06 617,984 -c----w c:\windows\system32\dllcache\urlmon.dll

+ 2008-08-20 05:37:16 617,984 -c----w c:\windows\system32\dllcache\urlmon.dll

- 2004-08-03 21:58:46 15,104 -c--a-w c:\windows\system32\dllcache\usbscan.sys

+ 2004-08-03 20:58:46 15,104 -c--a-w c:\windows\system32\dllcache\usbscan.sys

- 2007-04-10 13:00:52 236,928 -c----w c:\windows\system32\dllcache\WgaLogon.dll

+ 2008-09-05 22:30:46 267,304 -c----w c:\windows\system32\dllcache\wgaLogon.dll

- 2007-04-10 13:01:40 337,280 -c----w c:\windows\system32\dllcache\WgaTray.exe

+ 2008-09-05 22:30:04 952,360 -c----w c:\windows\system32\dllcache\WgaTray.exe

- 2001-08-23 16:47:22 87,040 -c--a-w c:\windows\system32\dllcache\wiafbdrv.dll

+ 2001-08-23 15:47:22 87,040 -c--a-w c:\windows\system32\dllcache\wiafbdrv.dll

- 2008-03-20 08:09:22 1,845,376 -c----w c:\windows\system32\dllcache\win32k.sys

+ 2008-09-15 15:39:16 1,846,144 -c----w c:\windows\system32\dllcache\win32k.sys

- 2008-06-23 15:40:08 663,552 -c----w c:\windows\system32\dllcache\wininet.dll

+ 2008-08-20 05:37:15 663,552 -c----w c:\windows\system32\dllcache\wininet.dll

- 2007-07-30 18:18:40 33,624 -c--a-w c:\windows\system32\dllcache\wups.dll

+ 2008-07-18 20:10:20 36,552 -c--a-w c:\windows\system32\dllcache\wups.dll

- 2008-06-20 10:44:38 138,368 ----a-w c:\windows\system32\drivers\afd.sys

+ 2008-08-14 09:51:43 138,368 ----a-w c:\windows\system32\drivers\afd.sys

+ 2007-03-22 08:36:24 43,584 ------w c:\windows\system32\drivers\avipbb.sys

+ 2005-11-04 17:20:07 55,168 ------w c:\windows\system32\drivers\sdcplh.sys

+ 2005-11-10 05:21:00 88,800 ----a-w c:\windows\system32\drivers\sentinel.sys

- 2006-08-14 10:34:41 332,928 ----a-w c:\windows\system32\drivers\srv.sys

+ 2008-08-28 10:04:17 333,056 ----a-w c:\windows\system32\drivers\srv.sys

+ 2007-03-05 09:20:02 28,352 ------w c:\windows\system32\drivers\ssmdrv.sys

- 2004-08-03 21:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys

+ 2004-08-03 20:58:46 15,104 ----a-w c:\windows\system32\drivers\usbscan.sys

+ 2006-03-03 06:07:02 143,360 ----a-w c:\windows\system32\dunzip32.dll

- 2008-06-23 15:40:00 357,888 ----a-w c:\windows\system32\dxtmsft.dll

+ 2008-08-20 05:37:14 357,888 ----a-w c:\windows\system32\dxtmsft.dll

- 2008-06-23 15:40:00 205,312 ----a-w c:\windows\system32\dxtrans.dll

+ 2008-08-20 05:37:14 205,312 ----a-w c:\windows\system32\dxtrans.dll

- 2008-06-23 15:40:00 55,808 ------w c:\windows\system32\extmgr.dll

+ 2008-08-20 05:37:14 55,808 ------w c:\windows\system32\extmgr.dll

- 2008-04-10 06:27:45 264,616 ----a-w c:\windows\system32\FNTCACHE.DAT

+ 2008-10-19 06:26:55 267,800 ----a-w c:\windows\system32\FNTCACHE.DAT

+ 1999-09-09 11:28:18 446,464 ----a-w c:\windows\system32\HHActiveX.dll

+ 2005-02-05 04:01:12 81,920 ----a-w c:\windows\system32\hinsrv.exe

- 2008-06-23 15:40:00 251,392 ----a-w c:\windows\system32\iepeers.dll

+ 2008-08-20 05:37:14 251,392 ----a-w c:\windows\system32\iepeers.dll

- 2004-07-26 16:16:10 1,568,768 ----a-w c:\windows\system32\imagX7.dll

+ 2004-07-26 15:16:10 1,568,768 ----a-w c:\windows\system32\imagX7.dll

- 2004-07-26 16:16:10 476,320 ----a-w c:\windows\system32\imagXpr7.dll

+ 2004-07-26 15:16:10 476,320 ----a-w c:\windows\system32\imagXpr7.dll

- 2004-07-26 16:16:10 262,144 ----a-w c:\windows\system32\imagXR7.dll

+ 2004-07-26 15:16:10 262,144 ----a-w c:\windows\system32\imagXR7.dll

- 2004-07-26 16:16:10 471,040 ----a-w c:\windows\system32\imagXRA7.dll

+ 2004-07-26 15:16:10 471,040 ----a-w c:\windows\system32\imagXRA7.dll

- 2008-06-23 15:40:00 96,768 ----a-w c:\windows\system32\inseng.dll

+ 2008-08-20 05:37:14 96,768 ----a-w c:\windows\system32\inseng.dll

+ 1998-05-05 10:36:08 39,424 ----a-w c:\windows\system32\JETCOMP.exe

- 2008-06-23 15:40:00 16,384 ----a-w c:\windows\system32\jsproxy.dll

+ 2008-08-20 05:37:15 16,384 ----a-w c:\windows\system32\jsproxy.dll

- 2007-04-10 13:02:50 1,476,992 ------w c:\windows\system32\LegitCheckControl.dll

+ 2008-09-05 22:30:06 1,480,232 ------w c:\windows\system32\LegitCheckControl.dll

+ 2001-03-23 16:22:10 314,880 ----a-w c:\windows\system32\LFCMP12n.DLL

+ 2001-03-23 16:15:48 78,336 ----a-w c:\windows\system32\LFFAX12n.DLL

+ 2001-03-23 16:17:32 43,008 ----a-w c:\windows\system32\lfgif12n.dll

+ 2001-03-23 16:18:30 121,856 ----a-w c:\windows\system32\lfmpg12n.dll

+ 2001-03-23 16:19:22 155,648 ----a-w c:\windows\system32\LFTIF12n.DLL

+ 2001-03-23 16:13:20 278,528 ----a-w c:\windows\system32\LTDIS12n.DLL

+ 2001-03-20 11:54:40 227,840 ----a-w c:\windows\system32\LTEFX12n.DLL

+ 2001-03-23 16:13:36 122,368 ----a-w c:\windows\system32\LTFIL12n.DLL

+ 2001-03-23 16:14:12 166,400 ----a-w c:\windows\system32\LTIMG12n.DLL

+ 2001-03-23 16:13:14 406,528 ----a-w c:\windows\system32\LTKRN12n.DLL

+ 2001-03-20 11:55:00 41,472 ----a-w c:\windows\system32\LTTWN12n.DLL

+ 2008-10-05 03:16:26 235,936 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.exe

- 2008-02-24 18:58:10 74,649 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe

+ 2008-10-24 05:47:15 88,590 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activeX.exe

- 2008-05-29 23:35:11 17,486,968 ----a-w c:\windows\system32\MRT.exe

+ 2008-11-04 00:10:25 17,318,336 ----a-w c:\windows\system32\MRT.exe

+ 2001-08-28 12:00:00 2,864 ----a-w c:\windows\system32\MSCICH32.DLL

+ 2006-12-22 10:28:14 271,360 ----a-w c:\windows\system32\mscoree.dll

+ 2005-09-23 06:28:52 150,016 ----a-w c:\windows\system32\mscorier.dll

+ 2005-09-23 06:28:52 74,240 ----a-w c:\windows\system32\mscories.dll

+ 1998-06-01 13:37:00 344,064 ----a-w c:\windows\system32\msexch35.dll

+ 1999-09-09 21:06:38 252,688 ----a-w c:\windows\system32\msexcl35.dll

- 2008-06-23 15:40:02 3,080,704 ----a-w c:\windows\system32\mshtml.dll

+ 2008-08-20 05:37:21 3,081,216 ----a-w c:\windows\system32\mshtml.dll

- 2008-06-23 15:40:03 449,024 ----a-w c:\windows\system32\mshtmled.dll

+ 2008-08-20 05:37:15 449,024 ----a-w c:\windows\system32\mshtmled.dll

+ 1999-09-28 20:42:48 1,050,896 ----a-w c:\windows\system32\msjet35.dll

+ 1999-06-10 08:34:04 123,664 ----a-w c:\windows\system32\msjint35.dll

+ 1999-09-29 19:04:06 1,238,288 ----a-w c:\windows\system32\msjt4jlt.dll

+ 1999-06-10 08:34:04 24,848 ----a-w c:\windows\system32\msjter35.dll

+ 1999-09-09 21:06:38 168,720 ----a-w c:\windows\system32\msltus35.dll

+ 1999-06-07 17:59:34 250,128 ----a-w c:\windows\system32\mspdox35.dll

- 2008-06-23 15:40:03 146,432 ----a-w c:\windows\system32\msrating.dll

+ 2008-08-20 05:37:14 146,432 ----a-w c:\windows\system32\msrating.dll

+ 1998-06-01 13:37:00 262,144 ----a-w c:\windows\system32\msrd2x35.dll

+ 1999-08-25 13:57:26 415,504 ----a-w c:\windows\system32\msrepl35.dll

+ 1999-04-26 19:08:20 44,304 ----a-w c:\windows\system32\msrpfs35.dll

+ 1999-09-30 18:21:24 166,672 ----a-w c:\windows\system32\mstext35.dll

- 2008-06-23 15:40:04 532,480 ----a-w c:\windows\system32\mstime.dll

+ 2008-08-20 05:37:14 532,480 ----a-w c:\windows\system32\mstime.dll

+ 1998-06-01 13:37:00 294,912 ----a-w c:\windows\system32\msxbse35.dll

- 2007-06-26 06:09:14 1,104,896 ----a-w c:\windows\system32\msxml3.dll

+ 2008-09-04 16:45:11 1,106,944 ----a-w c:\windows\system32\msxml3.dll

- 2007-05-08 14:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll

+ 2008-09-30 15:43:34 1,286,152 ----a-w c:\windows\system32\msxml4.dll

- 2007-07-30 17:19:10 271,224 ----a-w c:\windows\system32\mucltui.dll

+ 2008-07-18 20:07:34 270,880 ----a-w c:\windows\system32\mucltui.dll

+ 2003-02-20 16:43:36 4,096 ----a-w c:\windows\system32\mui\0409\mscoreer.dll

+ 2006-12-22 11:02:36 6,144 ----a-w c:\windows\system32\mui\0409\mscorees.dll

- 2007-07-30 17:19:04 207,736 ----a-w c:\windows\system32\muweb.dll

+ 2008-07-18 20:07:32 210,976 ----a-w c:\windows\system32\muweb.dll

- 2006-08-17 12:29:49 332,288 ----a-w c:\windows\system32\netapi32.dll

+ 2008-10-15 16:59:28 332,800 ----a-w c:\windows\system32\netapi32.dll

+ 2003-02-20 17:16:34 32,768 ----a-w c:\windows\system32\netfxperf.dll

- 2007-02-28 16:02:36 2,059,648 ----a-w c:\windows\system32\ntkrnlpa.exe

+ 2008-08-14 13:44:39 2,059,776 ----a-w c:\windows\system32\ntkrnlpa.exe

- 2007-02-28 16:02:36 2,182,400 ----a-w c:\windows\system32\ntoskrnl.exe

+ 2008-08-14 13:44:37 2,182,400 ----a-w c:\windows\system32\ntoskrnl.exe

- 2008-03-30 07:01:33 40,836 ----a-w c:\windows\system32\perfc009.dat

+ 2008-11-13 10:31:15 63,188 ----a-w c:\windows\system32\perfc009.dat

- 2008-03-30 07:01:33 49,494 ----a-w c:\windows\system32\perfc00C.dat

+ 2008-11-13 10:31:15 76,144 ----a-w c:\windows\system32\perfc00C.dat

- 2008-03-30 07:01:33 314,508 ----a-w c:\windows\system32\perfh009.dat

+ 2008-11-13 10:31:15 403,968 ----a-w c:\windows\system32\perfh009.dat

- 2008-03-30 07:01:33 370,414 ----a-w c:\windows\system32\perfh00C.dat

+ 2008-11-13 10:31:15 470,828 ----a-w c:\windows\system32\perfh00C.dat

- 2008-06-23 15:40:04 39,424 ----a-w c:\windows\system32\pngfilt.dll

+ 2008-08-20 05:37:14 39,424 ----a-w c:\windows\system32\pngfilt.dll

- 2008-06-23 15:40:05 1,495,040 ----a-w c:\windows\system32\shdocvw.dll

+ 2008-08-20 05:37:15 1,495,040 ----a-w c:\windows\system32\shdocvw.dll

- 2008-06-23 15:40:06 474,624 ----a-w c:\windows\system32\shlwapi.dll

+ 2008-08-20 05:37:15 474,624 ----a-w c:\windows\system32\shlwapi.dll

+ 2005-11-10 05:21:00 48,352 ----a-w c:\windows\system32\snti386.dll

- 2007-11-30 11:19:06 18,296 ------w c:\windows\system32\spmsg.dll

+ 2008-07-08 13:03:54 18,296 ------w c:\windows\system32\spmsg.dll

+ 2002-03-11 15:32:16 2,560 ------w c:\windows\system32\spool\drivers\w32x86\lxwf2000.dll

+ 2004-08-19 14:09:48 264,704 ----a-w c:\windows\system32\spool\drivers\w32x86\unidrv.dll

+ 2004-08-19 14:09:48 199,168 ----a-w c:\windows\system32\spool\drivers\w32x86\unidrvui.dll

+ 2004-08-19 14:09:06 620,544 ----a-w c:\windows\system32\spool\drivers\w32x86\unires.dll

- 2003-01-16 19:37:14 11,264 ------w c:\windows\system32\spool\prtprocs\w32x86\lxprint2000.dll

+ 2003-01-16 18:37:14 11,264 ------w c:\windows\system32\spool\prtprocs\w32x86\lxprint2000.dll

- 2004-07-09 08:43:56 364,544 ----a-w c:\windows\system32\TwnLib4.dll

+ 2004-07-09 07:43:56 364,544 ----a-w c:\windows\system32\TwnLib4.dll

- 2008-06-23 15:40:06 617,984 ----a-w c:\windows\system32\urlmon.dll

+ 2008-08-20 05:37:16 617,984 ----a-w c:\windows\system32\urlmon.dll

+ 2003-02-20 17:06:20 282,624 ----a-w c:\windows\system32\URTTemp\fusion.dll

+ 2003-02-20 17:06:24 155,648 ----a-w c:\windows\system32\URTTemp\mscoree.dll

+ 2003-02-20 17:09:18 77,824 ----a-w c:\windows\system32\URTTemp\mscorsn.dll

+ 2003-02-20 17:08:32 2,482,176 ----a-w c:\windows\system32\URTTemp\mscorwks.dll

+ 2003-02-21 02:42:22 348,160 ----a-w c:\windows\system32\URTTemp\msvcr71.dll

+ 2003-02-21 03:16:08 49,152 ----a-w c:\windows\system32\URTTemp\regtlib.exe

+ 1998-06-17 23:00:00 89,360 ----a-w c:\windows\system32\VB5DB.DLL

+ 1998-05-18 01:06:32 368,912 ----a-w c:\windows\system32\VBAR332.DLL

- 2007-04-10 13:00:52 236,928 ------w c:\windows\system32\WgaLogon.dll

+ 2008-09-05 22:30:46 267,304 ----a-w c:\windows\system32\WgaLogon.dll

- 2007-04-10 13:01:40 337,280 ------w c:\windows\system32\WgaTray.exe

+ 2008-09-05 22:30:04 952,360 ------w c:\windows\system32\WgaTray.exe

- 2001-08-23 16:47:22 87,040 ----a-w c:\windows\system32\wiafbdrv.dll

+ 2001-08-23 15:47:22 87,040 ----a-w c:\windows\system32\wiafbdrv.dll

- 2008-03-20 08:09:22 1,845,376 ----a-w c:\windows\system32\win32k.sys

+ 2008-09-15 15:39:16 1,846,144 ----a-w c:\windows\system32\win32k.sys

- 2008-06-23 15:40:08 663,552 ----a-w c:\windows\system32\wininet.dll

+ 2008-08-20 05:37:15 663,552 ----a-w c:\windows\system32\wininet.dll

- 2006-10-18 20:47:20 295,936 ------w c:\windows\system32\wmpeffects.dll

+ 2008-06-24 16:12:58 295,936 ----a-w c:\windows\system32\wmpeffects.dll

- 2007-07-30 18:18:40 33,624 ----a-w c:\windows\system32\wups.dll

+ 2008-07-18 20:10:20 36,552 ----a-w c:\windows\system32\wups.dll

- 2007-07-30 18:19:12 43,352 ----a-w c:\windows\system32\wups2.dll

+ 2008-07-18 20:10:40 45,768 ----a-w c:\windows\system32\wups2.dll

- 2008-07-03 09:42:35 370,176 ----a-w c:\windows\system32\xpsp3res.dll

+ 2008-08-19 09:51:37 370,176 ----a-w c:\windows\system32\xpsp3res.dll

- 2005-09-12 15:13:46 233,472 ----a-w c:\windows\UNNeroBackItUp.exe

+ 2005-09-12 14:13:46 233,472 ----a-w c:\windows\UNNeroBackItUp.exe

- 2005-09-12 15:13:46 233,472 ----a-w c:\windows\UNNeroMediaHome.exe

+ 2005-09-12 14:13:46 233,472 ----a-w c:\windows\UNNeroMediaHome.exe

- 2005-09-12 15:13:46 233,472 ----a-w c:\windows\UNNeroShowTime.exe

+ 2005-09-12 14:13:46 233,472 ----a-w c:\windows\UNNeroShowTime.exe

- 2005-09-12 15:13:46 233,472 ----a-w c:\windows\UNNeroVision.exe

+ 2005-09-12 14:13:46 233,472 ----a-w c:\windows\UNNeroVision.exe

- 2005-09-12 15:13:46 233,472 ----a-w c:\windows\UNRecode.exe

+ 2005-09-12 14:13:46 233,472 ----a-w c:\windows\UNRecode.exe

+ 2008-09-30 15:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll

+ 2008-09-30 15:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll

+ 2008-04-15 17:56:59 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll

+ 2008-11-13 10:27:23 258,048 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

+ 2008-11-13 10:27:23 114,176 ----a-w c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

.

-- Instantané actualisé --

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SxBzBufferZoneOverlay]

@="{37ADBD0B-11EC-4A2C-9F93-5C3ACC7994DF}"

[HKEY_CLASSES_ROOT\CLSID\{37ADBD0B-11EC-4A2C-9F93-5C3ACC7994DF}]

2007-08-06 14:20 1222576 --a------ c:\windows\system32\RlShellExt.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SxBzConfidentialOverlay]

@="{F594B094-8768-4632-8143-12852EBBD688}"

[HKEY_CLASSES_ROOT\CLSID\{F594B094-8768-4632-8143-12852EBBD688}]

2007-08-06 14:20 1222576 --a------ c:\windows\system32\RlShellExt.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SxBzForbiddenOverlay]

@="{F1A1DA12-E651-4AD0-A1A0-6214546B2F9D}"

[HKEY_CLASSES_ROOT\CLSID\{F1A1DA12-E651-4AD0-A1A0-6214546B2F9D}]

2007-08-06 14:20 1222576 --a------ c:\windows\system32\RlShellExt.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SxBzUnknownOverlay]

@="{E4FC4B31-8A4F-45E6-BDAC-28F612371FE3}"

[HKEY_CLASSES_ROOT\CLSID\{E4FC4B31-8A4F-45E6-BDAC-28F612371FE3}]

2007-08-06 14:20 1222576 --a------ c:\windows\system32\RlShellExt.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-27 98304]

"DLBXCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\DLBXtime.dll" [2004-12-07 69632]

"dlbxmon.exe"="c:\program files\Dell Photo AIO Printer 962\dlbxmon.exe" [2005-01-18 425984]

"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]

 

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\

WiFi Station.lnk - c:\program files\Hercules\WiFi Station\WifiStation.exe [2008-02-24 650240]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]

--a------ 2004-08-19 16:09 15360 c:\windows\system32\ctfmon.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dlbxmon.exe]

--a------ 2005-01-18 15:58 425984 c:\program files\Dell Photo AIO Printer 962\dlbxmon.exE

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]

-ra------ 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2006-01-12 15:40 155648 c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

--a------ 2008-03-27 17:10 98304 c:\program files\QuickTime\qttask.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C-Media Mixer]

-ra------ 2001-11-15 19:08 1216512 c:\windows\mixer.exe

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"d:\\eChanblard\\emule.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

"%windir%\\explorer.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"6662:TCP"= 6662:TCP:kieffer

"6672:UDP"= 6672:UDP:kieffer

 

R2 Hinsrv;Hinsrv Service;c:\windows\system32\hinsrv.exe [2008-09-01 81920]

R2 SG_Service;SoftGuard Service;c:\program files\Fichiers communs\RbtProt\sgsrv.exe [2005-04-25 155648]

S3 8daee481-4510-4cd5-8ba1-dea0b2588289;8daee481-4510-4cd5-8ba1-dea0b2588289;\??\g:\player\cds300.dll []

S3 axvbusx;axvbusx;c:\windows\system32\DRIVERS\axvbusx.sys []

S3 axvscsi;axvscsi;c:\windows\system32\DRIVERS\axvscsi.sys []

S3 PNDIS5;PNDIS5 NDIS Protocol Driver;\??\F:\PNDIS5.SYS []

S4 hpt3xx;hpt3xx; []

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2ed971c8-78b0-11dd-9939-0008d328a685}]

\Shell\AutoRun\command - rthrw.com

\Shell\explore\Command - rthrw.com

\Shell\open\Command - rthrw.com

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{700d6dfc-4cd5-11dd-98be-0008d328a685}]

\Shell\AutoRun\command - rthrw.com

\Shell\explore\Command - rthrw.com

\Shell\open\Command - rthrw.com

.

Contenu du dossier 'Tâches planifiées'

 

2008-11-22 c:\windows\Tasks\A2AF9D86918C1156.job

- c:\docume~1\sylvain\applic~1\dupeob~1\eggs program win.exe []

 

2008-11-21 c:\windows\Tasks\At1.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At10.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At11.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At12.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At13.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At14.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At15.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-22 c:\windows\Tasks\At16.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-22 c:\windows\Tasks\At17.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At18.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At19.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-22 c:\windows\Tasks\At2.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At20.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At21.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At22.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At23.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At24.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At25.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-22 c:\windows\Tasks\At26.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At27.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At28.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At29.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At3.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-18 c:\windows\Tasks\At30.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At31.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-19 c:\windows\Tasks\At32.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At33.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At34.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At35.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At36.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At37.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At38.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At39.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At4.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-22 c:\windows\Tasks\At40.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-22 c:\windows\Tasks\At41.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At42.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At43.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At44.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At45.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At46.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At47.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-21 c:\windows\Tasks\At48.job

- c:\windows\system32\NcUfFrHN.exe []

 

2008-11-18 c:\windows\Tasks\At5.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-18 c:\windows\Tasks\At6.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-18 c:\windows\Tasks\At7.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-19 c:\windows\Tasks\At8.job

- c:\windows\system32\41W0527I.exe []

 

2008-11-21 c:\windows\Tasks\At9.job

- c:\windows\system32\41W0527I.exe []

.

- - - - ORPHELINS SUPPRIMES - - - -

 

BHO-{F7E8D47F-FD21-4DC9-AE4B-C903AFF43613} - c:\windows\system32\nnnOHxwX.dll

HKU-Default-RunOnce-FlashPlayerUpdate - c:\windows\system32\Macromed\Flash\FlashUtil9e.exe

ShellExecuteHooks-{35460667-381B-4D43-8E45-1CF213B39DCA} - c:\windows\system32\rqRLFxYs.dll

SSODL-qxdepnbs-{C8A909B8-6950-4468-9DA1-BD8DBC800098} - c:\windows\qxdepnbs.dll

SSODL-bptswvdf-{EDBF88D8-EA26-4055-8AA8-D2D439F584D8} - c:\windows\bptswvdf.dll

Notify-rqRLFxYs - rqRLFxYs.dll

MSConfigStartUp-a-squared - c:\program files\a-squared Anti-Malware\a2guard.exe

MSConfigStartUp-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe

 

 

.

------- Examen supplémentaire -------

.

FireFox -: Profile - c:\documents and settings\Mireille\Application Data\Mozilla\Firefox\Profiles\xny2ljj5.default\

FF -: plugin - c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll

FF -: plugin - c:\program files\Adobe\Acrobat 6.0\Reader\browser\nppdf32.dll

FF -: plugin - c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll

.

 

**************************************************************************

 

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-11-22 21:15:38

Windows 5.1.2600 Service Pack 2 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\WgaTray.exe

c:\windows\system32\netdde.exe

c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe

c:\program files\Fichiers communs\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\dlbxcoms.exe

.

**************************************************************************

.

Heure de fin: 2008-11-22 21:20:27 - La machine a redémarré [Mireille]

ComboFix-quarantined-files.txt 2008-11-22 20:20:23

ComboFix2.txt 2008-08-21 18:58:20

ComboFix3.txt 2008-08-21 14:10:24

ComboFix4.txt 2008-08-19 19:51:01

 

Avant-CF: 27 912 794 112 octets libres

Après-CF: 28,661,846,016 octets libres

 

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn

 

1386 --- E O F --- 2008-11-14 09:42:14

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...