Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] PC infecté (virus et malwares)

jean_pfoumf

Par jean_pfoumf
dans Sécurisation, prévention

 Partager

Messages recommandés

jean_pfoumf Member

jean_pfoumf

Posté(e)
  • Auteur
Posté(e)

voici, enfin, la version finale. Long, très long.

 

Running from: C:\Documents and Settings\Jean\Bureau\Win32kDiag.exe

 

Log file at : C:\Documents and Settings\Jean\Bureau\Win32kDiag.txt

 

WARNING: Could not get backup privileges!

 

Searching 'C:\WINDOWS'...

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\baseeapconnectionpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 520 C:\WINDOWS\Prefetch\Provisioning\Schemas\baseeapconnectionpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 520 C:\WINDOWS\Provisioning\Schemas\baseeapconnectionpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\baseeapuserpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 580 C:\WINDOWS\Prefetch\Provisioning\Schemas\baseeapuserpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 580 C:\WINDOWS\Provisioning\Schemas\baseeapuserpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\branding.xdr

 

[1] 2004-08-05 04:00:00 1426 C:\WINDOWS\Prefetch\Provisioning\Schemas\branding.xdr ()

 

[1] 2004-07-17 10:35:28 1426 C:\WINDOWS\Provisioning\Schemas\branding.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\eapconnectionpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 689 C:\WINDOWS\Prefetch\Provisioning\Schemas\eapconnectionpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 689 C:\WINDOWS\Provisioning\Schemas\eapconnectionpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\eapuserpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 378 C:\WINDOWS\Prefetch\Provisioning\Schemas\eapuserpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 378 C:\WINDOWS\Provisioning\Schemas\eapuserpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\flashconfig.xdr

 

[1] 2004-08-05 04:00:00 4089 C:\WINDOWS\Prefetch\Provisioning\Schemas\flashconfig.xdr ()

 

[1] 2004-07-17 10:35:28 4089 C:\WINDOWS\Provisioning\Schemas\flashconfig.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\flashconfigdevice.xdr

 

[1] 2004-08-05 04:00:00 9924 C:\WINDOWS\Prefetch\Provisioning\Schemas\flashconfigdevice.xdr ()

 

[1] 2004-07-17 10:35:28 9924 C:\WINDOWS\Provisioning\Schemas\flashconfigdevice.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\help.xdr

 

[1] 2004-08-05 04:00:00 732 C:\WINDOWS\Prefetch\Provisioning\Schemas\help.xdr ()

 

[1] 2004-07-17 10:35:28 732 C:\WINDOWS\Provisioning\Schemas\help.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\locations.xdr

 

[1] 2004-08-05 04:00:00 1721 C:\WINDOWS\Prefetch\Provisioning\Schemas\locations.xdr ()

 

[1] 2004-07-17 10:35:28 1721 C:\WINDOWS\Provisioning\Schemas\locations.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\masterfile.xdr

 

[1] 2004-08-05 04:00:00 2459 C:\WINDOWS\Prefetch\Provisioning\Schemas\masterfile.xdr ()

 

[1] 2004-07-17 10:35:28 2459 C:\WINDOWS\Provisioning\Schemas\masterfile.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\mschapv2connectionpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 395 C:\WINDOWS\Prefetch\Provisioning\Schemas\mschapv2connectionpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 395 C:\WINDOWS\Provisioning\Schemas\mschapv2connectionpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\mschapv2userpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 861 C:\WINDOWS\Prefetch\Provisioning\Schemas\mschapv2userpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 861 C:\WINDOWS\Provisioning\Schemas\mschapv2userpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\mspeapconnectionpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 1911 C:\WINDOWS\Prefetch\Provisioning\Schemas\mspeapconnectionpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 1911 C:\WINDOWS\Provisioning\Schemas\mspeapconnectionpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\mspeapuserpropertiesv1.xdr

 

[1] 2004-08-05 04:00:00 698 C:\WINDOWS\Prefetch\Provisioning\Schemas\mspeapuserpropertiesv1.xdr ()

 

[1] 2004-07-17 10:35:28 698 C:\WINDOWS\Provisioning\Schemas\mspeapuserpropertiesv1.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\register.xdr

 

[1] 2004-08-05 04:00:00 1032 C:\WINDOWS\Prefetch\Provisioning\Schemas\register.xdr ()

 

[1] 2004-07-17 10:35:28 1032 C:\WINDOWS\Provisioning\Schemas\register.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\ssid.xdr

 

[1] 2004-08-05 04:00:00 1673 C:\WINDOWS\Prefetch\Provisioning\Schemas\ssid.xdr ()

 

[1] 2004-07-17 10:35:28 1673 C:\WINDOWS\Provisioning\Schemas\ssid.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\wirelessprofile.xdr

 

[1] 2004-08-05 04:00:00 2036 C:\WINDOWS\Prefetch\Provisioning\Schemas\wirelessprofile.xdr ()

 

[1] 2004-07-17 10:35:28 2036 C:\WINDOWS\Provisioning\Schemas\wirelessprofile.xdr ()

 

 

 

Cannot access: C:\WINDOWS\Prefetch\Provisioning\Schemas\wizard.xdr

 

[1] 2004-08-05 04:00:00 22405 C:\WINDOWS\Prefetch\Provisioning\Schemas\wizard.xdr ()

 

[1] 2004-07-17 10:35:28 22405 C:\WINDOWS\Provisioning\Schemas\wizard.xdr ()

 

 

 

Cannot access: C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe

 

[1] 2005-03-02 18:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe ()

 

[1] 2006-12-19 18:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe ()

 

[1] 2007-02-28 16:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:39:11 2188032 C:\WINDOWS\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe ()

 

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe ()

 

[1] 2008-08-14 13:44:37 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe ()

 

[1] 2004-08-05 04:00:00 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe ()

 

[1] 2005-03-02 18:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe ()

 

[1] 2006-12-19 18:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe ()

 

[1] 2008-08-14 13:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe ()

 

[1] 2007-02-28 16:02:36 2182400 C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe ()

 

[1] 2009-02-09 11:24:03 2191104 C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe ()

 

[1] 2008-04-14 02:08:03 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe ()

 

[1] 2009-08-04 17:05:41 2182400 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:16:20 2188032 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP2QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3GDR\ntoskrnl.exe ()

 

[1] 2009-08-04 17:22:24 2191360 C:\WINDOWS\SoftwareDistribution\Download\353036c74d2a847bd449aaca4127544c\SP3QFE\ntoskrnl.exe ()

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270942.dll (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270944.exe (Microsoft Corporation)

 

[2] 2009-02-09 11:24:03 2191104 C:\System Volume Information\_restore{C088B59D-00E1-4866-9985-462F55916981}\RP540\A0270948.exe (Microsoft Corporation)

 

[1] 2009-08-04 22:58:02 2191232 C:\i386\ntoskrnl.exe ()

 

 

 

 

 

Finished!

Mark Godlike Member

Mark

Posté(e)
Posté(e)

Bonjour Jean :P

 

Tout d'abord, je te félicite pour ta persévérance.

 

Maintenant... L'outil me montre des problèmes au niveau de certains fichiers bloqués, mais pas de signe de l'infection que je soupçonnais. Ne t'en fais pas, l'analyse nous servira, donc pas faite inutilement.

 

Voici un autre petit outil à lancer :

==================

 

Télécharge exeHelper (de Raktor) sur ton Bureau.

Double-clique sur exeHelper.com afin de le lancer.

Une fenêtre noire devrait s'ouvrir : appuie sur n'importe quelle touche pour fermer la fenêtre, mais seulement lorsque l'outil aura complété son travail.

Copie/colle le contenu du rapport exehelperlog.txt (créé au même endroit où se trouve l'outil)

Note: Si une fenêtre avec message "Error deleting file" apparaît, prière de relancer l'outil avant de poster le rapport - qui contiendra maintenant les deux rapports.

 

En souhaitant que ça tourne, cette fois-ci (et vite) :P

 

@+

 

Mark

jean_pfoumf Member

jean_pfoumf

Posté(e)
  • Auteur
Posté(e)

bonjour.

Quelques secondes cette fois-ci.

 

exeHelper by Raktor

Build 20091021

Run at 15:06:40 on 10/26/09

Now searching...

Checking for numerical processes...

Killed numerical process 169613

Checking for bad processes...

Checking for bad files...

Checking for bad registry entries...

Resetting filetype association for .exe

Resetting filetype association for .com

Resetting userinit and shell values...

Resetting policies...

--Finished--

Mark Godlike Member

Mark

Posté(e)
Posté(e) (modifié)

Désolé pour le petit délai :

 

Bon alors il ne semble y avoir de rogue(s) qui bloque l'exécution d'outils. Un beau casse-tête tout ça :P

 

Je te fais passer un autre petit outil bien simple :

============

 

- Télécharge querySvc.exe (de sUBs) du lien suivant :

http://download.bleepingcomputer.com/sUBs/Beta/querySvc.exe

 

> Mets-le sur le Bureau et lance-le ; autorise son exécution. Ça ne prendra qu'une dizaine de secondes à tourner. Un fichier texte apparaîtra (sUBs.txt) ; du menu "Fichier" >> "Enregistrer sous..." >> sauvegarde-le sur ton Bureau.

 

> Reviens coller le contenu du rapport ici, dans ta réponse.

 

Edit : as-tu conservé ce patch pour AtomicMailboxpassword ? Si oui, on pourrait le faire analyser...

 

@+

 

Mark

Modifié par Mark
jean_pfoumf Member

jean_pfoumf

Posté(e)
  • Auteur
Posté(e)

une meilleure présentation:

 

------ REGISTRY:

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost]

- HTTPFilter - HTTPFilter

- LocalService - Alerter, WebClient, LmHosts, RemoteRegistry, upnphost, SSDPSRV

- NetworkService - DnsCache

- DcomLaunch - DcomLaunch, TermService

- rpcss - RpcSs

- imgsvc - StiSvc

- termsvcs - TermService

- bthsvcs - BthServ

- WudfServiceGroup - WUDFSvc

- eapsvcs - eaphost

- dot3svc - dot3svc

- netsvcs - 6to4, AppMgmt, AudioSrv, Browser, CryptSvc, DMServer, DHCP, ERSvc, EventSystem, FastUserSwitchingCompatibility, HidServ, Ias, Iprip, Irmon, LanmanServer, LanmanWorkstation, Messenger, Netman, Nla, Ntmssvc, NWCWorkstation, Nwsapagent, Rasauto, Rasman, Remoteaccess, Schedule, Seclogon, SENS, Sharedaccess, SRService, Tapisrv, Themes, TrkWks, W32Time, WZCSVC, Wmi, WmdmPmSp, winmgmt, wscsvc, xmlprov, BITS, wuauserv, ShellHWDetection, helpsvc, WmdmPmSN, napagent, hkmsvc

 

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\DComLaunch

CoInitializeSecurityParam REG_DWORD 1 (0x1)

DefaultRpcStackSize REG_DWORD 8 (0x8)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\dot3svc

AuthenticationCapabilities REG_DWORD 12320 (0x3020)

CoInitializeSecurityParam REG_DWORD 1 (0x1)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\eapsvcs

AuthenticationCapabilities REG_DWORD 12320 (0x3020)

CoInitializeSecurityParam REG_DWORD 1 (0x1)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\HTTPFilter

CoInitializeSecurityParam REG_DWORD 1 (0x1)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\LocalService

CoInitializeSecurityParam REG_DWORD 1 (0x1)

AuthenticationCapabilities REG_DWORD 8192 (0x2000)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\netsvcs

CoInitializeSecurityParam REG_DWORD 1 (0x1)

AuthenticationCapabilities REG_DWORD 12320 (0x3020)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\PCHealth

CoInitializeSecurityParam REG_DWORD 2 (0x2)

AuthenticationCapabilities REG_DWORD 64 (0x40)

 

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost\termsvcs

CoInitializeSecurityParam REG_DWORD 1 (0x1)

DefaultRpcStackSize REG_DWORD 8 (0x8)

 

 

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa

Authentication Packages REG_MULTI_SZ msv1_0\0\0

Notification Packages REG_MULTI_SZ \0scecli\0\0

 

------ SVCHOST SERVICES NOT RUNNING

 

STOPPED: DEMAND_START: AppMgmt : Gestion d'applications

STOPPED: DEMAND_START: dmserver : Gestionnaire de disque logique

STOPPED: DEMAND_START: Dot3svc : Configuration automatique de réseau câblé

STOPPED: DEMAND_START: EapHost : Service Protocole EAP (Extensible Authentication Protocol)

STOPPED: DEMAND_START: ERSvc : Service de rapport d'erreurs

STOPPED: DEMAND_START: helpsvc : Aide et support

STOPPED: DEMAND_START: hkmsvc : Service Gestion des clés et des certificats d'intégrité

STOPPED: DEMAND_START: HTTPFilter : HTTP SSL

STOPPED: DEMAND_START: napagent : Agent de protection d'accès réseau

STOPPED: DEMAND_START: RasAuto : Gestionnaire de connexion automatique d'accès distant

STOPPED: DEMAND_START: upnphost : Hôte de périphérique universel Plug-and-Play

STOPPED: DEMAND_START: WmdmPmSN : Service de numéro de série du lecteur multimédia portable

STOPPED: DEMAND_START: xmlprov : Service d'approvisionnement réseau

STOPPED: DISABLED: Alerter : Avertissement

STOPPED: DISABLED: Irmon : Moniteur infrarouge

STOPPED: DISABLED: Messenger : Affichage des messages

STOPPED: DISABLED: RemoteAccess : Routage et accès distant

STOPPED: DISABLED: Schedule : Planificateur de tâches

STOPPED: DISABLED: SharedAccess : Pare-feu Windows / Partage de connexion Internet

STOPPED: DISABLED: wscsvc : Centre de sécurité

STOPPED: DISABLED: wuauserv : Mises à jour automatiques

 

------ SVCHOST CURRENTLY RUNNING:

 

1424- C:\WINDOWS\system32\svchost -k DcomLaunch

- DcomLaunch : Lanceur de processus serveur DCOM

- TermService : Services Terminal Server

 

1532- C:\WINDOWS\system32\svchost -k rpcss

- RpcSs : Appel de procédure distante (RPC)

 

1588- C:\WINDOWS\System32\svchost.exe -k netsvcs

- 6to4 : Service d'application d'assistance IPv6

- AudioSrv : Audio Windows

- BITS : Service de transfert intelligent en arrière-plan

- Browser : Explorateur d'ordinateur

- CryptSvc : Services de cryptographie

- Dhcp : Client DHCP

- EventSystem : Système d'événements de COM+

- FastUserSwitchingCompatibility : Compatibilité avec le Changement rapide d'utilisateur

- HidServ : HID Input Service

- lanmanserver : Serveur

- lanmanworkstation : Station de travail

- Netman : Connexions réseau

- Nla : NLA (Network Location Awareness)

- NtmsSvc : Stockage amovible

- RasMan : Gestionnaire de connexions d'accès distant

- seclogon : Connexion secondaire

- SENS : Notification d'événement système

- ShellHWDetection : Détection matériel noyau

- srservice : Service de restauration système

- TapiSrv : Téléphonie

- Themes : Thèmes

- TrkWks : Client de suivi de lien distribué

- W32Time : Horloge Windows

- winmgmt : Infrastructure de gestion Windows

- WZCSVC : Configuration automatique sans fil

 

1680- C:\WINDOWS\system32\svchost.exe -k NetworkService

- Dnscache : Client DNS

 

1832- C:\WINDOWS\system32\svchost.exe -k LocalService

- LmHosts : Assistance TCP/IP NetBIOS

- SSDPSRV : Service de découvertes SSDP

 

324- C:\WINDOWS\system32\svchost.exe -k LocalService

- WebClient : WebClient

 

700- C:\WINDOWS\system32\svchost.exe -k bthsvcs

- BthServ : Bluetooth Support Service

 

1456- C:\WINDOWS\system32\svchost.exe -k imgsvc

- stisvc : Acquisition d'image Windows (WIA)

 

------ SVCHOST SUB-DEPENDENTS

 

HTTPFilter = 1

STOPPED: WMPNetworkSvc: Service Partage réseau du Lecteur Windows Media

 

upnphost = 1

STOPPED: WMPNetworkSvc: Service Partage réseau du Lecteur Windows Media

 

SSDPSRV = 2

STOPPED: upnphost: Hôte de périphérique universel Plug-and-Play

STOPPED: WMPNetworkSvc: Service Partage réseau du Lecteur Windows Media

 

DMServer = 1

STOPPED: dmadmin: Service d'administration du Gestionnaire de disque logique

 

EventSystem = 1

RUNNING: SENS: Notification d'événement système

 

LanmanServer = 1

RUNNING: Browser: Explorateur d'ordinateur

 

LanmanWorkstation = 5

RUNNING: Browser: Explorateur d'ordinateur

STOPPED: Alerter: Avertissement

STOPPED: Messenger: Affichage des messages

STOPPED: Netlogon: Ouverture de session réseau

STOPPED: RpcLocator: Localisateur d'appels de procédure distante (RPC)

 

Netman = 1

STOPPED: SharedAccess: Pare-feu Windows / Partage de connexion Internet

 

Rasman = 1

STOPPED: RasAuto: Gestionnaire de connexion automatique d'accès distant

 

Tapisrv = 3

RUNNING: RasMan: Gestionnaire de connexions d'accès distant

STOPPED: Fax: Fax

STOPPED: RasAuto: Gestionnaire de connexion automatique d'accès distant

 

winmgmt = 3

RUNNING: 6to4: Service d'application d'assistance IPv6

STOPPED: SharedAccess: Pare-feu Windows / Partage de connexion Internet

STOPPED: wscsvc: Centre de sécurité

 

TermService = 2

RUNNING: FastUserSwitchingCompatibility: Compatibilité avec le Changement rapide d'utilisateur

STOPPED: Irmon: Moniteur infrarouge

 

RpcSs = 57

RUNNING: 6to4: Service d'application d'assistance IPv6

RUNNING: AudioSrv: Audio Windows

RUNNING: BITS: Service de transfert intelligent en arrière-plan

RUNNING: BthServ: Bluetooth Support Service

RUNNING: CryptSvc: Services de cryptographie

RUNNING: EventSystem: Système d'événements de COM+

RUNNING: FastUserSwitchingCompatibility: Compatibilité avec le Changement rapide d'utilisateur

RUNNING: HidServ: HID Input Service

RUNNING: LexBceS: LexBce Server

RUNNING: Netman: Connexions réseau

RUNNING: NtmsSvc: Stockage amovible

RUNNING: PolicyAgent: Services IPSEC

RUNNING: ProtectedStorage: Emplacement protégé

RUNNING: RasMan: Gestionnaire de connexions d'accès distant

RUNNING: SamSs: Gestionnaire de comptes de sécurité

RUNNING: SENS: Notification d'événement système

RUNNING: ShellHWDetection: Détection matériel noyau

RUNNING: Spooler: Spouleur d'impression

RUNNING: srservice: Service de restauration système

RUNNING: stisvc: Acquisition d'image Windows (WIA)

RUNNING: TapiSrv: Téléphonie

RUNNING: TermService: Services Terminal Server

RUNNING: TrkWks: Client de suivi de lien distribué

RUNNING: winmgmt: Infrastructure de gestion Windows

RUNNING: WmiApSrv: Carte de performance WMI

RUNNING: WZCSVC: Configuration automatique sans fil

STOPPED: AcrSch2Svc: Acronis Scheduler2 Service

STOPPED: CiSvc: Service d'indexation

STOPPED: COMSysApp: Application système COM+

STOPPED: dmadmin: Service d'administration du Gestionnaire de disque logique

STOPPED: dmserver: Gestionnaire de disque logique

STOPPED: Dot3svc: Configuration automatique de réseau câblé

STOPPED: EapHost: Service Protocole EAP (Extensible Authentication Protocol)

STOPPED: ERSvc: Service de rapport d'erreurs

STOPPED: Fax: Fax

STOPPED: gupdate1c8ce3fcb863340: Google Update Service (gupdate1c8ce3fcb863340)

STOPPED: helpsvc: Aide et support

STOPPED: hkmsvc: Service Gestion des clés et des certificats d'intégrité

STOPPED: Irmon: Moniteur infrarouge

STOPPED: MDM: Machine Debug Manager

STOPPED: Messenger: Affichage des messages

STOPPED: MSDTC: Distributed Transaction Coordinator

STOPPED: MSIServer: Windows Installer

STOPPED: napagent: Agent de protection d'accès réseau

STOPPED: NBService: NBService

STOPPED: NMIndexingService: NMIndexingService

STOPPED: postgresql-8.4: PostgreSQL Server 8.4

STOPPED: RasAuto: Gestionnaire de connexion automatique d'accès distant

STOPPED: RDSessMgr: Gestionnaire de session d'aide sur le Bureau à distance

STOPPED: RemoteAccess: Routage et accès distant

STOPPED: RSVP: QoS RSVP

STOPPED: Schedule: Planificateur de tâches

STOPPED: SharedAccess: Pare-feu Windows / Partage de connexion Internet

STOPPED: SwPrv: MS Software Shadow Copy Provider

STOPPED: VSS: Cliché instantané de volume

STOPPED: wscsvc: Centre de sécurité

STOPPED: xmlprov: Service d'approvisionnement réseau

 

TermService = 2

RUNNING: FastUserSwitchingCompatibility: Compatibilité avec le Changement rapide d'utilisateur

STOPPED: Irmon: Moniteur infrarouge

 

eaphost = 1

STOPPED: Dot3svc: Configuration automatique de réseau câblé

Mark Godlike Member

Mark

Posté(e)
Posté(e)

Merci pour le rapport :P

 

J'avais fait un edit tardif sur mon post précédent : as-tu conservé le patch pour AtomicMailboxpassword ? Si oui, fais signe et je t'expliquerai quoi faire.

 

Sinon, je devrai faire quelques recherches car là, je suis vraiment embêté par cette "infection" qui ne colle plus à rien de connu.

 

@+

Mark Godlike Member

Mark

Posté(e)
Posté(e)

Parfait ; ça pourra être très utile, pour nous mais aussi pour les autres, si c'est nouveau.

 

Bon, je pourrais te faire lancer Win32KDiag à nouveau pour tenter de réparer des permissions sur des fichiers système, mais ça risque de rouler pendant plusieurs heures alors on va essayer autre chose pour l'instant :

================

 

Je ne t'ai pas encore fait lancer ComboFix, alors on essaie maintenant. Tu devras supprimer la copie téléchargée l'autre jour car déjà périmée. Prends-en une fraîche du lien suivant :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

 

> Renomme-le en jean.exe et sauvegarde-le sur le Bureau de la machine infectée. Essaie de le lancer selon les instructions fournies dans le guide officiel :

http://www.bleepingcomputer.com/combofix/f...iliser-combofix

 

Si ça roule, poste le rapport ici. Si ça coince, prends note de tout message d'erreur (le cas échéant).

 

Pour le patch, fais signe lorsque tu l'auras et je te dirai comment procéder pour me l'expédier.

 

Merci, et à bientôt :P

 

Mark

jean_pfoumf Member

jean_pfoumf

Posté(e)
  • Auteur
Posté(e)

J'avais téléchargé le patch sur eMule, mais il semble qu'il ait disparu de la liste. D'autre part, j'ai la nette impression que mon PC mouline (envoi de spams ?) dès que je me connecte. Aussi je limite le temps de connexion au minimum.

Concernant Combofix, je peux le télécharger, mais ne peux pas l'utiliser, ni le déplacer, ni changer le nom : cela bloque Explorer. Je vais devoir le charger depuis une autre machine.

 

A suivre ...

Rejoindre la conversation

Vous publiez en tant qu’invité. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...