[résolu]Virus.Win32.Hala.a

Himself64 · le 1 mars 2010

Ok, MBAM est installé, le rapport rkill est il toujours nécessaire?

Falkra · le 1 mars 2010

Poste le rapport rkill et surtout fais le scan MBAM (puis poste le rapport MBAM, n'oublie pas de mettre à jour MBAM avant).

Himself64 · le 1 mars 2010

le rapport rikill :

This log file is located at C:\rkill.log.

Please post this only if requested to by the person helping you.

Otherwise you can close this log when you wish.

Ran as Johan Brun on 01/03/2010 at 23:41:06.

Processes terminated by Rkill or while it was running:

C:\DOCUME~1\JOHANB~1\LOCALS~1\Temp\asr64_ldm.exe

C:\Documents and Settings\Johan Brun\Mes documents\Téléchargements\mbam-setup.exe

C:\Documents and Settings\Johan Brun\Mes documents\Téléchargements\rkill.exe

Rkill completed on 01/03/2010 at 23:41:28.

par contre, après le nettoyage effectué par Mbam, j'ai eu le reboot normal demandé par MBAM, puis au démarrage suivant, j'ai reçu un message d'erreur d'un processus .dll (pas penser à le noter) qui déclenche un reboot automatique, ça me l'a fait deux fois de suite, cette fois ça à l'air de tenir.

je vais mettre le rapport mbam dans la foulée.

Falkra · le 1 mars 2010

Note la prochaine fois, ça aidera.

Ok, poste le rapport MBAM stp.

Himself64 · le 1 mars 2010

et voici le rapport MBAM. A noté qu'excepté les deux messages d'erreurs + reboot, je n'ai plus aucun autre symptôme.

Malwarebytes' Anti-Malware 1.44

Version de la base de données: 3811

Windows 5.1.2600 Service Pack 3

Internet Explorer 7.0.5730.13

01/03/2010 23:56:31

mbam-log-2010-03-01 (23-56-31).txt

Type de recherche: Examen rapide

Eléments examinés: 125239

Temps écoulé: 9 minute(s), 55 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 3

Valeur(s) du Registre infectée(s): 6

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 11

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

HKEY_CLASSES_ROOT\CLSID\{a3ba40a2-74f0-42bd-f434-00b15a2c8953} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a3ba40a2-74f0-42bd-f434-00b15a2c8953} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a3ba40a2-74f0-42bd-f434-00b15a2c8953} (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a3ba40a2-74f0-42bd-f434-00b15a2c8953} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\uishf9wuifwuh387fh3wufinhjfdwefe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\asr64_ldm.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

C:\RECYCLER\S-1-5-21-1511348882-0145639465-777686084-3712\nissan.exe (Worm.Autorun.B) -> Delete on reboot.

C:\WINDOWS\system32\drivers\ndmbnxz.sys (Rootkit.Agent) -> Delete on reboot.

C:\WINDOWS\Temp\_ex-68.exe (Rogue.SecurityTool) -> Quarantined and deleted successfully.

C:\Documents and Settings\Johan Brun\Local Settings\Temporary Internet Files\Content.IE5\GO6U9WQ6\hyxrmxs[1].htm (Trojan.Ertfor) -> Quarantined and deleted successfully.

C:\Documents and Settings\Johan Brun\Local Settings\Temporary Internet Files\Content.IE5\ND3EF9SD\ycpxe[1].htm (Malware.Packer.Gen) -> Quarantined and deleted successfully.

C:\Documents and Settings\Johan Brun\Application Data\wiaservg.log (Malware.Trace) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Bureau\nudetube.com.lnk (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Bureau\pornotube.com.lnk (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\All Users\Bureau\youporn.com.lnk (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\Johan Brun\Application Data\avdrn.dat (Malware.Trace) -> Quarantined and deleted successfully.

C:\Documents and Settings\Johan Brun\Local Settings\Temp\asr64_ldm.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Falkra · le 1 mars 2010

Ca va aller bien mieux, en effet.

Poste un nouveau rapport RSIT stp, pour faire le point. Il n'en fera qu'un, c'est normal.

Himself64 · le 1 mars 2010

voilà le nouveau rapport RSIT :

Logfile of random's system information tool 1.06 (written by random/random)

Run by Johan Brun at 2010-03-02 00:18:24

Microsoft Windows XP Édition familiale Service Pack 3

System drive C: has 33 GB (45%) free of 74 GB

Total RAM: 1015 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 00:18:45, on 02/03/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16981)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Trend Micro\BM\TMBMSRV.exe

C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Privoxy\privoxy.exe

C:\Program Files\Spyware Doctor\pctsAuxs.exe

C:\Program Files\Spyware Doctor\pctsSvc.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Trend Micro\Internet Security\TmPfw.exe

C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\EeePC\ACPI\AsEPCMon.exe

C:\Program Files\EeePC\ACPI\AsTray.exe

C:\Program Files\Parental Control\bin\pcontrol.exe

C:\Program Files\Microsoft IntelliType Pro\itype.exe

C:\Program Files\Microsoft IntelliPoint\ipoint.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Spyware Doctor\pctsTray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\ASUS\Eee Docking\Eee Docking.exe

C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe

C:\WINDOWS\system32\igfxext.exe

C:\Program Files\SFR\Kit\9props.exe

C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\WINDOWS\system32\cmd.exe

C:\WINDOWS\Temp\_ex-68.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\alg.exe

C:\Documents and Settings\Johan Brun\Mes documents\Téléchargements\RSIT.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\Program Files\trend micro\Johan Brun.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr/kit/adsl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [synAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe

O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe

O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe

O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe

O4 - HKLM\..\Run: [Parental Control] "C:\Program Files\Parental Control\bin\pcontrol.exe" --start

O4 - HKLM\..\Run: [ufSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"

O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"

O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe

O4 - HKCU\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe

O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: sysfgs32.exe

O4 - Global Startup: SuperHybridEngine.lnk = ?

O4 - Global Startup: BTTray.lnk = ?

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Envoyer à Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\policylsp.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\Aibelive\VOICEC~1\SKYPE4~1.DLL

O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: privoxy - The Privoxy team - www.privoxy.org - C:\Program Files\Privoxy\privoxy.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: Composant de commande centrale Trend Micro (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe

O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe

O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

--

End of file - 9340 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-11-10 395216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]

"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]

"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]

"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-27 17567744]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-03-06 1434920]

"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-03-06 79144]

"AsusACPIServer"=C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [2009-04-16 630784]

"AsusEPCMonitor"=C:\Program Files\EeePC\ACPI\AsEPCMon.exe [2009-03-13 98304]

"AsusTray"=C:\Program Files\EeePC\ACPI\AsTray.exe [2009-04-16 118784]

"Parental Control"=C:\Program Files\Parental Control\bin\pcontrol.exe [2009-03-20 1104384]

"UfSeAgnt.exe"=C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe [2009-10-21 995528]

"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2008-06-10 1442888]

"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2008-06-10 1406024]

"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-04 148888]

"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2010-01-18 1286608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"Eee Docking"=C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2009-05-08 395776]

"OE"=C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe [2009-08-26 492808]

"Connexion SFR 9props.exe"=C:\Program Files\SFR\Kit\9props.exe [2009-06-20 955712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SRS Premium Sound]

C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe /hideme []

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage

SuperHybridEngine.lnk - C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe

BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Documents and Settings\Johan Brun\Menu Démarrer\Programmes\Démarrage

sysfgs32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

"C:\Program Files\Dragon Age Origins - La forge des Héros\bin_ship\DAOCharacterCreator.exe"="C:\Program Files\Dragon Age Origins - La forge des Héros\bin_ship\DAOCharacterCreator.exe:*:Enabled:Dragon Age Origins - La forge des Héros"

"C:\Program Files\Dragon Age Origins - La forge des Héros\DAOriginsLauncher.exe"="C:\Program Files\Dragon Age Origins - La forge des Héros\DAOriginsLauncher.exe:*:Enabled:Dragon Age Origins - La forge des Héros Lanceur"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8bda5ab9-1261-11df-a21a-0026185a1bef}]

shell\AutoRun\command - E:\RINTAM///celunoc.exe

shell\explore\command - E:\RINTAM///celunoc.exe

shell\open\command - E:\RINTAM///celunoc.exe

======List of files/folders created in the last 1 months======

2010-05-13 09:01:50 ----D---- C:\WINDOWS\pss

2010-05-13 08:53:35 ----RSHD---- C:\RECYCLER

2010-05-13 08:47:25 ----D---- C:\Program Files\Privoxy

2010-05-13 08:47:20 ----D---- C:\Program Files\Parental Control

2010-05-13 08:46:00 ----D---- C:\Program Files\Aibelive

2010-05-13 08:35:13 ----D---- C:\Program Files\USB2.0 UVC Camera Device

2010-05-13 08:33:17 ----D---- C:\Program Files\EeePC

2010-05-13 08:33:17 ----A---- C:\WINDOWS\AsTrayLang.ini

2010-05-13 08:33:17 ----A---- C:\WINDOWS\AsAcpiSvrLang.ini

2010-05-13 08:28:43 ----A---- C:\WINDOWS\system32\spmsgXP_2k3.dll

2010-05-13 08:28:38 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$

2010-05-13 08:28:33 ----D---- C:\Program Files\Synaptics

2010-05-13 08:28:26 ----A---- C:\WINDOWS\system32\SynTPCo4.dll

2010-05-13 08:28:26 ----A---- C:\WINDOWS\system32\SynTPAPI.dll

2010-05-13 08:28:26 ----A---- C:\WINDOWS\system32\SynCtrl.dll

2010-05-13 08:28:26 ----A---- C:\WINDOWS\system32\SynCOM.dll

2010-05-13 08:28:25 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll

2010-05-13 08:22:37 ----D---- C:\WINDOWS\system32\RTCOM

2010-05-13 08:22:27 ----A---- C:\WINDOWS\vncutil.exe

2010-05-13 08:22:27 ----A---- C:\WINDOWS\SOUNDMAN.EXE

2010-05-13 08:22:27 ----A---- C:\WINDOWS\SkyTel.exe

2010-05-13 08:22:27 ----A---- C:\WINDOWS\RtlUpd.exe

2010-05-13 08:22:26 ----A---- C:\WINDOWS\RTLCPL.EXE

2010-05-13 08:22:25 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll

2010-05-13 08:22:25 ----A---- C:\WINDOWS\RtkAudioService.exe

2010-05-13 08:22:25 ----A---- C:\WINDOWS\RTHDCPL.EXE

2010-05-13 08:22:24 ----A---- C:\WINDOWS\MicCal.exe

2010-05-13 08:22:23 ----D---- C:\Program Files\Realtek

2010-05-13 08:22:23 ----A---- C:\WINDOWS\ALCWZRD.EXE

2010-05-13 08:22:23 ----A---- C:\WINDOWS\ALCMTR.EXE

2010-05-13 08:22:17 ----A---- C:\WINDOWS\RtlExUpd.dll

2010-05-12 23:41:58 ----A---- C:\WINDOWS\system32\h323log.txt

2010-05-12 23:41:36 ----A---- C:\WINDOWS\system32\vfwwdm32.dll

2010-05-12 23:41:36 ----A---- C:\WINDOWS\system32\ksuser.dll

2010-05-12 23:40:48 ----A---- C:\WINDOWS\system32\usbui.dll

2010-05-12 23:39:43 ----A---- C:\WINDOWS\imsins.BAK

2010-05-12 23:39:40 ----SHD---- C:\WINDOWS\Installer

2010-05-12 23:39:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-05-12 23:39:39 ----D---- C:\Program Files\Fichiers communs\ODBC

2010-05-12 23:39:39 ----A---- C:\WINDOWS\ODBCINST.INI

2010-05-12 23:39:36 ----RD---- C:\Program Files

2010-05-12 23:39:36 ----D---- C:\Program Files\Fichiers communs\SpeechEngines

2010-05-12 23:39:36 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared

2010-05-12 23:39:36 ----D---- C:\Program Files\Fichiers communs

2010-05-12 23:39:30 ----A---- C:\WINDOWS\system32\spxcoins.dll

2010-05-12 23:39:30 ----A---- C:\WINDOWS\system32\irclass.dll

2010-05-12 23:39:30 ----A---- C:\WINDOWS\system32\EqnClass.Dll

2010-05-12 23:39:30 ----A---- C:\WINDOWS\system32\dgsetup.dll

2010-05-12 23:39:30 ----A---- C:\WINDOWS\system32\dgrpsetu.dll

2010-05-12 23:39:29 ----N---- C:\WINDOWS\system32\CONFIG.TMP

2010-05-12 23:39:29 ----A---- C:\WINDOWS\TASKMAN.EXE

2010-05-12 23:39:29 ----A---- C:\WINDOWS\system32\batt.dll

2010-05-12 23:39:28 ----A---- C:\WINDOWS\NOTEPAD.EXE

2010-05-12 23:39:27 ----A---- C:\WINDOWS\system32\storprop.dll

2010-05-12 23:39:21 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini

2010-05-12 23:39:10 ----D---- C:\WINDOWS\system32\CatRoot2

2010-05-12 23:39:10 ----D---- C:\WINDOWS\system32\CatRoot

2010-05-12 23:39:03 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft

2010-05-12 23:38:58 ----A---- C:\WINDOWS\setuplog.txt

2010-05-12 23:38:55 ----D---- C:\Documents and Settings

2010-05-12 23:33:42 ----D---- C:\WINDOWS\OemDir

2010-05-12 23:33:37 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-05-12 23:33:37 ----RSD---- C:\WINDOWS\Fonts

2010-05-12 23:33:37 ----RD---- C:\WINDOWS\Web

2010-05-12 23:33:37 ----HD---- C:\WINDOWS\inf

2010-05-12 23:33:37 ----D---- C:\WINDOWS\WinSxS

2010-05-12 23:33:37 ----D---- C:\WINDOWS\twain_32

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Temp

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\wins

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\wbem

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\usmt

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\spool

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\ShellExt

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\Setup

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\ras

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\oobe

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\npp

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\mui

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\inetsrv

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\IME

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\icsxml

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\ias

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\fr-fr

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\fr

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\export

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\drivers

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\dhcp

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\config

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\3com_dmi

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\3076

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\2052

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1054

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1042

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1041

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1037

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1036

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1033

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1031

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1028

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32\1025

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system32

2010-05-12 23:33:37 ----D---- C:\WINDOWS\system

2010-05-12 23:33:37 ----D---- C:\WINDOWS\security

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Resources

2010-05-12 23:33:37 ----D---- C:\WINDOWS\repair

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Provisioning

2010-05-12 23:33:37 ----D---- C:\WINDOWS\PeerNet

2010-05-12 23:33:37 ----D---- C:\WINDOWS\pchealth

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Network Diagnostic

2010-05-12 23:33:37 ----D---- C:\WINDOWS\mui

2010-05-12 23:33:37 ----D---- C:\WINDOWS\msapps

2010-05-12 23:33:37 ----D---- C:\WINDOWS\msagent

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Media

2010-05-12 23:33:37 ----D---- C:\WINDOWS\L2Schemas

2010-05-12 23:33:37 ----D---- C:\WINDOWS\java

2010-05-12 23:33:37 ----D---- C:\WINDOWS\ime

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Help

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Driver Cache

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Debug

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Cursors

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Connection Wizard

2010-05-12 23:33:37 ----D---- C:\WINDOWS\Config

2010-05-12 23:33:37 ----D---- C:\WINDOWS\AppPatch

2010-05-12 23:33:37 ----D---- C:\WINDOWS\addins

2010-05-12 23:33:37 ----D---- C:\WINDOWS

2010-05-12 23:32:54 ----RASH---- C:\boot.ini

2010-05-12 23:32:52 ----A---- C:\WINDOWS\system32\OEMINFO.INI

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmvdmod.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\WMVCore.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmstream.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\WMSPDMOE.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmspdmod.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmsdmoe.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmsdmod.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpui.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpshell.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmploc.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpdxm.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpcore.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpcd.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmpasf.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmp.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\WMNetmgr.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmidx.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmerror.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmdmps.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmdmlog.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\wmasf.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\WMADMOE.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\WMADMOD.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\winshfhc.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\strmdll.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\shmedia.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\mswmdm.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\msscp.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\mspmsp.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\mspmsnsv.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\msnetobj.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\msdxmlc.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\MPG4DMOD.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\MP4SDMOD.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\MP43DMOD.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\logagent.exe

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\LAPRXY.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\dxmasf.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\drmv2clt.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\drmstor.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\drmclien.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\cewmdm.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\blastcln.exe

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\blackbox.dll

2010-05-12 23:32:51 ----A---- C:\WINDOWS\system32\asferror.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\vmmreg32.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\xmllite.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\wlanapi.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\vga64k.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\vga256.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\tspkg.dll

2010-05-12 23:32:49 ----A---- C:\WINDOWS\system32\osuninst.exe

2010-05-12 23:32:48 ----RASH---- C:\NTDETECT.COM

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\spnpinst.exe

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\pentnt.exe

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\odtext32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\odpdx32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\odfox32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\odexl32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\oddbse32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msxbde40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msvcrt20.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\mstext40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msrepl40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msrecr40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msrd2x40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msrclr40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msr2cenu.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msr2c.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\mspbde40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msltus40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msexcl40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\msexch40.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\migpwd.exe

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\lnkstub.exe

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\krnl386.exe

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\ir50_qcx.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\ir50_qc.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\ir50_32.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\ir41_qcx.dll

2010-05-12 23:32:48 ----A---- C:\WINDOWS\system32\ir41_qc.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\xpsp3res.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\xpsp2res.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\xpsp1res.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\xpob2res.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\wshfr.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\wmerrFRA.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\vbsfr.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\scrrnfr.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\scofr.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\mfc42loc.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\mfc40loc.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdtuq.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdtuf.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdtat.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdsl1.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdru1.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdru.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\kbdro.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\jsfr.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\edit.com

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\d3dramp.dll

2010-05-12 23:32:47 ----A---- C:\WINDOWS\system32\ctl3d32.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\msutb.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\mslbui.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\MSIMTF.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\MSCTFP.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\MSCTF.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\kbdycl.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\kbdycc.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\kbduzb.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\kbdsl.dll

2010-05-12 23:32:46 ----A---- C:\WINDOWS\system32\ctfmon.exe

2010-05-12 23:32:45 ----A---- C:\WINDOWS\system32\kbdpash.dll

2010-05-12 23:32:45 ----A---- C:\WINDOWS\system32\kbdnepr.dll

2010-05-12 23:32:45 ----A---- C:\WINDOWS\system32\kbdinmal.dll

2010-05-12 23:32:45 ----A---- C:\WINDOWS\system32\kbdinben.dll

2010-05-12 23:32:45 ----A---- C:\WINDOWS\system32\kbdinbe1.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\zipfldr.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\xmlprovi.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\xmlprov.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\xenroll.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\xcopy.exe

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\xactsrv.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wzcdlg.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wupdmgr.exe

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wtsapi32.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wstdecod.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wsock32.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wsnmp32.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\wshtcpip.dll

2010-05-12 23:32:44 ----A---- C:\WINDOWS\system32\WshRm.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\winhlp32.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\winhelp.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\win.ini

2010-05-12 23:32:43 ----A---- C:\WINDOWS\twunk_32.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\twunk_16.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\twain_32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\twain.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wshnetbs.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wshisn.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wship6.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wshext.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wshcon.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wshatm.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wscsvc.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wscript.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wscntfy.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ws2help.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ws2_32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wpnpinst.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wpabaln.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wowexec.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wowdeb.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wow32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wmphoto.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wmiprop.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wmi.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wlnotify.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wldap32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wkssvc.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winver.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wintrust.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winstrm.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winsta.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winsrv.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winspool.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winsock.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winscard.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winrnr.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winntbbu.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winnls.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winmsd.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winmm.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winlogon.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winipsec.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wininet.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winhttp.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winhlp32.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winfax.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\winbrand.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\win87em.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\win32spl.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\win.com

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wifeman.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiavusd.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiavideo.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiashext.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiaservc.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiascr.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiadss.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiadefui.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wiaacmgr.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wextract.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\webvw.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\webhits.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\webclnt.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\webcheck.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wdigest.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\wavemsp.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\w3ssl.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\w32topl.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\w32tm.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\w32time.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vssvc.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vssapi.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vssadmin.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vss_ps.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vjoy.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vga.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vfpodbc.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\version.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\verifier.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\verifier.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\verclsid.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ver.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vdmredir.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vdmdbg.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vcdex.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vbscript.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\vbajet32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\uxtheme.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\utilman.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\utildll.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\usp10.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\userinit.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\userenv.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\user32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\user.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\usbmon.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\urlmon.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\url.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ureg.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ups.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\upnpui.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\upnphost.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\upnpcont.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\upnp.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\untfs.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\unlodctr.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\uniplat.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\unimdmat.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\umpnpmgr.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\umdmxfrm.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\umandlg.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ulib.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\ufat.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\udhisapi.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tzchange.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\typelib.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\txflog.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\twext.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tsddd.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tsd32.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tsappcmp.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\trkwks.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tree.com

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\traffic.dll

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tracert6.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\tracert.exe

2010-05-12 23:32:43 ----A---- C:\WINDOWS\system32\osuninst.dll

2010-05-12 23:32:42 ----N---- C:\WINDOWS\system.ini

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\toolhelp.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\themeui.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tftp.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\termmgr.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\telnet.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcpsvcs.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcpmonui.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcpmon.ini

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcpmon.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcpmib.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tcmsetup.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\taskmgr.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\taskman.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapiui.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapisrv.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapiperf.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapi32.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapi3.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\tapi.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\t2embed.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\systray.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\syssetup.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sysocmgr.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\syskey.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sysinv.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sysedit.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\syncui.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\synceng.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\syncapp.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sxs.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\swprv.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\svcpack.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\svchost.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\subst.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\strmfilt.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\storage.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\stobject.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\stimon.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sti_ci.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sti.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\ssdpsrv.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\ssdpapi.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\srvsvc.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sqlwoa.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sqlwid.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sqlunirl.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sqlsrv32.dll

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\sprestrt.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\spoolsv.exe

2010-05-12 23:32:42 ----A---- C:\WINDOWS\system32\spoolss.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sort.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\softpub.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\snmpsnap.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\snmpapi.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\smss.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\smlogsvc.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\smlogcfg.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\smbinst.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\slbrccsp.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\slbiop.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\slbcsp.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\slayerxp.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\skeys.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\skdll.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sisbkup.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sigverif.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sigtab.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shutdown.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shsvcs.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shscrap.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shrpubw.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shmgrate.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shlwapi.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shimgvw.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shimeng.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shgina.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shfolder.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shell32.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shell.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shdocvw.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\shdoclc.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\share.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sfmapi.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sfcfiles.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sfc_os.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sfc.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\sfc.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\setver.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\setupn.exe

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\setupdll.dll

2010-05-12 23:32:41 ----A---- C:\WINDOWS\system32\setupapi.dll

2010-05-12 23:32:40 ----R---- C:\WINDOWS\system32\perfmon.msc

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\setup.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sethc.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\serwvdrv.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\services.msc

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\services.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\serialui.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\senscfg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sensapi.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sens.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sendmail.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sendcmsg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\security.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\secur32.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\seclogon.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sdpblb.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sdbinst.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scrrun.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scrobj.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scredir.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sclgntfy.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\schannel.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scesrv.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scecli.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sccsccp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sccbase.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scardsvr.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scardssp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\scarddlg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sc.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sbeio.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\sbe.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\savedump.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\samsrv.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\samlib.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\runonce.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rundll32.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\runas.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rtutils.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rtm.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rtipxmib.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rtcshare.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsvpsp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsvpperf.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsvpmsg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsvp.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsvp.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsmui.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsmsink.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsmps.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsm.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rshx32.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsh.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rsaenh.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rpcss.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rpcrt4.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rpcns4.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\routetab.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\routemon.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\route.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rnr20.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\riched32.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\riched20.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rexec.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\resutils.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\replace.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rend.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regwizc.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regwiz.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regsvr32.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regsvc.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regedt32.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\regapi.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\reg.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\redir.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\recover.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rdpdd.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rcp.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rcimlby.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rcbdyctl.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rastls.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rastapi.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasser.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rassapi.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasrad.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasqec.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasppp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasphone.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasmxs.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasmontr.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasmans.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasman.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasdlg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasdial.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasctrs.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasctrs.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\raschap.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasautou.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasauto.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasapi32.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\rasadhlp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qutil.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\query.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\quartz.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qosname.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qedwipes.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qedit.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qdvd.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qdv.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qcliprov.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qcap.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qasf.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qagentrt.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\qagent.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pubprn.vbs

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pstorsvc.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pstorec.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\psnppagn.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pschdprf.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pschdprf.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\psbase.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\psapi.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\proxycfg.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\proquota.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\progman.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\profmap.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\prodspec.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\printui.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\print.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\prflbmsg.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\powrprof.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\powercfg.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\polstore.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pnrpnsp.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pngfilt.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pmspl.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\plustab.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\ping6.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\ping.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pifmgr.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pidgen.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\photowiz.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfwci.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfts.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfproc.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfos.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfnet.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfmon.exe

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perffilt.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfdisk.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfctrs.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\perfci.ini

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\pdh.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\msftedit.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\system32\drprov.dll

2010-05-12 23:32:40 ----A---- C:\WINDOWS\regedit.exe

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\pautoenr.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\pathping.exe

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\panmap.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\packager.exe

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\p2psvc.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\p2pnetsh.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\p2pgraph.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\p2pgasvc.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\p2p.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\osk.exe

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\opengl32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\onex.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olethk32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olesvr32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olesvr.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olepro32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\oleprn.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\oledlg.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olecnv32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olecli32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\olecli.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\oleaut32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\oleaccrc.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\oleacc.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\ole32.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\ole2nls.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\ole2disp.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\ole2.dll

2010-05-12 23:32:39 ----A---- C:\WINDOWS\system32\offfilt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbctrac.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcp32r.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcjt32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcji32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcint.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbccu32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbccr32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbccp32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcconf.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcconf.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcbcp.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbcad32.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbc32gt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbc32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\odbc16gt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ocmanage.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\occache.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\objsel.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\oakley.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nwprovau.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntvdmd.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntvdm.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntshrui.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntsdexts.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntsd.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntprint.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmssvc.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsoprq.msc

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsmgr.msc

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsmgr.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsevt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsdba.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmsapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntmarta.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntlsapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntlanui2.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntlanui.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntlanman.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntdsapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ntdll.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nslookup.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\npptools.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\notepad.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nlsfunc.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nlhtml.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\newdev.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netui2.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netui1.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netui0.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netstat.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netshell.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netsh.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netrap.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netplwiz.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netmsg.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netman.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netlogon.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netid.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\neth.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netevent.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netdde.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netcfgx.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netapi32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\netapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\net1.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\net.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nddenb32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nddeapir.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nddeapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ncxpnt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\ncobjapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\nbtstat.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\narrhook.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\narrator.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\napstat.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\napmontr.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\napipsec.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mydocs.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mycomput.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mtxclu.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxmlr.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml6r.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml6.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml3r.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml3.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml2r.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml2.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msxml.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mswstr10.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mswsock.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mswebdvd.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mswdat10.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msw3prt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvideo.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvidctl.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvidc32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvfw32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvcrt40.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvcrt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvcp60.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvcp50.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvcirt.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvbvm60.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msvbvm50.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msv1_0.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mstlsapi.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mstime.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msswchx.exe

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msswch.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mssip32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mssign32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mssha.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mssap.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msrle32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msrd3x40.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msrating.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msratelc.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msprivs.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msports.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\mspatcha.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msorcl32.dll

2010-05-12 23:32:38 ----A---- C:\WINDOWS\system32\msorc32r.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msobjs.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msnsspc.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msls31.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msjtes40.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msjter40.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msjint40.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msjet40.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msisip.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msimsg.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msimg32.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msihnd.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msiexec.exe

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msieftp.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msidntld.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msidle.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msident.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msi.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mshtmler.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mshtmled.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mshtml.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mshta.exe

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msgsvc.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msgina.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msencode.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msdmo.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msdart.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msdadiag.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mscpxl32.dLL

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mscpx32r.dLL

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mscms.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mscdexnt.exe

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mscat32.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msaudite.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msasn1.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msapsspc.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msafd.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msacm32.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msacm.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\msaatext.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mrinfo.exe

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mprui.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mprmsg.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mprdim.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mprddm.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mprapi.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mpr.dll

2010-05-12 23:32:37 ----A---- C:\WINDOWS\system32\mpnotify.exe

2010-05-12 23:32:37 ----A---- C:\WINDOWS\msdfmap.ini

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mountvol.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\moricons.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\more.com

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\modex.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\modemui.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mode.com

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mobsync.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mobsync.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmutilse.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmsystem.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmdrv.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmcshext.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmcperf.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmcndmgr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmcex.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmcbase.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mmc.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mll_qic.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mll_mtf.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mll_hp.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mlang.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mimefilt.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\miglibnt.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\midimap.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mgmtapi.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mfcsubs.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mfc42u.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mfc42.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mfc40u.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mfc40.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mf3216.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mem.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mdminst.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mdhcp.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciwave.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciseq.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciqtz32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciole32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciole16.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mcicda.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mciavi32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mchgrcoi.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mcdsrv32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mcd32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mcastmib.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mapistub.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\makecab.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\magnify.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\mag_hook.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lzexpand.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lz32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lusrmgr.msc

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lsass.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lsasrv.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lprmonui.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lprhelp.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lpr.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lpq.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lpk.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\logonui.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\logman.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\loghours.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lodctr.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\locator.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\localui.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\localspl.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\localsec.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\loadperf.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\loadfix.com

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lmrt.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lmhsvc.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\linkinfo.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\lights.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\licmgr10.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\licdll.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\langwrbk.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\label.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kmsvc.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\keymgr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kernel32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kerberos.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kdcom.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kd1394.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdusx.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdusr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdusl.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdus.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdur.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdukx.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbduk.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsw.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsp.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsmsno.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsmsfi.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsg.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdsf.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdpo.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdpl1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdpl.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdno1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdno.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdnec.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdne.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdmon.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdmlt48.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdmlt47.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdmaori.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdmac.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdlv1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdlv.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdlt1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdlt.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdla.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdkyr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdkaz.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdiultn.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdit142.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdit.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdir.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdic.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhu1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhu.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhept.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhela3.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhela2.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhe319.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhe220.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdhe.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdgr1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdgr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdgkl.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdgae.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdfr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdfo.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdfi1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdfi.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdfc.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdest.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdes.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbddv.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdda.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdcz2.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdcz1.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdcz.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdcr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdcan.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdca.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdbu.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdbr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdblr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdbhc.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdbene.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdbe.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdazel.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kbdaze.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\KBDAL.DLL

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\kb16.com

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jsproxy.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jscript.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jobexec.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgsh400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgsd400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgpl400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgmd400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgdw400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jgaw400.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\jet500.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ixsso.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\iuengine.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\itss.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\itircl.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ir32_32.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxwan.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxsap.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxrtmgr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxroute.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxrip.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxpromn.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipxmontr.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipv6mon.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipv6.exe

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipsmsnap.dll

2010-05-12 23:32:36 ----A---- C:\WINDOWS\system32\ipsecsvc.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\netsetup.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ipsecsnp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ipsec6.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iprtrmgr.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iprtprio.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iprop.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ippromon.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ipnathlp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ipmontr.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iphlpapi.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ipconfig.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iologmsg.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\inseng.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\input.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\initpki.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\infosoft.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\inetppui.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\inetpp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\inetmib1.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\inetcplc.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\imm32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\imgutil.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\imeshare.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\imapi.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\imagehlp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\igmpagnt.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ifsutil.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ifmon.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iexpress.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iesetup.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iernonce.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iepeers.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ieencode.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iedkcs32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ieakui.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ieaksie.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ieakeng.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ie4uinit.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\idq.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\icmui.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\icmp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\icm32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iccvid.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iassvcs.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iassdo.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iassam.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iasrecst.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iasrad.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iaspolcy.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iasnap.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iashlpr.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iasads.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\iasacct.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\htui.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\httpapi.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hotplug.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hostname.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hnetwiz.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hnetmon.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hnetcfg.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hlink.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\hhsetup.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\help.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\h323msp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\grpconv.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\graphics.com

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\graftabl.com

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\gpkrsrc.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\gpkcsp.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\glu32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\glmf32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\gdi32.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\gdi.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\gcdef.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fwcfg.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ftsrch.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\ftp.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fsutil.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fsusd.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fsmgmt.msc

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\framebuf.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\format.com

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\forcedos.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fontview.exe

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fontsub.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fontext.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\system32\fmifs.dll

2010-05-12 23:32:35 ----A---- C:\WINDOWS\hh.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\fldrclnr.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\fixmapi.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\finger.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\findstr.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\find.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\filemgmt.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\feclient.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\fc.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\faultrep.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\fastopen.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\exts.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\extrac32.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\extmgr.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\expsrv.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\expand.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\exe2bin.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eventvwr.msc

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eventvwr.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eventlog.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eventcls.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eula.txt

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eudcedit.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\esentutl.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\esentprf.ini

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\esentprf.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\esent97.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\esent.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\es.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\ersvc.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\encdec.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\encapi.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\els.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\edlin.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eapsvc.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eapqec.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eappprxy.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eapphost.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eappgnui.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eappcfg.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eapp3hst.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\eapolqec.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dxtrans.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dxtmsft.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dxdiagn.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dxdiag.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dx8vb.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dx7vb.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dwwin.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dvdupgrd.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\duser.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dumprep.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dswave.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsuiext.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dssenh.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dssec.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsquery.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsprpres.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsprop.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsound3d.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsound.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dskquoui.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dskquota.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsdmoprp.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsdmo.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\dsauth.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\ds32gt.dll

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\ds16gt.dLL

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\drwtsn32.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\system32\drwatson.exe

2010-05-12 23:32:34 ----A---- C:\WINDOWS\explorer.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpwsockx.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpwsock.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpvvox.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpvsetup.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpvoice.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpvacm.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpserial.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnwsock.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnsvr.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnmodem.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnlobby.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnhupnp.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnhpast.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnet.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpnaddr.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpmodemx.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dplayx.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dplaysvr.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dplay.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dpcdll.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3ui.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3svc.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3msm.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3dlg.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3cfg.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dot3api.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dosx.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\doskey.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\docprop2.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\docprop.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dnsrslvr.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dnsapi.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmusic.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmsynth.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmstyle.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmserver.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmscript.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmremote.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmocx.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmloader.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmintf.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmime.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmdskres.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmdskmgr.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmdlgs.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmconfig.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmcompos.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmband.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dmadmin.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dllhst3g.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dllhost.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dispex.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskperf.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskpart.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskmgmt.msc

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskcopy.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskcopy.com

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diskcomp.com

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dinput8.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dinput.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dimsroam.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dimsntfy.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dimap.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\digest.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diantz.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\diactfrm.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dhcpsapi.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dhcpqec.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dhcpmon.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dgnet.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfsshlex.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrgui.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrgsnap.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrgres.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrgntfs.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrgfat.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dfrg.msc

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\devmgr.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\devmgmt.msc

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\devenum.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\deskperf.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\deskmon.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\deskadp.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\defrag.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\debug.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\ddrawex.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\ddraw.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\ddeshare.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\ddeml.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dciman32.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dbnmpntw.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dbnetlib.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dbmsrpcn.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dbghelp.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dbgeng.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\davclnt.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\datime.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\dataclen.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\danim.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3dxof.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3drm.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3dpmesh.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3dim700.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3dim.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3d9.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3d8thk.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\d3d8.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\ctl3dv2.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\csseqchk.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\csrss.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\csrsrv.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cscui.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cscript.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cscdll.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptui.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptsvc.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptnet.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptext.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptdll.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\cryptdlg.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\crypt32.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\crtdll.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\credui.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\credssp.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\corpol.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\convert.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\control.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\console.dll

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\conime.exe

2010-05-12 23:32:33 ----A---- C:\WINDOWS\system32\confmsp.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\windowscodecsext.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\windowscodecs.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\tourstart.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\shellstyle.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\photometadatahandler.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\msshavmsg.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\msjetoledb40.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\mmcfxcommon.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\microsoft.managementconsole.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\l2gpstore.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\dot3gpclnt.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\comres.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\compstui.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\compobj.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\compmgmt.msc

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\compatUI.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\compact.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\comp.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\commdlg.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\command.com

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\comdlg32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\comctl32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\comcat.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cnvfat.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cnetcfg.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmutil.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmstp.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmsetACL.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmpbk32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmmon32.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmdl32.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmdial32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmd.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cmcfg32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\clusapi.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\clipsrv.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cliconfg.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cliconfg.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cleanmgr.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\clb.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\ckcnv.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cisvc.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\ciodm.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cidaemon.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cic.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\ciadv.msc

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\ciadmin.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\chkntfs.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\chkdsk.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\chcp.com

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cfgmgr32.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\certmgr.msc

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\certmgr.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\certcli.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cdosys.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cdm.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cdfview.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\ccfgnt.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cards.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\capesnpn.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\camocx.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cacls.exe

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cabview.dll

2010-05-12 23:32:32 ----A---- C:\WINDOWS\system32\cabinet.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\btpanui.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\browsewm.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\browseui.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\browser.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\browselc.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\bootvrfy.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\bootvid.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\bootok.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\bidispl.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\batmeter.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\basesrv.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\azroles.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\avifile.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\avifil32.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\avicap32.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\avicap.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\autolfn.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\autofmt.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\autodisc.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\autoconv.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\autochk.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\authz.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\auditusr.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\audiosrv.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\attrib.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atmpvcno.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atmlib.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atmfd.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atmadm.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atl.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\atkctrs.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\at.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\asycfilt.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\arp.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\apphelp.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\append.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\apcups.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\amstream.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\alrsvc.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\alg.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\ahui.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\advpack.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\advapi32.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\adsnt.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\adsmsext.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\adsldpc.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\adsldp.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\adptif.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\admparse.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\actxprxy.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\actmovie.exe

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\activeds.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\aclui.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\acledit.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\aaaamon.dll

2010-05-12 23:32:31 ----A---- C:\WINDOWS\system32\6to4svc.dll

2010-05-12 23:28:31 ----D---- C:\WINDOWS\I386

2010-05-12 23:28:24 ----SHD---- C:\System Volume Information

2010-05-12 22:55:29 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$

2010-05-12 22:55:21 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$

2010-05-12 22:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$

2010-05-12 22:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$

2010-05-12 22:50:58 ----D---- C:\WINDOWS\ie7updates

2010-05-12 22:50:49 ----A---- C:\WINDOWS\system32\igfxres.dll

2010-05-12 22:49:33 ----A---- C:\WINDOWS\oemver.txt

2010-05-12 22:49:23 ----D---- C:\Program Files\Microsoft Office Suite Activation Assistant

2010-05-12 22:49:09 ----A---- C:\WINDOWS\system32\msonpmon.dll

2010-05-12 22:47:46 ----D---- C:\Program Files\Fichiers communs\DESIGNER

2010-05-12 22:47:32 ----D---- C:\Program Files\Microsoft.NET

2010-05-12 22:45:29 ----D---- C:\WINDOWS\SHELLNEW

2010-05-12 22:45:15 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help

2010-05-12 22:44:56 ----RHD---- C:\MSOCache

2010-05-12 22:44:10 ----N---- C:\WINDOWS\system32\spmsg.dll

2010-05-12 22:44:04 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$

2010-05-12 22:43:44 ----D---- C:\Program Files\Windows Media Connect 2

2010-05-12 22:43:35 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$

2010-05-12 22:42:43 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$

2010-05-12 22:42:12 ----D---- C:\WINDOWS\system32\LogFiles

2010-05-12 22:42:02 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$

2010-05-12 22:41:30 ----D---- C:\Program Files\Norton Internet Security

2010-05-12 22:41:23 ----D---- C:\Program Files\Skype

2010-05-12 22:41:22 ----D---- C:\Program Files\Fichiers communs\Skype

2010-05-12 22:41:18 ----D---- C:\Documents and Settings\All Users\Application Data\Skype

2010-05-12 22:37:52 ----RSD---- C:\WINDOWS\assembly

2010-05-12 22:37:17 ----D---- C:\WINDOWS\Microsoft.NET

2010-05-12 22:36:40 ----D---- C:\Program Files\Microsoft Sync Framework

2010-05-12 22:35:55 ----A---- C:\WINDOWS\system32\d3dx9_32.dll

2010-05-12 22:35:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition

2010-05-12 22:34:59 ----D---- C:\Program Files\Microsoft

2010-05-12 22:34:42 ----D---- C:\Program Files\Windows Live SkyDrive

2010-05-12 22:34:20 ----D---- C:\Program Files\Windows Live

2010-05-12 22:32:21 ----D---- C:\Program Files\Fichiers communs\Windows Live

2010-05-12 22:32:08 ----A---- C:\WINDOWS\sr.VBS

2010-05-12 22:31:57 ----D---- C:\WINDOWS\WBEM

2010-05-12 22:31:36 ----HDC---- C:\WINDOWS\ie7

2010-05-12 22:31:22 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$

2010-05-12 22:31:01 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$

2010-05-12 22:30:12 ----D---- C:\Program Files\Microsoft Office

2010-05-12 22:29:44 ----D---- C:\Program Files\Microsoft Works

2010-05-12 22:29:04 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

2010-05-12 22:28:57 ----D---- C:\Program Files\Fichiers communs\Adobe

2010-05-12 22:28:57 ----D---- C:\Program Files\Adobe

2010-05-12 22:28:19 ----D---- C:\Program Files\Fichiers communs\InstallShield

2010-05-12 22:27:55 ----D---- C:\Program Files\ASUS

2010-05-12 22:27:36 ----A---- C:\WINDOWS\system32\hidserv.dll

2010-05-12 22:26:12 ----A---- C:\WINDOWS\system32\btw_ci.dll

2010-05-12 22:26:08 ----D---- C:\Program Files\WIDCOMM

2010-05-12 22:26:00 ----D---- C:\Documents and Settings\All Users\Application Data\Wireless LAN Card

2010-05-12 22:25:34 ----D---- C:\Program Files\Atheros

2010-05-12 22:25:31 ----D---- C:\Documents and Settings\All Users\Application Data\Atheros

2010-05-12 22:25:10 ----D---- C:\WINDOWS\system32\Atheros_L1e

2010-05-12 22:25:07 ----HD---- C:\Program Files\InstallShield Installation Information

2010-05-12 22:24:49 ----A---- C:\WINDOWS\system32\igxprd32.dll

2010-05-12 22:24:49 ----A---- C:\WINDOWS\system32\igfxtray.exe

2010-05-12 22:24:49 ----A---- C:\WINDOWS\system32\igfxpers.exe

2010-05-12 22:24:49 ----A---- C:\WINDOWS\system32\igfxexps.dll

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igxpgd32.dll

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igxpdv32.dll

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igldev32.dll

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igfxzoom.exe

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igfxsrvc.exe

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igfxsrvc.dll

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igfxext.exe

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\igfxcfg.exe

2010-05-12 22:24:48 ----A---- C:\WINDOWS\system32\hccutils.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igxpdx32.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\iglicd32.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igfxress.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igfxpph.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igfxdo.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igfxdev.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\igfxCoIn_v4906.dll

2010-05-12 22:24:47 ----A---- C:\WINDOWS\system32\hkcmd.exe

2010-05-12 22:24:46 ----D---- C:\WINDOWS\system32\Lang

2010-05-12 22:24:46 ----A---- C:\WINDOWS\system32\igxpun.exe

2010-05-12 22:24:46 ----A---- C:\WINDOWS\system32\difxapi.dll

2010-05-12 22:24:11 ----D---- C:\WINDOWS\system32\ReinstallBackups

2010-05-12 22:24:09 ----DC---- C:\WINDOWS\system32\DRVSTORE

2010-05-12 22:24:08 ----D---- C:\Program Files\Intel

2010-05-12 22:24:08 ----A---- C:\WINDOWS\system32\CSVer.dll

2010-05-12 22:24:01 ----D---- C:\Intel

2010-05-12 22:23:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$

2010-05-12 22:23:34 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$

2010-05-12 22:23:20 ----HDC---- C:\WINDOWS\$NtUninstallKB963027$

2010-05-12 22:23:07 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$

2010-05-12 22:22:56 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$

2010-05-12 22:22:48 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$

2010-05-12 22:22:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$

2010-05-12 22:22:30 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$

2010-05-12 22:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$

2010-05-12 22:22:12 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$

2010-05-12 22:22:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$

2010-05-12 22:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$

2010-05-12 22:21:45 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$

2010-05-12 22:21:33 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$

2010-05-12 22:21:25 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$

2010-05-12 22:21:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$

2010-05-12 22:21:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2010-05-12 22:20:56 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2010-05-12 22:20:44 ----A---- C:\WINDOWS\system32\spupdsvc.exe

2010-05-12 22:20:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$

2010-05-12 22:20:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$

2010-05-12 22:20:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$

2010-05-12 22:20:07 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$

2010-05-12 22:19:58 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2010-05-12 22:19:49 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$

2010-05-12 22:19:41 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$

2010-05-12 22:19:33 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$

2010-05-12 22:19:25 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$

2010-05-12 22:19:14 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$

2010-05-12 22:19:03 ----HDC---- C:\WINDOWS\$NtUninstallKB953155$

2010-05-12 22:18:55 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$

2010-05-12 22:18:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$

2010-05-12 22:18:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$

2010-05-12 22:18:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$

2010-05-12 22:18:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$

2010-05-12 22:18:12 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$

2010-05-12 22:18:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951618-v2$

2010-05-12 22:17:55 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$

2010-05-12 22:17:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$

2010-05-12 22:17:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$

2010-05-12 22:17:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$

2010-05-12 22:17:26 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$

2010-05-12 22:17:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$

2010-05-12 22:17:12 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$

2010-05-12 22:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$

2010-05-12 22:16:47 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$

2010-05-12 22:16:39 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$

2010-05-12 22:16:33 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$

2010-05-12 22:16:28 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$

2010-05-12 22:16:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

2010-05-12 22:16:12 ----HD---- C:\WINDOWS\$hf_mig$

2010-05-12 22:15:50 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage

2010-05-12 21:48:29 ----HD---- C:\Program Files\Uninstall Information

2010-05-12 21:48:13 ----D---- C:\WINDOWS\SoftwareDistribution

2010-05-12 21:48:11 ----SD---- C:\WINDOWS\system32\Microsoft

2010-05-12 21:48:11 ----D---- C:\WINDOWS\Prefetch

2010-05-12 21:48:10 ----A---- C:\WINDOWS\SchedLgU.Txt

2010-05-12 21:45:29 ----D---- C:\WINDOWS\system32\xircom

2010-05-12 21:45:29 ----D---- C:\Program Files\xerox

2010-05-12 21:45:29 ----D---- C:\Program Files\microsoft frontpage

2010-05-12 21:45:12 ----A---- C:\WINDOWS\OEWABLog.txt

2010-05-12 21:45:09 ----A---- C:\WINDOWS\system32\mapi32.dll

2010-05-12 21:44:04 ----SD---- C:\WINDOWS\Downloaded Program Files

2010-05-12 21:44:04 ----RD---- C:\WINDOWS\Offline Web Pages

2010-05-12 21:44:04 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest

2010-05-12 21:43:54 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest

2010-05-12 21:43:49 ----HD---- C:\Program Files\WindowsUpdate

2010-05-12 21:43:47 ----D---- C:\Program Files\Services en ligne

2010-05-12 21:43:38 ----D---- C:\WINDOWS\system32\DirectX

2010-05-12 21:43:37 ----A---- C:\WINDOWS\system32\atrace.dll

2010-05-12 21:43:36 ----A---- C:\WINDOWS\system32\desktop.ini

2010-05-12 21:43:36 ----A---- C:\WINDOWS\desktop.ini

2010-05-12 21:43:35 ----A---- C:\WINDOWS\system32\nmevtmsg.dll

2010-05-12 21:43:34 ----D---- C:\Program Files\Fichiers communs\Services

2010-05-12 21:43:34 ----A---- C:\WINDOWS\system32\acctres.dll

2010-05-12 21:43:33 ----SD---- C:\WINDOWS\Tasks

2010-05-12 21:43:33 ----D---- C:\Program Files\Fichiers communs\MSSoap

2010-05-12 21:43:33 ----A---- C:\WINDOWS\system32\icfgnt5.dll

2010-05-12 21:43:32 ----D---- C:\WINDOWS\system32\Macromed

2010-05-12 21:43:32 ----D---- C:\WINDOWS\srchasst

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuweb.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wups.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wucltui.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuauserv.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuaueng1.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuaueng.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuauclt1.exe

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuauclt.exe

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\wuapi.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\qmgrprxy.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\qmgr.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\bitsprx4.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\bitsprx3.dll

2010-05-12 21:43:31 ----A---- C:\WINDOWS\system32\bitsprx2.dll

2010-05-12 21:43:29 ----D---- C:\Program Files\Movie Maker

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\safrslv.dll

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\safrdm.dll

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\safrcdlg.dll

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\racpldlg.dll

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\fltMc.exe

2010-05-12 21:43:24 ----A---- C:\WINDOWS\system32\fltlib.dll

2010-05-12 21:43:23 ----D---- C:\WINDOWS\system32\Restore

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\srsvc.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\srrstr.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\srclient.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\nmmkcert.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\msconf.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\mnmsrvc.exe

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\mnmdd.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\isrdbg32.dll

2010-05-12 21:43:23 ----A---- C:\WINDOWS\system32\ils.dll

2010-05-12 21:43:22 ----D---- C:\Program Files\NetMeeting

2010-05-12 21:43:22 ----A---- C:\WINDOWS\system32\msoert2.dll

2010-05-12 21:43:22 ----A---- C:\WINDOWS\system32\msoeacct.dll

2010-05-12 21:43:22 ----A---- C:\WINDOWS\system32\inetres.dll

2010-05-12 21:43:22 ----A---- C:\WINDOWS\system32\inetcomm.dll

2010-05-12 21:43:21 ----D---- C:\Program Files\Outlook Express

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\schedsvc.dll

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\mstinit.exe

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\mstask.dll

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\isign32.dll

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\inetcfg.dll

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\icwphbk.dll

2010-05-12 21:43:21 ----A---- C:\WINDOWS\system32\icwdial.dll

2010-05-12 21:43:19 ----D---- C:\Program Files\Internet Explorer

2010-05-12 21:43:19 ----D---- C:\Program Files\Fichiers communs\System

2010-05-12 21:43:14 ----D---- C:\Program Files\ComPlus Applications

2010-05-12 21:43:13 ----A---- C:\WINDOWS\vbaddin.ini

2010-05-12 21:43:13 ----A---- C:\WINDOWS\vb.ini

2010-05-12 21:43:11 ----D---- C:\WINDOWS\Registration

2010-05-12 21:42:38 ----D---- C:\Program Files\Windows Media Player

2010-05-12 21:42:33 ----D---- C:\Program Files\Messenger

2010-05-12 21:42:32 ----D---- C:\Program Files\MSN Gaming Zone

2010-05-12 21:42:32 ----A---- C:\WINDOWS\system32\write.exe

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\winchat.exe

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\sndvol32.exe

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\hticons.dll

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\avwav.dll

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\avtapi.dll

2010-05-12 21:42:29 ----A---- C:\WINDOWS\system32\avmeter.dll

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\winmine.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\usrlogon.cmd

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\tsshutdn.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\tslabels.ini

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\tskill.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\tsdiscon.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\tscon.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\sol.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\shadow.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\rwinsta.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\reset.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\mshearts.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\getuname.dll

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\freecell.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\charmap.exe

2010-05-12 21:42:26 ----A---- C:\WINDOWS\system32\calc.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\regini.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\rdpcfgex.dll

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\qwinsta.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\qappsrv.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\msg.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\msdtcprf.ini

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\logoff.exe

2010-05-12 21:42:25 ----A---- C:\WINDOWS\system32\cdmodem.dll

2010-05-12 21:42:23 ----A---- C:\WINDOWS\system32\wmimgmt.msc

2010-05-12 21:42:23 ----A---- C:\WINDOWS\system32\sndrec32.exe

2010-05-12 21:42:23 ----A---- C:\WINDOWS\system32\mplay32.exe

2010-05-12 21:42:23 ----A---- C:\WINDOWS\system32\accwiz.exe

2010-05-12 21:42:22 ----D---- C:\Program Files\Windows NT

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\tsgqec.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\tscfgwmi.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\spider.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\sessmgr.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\rhttpaa.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\remotepg.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\rdshost.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\rdsaddin.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\mstscax.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\mstsc.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\mspaint.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\hypertrm.dll

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\clipbrd.exe

2010-05-12 21:42:22 ----A---- C:\WINDOWS\system32\aaclient.dll

2010-05-12 21:42:21 ----D---- C:\WINDOWS\system32\MsDtc

2010-05-12 21:42:21 ----D---- C:\WINDOWS\system32\Com

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\xolehlp.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\termsrv.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\stclient.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\rdpwsx.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\rdpsnd.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\rdpclip.exe

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\rdchost.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\qprocess.exe

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\mtxoci.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\mtxlegih.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\mtxex.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\mtxdm.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\msdtcuiu.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\msdtctm.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\msdtcprx.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\msdtclog.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\msdtc.exe

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\icaapi.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\dcomcnfg.exe

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\comrepl.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\comaddin.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\colbact.dll

2010-05-12 21:42:21 ----A---- C:\WINDOWS\system32\cfgbkend.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\comuid.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\comsvcs.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\comsnap.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\clbcatq.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\clbcatex.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\catsrvut.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\catsrvps.dll

2010-05-12 21:42:20 ----A---- C:\WINDOWS\system32\catsrv.dll

2010-05-12 21:42:18 ----A---- C:\WINDOWS\system32\servdeps.dll

2010-05-12 21:42:18 ----A---- C:\WINDOWS\system32\mmfutil.dll

2010-05-12 21:42:18 ----A---- C:\WINDOWS\system32\licwmi.dll

2010-05-12 21:42:18 ----A---- C:\WINDOWS\system32\cmprops.dll

2010-03-01 23:43:16 ----D---- C:\Documents and Settings\Johan Brun\Application Data\Malwarebytes

2010-03-01 23:43:06 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes

2010-03-01 23:43:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-03-01 23:19:04 ----D---- C:\rsit

2010-03-01 20:26:01 ----A---- C:\WINDOWS\BDTSupport.dll

2010-03-01 20:26:00 ----A---- C:\WINDOWS\SGDetectionTool.dll

2010-03-01 20:25:59 ----A---- C:\WINDOWS\PCTBDRes.dll

2010-03-01 20:25:59 ----A---- C:\WINDOWS\PCTBDCore.dll

2010-03-01 20:22:32 ----D---- C:\Program Files\Spyware Doctor

2010-03-01 20:22:32 ----D---- C:\Program Files\Fichiers communs\PC Tools

2010-03-01 20:22:32 ----D---- C:\Documents and Settings\Johan Brun\Application Data\PC Tools

2010-03-01 20:22:32 ----D---- C:\Documents and Settings\All Users\Application Data\PC Tools

2010-03-01 20:21:59 ----A---- C:\AUTOEXEC.BAT

2010-03-01 20:21:57 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP

2010-03-01 20:21:57 ----A---- C:\WINDOWS\control.ini

2010-03-01 20:04:07 ----A---- C:\WINDOWS\DCEBoot.exe

2010-03-01 19:27:27 ----A---- C:\WINDOWS\system32\fjhdyfhsn.bat

2010-02-28 20:49:46 ----D---- C:\Documents and Settings\Johan Brun\Application Data\EeeStorageUploader

2010-02-25 03:00:21 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$

2010-02-16 11:02:28 ----D---- C:\Documents and Settings\Johan Brun\Application Data\U3

2010-02-16 03:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$

2010-02-12 03:02:41 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$

2010-02-12 03:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$

2010-02-12 03:02:13 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$

2010-02-12 03:02:00 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$

2010-02-12 03:01:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$

2010-02-12 03:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$

2010-02-12 03:01:08 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$

2010-02-12 03:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$

======List of files/folders modified in the last 1 months======

2010-05-13 09:05:00 ----D---- C:\Documents and Settings\Johan Brun\Application Data\VoiceCommand

2010-05-12 23:39:21 ----ASH---- C:\Documents and Settings\Johan Brun\Application Data\desktop.ini

2010-05-12 22:25:29 ----D---- C:\Documents and Settings\Johan Brun\Application Data\InstallShield

2010-05-12 21:48:32 ----D---- C:\Documents and Settings\Johan Brun\Application Data\Identities

2010-03-02 00:18:36 ----D---- C:\Program Files\Trend Micro

2010-03-02 00:07:46 ----D---- C:\Program Files\Mozilla Firefox

2010-03-01 23:56:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$

2010-02-28 15:17:49 ----D---- C:\Documents and Settings\Johan Brun\Application Data\vlc

2010-02-22 18:56:53 ----D---- C:\Documents and Settings\Johan Brun\Application Data\gtk-2.0

2010-02-18 15:40:06 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]

R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14720]

R1 policyappblockservice;Parental Control Application Filter; \??\C:\Program Files\Parental Control\bin\policyappblock.sys []

R1 tmtdi;Trend Micro TDI Driver; C:\WINDOWS\system32\DRIVERS\tmtdi.sys [2009-08-26 80400]

R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]

R2 tmactmon;tmactmon; \??\C:\WINDOWS\system32\drivers\tmactmon.sys []

R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []

R2 tmevtmgr;tmevtmgr; \??\C:\WINDOWS\system32\drivers\tmevtmgr.sys []

R2 tmpreflt;tmpreflt; C:\WINDOWS\system32\DRIVERS\tmpreflt.sys [2009-05-22 36368]

R2 tmxpflt;tmxpflt; C:\WINDOWS\system32\DRIVERS\tmxpflt.sys [2009-05-22 225296]

R2 vsapint;vsapint; C:\WINDOWS\system32\DRIVERS\vsapint.sys [2009-05-22 1220120]

R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-03-13 1528928]

R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2008-04-08 10752]

R3 BTDriver;Pilote de communications virtuelles Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-02-04 37160]

R3 BTKRNL;Enumérateur de bus Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-08-19 991656]

R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]

R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]

R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-30 5063168]

R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-03-02 38912]

R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]

R3 NuidFltr;NUID filter driver; C:\WINDOWS\system32\DRIVERS\NuidFltr.sys [2009-05-09 14736]

R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2008-06-10 31048]

R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-03-06 208304]

R3 tmcfw;Trend Micro Common Firewall Service; C:\WINDOWS\system32\DRIVERS\TM_CFW.sys [2009-08-26 335376]

R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

R3 usbvideo;USB µø°T¸Ë¸m (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]

R3 uvclf;uvclf; C:\WINDOWS\system32\DRIVERS\uvclf.sys [2008-11-19 39040]

R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]

S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]

S3 btaudio;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-30 534568]

S3 BTWDNDIS;Serveur d'accès au réseau local Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-24 156816]

S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2008-03-10 57384]

S3 btwmodem;Modem Bluetooth; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2008-02-04 37032]

S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-08-19 47272]

S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

S3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\WINDOWS\system32\drivers\srs_PremiumSound_i386.sys [2009-04-20 232872]

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

S4 sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73600]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe [2009-11-10 112592]

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-09-02 346720]

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-04 152984]

R2 privoxy;privoxy; C:\Program Files\Privoxy\privoxy.exe [2008-01-20 302080]

R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2009-12-09 365280]

R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2010-01-18 1141712]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]

R2 SfCtlCom;Composant de commande centrale Trend Micro; C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe [2009-10-21 711248]

R2 TMBMServer;Trend Micro Unauthorized Change Prevention Service; C:\Program Files\Trend Micro\BM\TMBMSRV.exe [2009-08-26 341256]

R2 TmPfw;Trend Micro Personal Firewall; C:\Program Files\Trend Micro\Internet Security\TmPfw.exe [2009-09-04 497008]

R2 TmProxy;Trend Micro Proxy Service; C:\Program Files\Trend Micro\Internet Security\TmProxy.exe [2009-09-04 677128]

S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Falkra · le 1 mars 2010

Il en reste. On essaie la méthode douce (même si je préfère les méthodes moins diplomates, mais la machine déjà quelques écrans bleus à ton actif).

Télécharge OTMoveIt (OTM) par OldTimer.

Enregistre ce fichier sur le Bureau.
Fais un double clic sur OTM.exe pour lancer l'exécution de l'outil. (Note: Si tu utilises Vista, fais un clic droit sur le fichier puis choisir Exécuter en tant qu'administrateur).

Copie les lignes de la zone "Code" ci-dessous dans le Presse-papiers en les sélectionnant toutes puis en appuyant simultanément sur les touches CTRL et C (ou, après les avoir sélectionnées, en faisant un clic droit puis en choisissant Copier):

:processes
:files
C:\WINDOWS\Temp\_ex-68.exe
C:\Documents and Settings\Johan Brun\Menu Démarrer\Programmes\Démarrage\sysfgs32.exe
C:\WINDOWS\DCEBoot.exe
C:\WINDOWS\system32\fjhdyfhsn.bat

:reg 
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8bda5ab9-1261-11df-a21a-0026185a1bef}]

:commands
[zipfiles]
[emptytemp]

Retourne dans la fenêtre de OTM, fais un clic droit dans la zone de gauche intitulée "Paste List Of Files/Folders to Move" (sous la barre jaune) puis choisir Coller.
Clique sur le bouton rouge Moveit!.
Ferme OTMoveIt3
Poste dans ta prochaine réponse le rapport de OTMoveIt3 (contenu du fichier C:\_OTM\MovedFiles\********_******.log - les *** sont des chiffres représentant la date [moisjourannée] et l'heure)

Note: Si un fichier ou un dossier ne peut pas être déplacé immédiatement, un redémarrage sera peut-être nécessaire pour permettre de terminer le processus de déplacement. Si le redémarrage de la machine vous est demandé, choisir Oui/Yes.

Himself64 · le 1 mars 2010

le rapport OTM :

All processes killed

========== PROCESSES ==========

========== FILES ==========

C:\WINDOWS\Temp\_ex-68.exe moved successfully.

File move failed. C:\Documents and Settings\Johan Brun\Menu Démarrer\Programmes\Démarrage\sysfgs32.exe scheduled to be moved on reboot.

C:\WINDOWS\DCEBoot.exe moved successfully.

C:\WINDOWS\system32\fjhdyfhsn.bat moved successfully.

========== REGISTRY ==========

Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8bda5ab9-1261-11df-a21a-0026185a1bef}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8bda5ab9-1261-11df-a21a-0026185a1bef}\ not found.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

User: Invité

->Temp folder emptied: 643910 bytes

->Temporary Internet Files folder emptied: 39822 bytes

->FireFox cache emptied: 89397801 bytes

->Flash cache emptied: 1560 bytes

User: Johan Brun

->Temp folder emptied: 269434808 bytes

->Temporary Internet Files folder emptied: 107134555 bytes

->Java cache emptied: 52464946 bytes

->FireFox cache emptied: 53470927 bytes

->Flash cache emptied: 21177 bytes

User: LocalService

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 33597 bytes

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 3072 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 38440485 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23931826 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes

RecycleBin emptied: 290507844 bytes

Total Files Cleaned = 883,00 mb

OTM by OldTimer - Version 3.1.10.0 log created on 03022010_003406

Files moved on Reboot...

C:\Documents and Settings\Johan Brun\Menu Démarrer\Programmes\Démarrage\sysfgs32.exe moved successfully.

Registry entries deleted on Reboot...

Falkra · le 2 mars 2010

Bien.

Redémarre, et poste un rapport HijackThis stp.

Connexion

Pas encore inscrit ?

[résolu]Virus.Win32.Hala.a

Messages recommandés

Himself64

Falkra

Himself64

Falkra

Himself64

Falkra

Himself64

Falkra

Himself64

Falkra

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer