Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Problème de virus

pyp

Par pyp
dans Analyses et éradication malwares

 Partager

Messages recommandés

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

le message d'erreur fait penser que la commande n'est pas correcte: excuse moi de te poser la question, mais as tu bien copié exactement la commande ?

alors je vais te demander de recommencer, mais en mode sans échec

 

1°) Redémarre le PC, impérativement en mode sans échec.

  • Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement.
  • Tapote par alternance les touches [F8] et [F5] jusqu'à l'affichage du menu des options avancées de Windows.
  • Sélectionne "Mode sans échec" et appuie sur la touche [Entrée].
  • Clique sur le bouton Oui à l'apparition du message.
  • Choisis ton compte usuel, et non Administrateur.

 

Note: si le mode sans échec n'est pas accessible, ne tente pas de passer par l'Utilitaire de Configuration système surtout! le pc redémarrerait en boucle.

 

2°) Double clique directement sur le fichier Sality.com et laisse le travailler.

 

3°) Une fois le scan terminé, le pc devra peut être redémarrer: sinon fais le manuellement.

 

4°) Lance ComboFix comme indiqué.

 

Poste les 2 rapports stp.

 

Note: il est possible que Sality ait détruit le mode sans échec, aussi si c'est le cas, fais la procédure en mode normal

pyp Member

pyp

Posté(e)
  • Auteur
Posté(e)

Je trouve pas le rapport de sality killer. Il se trouve ou?

 

Voila le rapport combofix:

 

ComboFix 10-04-12.06 - Pierre-Yves 18/04/2010 21:11:55.2.2 - FAT32x86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.431 [GMT 2:00]

Lancé depuis: c:\documents and settings\Pierre-Yves\Bureau\Antivirus\pyp.exe

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\windows\system32\2819874029.dat

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_CRYPTSVCREGSRVC

-------\Legacy_MESSENGEREVENTLOG

-------\Legacy_RASAUTORSVP

-------\Legacy_WSCSVCREMOTEACCESS

-------\Service_CryptSvcRegSrvc

-------\Service_MessengerEventlog

-------\Service_RasAutoRSVP

-------\Service_wscsvcRemoteAccess

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2010-03-18 au 2010-04-18 ))))))))))))))))))))))))))))))))))))

.

 

2010-04-18 19:18 . 2003-07-29 04:18 3839 ----a-w- c:\windows\system32\drivers\GETPADD.sys

2010-04-17 10:22 . 2010-04-17 10:22 -------- d-----w- c:\program files\Microsoft Synchronization Services

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\documents and settings\All Users\Microsoft

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft Analysis Services

2010-04-17 10:19 . 2010-04-17 10:19 -------- d-----w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Microsoft Help

2010-04-17 10:18 . 2010-04-17 10:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

2010-04-17 09:46 . 2010-04-17 09:46 -------- d-----w- c:\program files\Fichiers communs\Adobe

2010-04-17 09:19 . 2010-04-17 09:19 -------- d-----w- C:\FOUND.000

2010-04-17 08:57 . 2010-04-17 08:57 -------- d-----w- c:\program files\ZHPDiag

2010-04-16 21:44 . 2010-04-16 21:44 -------- d-----w- c:\documents and settings\Pierre-Yves\Application Data\Malwarebytes

2010-04-16 21:43 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-04-16 21:43 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-04-13 10:50 . 2010-04-13 11:01 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2010-04-13 10:50 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys

2010-04-13 10:50 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys

2010-04-13 10:50 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys

2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\program files\Avira

2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira

2010-04-12 20:33 . 2010-04-12 20:34 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SGZUD

2010-04-12 20:32 . 2010-04-12 20:32 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google

2010-04-12 20:27 . 2010-04-12 20:27 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google

2010-03-24 08:04 . 2010-03-24 18:17 952768 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeARM.exe

2010-03-24 08:04 . 2010-03-24 18:17 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeExtractFiles.dll

2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\ReaderUpdater.exe

2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AcrobatUpdater.exe

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-04-17 10:34 . 2007-03-15 16:25 88256 ----a-w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-03-11 12:34 . 2004-09-20 15:49 832512 ------w- c:\windows\system32\wininet.dll

2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll

2010-03-11 12:34 . 2004-09-20 15:48 17408 ----a-w- c:\windows\system32\corpol.dll

2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll

2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2010-02-16 19:07 . 2004-08-03 22:48 2148352 ------w- c:\windows\system32\ntoskrnl.exe

2010-02-16 19:06 . 2004-08-03 22:49 2026496 ------w- c:\windows\system32\ntkrnlpa.exe

2010-02-12 09:03 . 2010-02-26 00:41 293376 ------w- c:\windows\system32\browserchoice.exe

2010-02-12 04:34 . 2004-09-20 15:48 100864 ----a-w- c:\windows\system32\6to4svc.dll

2010-02-11 12:02 . 2004-09-20 15:48 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys

.

 

((((((((((((((((((((((((((((( SnapShot@2010-04-13_10.31.06 )))))))))))))))))))))))))))))))))))))))))

.

+ 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll

+ 2009-07-11 21:05 . 2009-07-11 21:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll

+ 2009-07-11 21:05 . 2009-07-11 21:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll

+ 2008-07-29 04:07 . 2008-07-29 04:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll

+ 2008-07-29 04:07 . 2008-07-29 04:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll

+ 2010-04-18 19:18 . 2010-04-18 19:18 16384 c:\windows\Temp\Perflib_Perfdata_2f0.dat

+ 2009-09-26 18:56 . 2009-09-26 18:56 34688 c:\windows\system32\FM20FRA.DLL

+ 2009-09-26 01:32 . 2009-09-26 01:32 31600 c:\windows\system32\FM20ENU.DLL

+ 2010-04-16 11:04 . 2010-04-16 11:04 28520 c:\windows\system32\drivers\ssmdrv.sys

+ 2010-01-13 14:01 . 2010-01-13 14:01 87040 c:\windows\system32\dllcache\cabview.dll

+ 2004-09-20 15:48 . 2010-01-13 14:01 87040 c:\windows\system32\cabview.dll

+ 2010-04-17 10:21 . 2010-04-17 10:21 47616 c:\windows\Installer\39053e.msi

+ 2010-04-13 10:32 . 2010-04-13 10:32 22528 c:\windows\Installer\273c4.msi

- 2006-09-21 14:20 . 2010-03-16 10:49 23040 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 23040 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 61440 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 61440 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 27136 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 27136 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 11264 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 11264 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 86016 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 86016 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 12288 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 12288 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2010-04-17 10:23 . 2010-04-17 10:23 34128 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\oisicon.exe

+ 2010-04-17 10:23 . 2010-04-17 10:23 19280 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\cagicon.exe

+ 2009-12-21 18:09 . 2009-12-21 18:09 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\ViewerPS.dll

+ 2009-12-21 23:57 . 2009-12-21 23:57 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\reader_sl.exe

+ 2009-12-21 18:02 . 2009-12-21 18:02 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\PDFPrevHndlr.dll

+ 2009-12-21 21:21 . 2009-12-21 21:21 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\eula.exe

+ 2009-12-21 21:37 . 2009-12-21 21:37 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acrotextextractor.exe

+ 2009-12-21 16:39 . 2009-12-21 16:39 15288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32Info.exe

+ 2009-12-21 16:27 . 2009-12-21 16:27 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acroiehelpershim.dll

+ 2009-12-21 16:27 . 2009-12-21 16:27 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroIEHelper.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\da0844aca5aaaf61d1781dafb0bf1319\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c4cd94dea88809a029aef7a5017d4652\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:43 30720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bb36da343c103d148f8a5a7baa2ba964\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 46080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b259013a7e453c20749b99871f416d19\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources.ni

.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a9a61063915ae576a794f3be408d3966\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9027dd8d4cd770f4798f298a000da069\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 29696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\83fc0fef72acf3d40c896879fa0cf9bd\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 28672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\77d3ad76d592985a69125d4c0697f32f\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 84992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6db1f325d32c7f1c24b113b7acaf3dd7\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 13824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6d9cc2606b00c9d29ea86e09628fdb4f\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources.ni.dll

+ 2010-04-17 10:26 . 2010-04-17 10:26 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\56aefffa4bb6760b7c1fdf05ea15944f\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\537560195b60b4ab2ffef02a4451236f\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\51458b8222242be39856bf76a440ad25\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4fbed3b3093cae4b0c74525729a4e9c8\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources.ni.

dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3c797848b503475fb4cb4f0a4c0b0e77\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\32d13a69d9af6cc5537d44a41bb210b3\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2f86c806a26b33019a85c4f522403040\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2d471126769348dd6a35552a42320276\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 12288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\176862f65114d77a8cf60adc79eed033\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 14848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\c6299cbcd1893bf81ab7fb8bdf62ac86\Microsoft.Office.Tools.Excel.v9.0.resources.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 26112 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\adce99ad993de30a63f116f8350ac537\Microsoft.Office.Tools.v9.0.resources.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\97394466f6bd5e3667a8392627c58ab0\Microsoft.Office.Tools.Outlook.v9.0.resources.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\64a6bf4e5e4d5166c20c252bad600816\Microsoft.Office.Tools.Common.v9.0.resources.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\3e710b86907038f76944f2555797f6cf\Microsoft.Office.Tools.Word.v9.0.resources.ni.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 13392 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.dll

+ 2010-04-17 10:21 . 2010-04-17 10:22 13392 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe.Entity\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.Entity.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11104 c:\windows\assembly\GAC_MSIL\Policy.12.0.office\14.0.0.0__71e9bce111e9429c\Policy.12.0.Office.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11624 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Vbe.Interop.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Outlook.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.MSProject.dll

+ 2010-04-17 10:21 . 2010-04-17 10:21 11648 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.Dao.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11088 c:\windows\assembly\GAC_MSIL\Policy.11.0.office\14.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11640 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 11648 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.MSProject.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 53248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 49152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 81920 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 49152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.resources.dl

l

+ 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 15872 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 40960 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 22016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 63320 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 95312 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.SqlServerCe.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 28672 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 11776 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.v9.0.resources.dll

+ 2010-04-17 10:21 . 2010-04-17 10:21 79728 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 51056 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.AutoGen\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.AutoGen.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 55152 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.Intl.dll

+ 2010-04-17 10:19 . 2010-04-17 10:19 55152 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.syncservices.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.Intl.Resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 92016 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.RuntimeUi.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.Intl.dll

+ 2010-04-17 10:19 . 2010-04-17 10:19 63344 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.runtimeui.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.intl.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 19312 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.Intl.dll

+ 2010-04-17 10:19 . 2010-04-17 10:19 19824 c:\windows\assembly\GAC_MSIL\microsoft.office.businessapplications.runtime.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.intl.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 96112 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Diagnostics\14.0.0.0__71e9bce111e9429c\microsoft.office.businessapplications.diagnostics.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll

+ 2006-09-21 14:20 . 2010-04-17 08:54 4096 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 4096 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe

+ 2010-04-17 10:18 . 2010-04-17 10:18 4096 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 4608 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 8192 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.v9.0.resources.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 7168 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.v9.0.resources\9.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.v9.0.resources.dll

+ 2010-04-17 10:21 . 2010-04-17 10:22 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll

+ 2009-07-11 21:05 . 2009-07-11 21:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll

+ 2008-07-29 01:54 . 2008-07-29 01:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll

+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\atl90.dll

+ 2004-08-04 04:56 . 2004-08-04 04:56 293376 c:\windows\system32\WISPTIS.EXE

+ 2004-09-20 15:49 . 2009-12-24 07:00 177664 c:\windows\system32\wintrust.dll

+ 2004-08-04 04:56 . 2004-08-04 04:56 207360 c:\windows\system32\INKED.DLL

+ 2006-08-24 13:45 . 2010-04-17 10:32 324320 c:\windows\system32\FNTCACHE.DAT

+ 2009-12-24 07:00 . 2009-12-24 07:00 177664 c:\windows\system32\dllcache\wintrust.dll

- 2008-05-09 10:55 . 2008-05-09 10:55 430080 c:\windows\system32\dllcache\vbscript.dll

+ 2008-05-09 10:55 . 2010-03-09 11:10 430080 c:\windows\system32\dllcache\vbscript.dll

+ 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys

+ 2008-11-15 23:27 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys

+ 2010-02-12 04:34 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll

+ 2010-04-15 09:51 . 2010-04-15 09:51 195584 c:\windows\Installer\a0a6542.msi

+ 2010-04-17 10:21 . 2010-04-17 10:21 585728 c:\windows\Installer\39052e.msi

+ 2010-04-17 10:20 . 2010-04-17 10:20 598528 c:\windows\Installer\390528.msi

+ 2010-04-17 10:20 . 2010-04-17 10:20 588288 c:\windows\Installer\390522.msi

+ 2010-04-17 10:20 . 2010-04-17 10:20 599040 c:\windows\Installer\39051c.msi

+ 2010-04-17 10:20 . 2010-04-17 10:20 594432 c:\windows\Installer\390516.msi

+ 2010-04-17 10:20 . 2010-04-17 10:20 594432 c:\windows\Installer\390510.msi

+ 2010-04-17 10:19 . 2010-04-17 10:19 589312 c:\windows\Installer\39050a.msi

+ 2010-04-13 10:49 . 2010-04-13 10:49 228352 c:\windows\Installer\2f0a4.msi

+ 2006-09-21 14:20 . 2010-04-17 08:54 409600 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 409600 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 286720 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 286720 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 249856 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 249856 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 794624 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 794624 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 135168 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 135168 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe

+ 2006-09-21 14:20 . 2010-04-17 08:54 593920 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe

- 2006-09-21 14:20 . 2010-03-16 10:49 593920 c:\windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe

+ 2010-04-17 10:19 . 2010-04-17 10:19 571728 c:\windows\Installer\{20140000-006E-040C-0000-0000000FF1CE}\misc.exe

+ 2010-04-17 10:23 . 2010-04-17 10:23 375120 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\pj11icon.exe

+ 2010-04-17 10:23 . 2010-04-17 10:23 571728 c:\windows\Installer\{20140000-003B-0000-0000-0000000FF1CE}\misc.exe

+ 2009-12-21 16:35 . 2009-12-21 16:35 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\pdfshell.dll

+ 2009-12-21 18:05 . 2009-12-21 18:05 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe

+ 2009-12-21 16:34 . 2009-12-21 16:34 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\nppdf32.dll

+ 2009-11-09 17:18 . 2009-11-09 17:18 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\JP2KLib.dll

+ 2009-12-21 18:02 . 2009-12-21 18:02 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AdobeCollabSync.exe

+ 2009-12-21 16:43 . 2009-12-21 16:43 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRdIF.dll

+ 2009-12-21 23:57 . 2009-12-21 23:57 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32.exe

+ 2009-12-21 16:15 . 2009-12-21 16:15 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroPDF.dll

+ 2009-12-21 17:32 . 2009-12-21 17:32 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\acrobroker.exe

+ 2009-12-21 17:15 . 2009-12-21 17:15 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\a3dutility.exe

+ 2008-11-15 23:27 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys

+ 2010-04-17 12:43 . 2010-04-17 12:43 146944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d7d43d0712504499674c89a7f68ea2fe\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ca282182b80fc93fd2957010c959573c\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c457c4d7b58083ac65b6cb705116d138\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 183808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bd6faed42a3217a7cd5060b051762846\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 192000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bd0a98c63c9bc80c96c6bb558cdd1120\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 622080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9bd28201449864900392fbf8a24be03b\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\999c381715d7024dbfff173b71ff37da\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\91d26cbf066bbcb26cb25915fe1333ac\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b4ac846cca77b94a1b7613105e2586a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 664064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\68d99fcb2f267f0757950440e7ea27b9\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4a16ed1a18bf3ac6aade883f28b3b3e2\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3b5d7cf0b2657c0c5fb2e9a882392319\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\347bedbe0932f2b3c6ad0e48012773a7\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:43 365056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\261825fd0388d836741fc723b0710dde\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\117a121b269ab75697dda44dcddf7065\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll

+ 2010-04-17 12:43 . 2010-04-17 12:43 137728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\050134092fff5558124af2e29bf98172\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 813568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\ee50544b83ece0f884572c5dc5756231\Microsoft.Office.Tools.Common.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 946688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\abae21559b70adfca889a9db3ffadd88\Microsoft.Office.Tools.Excel.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\a1d29ce42dc185841d6c3fcdf58a7ff3\Microsoft.Office.Tools.Outlook.v9.0.ni.dll

+ 2010-04-17 12:41 . 2010-04-17 12:41 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\a08203eeb416575e1216f524b24b53b7\Microsoft.Office.Tools.v9.0.ni.dll

+ 2010-04-17 12:42 . 2010-04-17 12:42 657920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\674d23040eba6991a552f176b1ecf340\Microsoft.Office.Tools.Word.v9.0.ni.dll

+ 2010-04-17 10:24 . 2010-04-17 10:24 266752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\c683b4458c4b4fd2af06721e5d230a6b\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll

+ 2010-04-17 10:23 . 2010-04-17 10:23 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\faf0bc5f0534ab88f180057e6969d2ce\Microsoft.BusinessData.ni.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 271440 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 271440 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 230480 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe.Entity\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.Entity.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 448344 c:\windows\assembly\GAC_MSIL\office\14.0.0.0__71e9bce111e9429c\OFFICE.DLL

+ 2010-04-17 10:22 . 2010-04-17 10:22 385024 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.dll

+ 2010-04-17 10:18 . 2010-04-17 10:18 151552 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources\10.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 131072 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 212992 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 143360 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 176128 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 286720 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 374624 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.Server\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.Server.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 202608 c:\windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.Intl.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 299008 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 438272 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 356352 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.v9.0.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 780128 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Project.WebProj\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Project.WebProj.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 964456 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Outlook\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 976744 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.MSProject\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.MSProject.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 202608 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessData.Intl\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.intl.dll

+ 2010-04-17 10:19 . 2010-04-17 10:19 218992 c:\windows\assembly\GAC_MSIL\microsoft.office.businessdata.intl.resources\14.0.0.0_fr_71e9bce111e9429c\Microsoft.Office.BusinessData.Intl.Resources.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 419696 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 161648 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Tools.Intl\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Tools.Intl.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 644976 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.RuntimeUi\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.RuntimeUi.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 542576 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.Runtime\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.Runtime.dll

+ 2010-04-17 10:21 . 2010-04-17 10:21 112536 c:\windows\assembly\GAC_MSIL\Microsoft.BusinessData\14.0.0.0__71e9bce111e9429c\Microsoft.BusinessData.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 505712 c:\windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\14.0.0.0__71e9bce111e9429c\Microsoft.SharePoint.BusinessData.Administration.Client.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 943984 c:\windows\assembly\GAC_32\Microsoft.Office.BusinessData\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL

+ 2009-07-11 21:02 . 2009-07-11 21:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll

+ 2009-07-11 21:02 . 2009-07-11 21:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 3783672 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll

+ 2008-07-29 06:05 . 2008-07-29 06:05 3768312 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll

+ 2009-09-26 01:32 . 2009-09-26 01:32 1205080 c:\windows\system32\FM20.DLL

+ 2008-10-17 22:23 . 2010-02-17 12:07 2192000 c:\windows\system32\dllcache\ntoskrnl.exe

+ 2008-10-17 22:23 . 2010-02-16 19:06 2026496 c:\windows\system32\dllcache\ntkrpamp.exe

+ 2008-10-17 22:23 . 2010-02-16 19:07 2068864 c:\windows\system32\dllcache\ntkrnlpa.exe

+ 2008-10-17 22:23 . 2010-02-16 19:07 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe

+ 2010-04-17 10:23 . 2010-04-17 10:23 8580096 c:\windows\Installer\3905d1.msi

+ 2010-04-17 10:21 . 2010-04-17 10:21 1743872 c:\windows\Installer\390534.msi

+ 2010-04-17 10:19 . 2010-04-17 10:19 3005952 c:\windows\Installer\390504.msi

+ 2010-03-11 10:03 . 2010-03-11 10:03 5524480 c:\windows\Installer\227f2a0.msp

+ 2010-03-11 19:16 . 2010-03-11 19:16 4148224 c:\windows\Installer\227f28a.msp

+ 2010-04-17 09:47 . 2010-04-17 09:47 3968512 c:\windows\Installer\1bab21.msi

+ 2009-12-21 16:29 . 2009-12-21 16:29 2409880 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\rt3d.dll

+ 2009-10-27 18:34 . 2009-10-27 18:34 5009408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\authplay.dll

+ 2009-12-21 21:31 . 2009-12-21 21:31 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AGM.dll

+ 2008-10-17 22:23 . 2010-02-17 12:07 2192000 c:\windows\Driver Cache\i386\ntoskrnl.exe

+ 2008-10-17 22:23 . 2010-02-16 19:06 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe

+ 2008-10-17 22:23 . 2010-02-16 19:07 2068864 c:\windows\Driver Cache\i386\ntkrnlpa.exe

+ 2008-10-17 22:23 . 2010-02-16 19:07 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe

+ 2010-04-17 12:42 . 2010-04-17 12:42 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\77b4a6e939637fdd24aa655d586e626e\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll

+ 2010-04-17 10:23 . 2010-04-17 10:24 2041856 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\e2c1229aee2d73dda82a4d9d0cec3c15\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll

+ 2010-04-17 10:23 . 2010-04-17 10:23 1501696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\9a9325283ef49198c1a7ff051294d908\Microsoft.Office.BusinessApplications.Runtime.ni.dll

+ 2010-04-17 10:24 . 2010-04-17 10:24 3210752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\370c5d1c5af45c90fc28c4446de2c3bd\Microsoft.Office.BusinessData.ni.dll

+ 2010-04-17 10:24 . 2010-04-17 10:24 4626944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\18e2e556e3f4f3c793bace6a3b684b5a\Microsoft.Office.BusinessApplications.SyncServices.ni.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 1640304 c:\windows\assembly\GAC_MSIL\Microsoft.Office.BusinessApplications.SyncServices\14.0.0.0__71e9bce111e9429c\Microsoft.Office.BusinessApplications.SyncServices.dll

+ 2010-04-17 10:22 . 2010-04-17 10:22 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll

+ 2007-05-07 21:56 . 2010-04-06 17:52 31971272 c:\windows\system32\MRT.exe

+ 2010-04-04 06:54 . 2010-04-04 06:54 11850240 c:\windows\Installer\4cb61.msp

+ 2009-12-21 21:21 . 2009-12-21 21:21 20436408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B7449A0300000010\9.3.0\AcroRd32.dll

.

-- Instantané actualisé --

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

2009-11-03 19:12 556432 ----a-w- c:\progra~1\MICROS~3\Office14\URLREDIR.DLL

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-13 133104]

"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-13 68856]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136]

"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 667718]

"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-04-14 602182]

"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2006-04-14 569413]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-21 7335936]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 761945]

"RemoteControl"="c:\program files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 32768]

"Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 86016]

"ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 180224]

"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"ABLKSR"="c:\windows\ABLKSR\ABLKSR.exe" [2006-01-02 61440]

"RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560]

"HControl"="c:\windows\ATK0100\HControl.exe" [2006-02-22 106496]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]

"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2009-09-26 83312]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^ASUS ChkMail.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\ASUS ChkMail.lnk

backup=c:\windows\pss\ASUS ChkMail.lnkCommon Startup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]

System [X]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

2005-11-21 08:51 1519616 ----a-w- c:\windows\system32\nwiz.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]

2007-06-18 13:10 271360 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]

2005-05-26 17:12 544768 ----a-r- c:\windows\sm56hlpr.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2008-10-19 15:46 144792 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2007-07-13 11:42 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

2008-04-01 18:49 36352 ----a-w- c:\program files\Winamp\winampa.exe

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Messenger\\MSMSGS.EXE"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

 

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [13/04/2010 12:50 108289]

R3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [24/08/2006 16:19 720470]

R3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [24/08/2006 16:19 8278]

S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/04/2010 22:25 135664]

S2 srserviceaspnet_state;Service de restauration système srserviceaspnet_state;c:\windows\system32\lz32t.exe srv --> c:\windows\system32\lz32t.exe srv [?]

S3 cdrmkaun;cdrmkaun;\??\c:\docume~1\PIERRE~1\LOCALS~1\Temp\cdrmkaun.sys --> c:\docume~1\PIERRE~1\LOCALS~1\Temp\cdrmkaun.sys [?]

S3 osppsvc;Office Software Protection Platform;c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [26/09/2009 04:28 4639136]

S3 UXDCMN;UXDCMN;\??\e:\winstress\UXDCMN.SYS --> e:\winstress\UXDCMN.SYS [?]

.

Contenu du dossier 'Tâches planifiées'

 

2009-09-24 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57]

 

2010-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1311777357-2900331866-1157244928-1005Core1cac8e9ffc98514.job

- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-13 10:19]

 

2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25]

 

2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.msn.fr/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Connection Wizard,ShellNext = iexplore

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

.

.

------- Associations de fichier -------

.

.scr=AutoCADScriptFile

.

- - - - ORPHELINS SUPPRIMES - - - -

 

AddRemove-HijackThis - c:\documents and settings\Pierre-Yves\Bureau\HijackThis.exe

AddRemove-Nokia PC Suite - c:\documents and settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Nokia_PC_Suite_6_84_10_3_EA.exe

 

 

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-04-18 21:18

Windows 5.1.2600 Service Pack 3 FAT NTAPI

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]

"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'explorer.exe'(4000)

c:\progra~1\WINDOW~2\wmpband.dll

c:\windows\system32\eappprxy.dll

c:\windows\system32\WPDShServiceObj.dll

c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll

c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll

c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre.nlr

c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\program files\Intel\Wireless\Bin\EvtEng.exe

c:\program files\Intel\Wireless\Bin\S24EvMon.exe

c:\windows\RTHDCPL.EXE

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\windows\system32\nvsvc32.exe

c:\program files\Intel\Wireless\Bin\RegSrvc.exe

c:\windows\ATK0100\ATKOSD.exe

c:\windows\system32\wbem\wmiapsrv.exe

c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe

.

**************************************************************************

.

Heure de fin: 2010-04-18 21:21:49 - La machine a redémarré

ComboFix-quarantined-files.txt 2010-04-18 19:21

ComboFix2.txt 2010-04-13 10:36

 

Avant-CF: 2 508 980 224 octets libres

Après-CF: 2 512 977 920 octets libres

 

- - End Of File - - F1A1B18D1455FF13793F25AF79540383

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)
Le parapluie de antivir est fermé et pourtant j'ai tout activé. Comment faire pour l'activer?

Au prochain redémarrage, il devrait se mettre en route

Je trouve pas le rapport de sality killer. Il se trouve ou?

En fait tu ne pourras pas trouver de rapport étant donné que le scan a été lancé sans commande spéciale.

On continue le nettoyage comme ceci =>

 

Rends toi sur cette page afin de télécharger le fichier CFScript > http://senduit.com/eadbb0

Patiente une seconde: le téléchargement va se lancer automatiquement.

  • Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture
    img-191202xzrpd.gif
  • Patiente le temps du scan.Le bureau va disparaitre à plusieurs reprises: c'est normal!
    Ne touche à rien tant que le scan n'est pas terminé.
  • Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
  • Si le fichier n'apparait pas, il se trouve ici > C:\ComboFix.txt

Note: Le script proposé est adapté au cas de pyp : Vous ne devez en aucun cas l'utiliser sur votre pc!

Poste le rapport, puis lance ce scan stp =>

 

Télécharge Dr.Web CureIt sur ton Bureau:

ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

  • Double clique drweb-cureit.exe et ensuite clique sur Analyse ;
  • Clique Ok à l'invite de l'analyse rapide. Ce scan permet l'analyse des processus chargés en mémoire ; s'il trouve des processus infectés, clique le bouton Oui pour tout à l'invite.
    **Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" ; vous pouvez quitter en cliquant le "X"
  • Lorsque le scan rapide est terminé, Clique sur le menu Options >> Changer la configuration;
  • Choisis l'onglet "Scanner", et décoche "Analyse heuristique". Clique "Ok"
  • De retour à la fenêtre principale : clique pour activer "Analyse complète";
  • Clique le bouton avec flèche verte sur la droite, et le scan débutera.
  • Clique Oui pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
  • Lorsque le scan sera complété, regarde si tu peux cliquer sur cet icône, adjacent aux fichiers détectés : check.gif
  • Si oui, alors clique dessus et ensuite clique sur l'icône "Suivant", au dessous, et choisis Déplacer en quarantaine l'objet indésirable
  • Du menu principal de l'outil, au haut à gauche, clique sur le menu Fichier et choisis Enregistrer le rapport
  • Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
  • Ferme Dr.Web Cureit
  • Redémarre ton ordi (*très important*), car certains fichiers peuvent être déplacés/réparés au redémarrage.
  • Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de l'outil Dr.Web dans ta prochaine réponse.

pyp Member

pyp

Posté(e)
  • Auteur
Posté(e)

Rapport combofix:

 

ComboFix 10-04-12.06 - Pierre-Yves 19/04/2010 12:20:14.3.2 - FAT32x86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.438 [GMT 2:00]

Lancé depuis: c:\documents and settings\Pierre-Yves\Bureau\Antivirus\pyp.exe

Commutateurs utilisés :: c:\documents and settings\Pierre-Yves\Mes documents\Downloads\CFScript.txt

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

 

FILE ::

"c:\windows\system32\lz32t.exe"

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_CDRMKAUN

-------\Legacy_SRSERVICEASPNET_STATE

-------\Service_cdrmkaun

-------\Service_srserviceaspnet_state

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2010-03-19 au 2010-04-19 ))))))))))))))))))))))))))))))))))))

.

 

2010-04-19 10:26 . 2003-07-29 04:18 3839 ----a-w- c:\windows\system32\drivers\GETPADD.sys

2010-04-17 10:22 . 2010-04-17 10:22 -------- d-----w- c:\program files\Microsoft Synchronization Services

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\documents and settings\All Users\Microsoft

2010-04-17 10:21 . 2010-04-17 10:21 -------- d-----w- c:\program files\Microsoft Analysis Services

2010-04-17 10:19 . 2010-04-17 10:19 -------- d-----w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Microsoft Help

2010-04-17 10:18 . 2010-04-17 10:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

2010-04-17 09:46 . 2010-04-17 09:46 -------- d-----w- c:\program files\Fichiers communs\Adobe

2010-04-17 09:19 . 2010-04-17 09:19 -------- d-----w- C:\FOUND.000

2010-04-17 08:57 . 2010-04-17 08:57 -------- d-----w- c:\program files\ZHPDiag

2010-04-16 21:44 . 2010-04-16 21:44 -------- d-----w- c:\documents and settings\Pierre-Yves\Application Data\Malwarebytes

2010-04-16 21:43 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-04-16 21:43 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-04-16 21:43 . 2010-04-16 21:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-04-13 10:50 . 2010-04-13 11:01 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2010-04-13 10:50 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys

2010-04-13 10:50 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys

2010-04-13 10:50 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys

2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\program files\Avira

2010-04-13 10:50 . 2010-04-13 10:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira

2010-04-12 20:33 . 2010-04-12 20:34 -------- d-sh--w- c:\documents and settings\All Users\Application Data\SGZUD

2010-04-12 20:32 . 2010-04-12 20:32 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google

2010-04-12 20:27 . 2010-04-12 20:27 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google

2010-03-24 08:04 . 2010-03-24 18:17 952768 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeARM.exe

2010-03-24 08:04 . 2010-03-24 18:17 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AdobeExtractFiles.dll

2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\ReaderUpdater.exe

2010-03-24 08:04 . 2010-03-24 18:17 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\21116\AcrobatUpdater.exe

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-04-17 10:34 . 2007-03-15 16:25 88256 ----a-w- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-03-11 12:34 . 2004-09-20 15:49 832512 ------w- c:\windows\system32\wininet.dll

2010-03-11 12:34 . 2004-09-20 15:48 78336 ----a-w- c:\windows\system32\ieencode.dll

2010-03-11 12:34 . 2004-09-20 15:48 17408 ----a-w- c:\windows\system32\corpol.dll

2010-03-09 11:10 . 2004-09-20 15:48 430080 ----a-w- c:\windows\system32\vbscript.dll

2010-02-24 13:11 . 2004-09-20 15:48 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2010-02-16 19:07 . 2004-08-03 22:48 2148352 ------w- c:\windows\system32\ntoskrnl.exe

2010-02-16 19:06 . 2004-08-03 22:49 2026496 ------w- c:\windows\system32\ntkrnlpa.exe

2010-02-12 09:03 . 2010-02-26 00:41 293376 ------w- c:\windows\system32\browserchoice.exe

2010-02-12 04:34 . 2004-09-20 15:48 100864 ----a-w- c:\windows\system32\6to4svc.dll

2010-02-11 12:02 . 2004-09-20 15:48 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys

.

 

((((((((((((((((((((((((((((( SnapShot_2010-04-18_19.18.04 )))))))))))))))))))))))))))))))))))))))))

.

+ 2010-04-19 10:26 . 2010-04-19 10:26 16384 c:\windows\temp\Perflib_Perfdata_cc.dat

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

2009-11-03 19:12 556432 ----a-w- c:\progra~1\MICROS~3\Office14\URLREDIR.DLL

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-13 133104]

"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-13 68856]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2005-10-17 987136]

"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 667718]

"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-04-14 602182]

"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2006-04-14 569413]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-11-21 7335936]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 761945]

"RemoteControl"="c:\program files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 32768]

"Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 86016]

"ASUS Live Update"="c:\program files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 180224]

"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"ABLKSR"="c:\windows\ABLKSR\ABLKSR.exe" [2006-01-02 61440]

"RTHDCPL"="RTHDCPL.EXE" [2005-09-06 14850560]

"HControl"="c:\windows\ATK0100\HControl.exe" [2006-02-22 106496]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-05-27 413696]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]

"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2009-09-26 83312]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^ASUS ChkMail.lnk]

path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\ASUS ChkMail.lnk

backup=c:\windows\pss\ASUS ChkMail.lnkCommon Startup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

2005-11-21 08:51 1519616 ----a-w- c:\windows\system32\nwiz.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]

2007-06-18 13:10 271360 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]

2005-05-26 17:12 544768 ----a-r- c:\windows\sm56hlpr.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2008-10-19 15:46 144792 ----a-w- c:\program files\Java\jre6\bin\jusched.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2007-07-13 11:42 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

2008-04-01 18:49 36352 ----a-w- c:\program files\Winamp\winampa.exe

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Messenger\\MSMSGS.EXE"=

"c:\\Program Files\\uTorrent\\uTorrent.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=

"c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

 

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [13/04/2010 12:50 108289]

R3 SynMini;USB2.0 1.3M Web Cam;c:\windows\system32\drivers\SynMini.sys [24/08/2006 16:19 720470]

R3 SynScan;USB2.0 1.3M Web Cam Still Image;c:\windows\system32\drivers\SynScan.sys [24/08/2006 16:19 8278]

S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/04/2010 22:25 135664]

S3 osppsvc;Office Software Protection Platform;c:\program files\Fichiers communs\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [26/09/2009 04:28 4639136]

S3 UXDCMN;UXDCMN;\??\e:\winstress\UXDCMN.SYS --> e:\winstress\UXDCMN.SYS [?]

.

Contenu du dossier 'Tâches planifiées'

 

2009-09-24 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 15:57]

 

2010-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1311777357-2900331866-1157244928-1005Core1cac8e9ffc98514.job

- c:\documents and settings\Pierre-Yves\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-13 10:19]

 

2010-04-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25]

 

2010-04-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-12 20:25]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.msn.fr/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Connection Wizard,ShellNext = iexplore

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Fichiers communs\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

.

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2010-04-19 12:27

Windows 5.1.2600 Service Pack 3 FAT NTAPI

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]

"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'explorer.exe'(2540)

c:\progra~1\WINDOW~2\wmpband.dll

c:\windows\system32\eappprxy.dll

c:\windows\system32\WPDShServiceObj.dll

c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll

c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll

c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre.nlr

c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\program files\Intel\Wireless\Bin\EvtEng.exe

c:\program files\Intel\Wireless\Bin\S24EvMon.exe

c:\windows\RTHDCPL.EXE

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\windows\system32\nvsvc32.exe

c:\program files\Intel\Wireless\Bin\RegSrvc.exe

c:\windows\ATK0100\ATKOSD.exe

c:\windows\system32\wbem\wmiapsrv.exe

c:\progra~1\Intel\Wireless\Bin\Dot1XCfg.exe

.

**************************************************************************

.

Heure de fin: 2010-04-19 12:29:49 - La machine a redémarré

ComboFix-quarantined-files.txt 2010-04-19 10:29

ComboFix2.txt 2010-04-18 19:21

ComboFix3.txt 2010-04-13 10:36

 

Avant-CF: 2 462 253 056 octets libres

Après-CF: 2 428 338 176 octets libres

 

- - End Of File - - 047B369C36ED6B386FA6C2EA7591915B

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...