Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

"Rootkit-Gen"

ckoya

Par ckoya
dans Analyses et éradication malwares

 Partager

Messages recommandés

Mark Godlike Member

Mark

Posté(e)
Posté(e)

D'acco-dac :P

 

Petite note : pour éviter de citer les messages précédents dans tes réponses, tu n'as qu'à cliquer sur le bouton "Répondre" qui se situe en les boutons "Flash" et "Nouveau" (juste un peu plus bas que le bouton "Répondre que tu utilises présentement).

 

Merci, et bon succès :P

ckoya Junior Member

ckoya

Posté(e)
  • Auteur
Posté(e)
Oui, suis les conseils de Mark, qui me remplace ici. Tu es entre de bonnes mains.

 

Bonjour

c'est sur qu'il est de bons conseils, alors je suis ce qu'il me dit, mais a ce jour c'est vraiment une sale bestiole que j'ai car même en mettant le cd et le faisant ouvrir en premier par l'intermédiaire du bios, windows après ouverture de sa fenêtre, puis mis le mot de passe s'ouvre sur le bureau normal et je n'ai toujours pas accès au poste de travail, l'explorer ne s'ouvre pas il y a toujours la page blanche avec la petite lampe qui tourne, rien a faire je l'ai laissé tourné toute une nuit au matin elle tournais encore, rien ne s'ouvre et si j'essaie de forcer windows celui ma dit windows ne répond pas !!! j'ai essayé avec une clé usb, rien a faire, mode sans échec, rien, une restauration de système, rien non plus ! alors qui va gagner ? windows et son virus ou nous ? la question est posée !

Cordialement

Alain

Mark Godlike Member

Mark

Posté(e)
Posté(e)

Bonjour Alain :P

 

Je ne suis pas certain d'avoir saisi tout ça...

 

As-tu pu booter depuis le CD ReatoGo ? Si oui, tu te serais retrouvé devant un "autre Windows XP", qui porte le nom ReatoGo sur le Bureau. Sur ce Bureau, il y a quelques icônes dont le programme OTLPE. Il te faut absolument réussir à démarrer sur ce système si nous voulons progresser.

 

La démarche (simplifiée) : il faut tout d'abord insérer le CD OTLPE préalablement gravé (ou DVD, selon ce que tu as choisi) et redémarrer la machine infectée. Tu auras une invite de démarrer depuis le CD et il te faut appuyer sur une touche pour confirmer (de mémoire là). En prinicipe, le système ReatoGo devrait se charger et tu devrais te retrouver sur son Bureau.

 

Si tu y arrives, alors tu pourras suivre mes instructions afin de lancer l'outil OTLPE et de faire un scan, tel que prescrit.

Le système ReatoGo est tout à fait indépendant de ton système (infecté) donc ça contourne les problèmes sur ce dernier et ça nous permet de regarder et éventuellement réparer depuis ReatoGo.

 

Si le CD ne lance pas ce système ReatoGo, fais signe et on regardera ensemble pour y arriver.

 

 

@++

 

Mark

ckoya Junior Member

ckoya

Posté(e)
  • Auteur
Posté(e)

Bonsoir

Merci de vos conseils qui mon été bien utiles, j'ai bien réussi a lancer le CD otlpes de Reatogo et j'ai lancé un scan !

Comme je fait pour vous envoyer le résultat du scan C:\OTL.txt que j'ai copier sur une clé usb ?

Je ne vois pas pièces jointes ! ou est ce que je fait un copier coller du résultat que je colle sur cette fenêtre ! car il y en a long quand même !

Cordialement

Alain

  • 2 semaines après...
Mark Godlike Member

Mark

Posté(e)
Posté(e)

Bonjour Alain :P

 

Tel qu'expliqué ici, nous avons eu un problème avec ton sujet lors de la migration vers le nouveau software du forum ; la page #2 semble perdue. Il ne m'était plus possible de répondre dans ce sujet, alors j'ai tout déplacé les messages de la page #1 vers ce nouveau sujet (celui-ci).

 

Dans la page #2, il y avait le rapport de l'outil OTLPE et je devrai le consulter à nouveau avant de te prescrire la suite. En espérant que le rapport existe toujours, tu devrais le retrouver sur ta clé USB (nommé "OTL.txt") ; pourrais-tu le coller ici à nouveau, s'il te plaît ?

 

Dis-moi aussi s'il y a eu des changements avec la machine malade depuis nos derniers échanges.

 

Merci pour ta patience, et à bientôt.

 

 

Mark

ckoya Junior Member

ckoya

Posté(e)
  • Auteur
Posté(e)

Bonjour

Merci pour la poursuite de mon problème

je vous avait mis que après avoir transférer tout ces documents a garder sur sa partition D j'avais essayé de mettre mon cd de windows installation de mon poste fixe sur le portable de ma copine c'est pour cela qu'il y avait plein de mise a jour , mais tout ceci en vain car il n'a pas écrase le sien !

je vous joint ci dessous le résultat du scan de OTLPES

 

OTL logfile created on: 6/9/2010 11:38:32 PM - Run

OTLPE by OldTimer - Version 3.1.39.0 Folder = X:\Programs\OTLPE

Microsoft Windows XP (Version = 5.1.2600) - Type = SYSTEM

Internet Explorer (Version = 6.0.2600.0000)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

511.00 Mb Total Physical Memory | 276.00 Mb Available Physical Memory | 54.00% Memory free

459.00 Mb Paging File | 326.00 Mb Available in Paging File | 71.00% Paging File free

Paging file location(s): c:\pagefile.sys 768 1536 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 54.83 Gb Total Space | 11.63 Gb Free Space | 21.21% Space Free | Partition Type: FAT32

Drive D: | 36.46 Gb Total Space | 0.01 Gb Free Space | 0.02% Space Free | Partition Type: NTFS

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

Drive X: | 280.77 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: REATOGO

Current User Name: SYSTEM

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: All users

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

Using ControlSet: ControlSet002

 

========== Win32 Services (SafeList) ==========

 

SRV - File not found [Auto] -- -- (NMSAccess)

SRV - [2009/11/25 00:51:36 | 000,138,680 | ---- | M] (ALWIL Software) [Auto] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)

SRV - [2009/11/25 00:51:22 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)

SRV - [2009/11/25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)

SRV - [2009/11/25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)

SRV - [2009/08/05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)

SRV - [2009/05/19 11:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)

SRV - [2009/04/07 09:39:44 | 000,233,472 | ---- | M] (Teruten) [Auto] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)

SRV - [2008/04/07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2007/09/06 13:28:18 | 000,110,592 | ---- | M] (Apple, Inc.) [Auto] -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2007/08/09 08:27:52 | 000,073,728 | ---- | M] (HP) [Auto] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

SRV - [2007/01/02 13:27:30 | 000,069,120 | ---- | M] (BOONTY) [On_Demand] -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)

SRV - [2005/11/23 01:19:26 | 000,069,120 | ---- | M] (SC Test Branding 1) [On_Demand] -- C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe -- (SC Test Branding Service 1)

SRV - [2005/10/20 01:01:36 | 000,054,784 | ---- | M] (Macrovision) [Auto] -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)

SRV - [2005/04/04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)

SRV - [2004/07/20 14:15:20 | 000,090,112 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService)

SRV - [2004/05/06 12:21:04 | 000,496,640 | ---- | M] () [Auto] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC)

SRV - [2001/08/28 12:00:00 | 000,047,104 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\mspmspsv.dll -- (WmdmPmSp)

 

 

========== Driver Services (SafeList) ==========

 

DRV - File not found [Adapter | On_Demand] -- -- (Winsock - Google Desktop Search Backup Before Last Install)

DRV - File not found [Adapter | On_Demand] -- -- (Winsock - Google Desktop Search Backup Before First Install)

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)

DRV - File not found [Kernel | On_Demand] -- -- (SIS163u)

DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)

DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)

DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)

DRV - File not found [Kernel | System] -- -- (PCIDump)

DRV - File not found [Kernel | On_Demand] -- -- (PCAMPR5)

DRV - File not found [Kernel | System] -- -- (lbrtfdc)

DRV - File not found [Kernel | Auto] -- -- (irda)

DRV - File not found [Kernel | System] -- -- (i2omgmt)

DRV - File not found [Kernel | System] -- -- (Changer)

DRV - File not found [Kernel | On_Demand] -- -- (CamAv)

DRV - [2009/11/25 00:51:00 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)

DRV - [2009/11/25 00:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)

DRV - [2009/11/25 00:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV - [2009/11/25 00:49:08 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)

DRV - [2009/11/25 00:48:58 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)

DRV - [2009/11/25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)

DRV - [2009/08/05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)

DRV - [2009/03/25 16:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm)

DRV - [2009/03/25 16:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)

DRV - [2009/03/25 16:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)

DRV - [2009/03/25 16:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex)

DRV - [2009/03/25 16:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM)

DRV - [2009/03/25 16:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)

DRV - [2009/03/25 16:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl)

DRV - [2007/09/17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2007/07/03 16:58:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)

DRV - [2007/07/03 16:57:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)

DRV - [2007/07/03 16:54:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)

DRV - [2006/02/20 17:59:36 | 000,083,344 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w810obex.sys -- (w810obex)

DRV - [2006/02/20 17:59:34 | 000,094,064 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w810mdm.sys -- (w810mdm)

DRV - [2006/02/20 17:59:34 | 000,085,408 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w810mgmt.sys -- (w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM)

DRV - [2006/02/20 17:59:32 | 000,008,336 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w810mdfl.sys -- (w810mdfl)

DRV - [2006/02/20 17:59:28 | 000,058,288 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w810bus.sys -- (w810bus) Sony Ericsson W810 Driver driver (WDM)

DRV - [2005/10/20 01:01:34 | 000,012,464 | ---- | M] (Macrovision Europe Ltd) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS -- (CdaC15BA)

DRV - [2005/06/21 15:18:40 | 000,040,576 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\sdcplh.sys -- (sdcplh)

DRV - [2004/11/29 16:53:18 | 000,258,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ZD1211U.sys -- (ZD1211U(ASUS)) ASUS ZD1211 IEEE 802.11b+g Wireless LAN Driver (USB)(ASUS)

DRV - [2004/10/20 16:20:00 | 000,185,824 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)

DRV - [2004/10/07 06:28:00 | 000,798,208 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)

DRV - [2004/09/29 06:37:00 | 002,278,784 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)

DRV - [2004/09/17 21:05:00 | 000,084,512 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)

DRV - [2004/09/17 21:05:00 | 000,006,064 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)

DRV - [2004/09/17 21:04:00 | 000,052,384 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) Samsung Mobile USB Device 1.0 driver (WDM)

DRV - [2004/09/17 10:56:10 | 000,381,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WlanUIG.sys -- (NBXG7031)

DRV - [2004/08/26 03:37:52 | 000,067,456 | R--- | M] (REDC) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\rmedia.sys -- (rmedia)

DRV - [2004/08/26 03:37:48 | 001,041,536 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)

DRV - [2004/08/26 03:37:48 | 000,681,856 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)

DRV - [2004/08/26 03:37:48 | 000,192,768 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWSIS.sys -- (HSFHWSIS)

DRV - [2004/08/26 03:37:40 | 000,032,256 | ---- | M] (SiS Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)

DRV - [2004/08/26 03:35:10 | 000,036,992 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SISAGPX.SYS -- (SISAGP)

DRV - [2004/07/20 14:19:16 | 000,020,096 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt)

DRV - [2004/07/06 19:56:26 | 000,044,544 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Video3D.sys -- (Video3D)

DRV - [2004/04/08 18:18:38 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)

DRV - [2004/03/30 19:29:48 | 000,374,816 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PRISMA02.sys -- (PRISM_A02)

DRV - [2003/12/03 17:44:58 | 000,013,566 | ---- | M] (B.H.A Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\cdrbsvsd.sys -- (cdrbsvsd)

DRV - [2003/07/01 18:47:08 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)

DRV - [2003/06/27 04:05:38 | 000,472,332 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lvcm.sys -- (QCMerced)

DRV - [2003/01/29 17:53:02 | 000,041,088 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (ser2pl)

DRV - [2002/09/09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)

DRV - [2002/01/08 15:22:00 | 000,006,004 | ---- | M] (ASUSTek COMPUTER INC.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)

DRV - [2001/08/28 12:00:00 | 000,180,032 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)

DRV - [2001/08/17 22:07:00 | 000,035,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\avc.sys -- (Avc)

DRV - [2001/08/17 22:06:54 | 000,045,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\61883.sys -- (61883)

DRV - [2001/08/17 22:06:34 | 000,052,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\msdv.sys -- (MSDV)

DRV - [2001/08/17 22:01:12 | 000,056,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Pilote USB audio (WDM)

DRV - [2001/08/17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)

DRV - [2000/03/29 14:17:42 | 000,005,824 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS -- (Asushwio)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = ASUSTeK Computer

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Live Search

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = {sea...ferrer:source?} - Bing

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = SFR : téléphone portable, forfait mobile, sfr mobile adsl, opérateur de téléphonie mobile

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN : Hotmail, Messenger, Bing, Actualité et Sport

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = EA 63 99 35 6F 70 CA 01 [binary data]

IE - HKU\Christine_Ruellé_ON_C\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (MyWebSearch.com)

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Christine_Ruellé_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost

 

IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = ASUSTeK Computer

 

IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = ASUSTeK Computer

 

 

 

 

O1 HOSTS File: ([2007/03/29 21:07:06 | 000,004,158 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: 127.0.0.1 bin.errorprotector.com ## added by CiD

O1 - Hosts: 127.0.0.1 br.errorsafe.com ## added by CiD

O1 - Hosts: 127.0.0.1 br.winantivirus.com ## added by CiD

O1 - Hosts: 127.0.0.1 br.winfixer.com ## added by CiD

O1 - Hosts: 127.0.0.1 de.errorsafe.com ## added by CiD

O1 - Hosts: 127.0.0.1 de.winantivirus.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.cdn.winsoftware.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.errorsafe.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.systemdoctor.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.winantispyware.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.windrivecleaner.com ## added by CiD

O1 - Hosts: 127.0.0.1 download.winfixer.com ## added by CiD

O1 - Hosts: 127.0.0.1 drivecleaner.com ## added by CiD

O1 - Hosts: 127.0.0.1 dynamique.drivecleaner.com ## added by CiD

O1 - Hosts: 127.0.0.1 errorprotector.com ## added by CiD

O1 - Hosts: 127.0.0.1 errorsafe.com ## added by CiD

O1 - Hosts: 127.0.0.1 es.winantivirus.com ## added by CiD

O1 - Hosts: 127.0.0.1 fr.winantivirus.com ## added by CiD

O1 - Hosts: 127.0.0.1 fr.winfixer.com ## added by CiD

O1 - Hosts: 127.0.0.1 go.drivecleaner.com ## added by CiD

O1 - Hosts: 127.0.0.1 go.errorsafe.com ## added by CiD

O1 - Hosts: 127.0.0.1 go.winantispyware.com ## added by CiD

O1 - Hosts: 127.0.0.1 go.winantivirus.com ## added by CiD

O1 - Hosts: 127.0.0.1 hk.winantivirus.com ## added by CiD

O1 - Hosts: 46 more lines...

O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (MyWebSearch.com)

O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Objet d'aide à la navigation SFR) - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll (SFR)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (EoBho Class) - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll File not found

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)

O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Programme d'aide de l'Assistant de connexion Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)

O3 - HKU\Christine_Ruellé_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.

O3 - HKU\Christine_Ruellé_ON_C\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL File not found

O3 - HKU\Christine_Ruellé_ON_C\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKU\Christine_Ruellé_ON_C\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)

O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)

O4 - HKLM..\Run: [EoEngine] File not found

O4 - HKLM..\Run: [Hcontrol] C:\WINDOWS\Hcontrol.exe (ASUSTeK COMPUTER INC.)

O4 - HKLM..\Run: [iMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\imekrmig.exe (Microsoft Corporation)

O4 - HKLM..\Run: [iMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)

O4 - HKLM..\Run: [NPSStartup] File not found

O4 - HKLM..\Run: [schedulingAgent] C:\WINDOWS\System32\mstinit.exe (Microsoft Corporation)

O4 - HKLM..\Run: [soundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [Connexion SFR 9props.exe] C:\Program Files\SFR\Kit\9props.exe (SFR)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [MessengerPlus3] C:\Program Files\MessengerPlus! 3\MsgPlus.exe (Patchou)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [site rule] C:\DOCUME~1\CHRIST~1\APPLIC~1\ACIDTY~1\window locks.exe File not found

O4 - HKU\Christine_Ruellé_ON_C..\Run: [sony Ericsson PC Companion] C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson Mobile Communications AB)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)

O4 - HKU\Christine_Ruellé_ON_C..\Run: [Widget Neuf] C:\Program Files\SFR\Widget neufbox\9widget.exe File not found

O4 - HKU\Christine_Ruellé_ON_C..\Run: [WOOKIT] C:\PROGRA~1\WANADOO\Shell.exe File not found

O4 - HKU\Christine_Ruellé_ON_C..\RunOnce: [shockwave Updater] C:\WINDOWS\System32\ADOBE\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -Mozilla\4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident\4.0; File not found

O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe (asus)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Christine_Ruellé_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data]

O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.)

O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)

O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()

O9 - Extra 'Tools' menuitem : @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()

O12 - Plugin for: .IE5 - Reg Error: Value error. File not found

O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} http://s.tf1.fr/mmdia/static/rawflow/clien...1.0/Rawflow.cab (Rawflow ICD Client)

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/f...p1.0.0.15-3.cab (Reg Error: Key error.)

O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} Portail Orange (VoxsyncCtrl Class)

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} Page introuvable | Facebook (Facebook Photo Uploader 5 Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_07)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_fr_dl.cab (IWinAmpActiveX Class)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_01)

O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_03)

O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_05)

O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_07)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_07)

O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} Page momentanément indisponible (Oberon Flash Game Host)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa...ash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.242

O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)

O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O20 - Winlogon\Notify\ComPlusSetup: DllName - C:\WINDOWS\System32\catsrvut.dll - C:\WINDOWS\system32\catsrvut.dll (Microsoft Corporation)

O24 - Desktop Components:0 (Ma page d'accueil) - About:Home

O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2005/03/05 00:04:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]

O32 - AutoRun File - [2008/09/18 18:36:49 | 000,000,086 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]

O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]

O33 - MountPoints2\{143d72e8-d19d-11dd-8605-0060b3dc24fc}\Shell - "" = AutoRun

O33 - MountPoints2\{143d72e8-d19d-11dd-8605-0060b3dc24fc}\Shell\AutoRun\command - "" = F:\DPFMate.exe -- File not found

O33 - MountPoints2\{1e08f020-cd21-11dd-8601-0060b3dc24fc}\Shell - "" = AutoRun

O33 - MountPoints2\{1e08f020-cd21-11dd-8601-0060b3dc24fc}\Shell\AutoRun\command - "" = F:\DPFMate.exe -- File not found

O33 - MountPoints2\{56b48425-9e0f-11de-86c8-0060b3dc24fc}\Shell\AutoRun\command - "" = wd_windows_tools\setup.exe

O33 - MountPoints2\{5cec9f98-cceb-11dd-85ff-0060b3dc24fc}\Shell - "" = AutoRun

O33 - MountPoints2\{8da15d4e-fa03-11de-8711-0060b3dc24fc}\Shell - "" = AutoRun

O33 - MountPoints2\{8da15d4e-fa03-11de-8711-0060b3dc24fc}\Shell\AutoRun\command - "" = F:\Startme.exe -- File not found

O33 - MountPoints2\{a0b58950-a35d-11dc-84e2-0060b3dc24fc}\Shell\Auto\command - "" = C:\WINDOWS\System32\cmd.exe -- [2001/08/28 12:00:00 | 000,388,096 | ---- | M] (Microsoft Corporation)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

========== Files/Folders - Created Within 30 Days ==========

 

[2010/06/09 21:06:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch

[2010/06/09 21:01:06 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll

[2010/06/09 21:01:06 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys

[2010/06/09 21:01:05 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll

[2010/06/09 21:01:01 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe

[2010/06/09 21:01:00 | 000,843,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime

[2010/06/09 21:01:00 | 000,737,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe

[2010/06/09 21:01:00 | 000,143,421 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe

[2010/06/09 21:01:00 | 000,090,172 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll

[2010/06/09 21:00:59 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll

[2010/06/09 21:00:59 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys

[2010/06/09 21:00:59 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys

[2010/06/09 21:00:59 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys

[2010/06/09 21:00:56 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll

[2010/06/09 21:00:55 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll

[2010/06/09 21:00:55 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll

[2010/06/09 21:00:55 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll

[2010/06/09 21:00:55 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll

[2010/06/09 21:00:55 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe

[2010/06/09 21:00:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll

[2010/06/09 21:00:55 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll

[2010/06/09 21:00:54 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpsvc.dll

[2010/06/09 21:00:54 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll

[2010/06/09 21:00:54 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe

[2010/06/09 21:00:54 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll

[2010/06/09 21:00:53 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe

[2010/06/09 21:00:53 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll

[2010/06/09 21:00:53 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll

[2010/06/09 21:00:53 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll

[2010/06/09 21:00:53 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpapi.dll

[2010/06/09 21:00:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll

[2010/06/09 21:00:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll

[2010/06/09 21:00:52 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll

[2010/06/09 21:00:52 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll

[2010/06/09 21:00:52 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll

[2010/06/09 21:00:52 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll

[2010/06/09 21:00:52 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll

[2010/06/09 21:00:52 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll

[2010/06/09 21:00:52 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll

[2010/06/09 21:00:52 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll

[2010/06/09 21:00:52 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll

[2010/06/09 21:00:51 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll

[2010/06/09 21:00:51 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll

[2010/06/09 21:00:51 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll

[2010/06/09 21:00:48 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll

[2010/06/09 21:00:47 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seo.dll

[2010/06/09 21:00:47 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll

[2010/06/09 21:00:46 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll

[2010/06/09 21:00:46 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll

[2010/06/09 21:00:46 | 000,026,624 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll

[2010/06/09 21:00:46 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll

[2010/06/09 21:00:46 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_rwnh.dll

[2010/06/09 21:00:44 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe

[2010/06/09 21:00:44 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe

[2010/06/09 21:00:43 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe

[2010/06/09 21:00:42 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe

[2010/06/09 21:00:40 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll

[2010/06/09 21:00:40 | 000,131,126 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe

[2010/06/09 21:00:40 | 000,114,762 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll

[2010/06/09 21:00:40 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll

[2010/06/09 21:00:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll

[2010/06/09 21:00:39 | 000,684,081 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime

[2010/06/09 21:00:36 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll

[2010/06/09 21:00:33 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe

[2010/06/09 21:00:33 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\muisetup.exe

[2010/06/09 21:00:21 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys

[2010/06/09 21:00:21 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll

[2010/06/09 21:00:21 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe

[2010/06/09 21:00:20 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll

[2010/06/09 21:00:20 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll

[2010/06/09 21:00:20 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll

[2010/06/09 21:00:19 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll

[2010/06/09 21:00:17 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll

[2010/06/09 21:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll

[2010/06/09 21:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll

[2010/06/09 21:00:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll

[2010/06/09 21:00:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll

[2010/06/09 21:00:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll

[2010/06/09 21:00:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll

[2010/06/09 21:00:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll

[2010/06/09 21:00:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll

[2010/06/09 21:00:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll

[2010/06/09 21:00:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll

[2010/06/09 21:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll

[2010/06/09 21:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll

[2010/06/09 21:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll

[2010/06/09 21:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll

[2010/06/09 21:00:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll

[2010/06/09 21:00:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll

[2010/06/09 21:00:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll

[2010/06/09 21:00:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll

[2010/06/09 21:00:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll

[2010/06/09 21:00:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll

[2010/06/09 21:00:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll

[2010/06/09 21:00:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll

[2010/06/09 21:00:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll

[2010/06/09 21:00:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll

[2010/06/09 21:00:13 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll

[2010/06/09 21:00:13 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll

[2010/06/09 21:00:12 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll

[2010/06/09 21:00:12 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll

[2010/06/09 20:59:54 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll

[2010/06/09 20:59:54 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll

[2010/06/09 20:59:52 | 000,560,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll

[2010/06/09 20:59:52 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll

[2010/06/09 20:59:52 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll

[2010/06/09 20:59:52 | 000,250,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe

[2010/06/09 20:59:52 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll

[2010/06/09 20:59:52 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll

[2010/06/09 20:59:52 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll

[2010/06/09 20:59:51 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll

[2010/06/09 20:59:51 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe

[2010/06/09 20:59:51 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll

[2010/06/09 20:59:51 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll

[2010/06/09 20:59:51 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll

[2010/06/09 20:59:51 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll

[2010/06/09 20:59:51 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll

[2010/06/09 20:59:51 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe

[2010/06/09 20:59:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll

[2010/06/09 20:59:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll

[2010/06/09 20:59:50 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll

[2010/06/09 20:59:50 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll

[2010/06/09 20:59:50 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe

[2010/06/09 20:59:50 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll

[2010/06/09 20:59:50 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll

[2010/06/09 20:59:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll

[2010/06/09 20:59:49 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe

[2010/06/09 20:59:49 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll

[2010/06/09 20:59:49 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe

[2010/06/09 20:59:48 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll

[2010/06/09 20:59:48 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe

[2010/06/09 20:59:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll

[2010/06/09 20:59:48 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys

[2010/06/09 20:59:48 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe

[2010/06/09 20:59:47 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll

[2010/06/09 20:59:47 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll

[2010/06/09 20:59:47 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll

[2010/06/09 20:59:40 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe

[2010/06/09 20:59:37 | 000,540,745 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe

[2010/06/09 20:59:37 | 000,344,127 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll

[2010/06/09 20:59:37 | 000,204,861 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll

[2010/06/09 20:59:37 | 000,131,134 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll

[2010/06/09 20:59:37 | 000,098,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime

[2010/06/09 20:59:36 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe

[2010/06/09 20:59:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe

[2010/06/09 20:59:36 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe

[2010/06/09 20:59:36 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe

[2010/06/09 20:59:34 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys

[2010/06/09 20:59:34 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll

[2010/06/09 20:59:31 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqueue.dll

[2010/06/09 20:59:31 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll

[2010/06/09 20:59:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll

[2010/06/09 20:59:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll

[2010/06/09 20:59:29 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll

[2010/06/09 20:59:24 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpsnap.dll

[2010/06/09 20:59:24 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe

[2010/06/09 20:59:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll

[2010/06/09 20:59:23 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpadm.dll

[2010/06/09 20:59:23 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll

[2010/06/09 20:59:23 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe

[2010/06/09 20:59:18 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll

[2010/06/09 20:59:18 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll

[2010/06/09 20:59:18 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe

[2010/06/09 20:59:18 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll

[2010/06/09 20:59:18 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe

[2010/06/09 20:59:17 | 000,872,557 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll

[2010/06/09 20:59:17 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe

[2010/06/09 20:59:17 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll

[2010/06/09 20:59:17 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll

[2010/06/09 20:59:17 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll

[2010/06/09 20:59:17 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll

[2010/06/09 20:59:17 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll

[2010/06/09 20:59:17 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe

[2010/06/09 20:59:16 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe

[2010/06/09 20:59:16 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll

[2010/06/09 20:59:16 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll

[2010/06/09 20:59:16 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll

[2010/06/09 20:59:15 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll

[2010/06/09 20:59:15 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe

[2010/06/09 20:59:15 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe

[2010/06/09 20:59:13 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll

[2010/06/09 20:52:02 | 000,794,686 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchui.dll

[2010/06/09 20:52:02 | 000,106,562 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchctls.dll

[2010/06/09 20:52:01 | 003,346,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgr3en.dll

[2010/06/09 20:52:01 | 000,405,504 | ---- | C] (Macromedia, Inc.) -- C:\WINDOWS\System32\dllcache\swflash.ocx

[2010/06/09 20:51:59 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlimport.exe

[2010/06/09 20:51:58 | 000,520,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpvis.dll

[2010/06/09 20:51:53 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll

[2010/06/09 20:51:53 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgrprxy.dll

[2010/06/09 20:51:52 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgr.dll

[2010/06/09 20:51:51 | 000,331,839 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmmres.dll

[2010/06/09 20:51:51 | 000,163,906 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmmutil.dll

[2010/06/09 20:51:51 | 000,110,657 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmmfilt.dll

[2010/06/09 20:51:49 | 000,534,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobmain.dll

[2010/06/09 20:51:49 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobcomm.dll

[2010/06/09 20:51:49 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobshel.dll

[2010/06/09 20:51:49 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobdl.dll

[2010/06/09 20:51:48 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oobebaln.exe

[2010/06/09 20:51:48 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoobe.exe

[2010/06/09 20:51:48 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobweb.dll

[2010/06/09 20:51:43 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uploadm.exe

[2010/06/09 20:51:43 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll

[2010/06/09 20:51:43 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrslv.dll

[2010/06/09 20:51:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll

[2010/06/09 20:51:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrdm.dll

[2010/06/09 20:51:42 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchshell.dll

[2010/06/09 20:51:42 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll

[2010/06/09 20:51:42 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrcdlg.dll

[2010/06/09 20:51:42 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll

[2010/06/09 20:51:42 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\racpldlg.dll

[2010/06/09 20:51:42 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchsvc.dll

[2010/06/09 20:51:40 | 000,694,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe

[2010/06/09 20:51:40 | 000,692,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpctr.exe

[2010/06/09 20:51:40 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconfig.exe

[2010/06/09 20:51:38 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rstrui.exe

[2010/06/09 20:51:37 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll

[2010/06/09 20:51:37 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srrstr.dll

[2010/06/09 20:51:37 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll

[2010/06/09 20:51:37 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srsvc.dll

[2010/06/09 20:51:37 | 000,070,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sr.sys

[2010/06/09 20:51:37 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srclient.dll

[2010/06/09 20:51:36 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll

[2010/06/09 20:51:36 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll

[2010/06/09 20:51:36 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ils.dll

[2010/06/09 20:51:36 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll

[2010/06/09 20:51:36 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\isrdbg32.dll

[2010/06/09 20:51:36 | 000,008,223 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll

[2010/06/09 20:51:36 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe

[2010/06/09 20:51:35 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll

[2010/06/09 20:51:35 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconf.dll

[2010/06/09 20:51:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmsrvc.exe

[2010/06/09 20:51:35 | 000,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll

[2010/06/09 20:51:35 | 000,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmdd.dll

[2010/06/09 20:51:35 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll

[2010/06/09 20:51:35 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmmkcert.dll

[2010/06/09 20:51:34 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\callcont.dll

[2010/06/09 20:51:34 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmas.dll

[2010/06/09 20:51:34 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcap32.dll

[2010/06/09 20:51:34 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmasnt.dll

[2010/06/09 20:51:33 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nac.dll

[2010/06/09 20:51:33 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rrcm.dll

[2010/06/09 20:51:33 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\h323cc.dll

[2010/06/09 20:51:32 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst120.dll

[2010/06/09 20:51:32 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmchat.dll

[2010/06/09 20:51:32 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmcom.dll

[2010/06/09 20:51:32 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst123.dll

[2010/06/09 20:51:32 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\confmrsl.dll

[2010/06/09 20:51:31 | 001,007,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\conf.exe

[2010/06/09 20:51:31 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmwb.dll

[2010/06/09 20:51:31 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmoldwb.dll

[2010/06/09 20:51:31 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmft.dll

[2010/06/09 20:51:30 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32.dll

[2010/06/09 20:51:30 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32res.dll

[2010/06/09 20:51:30 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll

[2010/06/09 20:51:30 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeacct.dll

[2010/06/09 20:51:30 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll

[2010/06/09 20:51:30 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoert2.dll

[2010/06/09 20:51:30 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabimp.dll

[2010/06/09 20:51:30 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\directdb.dll

[2010/06/09 20:51:30 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe

[2010/06/09 20:51:30 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabfind.dll

[2010/06/09 20:51:30 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabmig.exe

[2010/06/09 20:51:29 | 002,533,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeres.dll

[2010/06/09 20:51:29 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oeimport.dll

[2010/06/09 20:51:29 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msimn.exe

[2010/06/09 20:51:29 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll

[2010/06/09 20:51:29 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetres.dll

[2010/06/09 20:51:29 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemiglib.dll

[2010/06/09 20:51:28 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstask.dll

[2010/06/09 20:51:28 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schedsvc.dll

[2010/06/09 20:51:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup50.exe

[2010/06/09 20:51:28 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemig50.exe

[2010/06/09 20:51:28 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe

[2010/06/09 20:51:28 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstinit.exe

[2010/06/09 20:51:27 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll

[2010/06/09 20:51:27 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcfg.dll

[2010/06/09 20:51:27 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll

[2010/06/09 20:51:27 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll

[2010/06/09 20:51:27 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll

[2010/06/09 20:51:27 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdial.dll

[2010/06/09 20:51:27 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll

[2010/06/09 20:51:27 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwphbk.dll

[2010/06/09 20:51:26 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll

[2010/06/09 20:51:26 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwutil.dll

[2010/06/09 20:51:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll

[2010/06/09 20:51:26 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwrmind.exe

[2010/06/09 20:51:25 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwhelp.dll

[2010/06/09 20:51:25 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe

[2010/06/09 20:51:25 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn.dll

[2010/06/09 20:51:24 | 000,557,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dao360.dll

[2010/06/09 20:51:24 | 000,213,075 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sqlxmlx.dll

[2010/06/09 20:51:23 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32r.dll

[2010/06/09 20:51:22 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32.dll

[2010/06/09 20:51:22 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatl3.dll

[2010/06/09 20:51:22 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaosp.dll

[2010/06/09 20:51:21 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaps.dll

[2010/06/09 20:51:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxactps.dll

[2010/06/09 20:51:20 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasql.dll

[2010/06/09 20:51:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatt.dll

[2010/06/09 20:51:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasqlr.dll

[2010/06/09 20:51:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaorar.dll

[2010/06/09 20:51:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaurl.dll

[2010/06/09 20:51:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasc.dll

[2010/06/09 20:51:19 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaora.dll

[2010/06/09 20:51:19 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msjro.dll

[2010/06/09 20:51:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaer.dll

[2010/06/09 20:51:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaenum.dll

[2010/06/09 20:51:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdadc.dll

[2010/06/09 20:51:18 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadox.dll

[2010/06/09 20:51:18 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadomd.dll

[2010/06/09 20:51:18 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado26.tlb

[2010/06/09 20:51:18 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado25.tlb

[2010/06/09 20:51:18 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadrh15.dll

[2010/06/09 20:51:18 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msador15.dll

[2010/06/09 20:51:17 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll

[2010/06/09 20:51:17 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado21.tlb

[2010/06/09 20:51:17 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado20.tlb

[2010/06/09 20:51:17 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msader15.dll

[2010/06/09 20:51:16 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprst.dll

[2010/06/09 20:51:16 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdarem.dll

[2010/06/09 20:51:16 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdfmap.dll

[2010/06/09 20:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaremr.dll

[2010/06/09 20:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprsr.dll

[2010/06/09 20:51:15 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadds.dll

[2010/06/09 20:51:15 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadco.dll

[2010/06/09 20:51:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcs.dll

[2010/06/09 20:51:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaddsr.dll

[2010/06/09 20:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcor.dll

[2010/06/09 20:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcfr.dll

[2010/06/09 20:51:14 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcf.dll

[2010/06/09 20:51:14 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcer.dll

[2010/06/09 20:50:38 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications

[2010/06/09 20:49:59 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate

[2010/06/09 20:49:51 | 000,275,968 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe

[2010/06/09 20:49:51 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\accwiz.exe

[2010/06/09 20:49:51 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe

[2010/06/09 20:49:51 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\access.cpl

[2010/06/09 20:49:51 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl

[2010/06/09 20:49:50 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dialer.exe

[2010/06/09 20:49:50 | 000,497,152 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll

[2010/06/09 20:49:50 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe

[2010/06/09 20:49:50 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndrec32.exe

[2010/06/09 20:49:50 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe

[2010/06/09 20:49:50 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe

[2010/06/09 20:49:49 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe

[2010/06/09 20:49:49 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spider.exe

[2010/06/09 20:49:49 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clipbrd.exe

[2010/06/09 20:49:49 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe

[2010/06/09 20:49:48 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe

[2010/06/09 20:49:48 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll

[2010/06/09 20:49:48 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauserv.dll

[2010/06/09 20:49:47 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe

[2010/06/09 20:49:47 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll

[2010/06/09 20:49:47 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdchost.dll

[2010/06/09 20:49:47 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sessmgr.exe

[2010/06/09 20:49:47 | 000,107,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys

[2010/06/09 20:49:47 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll

[2010/06/09 20:49:47 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscfgwmi.dll

[2010/06/09 20:49:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe

[2010/06/09 20:49:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdshost.exe

[2010/06/09 20:49:47 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\remotepg.dll

[2010/06/09 20:49:47 | 000,020,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdtcp.sys

[2010/06/09 20:49:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe

[2010/06/09 20:49:47 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdsaddin.exe

[2010/06/09 20:49:47 | 000,011,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdpipe.sys

[2010/06/09 20:49:46 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\termsrv.dll

[2010/06/09 20:49:46 | 000,073,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll

[2010/06/09 20:49:46 | 000,073,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwsx.dll

[2010/06/09 20:49:46 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe

[2010/06/09 20:49:46 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpclip.exe

[2010/06/09 20:49:46 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe

[2010/06/09 20:49:46 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe

[2010/06/09 20:49:46 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgbkend.dll

[2010/06/09 20:49:46 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll

[2010/06/09 20:49:46 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe

[2010/06/09 20:49:46 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qprocess.exe

[2010/06/09 20:49:46 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll

[2010/06/09 20:49:46 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpsnd.dll

[2010/06/09 20:49:46 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll

[2010/06/09 20:49:46 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xolehlp.dll

[2010/06/09 20:49:46 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll

[2010/06/09 20:49:46 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icaapi.dll

[2010/06/09 20:49:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.exe

[2010/06/09 20:49:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtc.exe

[2010/06/09 20:49:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcomcnfg.exe

[2010/06/09 20:49:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe

[2010/06/09 20:49:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrereg.exe

[2010/06/09 20:49:44 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comadmin.dll

[2010/06/09 20:49:44 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatex.dll

[2010/06/09 20:49:44 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll

[2010/06/09 20:49:44 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvps.dll

[2010/06/09 20:49:44 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll

[2010/06/09 20:49:44 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.dll

[2010/06/09 20:49:44 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll

[2010/06/09 20:49:44 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\colbact.dll

[2010/06/09 20:49:44 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll

[2010/06/09 20:49:44 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll

[2010/06/09 20:49:44 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stclient.dll

[2010/06/09 20:49:44 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comaddin.dll

[2010/06/09 20:49:44 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll

[2010/06/09 20:49:44 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll

[2010/06/09 20:49:44 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxlegih.dll

[2010/06/09 20:49:44 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll

[2010/06/09 20:49:44 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxdm.dll

[2010/06/09 20:49:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll

[2010/06/09 20:49:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxex.dll

[2010/06/09 20:49:43 | 001,139,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsvcs.dll

[2010/06/09 20:49:43 | 001,139,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll

[2010/06/09 20:49:43 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvut.dll

[2010/06/09 20:49:43 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll

[2010/06/09 20:49:43 | 000,495,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comuid.dll

[2010/06/09 20:49:43 | 000,495,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll

[2010/06/09 20:49:43 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrv.dll

[2010/06/09 20:49:43 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll

[2010/06/09 20:49:43 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsnap.dll

[2010/06/09 20:49:43 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll

[2010/06/09 20:49:42 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatq.dll

[2010/06/09 20:49:41 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprov.dll

[2010/06/09 20:49:41 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmisvc.dll

[2010/06/09 20:49:41 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiutils.dll

[2010/06/09 20:49:41 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipjobj.dll

[2010/06/09 20:49:41 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipiprt.dll

[2010/06/09 20:49:41 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipsess.dll

[2010/06/09 20:49:40 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipcima.dll

[2010/06/09 20:49:40 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmidcprv.dll

[2010/06/09 20:49:40 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipdskq.dll

[2010/06/09 20:49:40 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapsrv.exe

[2010/06/09 20:49:40 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiaprpl.dll

[2010/06/09 20:49:40 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmicookr.dll

[2010/06/09 20:49:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapres.dll

[2010/06/09 20:49:39 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemess.dll

[2010/06/09 20:49:39 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiadap.exe

[2010/06/09 20:49:39 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.dll

[2010/06/09 20:49:39 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemtest.exe

[2010/06/09 20:49:39 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemupgd.dll

[2010/06/09 20:49:39 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemsvc.dll

[2010/06/09 20:49:39 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemprox.dll

[2010/06/09 20:49:38 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcore.dll

[2010/06/09 20:49:38 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcomn.dll

[2010/06/09 20:49:38 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcntl.dll

[2010/06/09 20:49:38 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\viewprov.dll

[2010/06/09 20:49:38 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stdprov.dll

[2010/06/09 20:49:38 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcons.dll

[2010/06/09 20:49:37 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\provthrd.dll

[2010/06/09 20:49:37 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntevt.dll

[2010/06/09 20:49:37 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\repdrvfs.dll

[2010/06/09 20:49:37 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ncprov.dll

[2010/06/09 20:49:37 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scrcons.exe

[2010/06/09 20:49:36 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\esscli.dll

[2010/06/09 20:49:36 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\framedyn.dll

[2010/06/09 20:49:36 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofd.dll

[2010/06/09 20:49:36 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\krnlprov.dll

[2010/06/09 20:49:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofcomp.exe

[2010/06/09 20:49:35 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cimwin32.dll

[2010/06/09 20:49:34 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmprops.dll

[2010/06/09 20:49:34 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll

[2010/06/09 20:49:34 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll

[2010/06/09 20:49:34 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licwmi.dll

[2010/06/09 20:49:34 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll

[2010/06/09 20:49:34 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\servdeps.dll

[2010/06/09 20:49:34 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll

[2010/06/09 20:49:34 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mmfutil.dll

[2010/06/09 20:45:30 | 000,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irsir.sys

[2010/06/09 20:43:02 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax

[2010/06/09 20:43:02 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll

[2010/06/09 20:38:46 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.dll

[2010/06/09 20:38:46 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.cpl

[2010/06/09 20:38:44 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0408.dll

[2010/06/09 20:38:44 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040e.dll

[2010/06/09 20:38:44 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt041f.dll

[2010/06/09 20:38:44 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0419.dll

[2010/06/09 20:38:44 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0415.dll

[2010/06/09 20:38:44 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0405.dll

[2010/06/09 20:38:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood.Tmp

[2010/06/09 20:38:40 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV

[2010/06/09 20:38:40 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll

[2010/06/09 20:38:40 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll

[2010/06/09 20:38:40 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll

[2010/06/09 20:38:40 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll

[2010/06/09 20:38:40 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irenum.sys

[2010/06/09 20:38:39 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll

[2010/06/07 08:13:52 | 000,000,000 | -HSD | C] -- C:\FOUND.004

[2010/06/04 11:11:55 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information

[2010/06/03 07:01:48 | 000,000,000 | -HSD | C] -- C:\FOUND.003

[2010/06/01 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\WinSoftware

[2010/06/01 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\SWF Studio

[2010/06/01 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\Services en ligne

[2010/06/01 15:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\Adverts

[2010/06/01 15:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\Virtual Earth 3D

[2010/06/01 15:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\SlySoft

[2010/06/01 15:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0

[2010/06/01 15:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\D-Jix

[2010/06/01 15:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\Alcatel One Touch PC Suite 3

[2010/06/01 15:49:18 | 000,000,000 | ---D | C] -- C:\Drivers

[2010/06/01 15:49:12 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson

[2010/06/01 15:48:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\A4 screensaver dir

[2010/06/01 15:48:52 | 000,000,000 | ---D | C] -- C:\Config.Msi

[2010/05/31 21:57:34 | 000,000,000 | -HSD | C] -- C:\FOUND.002

[2010/05/23 10:51:40 | 000,000,000 | -HSD | C] -- C:\FOUND.001

[2010/05/21 15:19:02 | 000,000,000 | -HSD | C] -- C:\FOUND.000

[2004/10/07 06:28:00 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\Documents and Settings\Christine Ruellé\*.tmp files -> C:\Documents and Settings\Christine Ruellé\*.tmp -> ]

 

========== Files - Modified Within 30 Days ==========

 

[2010/06/09 21:32:50 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2010/06/09 21:32:44 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010/06/09 21:32:36 | 010,256,384 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\ntuser.dat

[2010/06/09 21:31:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010/06/09 21:31:10 | 536,268,800 | -HS- | M] () -- C:\hiberfil.sys

[2010/06/09 21:09:34 | 000,001,230 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010/06/09 21:07:38 | 000,299,640 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010/06/09 21:02:32 | 000,000,288 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf

[2010/06/09 20:58:56 | 000,000,704 | ---- | M] () -- C:\WINDOWS\win.ini

[2010/06/09 20:58:06 | 000,025,065 | ---- | M] () -- C:\WINDOWS\System32\wmpscheme.xml

[2010/06/09 20:58:02 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb

[2010/06/09 20:58:02 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb

[2010/06/09 20:58:00 | 000,299,552 | ---- | M] () -- C:\WINDOWS\WMSysPrx.prx

[2010/06/09 20:56:14 | 000,004,383 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI

[2010/06/09 20:52:26 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest

[2010/06/09 20:52:26 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest

[2010/06/09 20:52:20 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest

[2010/06/09 20:51:02 | 000,241,664 | ---- | M] () -- C:\Documents and Settings\NetworkService\ntuser.dat

[2010/06/09 20:51:02 | 000,241,664 | ---- | M] () -- C:\Documents and Settings\LocalService\ntuser.dat

[2010/06/09 20:51:02 | 000,023,756 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat

[2010/06/09 20:50:30 | 001,122,704 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI

[2010/06/09 20:50:30 | 000,511,938 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat

[2010/06/09 20:50:30 | 000,442,558 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2010/06/09 20:50:30 | 000,085,464 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat

[2010/06/09 20:50:30 | 000,071,900 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2010/06/09 20:49:20 | 000,000,216 | -HS- | M] () -- C:\boot.ini

[2010/06/09 20:38:46 | 000,000,374 | ---- | M] () -- C:\WINDOWS\System.ini

[2010/06/08 13:12:06 | 000,046,080 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/06/07 16:06:06 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2010/06/04 11:29:54 | 000,375,527 | ---- | M] () -- C:\WINDOWS\setupapi.old

[2010/06/04 10:14:18 | 000,028,548 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Application Data\wklnhst.dat

[2010/06/01 08:17:54 | 000,003,419 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2010/05/23 11:10:00 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat

[2010/05/21 14:46:24 | 000,000,259 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Bureau\Connexion Facebook.url

[2010/05/18 20:49:10 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2010/05/18 12:09:00 | 000,076,924 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122934714400771_100000527283473_218739_4098741_n.jpg

[2010/05/18 12:09:00 | 000,055,622 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122934481067461_100000527283473_218738_1311521_n.jpg

[2010/05/18 11:59:12 | 000,097,145 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122932471067662_100000527283473_218728_1309348_n.jpg

[2010/05/18 11:56:16 | 000,066,023 | ---- | M] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122931944401048_100000527283473_218725_202767_n.jpg

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\Documents and Settings\Christine Ruellé\*.tmp files -> C:\Documents and Settings\Christine Ruellé\*.tmp -> ]

 

========== Files Created - No Company Name ==========

 

[2010/06/09 21:00:10 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe

[2010/06/09 20:59:49 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll

[2010/06/09 20:59:37 | 000,299,069 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll

[2010/06/09 20:58:01 | 000,025,065 | ---- | C] () -- C:\WINDOWS\System32\wmpscheme.xml

[2010/06/09 20:57:59 | 000,299,552 | ---- | C] () -- C:\WINDOWS\WMSysPrx.prx

[2010/06/09 20:52:24 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest

[2010/06/09 20:52:18 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest

[2010/06/09 20:52:18 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest

[2010/06/09 20:52:18 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest

[2010/06/09 20:52:18 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest

[2010/06/09 20:51:41 | 000,353,792 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll

[2010/06/09 20:49:49 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp

[2010/06/09 20:38:22 | 001,624,406 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT

[2010/06/09 20:38:22 | 000,809,394 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT

[2010/06/09 20:38:22 | 000,521,310 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT

[2010/06/09 20:38:22 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT

[2010/06/09 20:38:22 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT

[2010/06/09 20:38:22 | 000,031,161 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT

[2010/06/09 20:38:22 | 000,013,923 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT

[2010/06/09 20:38:22 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT

[2010/06/09 20:38:22 | 000,010,049 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT

[2010/06/09 20:38:22 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT

[2010/06/09 20:38:22 | 000,007,407 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT

[2010/06/09 20:38:22 | 000,007,125 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT

[2010/06/09 20:09:06 | 536,268,800 | -HS- | C] () -- C:\hiberfil.sys

[2010/05/23 11:03:58 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat

[2010/05/18 12:15:33 | 000,076,924 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122934714400771_100000527283473_218739_4098741_n.jpg

[2010/05/18 12:15:25 | 000,055,622 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122934481067461_100000527283473_218738_1311521_n.jpg

[2010/05/18 11:59:22 | 000,097,145 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122932471067662_100000527283473_218728_1309348_n.jpg

[2010/05/18 11:58:57 | 000,066,023 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Mes documents\28110_122931944401048_100000527283473_218725_202767_n.jpg

[2010/05/01 11:07:07 | 010,256,384 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\ntuser.dat

[2009/10/10 19:19:22 | 000,163,768 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat

[2009/07/02 11:38:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll

[2009/07/02 11:38:38 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys

[2009/07/02 11:38:24 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Application Data\$_hpcst$.hpc

[2007/10/25 20:11:55 | 000,000,042 | ---- | C] () -- C:\WINDOWS\IniFile1.ini

[2007/10/25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys

[2007/07/30 13:19:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI

[2007/07/25 15:24:30 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2007/05/31 17:37:33 | 000,000,032 | ---- | C] () -- C:\WINDOWS\basefx.INI

[2007/05/30 20:25:40 | 000,000,051 | ---- | C] () -- C:\WINDOWS\npornap.INI

[2007/02/19 18:48:21 | 000,046,080 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2007/02/19 18:41:09 | 000,000,139 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Local Settings\Application Data\fusioncache.dat

[2007/02/13 17:10:26 | 000,000,120 | ---- | C] () -- C:\WINDOWS\PbkUser.INI

[2007/01/26 23:26:30 | 000,000,052 | ---- | C] () -- C:\WINDOWS\Relax.ini

[2007/01/02 14:52:37 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI

[2006/12/14 17:01:29 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini

[2006/05/22 19:43:33 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll

[2006/04/14 09:23:07 | 000,000,034 | ---- | C] () -- C:\WINDOWS\Kit.ini

[2006/04/13 15:31:55 | 000,007,640 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log

[2006/04/13 15:31:55 | 000,000,206 | ---- | C] () -- C:\WINDOWS\HPGdiPlus.ini

[2006/03/25 12:35:14 | 000,000,283 | ---- | C] () -- C:\WINDOWS\cncscore.ini

[2006/03/25 12:33:38 | 000,000,065 | ---- | C] () -- C:\WINDOWS\Pac.Ini

[2006/03/02 17:50:12 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Default.PLS

[2006/02/26 16:08:28 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2006/02/15 16:08:42 | 000,000,321 | ---- | C] () -- C:\WINDOWS\brainbox.ini

[2006/02/01 18:46:07 | 000,000,598 | ---- | C] () -- C:\WINDOWS\System32\ML.DLL

[2005/11/23 00:24:27 | 000,000,070 | ---- | C] () -- C:\WINDOWS\gvcasinos.ini

[2005/11/22 17:20:01 | 000,000,357 | ---- | C] () -- C:\WINDOWS\whInstaller.ini

[2005/10/28 13:23:06 | 000,040,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdcplh.sys

[2005/09/20 14:57:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini

[2005/08/31 23:17:04 | 000,000,040 | ---- | C] () -- C:\WINDOWS\NAVIGMA.INI

[2005/08/12 22:57:09 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll

[2005/06/18 14:53:10 | 000,000,375 | ---- | C] () -- C:\WINDOWS\Vstudio.INI

[2005/06/18 14:52:42 | 000,000,045 | ---- | C] () -- C:\WINDOWS\dswplug.ini

[2005/06/18 14:47:58 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll

[2005/06/18 14:46:08 | 000,001,646 | ---- | C] () -- C:\WINDOWS\Ulead32.ini

[2005/06/18 14:46:08 | 000,000,040 | ---- | C] () -- C:\WINDOWS\Msdevctl.ini

[2005/06/18 14:46:05 | 003,205,496 | ---- | C] () -- C:\Program Files\F.msi

[2005/06/14 13:47:07 | 000,000,063 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2005/06/13 16:50:28 | 000,147,456 | R--- | C] () -- C:\WINDOWS\mcs_vfw.dll

[2005/06/13 16:50:27 | 000,536,576 | R--- | C] () -- C:\WINDOWS\mcs_core.dll

[2005/06/13 16:48:54 | 000,057,344 | ---- | C] () -- C:\WINDOWS\HAJEInstall.dll

[2005/05/31 13:11:33 | 000,014,938 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini

[2005/05/24 12:40:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DbgOut.INI

[2005/05/21 13:10:37 | 000,000,244 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2005/05/07 13:06:13 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS

[2005/05/07 12:52:13 | 000,278,528 | ---- | C] () -- C:\Program Files\Fichiers communs\FDEUnInstaller.exe

[2005/04/24 04:00:27 | 000,000,202 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2005/04/24 03:46:44 | 000,003,654 | ---- | C] () -- C:\WINDOWS\System32\drivers\Sonyhcp.dll

[2005/04/22 05:10:22 | 000,028,548 | ---- | C] () -- C:\Documents and Settings\Christine Ruellé\Application Data\wklnhst.dat

[2005/04/22 04:50:06 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll

[2005/04/22 04:34:20 | 000,860,160 | -H-- | C] () -- C:\Documents and Settings\Christine Ruellé\ntuser.dat.LOG

[2005/04/22 04:34:20 | 000,000,184 | -HS- | C] () -- C:\Documents and Settings\Christine Ruellé\ntuser.ini

[2005/04/22 04:26:54 | 000,262,144 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\ntuser.dat

[2005/04/22 04:26:54 | 000,008,192 | -H-- | C] () -- C:\WINDOWS\system32\config\systemprofile\NTUSER.DAT.LOG

[2005/03/05 00:13:48 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\ASLM75.SYS

[2005/03/05 00:13:46 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASLM75.SYS

[2005/03/05 00:12:18 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\ATKCheckDispIDs.dll

[2005/03/05 00:12:18 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\ATKOSDMini.DLL

[2005/03/05 00:12:18 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\atkid.ini

[2005/03/05 00:10:42 | 000,000,042 | ---- | C] () -- C:\WINDOWS\AcrobatSetupStatus.ini

[2005/03/05 00:08:42 | 000,000,829 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2005/03/05 00:08:24 | 000,241,664 | ---- | C] () -- C:\Documents and Settings\LocalService\ntuser.dat

[2005/03/05 00:08:24 | 000,008,192 | -H-- | C] () -- C:\Documents and Settings\LocalService\ntuser.dat.LOG

[2005/03/05 00:08:24 | 000,000,020 | -HS- | C] () -- C:\Documents and Settings\LocalService\ntuser.ini

[2005/03/05 00:08:23 | 000,241,664 | ---- | C] () -- C:\Documents and Settings\NetworkService\ntuser.dat

[2005/03/05 00:08:23 | 000,008,192 | -H-- | C] () -- C:\Documents and Settings\NetworkService\ntuser.dat.LOG

[2005/03/05 00:08:23 | 000,000,020 | -HS- | C] () -- C:\Documents and Settings\NetworkService\ntuser.ini

[2005/03/04 17:23:45 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2004/09/29 06:38:00 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2004/09/20 17:49:44 | 000,007,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS

[2004/09/20 17:49:44 | 000,002,538 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI

[2003/07/15 14:13:48 | 000,285,696 | ---- | C] () -- C:\WINDOWS\System32\cncs232.dll

[2002/12/14 22:46:02 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\oggDS.dll

[2002/12/14 22:46:02 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll

[2002/12/14 22:46:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll

[2002/12/14 21:46:04 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll

[2002/11/15 13:11:26 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll

[2001/08/28 12:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[1999/07/17 01:02:32 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\wh2robo.dll

[1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll

[1997/06/13 07:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll

 

========== LOP Check ==========

 

[2005/03/05 00:10:44 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Application Data\InterTrust

[2005/03/05 00:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\InterTrust

[2005/05/08 11:40:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Kazaa Lite

[2005/05/11 20:54:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Jasc

[2005/05/13 18:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\acid type mode

[2006/12/29 00:09:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Zylom

[2005/05/31 13:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\FotoWire

[2007/12/05 19:23:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\D-Jix Media

[2006/01/09 18:22:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Leadertech

[2006/05/08 13:04:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\SlySoft

[2006/06/30 20:14:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\MSNInstaller

[2007/03/16 11:02:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Screenshot Sender

[2007/03/21 13:45:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Shareaza

[2007/05/22 21:51:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Teleca

[2007/07/24 16:52:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\FunWebProducts

[2007/10/10 18:20:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\NCH Swift Sound

[2008/08/19 17:25:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\EoRezo

[2008/08/19 17:26:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\ItsLabel

[2008/08/19 18:21:26 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\.#

[2008/12/05 21:03:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\HiYo

[2009/07/02 11:38:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Samsung

[2009/07/02 11:41:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\PC Suite

[2010/05/01 11:07:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Voxmobili

[2005/04/28 18:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Christine Ruellé\Application Data\Template

 

========== Purity Check ==========

 

 

< End of report >

 

Merci a vous

Alain

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...