Actualité informatique
Test comparatif matériel informatique
Jeux vidéo
Astuces informatique
Vidéo
Télécharger
Services en ligne
Forum informatique
01Business
  


  


  Impossible de supprimer pc cleaner

 

1 utilisateur anonyme et 208 utilisateurs inconnus
Ajouter une réponse

 Mot :  Pseudo :  
Vider la liste des messages à citer  
 Page :
1
Auteur
 Sujet :

Impossible de supprimer pc cleaner

Prévenir les modérateurs en cas d'abus 
n°413172
chef.manu
Posté le 21-07-2008 à 16:35:04  answer
Prévenir les modérateurs en cas d'abus
 

Spyware terminator détecte PC-Cleaner(Rogue Security Program), mais je n'arrive pas à le supprimer.Comment faire, je ne le trouve pas sur mon pc pour le supprimer avec Ajout/Supprimer des programmes. Merci de vos conseil. :pleure:

n°413173
jlpjlp
Posté le 22-07-2008 à 13:40:38  answer
Prévenir les modérateurs en cas d'abus
 

slt

 scan ton ordi avec malwarebyte et colle le rapport obtenu

 http://www.malekal.com/tutoria [...] alware.php
 __________

 colle un rapport hijackthis


 http://www.trendsecure.com/por [...] s/download

 manuel :

 http://leblogdeclaude.blogspot [...] kthis.html

 Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

 ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

 Ensuite avec Explorer créer un dossier c:\hijackthis
 Décompresser Hijackthis dans ce dossier.
 C'est important pour les sauvegardes."

n°413174
chef.manu
Posté le 23-07-2008 à 16:51:57  answer
Prévenir les modérateurs en cas d'abus
 

Bonjour jlpjlp
 Voici le rapport malwarebyte:
 Malwarebytes' Anti-Malware 1.22
 Version de la base de données: 982
 Windows 5.1.2600 Service Pack 3

 16:47:54 23/07/2008
 mbam-log-7-23-2008 (16-47-53).txt

 Type de recherche: Examen complet (A:\|C:\|D:\|H:\|)
 Eléments examinés: 160676
 Temps écoulé: 58 minute(s), 24 second(s)

 Processus mémoire infecté(s): 0
 Module(s) mémoire infecté(s): 0
 Clé(s) du Registre infectée(s): 0
 Valeur(s) du Registre infectée(s): 0
 Elément(s) de données du Registre infecté(s): 0
 Dossier(s) infecté(s): 0
 Fichier(s) infecté(s): 0

 Processus mémoire infecté(s):
 (Aucun élément nuisible détecté)

 Module(s) mémoire infecté(s):
 (Aucun élément nuisible détecté)

 Clé(s) du Registre infectée(s):
 (Aucun élément nuisible détecté)

 Valeur(s) du Registre infectée(s):
 (Aucun élément nuisible détecté)

 Elément(s) de données du Registre infecté(s):
 (Aucun élément nuisible détecté)

 Dossier(s) infecté(s):
 (Aucun élément nuisible détecté)

 Fichier(s) infecté(s):
 (Aucun élément nuisible détecté)


 Et le rapport hijackthis

 Logfile of Trend Micro HijackThis v2.0.2
 Scan saved at 16:51:34, on 23/07/2008
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.16674)
 Boot mode: Normal

 Running processes:
 C:\WINDOWS\System32\smss.exe
 C:\WINDOWS\system32\csrss.exe
 C:\WINDOWS\system32\winlogon.e​xe
 C:\WINDOWS\system32\services.e​xe
 C:\WINDOWS\system32\lsass.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\System32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\brsvc01a.e​xe
 C:\WINDOWS\system32\spoolsv.ex​e
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\Program Files\MioNet\MioNetManager.exe​
 C:\Apps\Softex\OmniPass\Omnise​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\rnamfler\naofsvc.exe
 C:\Program Files\SPAMfighter\sfus.exe
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\System32\PAStiSvc.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\Apps\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\System32\alg.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\Explorer.EXE
 C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe
 C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 C:\Program Files\DAEMON Tools\daemon.exe
 C:\Program Files\Microsoft IntelliType Pro\itype.exe
 C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe
 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
 C:\WINDOWS\System32\svchost.ex​e
 C:\APPS\Powercinema\PCMService​.exe
 C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 C:\WINDOWS\SOUNDMAN.EXE
 C:\Program Files\QuickTime\qttask.exe
 C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe
 C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe
 C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
 C:\Program Files\rnamfler\naomf.exe
 C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe
 C:\Program Files\SPAMfighter\SFAgent.exe
 C:\WINDOWS\system32\ctfmon.exe​
 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 c:\program files\rnamfler\radprcmp.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\Program Files\Hercules\WiFi Station\WifiStation.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcmo​n.exe
 C:\Program Files\Crazy Browser\Crazy Browser.exe
 C:\Program Files\Windows Live\Messenger\msnmsgr.exe
 C:\Program Files\Windows Live\installer\WLSetupSvc.exe
 C:\Program Files\Windows Live\Messenger\usnsvc.exe
 C:\WINDOWS\system32\wbem\wmipr​vse.exe
 C:\Program Files\Trend Micro\HijackThis\HijackThis.ex​e

 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support [...] TbId=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://www.ustart.org
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Toolbar,LinksFolderName = Liens
 R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695E​CA05670} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7​D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\​AcroIEHelper.dll
 O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7​942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1​D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExt​ensions.dll
 O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF​1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5​E23E045} - (no file)
 O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-51647​60863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF105​77473F7} - c:\program files\google\googletoolbar1.dl​l
 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B​5AD205D} - C:\Program Files\Google\GoogleToolbarNoti​fier\2.0.301.7164\swg.dll
 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-00902​7A5CD4F} - c:\program files\google\googletoolbar1.dl​l
 O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-00902​71D4F88} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638​F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe /autorun
 O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
 O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe"
 O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
 O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
 O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" -start
 O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
 O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\Index​Search.exe
 O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMServic​e.exe"
 O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" -Embedding -boot
 O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
 O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe"  -osboot
 O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" /s
 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe"
 O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe"
 O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
 O4 - HKLM\..\Run: [wrna3ls] C:\Program Files\rnamfler\naomf.exe
 O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe"
 O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe"​ update delay 60
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe​
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​
 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE RÉSEAU')
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SYSTEM')
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'Default user')
 O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 O4 - Global Startup: VPro500.lnk = C:\WINDOWS\VPro500.exe
 O4 - Global Startup: WiFi Station.lnk = ?
 O8 - Extra context menu item: Crawler Search - tbr:iemenu
 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Off​ice12\EXCEL.EXE/3000
 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C5​71A8263} - C:\PROGRA~1\MICROS~2\Office12\​REFIEBAR.DLL
 O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F​0318AFE} - C:\WINDOWS\system32\Shdocvw.dl​l
 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.d​ll
 O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\​IE\offline\fr.htm
 O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5​CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
 O16 - DPF: {17492023-C23A-453E-A040-C7C58​0BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
 O16 - DPF: {1B4988D6-1723-11D4-A48B-00E02​917C902} (Contrôle ActiveX GEOMAP GIS) - http://sig.cg18.fr/ggAxFr.cab
 O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED​824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD8​4642501} (Checkers Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4​f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelpe​r.dll
 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05C​B959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w [...] NPUpld.cab
 O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492​C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsof [...] 6964465037
 O16 - DPF: {5C051655-FCD5-4969-9182-770EA​5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {5D6F45B3-9043-443D-A792-11544​7494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/ [...] E_UNO1.cab
 O16 - DPF: {62789780-B744-11D0-986B-00609​731A21D} (Autodesk MapGuide ActiveX Control) - http://sig.cg18.fr/mgaxctrl.cab
 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-22031​3175592} (MSN Games - Installer) - http://messenger.zone.msn.com/ [...] b56649.cab
 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF​06D9A1B} - http://game09.zylom.com/active [...] player.cab
 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46​475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/ [...] b56907.cab
 O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA9​77D5643} (ZoneChess Object) - http://messenger.zone.msn.com/ [...] b57176.cab
 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB62​48B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemSe​rvices.dll
 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA0​51CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.e​xe
 O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.e​xe
 O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\Ko​dakCCS.exe
 O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe​
 O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omnise​rv.exe
 O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Files\rnamfler\naofsvc.exe
 O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
 O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
 O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.e​xe
 O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

 --
 End of file - 15863 bytes

 Et le rapport

n°413175
chef.manu
Posté le 23-07-2008 à 17:09:57  answer
Prévenir les modérateurs en cas d'abus
 


 Voici le rapport hijackthis

 Logfile of Trend Micro HijackThis v2.0.2
 Scan saved at 16:53:01, on 23/07/2008
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.16674)
 Boot mode: Normal

 Running processes:
 C:\WINDOWS\System32\smss.exe
 C:\WINDOWS\system32\csrss.exe
 C:\WINDOWS\system32\winlogon.e​xe
 C:\WINDOWS\system32\services.e​xe
 C:\WINDOWS\system32\lsass.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\System32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\brsvc01a.e​xe
 C:\WINDOWS\system32\spoolsv.ex​e
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\Program Files\MioNet\MioNetManager.exe​
 C:\Apps\Softex\OmniPass\Omnise​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\rnamfler\naofsvc.exe
 C:\Program Files\SPAMfighter\sfus.exe
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\System32\PAStiSvc.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\Apps\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\System32\alg.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\Explorer.EXE
 C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe
 C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 C:\Program Files\DAEMON Tools\daemon.exe
 C:\Program Files\Microsoft IntelliType Pro\itype.exe
 C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe
 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
 C:\WINDOWS\System32\svchost.ex​e
 C:\APPS\Powercinema\PCMService​.exe
 C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 C:\WINDOWS\SOUNDMAN.EXE
 C:\Program Files\QuickTime\qttask.exe
 C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe
 C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe
 C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
 C:\Program Files\rnamfler\naomf.exe
 C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe
 C:\Program Files\SPAMfighter\SFAgent.exe
 C:\WINDOWS\system32\ctfmon.exe​
 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 c:\program files\rnamfler\radprcmp.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\Program Files\Hercules\WiFi Station\WifiStation.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcmo​n.exe
 C:\Program Files\Crazy Browser\Crazy Browser.exe
 C:\Program Files\Windows Live\Messenger\msnmsgr.exe
 C:\Program Files\Windows Live\installer\WLSetupSvc.exe
 C:\Program Files\Windows Live\Messenger\usnsvc.exe
 C:\WINDOWS\system32\wbem\wmipr​vse.exe
 C:\Program Files\Trend Micro\HijackThis\HijackThis.ex​e

 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support [...] TbId=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://www.ustart.org
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Toolbar,LinksFolderName = Liens
 R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695E​CA05670} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7​D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\​AcroIEHelper.dll
 O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7​942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1​D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExt​ensions.dll
 O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF​1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5​E23E045} - (no file)
 O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-51647​60863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF105​77473F7} - c:\program files\google\googletoolbar1.dl​l
 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B​5AD205D} - C:\Program Files\Google\GoogleToolbarNoti​fier\2.0.301.7164\swg.dll
 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-00902​7A5CD4F} - c:\program files\google\googletoolbar1.dl​l
 O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-00902​71D4F88} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638​F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe /autorun
 O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
 O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe"
 O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
 O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
 O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" -start
 O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
 O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\Index​Search.exe
 O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMServic​e.exe"
 O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" -Embedding -boot
 O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
 O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe"  -osboot
 O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" /s
 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe"
 O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe"
 O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
 O4 - HKLM\..\Run: [wrna3ls] C:\Program Files\rnamfler\naomf.exe
 O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe"
 O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe"​ update delay 60
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe​
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​
 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE RÉSEAU')
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SYSTEM')
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'Default user')
 O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 O4 - Global Startup: VPro500.lnk = C:\WINDOWS\VPro500.exe
 O4 - Global Startup: WiFi Station.lnk = ?
 O8 - Extra context menu item: Crawler Search - tbr:iemenu
 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Off​ice12\EXCEL.EXE/3000
 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C5​71A8263} - C:\PROGRA~1\MICROS~2\Office12\​REFIEBAR.DLL
 O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F​0318AFE} - C:\WINDOWS\system32\Shdocvw.dl​l
 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.d​ll
 O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\​IE\offline\fr.htm
 O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5​CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
 O16 - DPF: {17492023-C23A-453E-A040-C7C58​0BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
 O16 - DPF: {1B4988D6-1723-11D4-A48B-00E02​917C902} (Contrôle ActiveX GEOMAP GIS) - http://sig.cg18.fr/ggAxFr.cab
 O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED​824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD8​4642501} (Checkers Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4​f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelpe​r.dll
 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05C​B959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w [...] NPUpld.cab
 O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492​C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsof [...] 6964465037
 O16 - DPF: {5C051655-FCD5-4969-9182-770EA​5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {5D6F45B3-9043-443D-A792-11544​7494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/ [...] E_UNO1.cab
 O16 - DPF: {62789780-B744-11D0-986B-00609​731A21D} (Autodesk MapGuide ActiveX Control) - http://sig.cg18.fr/mgaxctrl.cab
 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-22031​3175592} (MSN Games - Installer) - http://messenger.zone.msn.com/ [...] b56649.cab
 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF​06D9A1B} - http://game09.zylom.com/active [...] player.cab
 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46​475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/ [...] b56907.cab
 O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA9​77D5643} (ZoneChess Object) - http://messenger.zone.msn.com/ [...] b57176.cab
 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB62​48B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemSe​rvices.dll
 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA0​51CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.e​xe
 O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.e​xe
 O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\Ko​dakCCS.exe
 O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe​
 O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omnise​rv.exe
 O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Files\rnamfler\naofsvc.exe
 O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
 O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
 O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.e​xe
 O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe


 Merci pour ton aide.
 --
 End of file - 15863 bytes

n°413176
jlpjlp
Posté le 23-07-2008 à 17:10:58  answer
Prévenir les modérateurs en cas d'abus
 


 télécharge OTMoveIt
 http://download.bleepingcomput [...] oveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur http://up.sur-la-toile.com/sadW
 double-clique sur OTMoveIt.exe pour le lancer.
 copie la liste qui se trouve en citation ci-dessous,
 et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

 Citation :

 C:\Program Files\Macrogaming\SweetIM
 c:\program files\rnamfler\radprcmp.exe
 C:\Program Files\rnamfler\naomf.exe

 clique sur MoveIt! pour lancer la suppression.
 le résultat apparaitra dans le cadre "Results".
 clique sur Exit pour fermer.
 poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

 il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

 _____________



 télécharge combofix (par sUBs) ici :

 http://download.bleepingcomput [...] mboFix.exe

 et enregistre le sur le bureau.


 déconnecte toi d'internet et ferme toutes tes applications.

 désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)


 double-clique sur combofix.exe et suis les instructions

 à la fin, il va produire un rapport C:\ComboFix.txt

 réactive ton parefeu, ton antivirus, la garde de ton antispyware

 copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

 Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

 Tu as un tutoriel complet ici :

 http://www.bleepingcomputer.co [...] ­-combofix

n°413177
chef.manu
Posté le 23-07-2008 à 18:18:07  answer
Prévenir les modérateurs en cas d'abus
 

je ne comprend pas trop la fin de ton message
 Le fichier HijackThis.exe c'est celui qu'il y a sur mon bureau ?
 Qu'est ce que tu appel Explorer et comment faire pour décompresser Hijackthis dans ce doossier

n°413178
jlpjlp
Posté le 23-07-2008 à 18:28:47  answer
Prévenir les modérateurs en cas d'abus
 

c'est bon pour hijackhtis tu m'as bien collé un rapport fais maintenant la suite avec otmovit et combofix

n°413179
chef.manu
Posté le 24-07-2008 à 16:14:54  answer
Prévenir les modérateurs en cas d'abus
 

Je trouve pas C:\_OTMoveIt\MovedFiles pour te poster le rapport
 Merci

n°413180
chef.manu
Posté le 24-07-2008 à 19:16:47  answer
Prévenir les modérateurs en cas d'abus
 

J'ai trouver le rapport il était dans D:
 Voici le rapport que j'ai fait hier:
 C:\Program Files\Macrogaming\SweetIM\upda​te moved successfully.
 C:\Program Files\Macrogaming\SweetIM\logs​ moved successfully.
 C:\Program Files\Macrogaming\SweetIM\data​\contentdb moved successfully.
 C:\Program Files\Macrogaming\SweetIM\data​ moved successfully.
 C:\Program Files\Macrogaming\SweetIM\conf​\users moved successfully.
 C:\Program Files\Macrogaming\SweetIM\conf​ moved successfully.
 Folder cleanup  failed. C:\Program Files\Macrogaming\SweetIM scheduled to be deleted on reboot.
 File move failed. c:\program files\rnamfler\radprcmp.exe scheduled to be moved on reboot.
 File move failed. C:\Program Files\rnamfler\naomf.exe scheduled to be moved on reboot.
 
 Created on 07/23/2008 18:30:55

 Et j'en ai refait un aujourd'hui car je ne trouvais pas le rapport le voici:
 Folder cleanup  failed. C:\Program Files\Macrogaming\SweetIM scheduled to be deleted on reboot.
 File move failed. c:\program files\rnamfler\radprcmp.exe scheduled to be moved on reboot.
 File move failed. C:\Program Files\rnamfler\naomf.exe scheduled to be moved on reboot.
 
 Created on 07/24/2008 15:54:50

 Voici maintenant le rapport combofix:
 ComboFix 08-07-23.5 - Manu 2008-07-24 18:54:16.6 - NTFSx86
 Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.79 [GMT 2:00]
 Endroit: D:\Documents and Settings\Manu\Bureau\ComboFix.​exe
 * Création d'un nouveau point de restauration
 .
 The following files were disabled during the run:
 C:\Program Files\rnamfler\radprlib.dll
 C:\Program Files\rnamfler\radhslib.dll


 ((((((((((((((((((((((((((((((​((((((   Autres suppressions   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .

 C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
 D:\Documents and Settings\Maman\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
 D:\Documents and Settings\Manu\Bureaublackbird.​jpg
 D:\Documents and Settings\Manu\BureauEditorFKWP​1.5.exe
 D:\Documents and Settings\Manu\BureauEditorFKWP​2.0.exe
 D:\Documents and Settings\Manu\Bureaufilemanage​rclient.exe
 D:\Documents and Settings\Manu\Bureaufkwp1.5.ex​e
 D:\Documents and Settings\Manu\Bureaufkwp2.0.ex​e
 D:\Documents and Settings\Manu\Bureaufwebd.exe
 D:\Documents and Settings\Manu\BureauFWebdEdito​r.exe
 D:\Documents and Settings\Manu\BureauTrojan.Win​32.BlackBird.exe
 D:\Documents and Settings\Manu\Bureauvirii
 D:\Documents and Settings\Nous\Bureaublackbird.​jpg
 D:\Documents and Settings\Nous\BureauEditorFKWP​1.5.exe
 D:\Documents and Settings\Nous\BureauEditorFKWP​2.0.exe
 D:\Documents and Settings\Nous\Bureaufilemanage​rclient.exe
 D:\Documents and Settings\Nous\Bureaufkwp1.5.ex​e
 D:\Documents and Settings\Nous\Bureaufkwp2.0.ex​e
 D:\Documents and Settings\Nous\Bureaufwebd.exe
 D:\Documents and Settings\Nous\BureauFWebdEdito​r.exe
 D:\Documents and Settings\Nous\BureauTrojan.Win​32.BlackBird.exe
 D:\Documents and Settings\Nous\Bureauvirii
 H:\Autorun.inf

 .
 (((((((((((((((((((((((((((((   Fichiers cr‚‚s 2008-06-24 to 2008-07-24  ))))))))))))))))))))))))))))))​))))))
 .

 2008-07-23 15:38 . 2008-07-20 20:21 38,472 --a------ C:\WINDOWS\system32\drivers\mb​amswissarmy.sys

 .
 ((((((((((((((((((((((((((((((​((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .
 2008-07-24 16:52 --------- d-----w D:\Documents and Settings\Manu\Application Data\Spyware Terminator
 2008-07-24 16:51 --------- d-----w C:\Program Files\Spyware Terminator
 2008-07-24 14:03 --------- d-----w C:\Program Files\SPAMfighter
 2008-07-24 13:52 --------- d-----w D:\Documents and Settings\All Users\Application Data\Spyware Terminator
 2008-07-23 18:48 --------- d--h--r C:\Program Files\rnamfler
 2008-07-23 13:38 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
 2008-07-20 18:21 17,144 ----a-w C:\WINDOWS\system32\drivers\mb​am.sys
 2008-07-18 00:02 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help
 2008-07-16 13:33 77,824 ----a-w C:\WINDOWS\uinst001.exe
 2008-07-02 18:07 --------- d-----w C:\Program Files\Crazy Browser
 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tc​pip.sys
 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\af​d.sys
 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tc​pip6.sys
 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bt​hport.sys
 2008-06-14 10:12 --------- d-----w C:\Program Files\Zylom Games
 2008-06-10 12:11 --------- d-----w D:\Documents and Settings\Manu\Application Data\TaoUSign
 2008-05-31 17:02 --------- d-----w D:\Documents and Settings\Manu\Application Data\SPAMfighter
 2008-05-31 16:59 --------- d-----w C:\Program Files\Fichiers communs\Ankiro
 2008-05-31 16:57 --------- d-----w C:\Program Files\Fichiers communs\Application
 2008-05-28 07:50 96,384 ----a-w C:\WINDOWS\system32\drivers\sp​td4525.sys
 2008-05-25 21:33 141,312 ----a-w C:\WINDOWS\system32\drivers\sp​_rsdrv2.sys
 2008-05-25 15:33 --------- d-----w C:\WINDOWS\system32\config\sys​temprofile\Application Data\Spyware Terminator
 2008-05-18 09:28 921,632 ----a-w C:\SPC610NC.DAT
 2007-09-25 11:26 774,144 ----a-w C:\Program Files\RngInterstitial.dll
 .

 (((((((((((((((((((((((((((((   snapshot@2008-03-24_23.49.15.9​8   ))))))))))))))))))))))))))))))​)))))))))))
 .
 + 2008-02-26 11:49:32 297,984 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\SP2QFE\msctf.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\updspapi.dll
 + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\S​P2QFE\win32k.sys
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\updspapi.dll
 + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\S​P2QFE\dnsapi.dll
 + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\S​P2QFE\dnsrslvr.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\updspapi.dll
 + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\advpack.dll
 + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\dxtmsft.dll
 + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\dxtrans.dll
 + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\extmgr.dll
 + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\icardie.dll
 + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ie4uinit.exe
 + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieakeng.dll
 + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieaksie.dll
 + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieakui.dll
 + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieapfltr.dat
 + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieapfltr.dll
 + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iedkcs32.dll
 + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieframe.dll
 + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iernonce.dll
 + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iertutil.dll
 + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieudinit.exe
 + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iexplore.exe
 + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\jsproxy.dll
 + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msfeeds.dll
 + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msfeedsbs.dll
 + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mshtml.dll
 + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mshtmled.dll
 + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msrating.dll
 + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mstime.dll
 + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\occache.dll
 + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\pngfilt.dll
 + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\url.dll
 + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\urlmon.dll
 + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\webcheck.dll
 + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\wininet.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\updspapi.dll
 + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\S​P2QFE\gdi32.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\updspapi.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\update.exe
 + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\updspapi.dll
 + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\dao360.dll
 + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msexch40.dll
 + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msexcl40.dll
 + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjet40.dll
 + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjetol1.dll
 + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjint40.dll
 + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjter40.dll
 + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjtes40.dll
 + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msltus40.dll
 + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mspbde40.dll
 + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrd2x40.dll
 + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrd3x40.dll
 + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrepl40.dll
 + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mstext40.dll
 + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mswdat10.dll
 + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mswstr10.dll
 + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msxbde40.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\updspapi.dll
 + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\advpack.dll
 + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\dxtmsft.dll
 + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\dxtrans.dll
 + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\extmgr.dll
 + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\icardie.dll
 + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ie4uinit.exe
 + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieakeng.dll
 + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieaksie.dll
 + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieakui.dll
 + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieapfltr.dat
 + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieapfltr.dll
 + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iedkcs32.dll
 + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieframe.dll
 + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iernonce.dll
 + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iertutil.dll
 + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieudinit.exe
 + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iexplore.exe
 + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\jsproxy.dll
 + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msfeeds.dll
 + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msfeedsbs.dll
 + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mshtml.dll
 + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mshtmled.dll
 + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msrating.dll
 + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mstime.dll
 + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\occache.dll
 + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\pngfilt.dll
 + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\url.dll
 + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\urlmon.dll
 + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\webcheck.dll
 + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\wininet.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\updspapi.dll
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\updspapi.dll
 + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\S​P3QFE\rmcast.sys
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\updspapi.dll
 + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\SP3QFE\bthport.sys
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\spmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\spuninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\spcustom.dll
 + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\update.exe
 + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\updspapi.dll
 + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\S​P3QFE\bthport.sys
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\s​pmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\s​puninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\spcustom.dll
 + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\update.exe
 + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\updspapi.dll
 + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\S​P3QFE\quartz.dll
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\s​pmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\s​puninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\updspapi.dll
 + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\afd.sys
 + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\dnsapi.dll
 + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\mswsock.dll
 + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\tcpip.sys
 + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\tcpip6.sys
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\spcustom.dll
 + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\update.exe
 + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\updspapi.dll
 + 2008-05-07 09:07:23 135,168 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\cscript.exe
 + 2008-05-09 10:51:45 512,000 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\jscript.dll
 + 2008-05-09 10:51:45 180,224 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\scrobj.dll
 + 2008-05-09 10:51:45 172,032 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\scrrun.dll
 + 2008-05-09 10:51:45 430,080 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\vbscript.dll
 + 2008-05-08 11:24:44 155,648 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\wscript.exe
 + 2008-05-09 10:51:45 90,112 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\wshext.dll
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951978\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951978\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\spcustom.dll
 + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\update.exe
 + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\updspapi.dll
 + 2004-08-03 21:10:08 53,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\1394bus.sys
 + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\6to4svc.dll
 + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acadproc.dll
 + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acadproc.dll.000
 + 2004-08-05 12:00:00 189,952 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\accwiz.exe
 + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acgenral.dll
 + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acgenral.dll.000
 + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclayers.dll
 + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclayers.dll.000
 + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclua.dll
 + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclua.dll.000
 + 2004-08-05 12:00:00 119,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclui.dll
 + 2004-08-05 12:00:00 188,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acpi.sys
 + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acspecfc.dll
 + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acspecfc.dll.000
 + 2004-08-05 12:00:00 194,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\activeds.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\actmovie.exe
 + 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\actxprxy.dll
 + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acxtrnal.dll
 + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acxtrnal.dll.000
 + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\admin.dll
 + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\admin.exe
 + 2004-08-05 12:00:00 175,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsldp.dll
 + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsldpc.dll
 + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsmsext.dll
 + 2004-08-05 12:00:00 263,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsnt.dll
 + 2004-08-05 12:00:00 685,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\advapi32.dll
 + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aec.sys
 + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aec.sys.000
 + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\afd.sys
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentanm.dll
 + 2004-08-05 12:00:00 214,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentctl.dll
 + 2006-10-12 14:04:13 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentdp2.dll
 + 2007-03-09 13:48:06 57,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentdpv.dll
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentmpx.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentpsh.dll
 + 2004-08-05 12:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentsr.dll
 + 2006-10-12 11:09:53 256,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentsvr.exe
 + 2004-08-03 21:07:42 42,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agp440.sys
 + 2004-08-03 21:07:44 44,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agpcpq.sys
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0401.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0404.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0405.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0406.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0407.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0408.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0409.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040b.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040c.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040d.dll
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040e.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0410.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0411.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0412.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0413.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0414.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0415.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0416.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0419.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt041d.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt041f.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0804.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0816.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0c0a.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agtintl.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ahui.exe
 + 2004-08-05 12:00:00 44,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alg.exe
 + 2004-08-03 21:07:42 42,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alim1541.sys
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alrsvc.dll
 + 2004-08-03 21:07:44 43,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdagp.sys
 + 2004-08-05 12:00:00 41,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdk6.sys
 + 2004-08-05 12:00:00 41,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdk7.sys
 + 2004-08-05 12:00:00 70,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amstream.dll
 + 2004-08-05 12:00:00 126,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\apphelp.dll
 + 2004-08-05 12:00:00 60,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\arp1394.sys
 + 2004-08-05 12:00:00 65,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\asycfilt.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\asyncmac.sys
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\at.exe
 + 2004-08-03 20:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atapi.sys
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atl.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmadm.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmarpc.sys
 + 2004-08-05 12:00:00 285,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmfd.dll
 + 2004-08-05 12:00:00 55,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmlane.sys
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmlib.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\attrib.exe
 + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\audiosrv.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\auditusr.exe
 + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\author.dll
 + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\author.exe
 + 2005-03-02 18:10:36 56,832 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\authz.dll
 + 2004-08-05 12:00:00 625,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autochk.exe
 + 2004-08-05 12:00:00 638,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autoconv.exe
 + 2004-08-05 12:00:00 616,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autofmt.exe
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autolfn.exe
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\avifil32.dll
 + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\basesrv.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\batmeter.dll
 + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\batt.dll
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bidispl.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bitsprx2.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bitsprx3.dll
 + 2004-08-05 12:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\blastcln.exe
 + 2004-08-05 12:00:00 71,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bridge.sys
 + 2004-08-05 12:00:00 70,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browselc.dll
 + 2004-08-05 12:00:00 77,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browser.dll
 + 2007-08-22 13:13:05 1,023,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browseui.dll
 + 2004-08-05 12:00:00 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browsewm.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bthci.dll
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bthserv.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\btpanui.dll
 + 2004-08-05 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\c_g18030.dll
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cabinet.dll
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cabview.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cacls.exe
 + 2004-08-05 12:00:00 385,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\callcont.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\camocx.dll
 + 2004-08-05 12:00:00 146,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\capesnpn.dll
 + 2005-07-26 04:39:54 225,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrv.dll
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrvps.dll
 + 2005-07-26 04:39:54 625,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrvut.dll
 + 2004-08-03 21:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ccdecode.sys
 + 2004-08-05 12:00:00 63,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdfs.sys
 + 2007-08-22 13:13:05 152,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdfview.dll
 + 2005-09-10 01:55:14 2,067,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdosys.dll
 + 2004-08-05 12:00:00 49,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdrom.sys
 + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\certcli.dll
 + 2004-08-05 12:00:00 467,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\certmgr.dll
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgbkend.dll
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgmgr32.dll
 + 2003-03-24 14:52:04 188,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgwiz.exe
 + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtmbx.dll
 + 2004-08-05 12:00:00 56,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtskdic.dll
 + 2004-08-05 12:00:00 173,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtskf.dll
 + 2004-08-05 12:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cic.dll
 + 2004-08-05 12:00:00 1,352,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cimwin32.dll
 + 2004-08-05 12:00:00 198,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cintime.dll
 + 2006-06-22 05:13:45 69,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ciodm.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cisvc.exe
 + 2004-08-05 12:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\classpnp.sys
 + 2005-07-26 04:39:55 110,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clbcatex.dll
 + 2005-07-26 04:39:55 498,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clbcatq.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cleanmgr.exe
 + 2004-08-05 12:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cliconfg.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cliconfg.exe
 + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clipbrd.exe
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clipsrv.exe
 + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clusapi.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmcfg32.dll
 + 2004-08-05 12:00:00 400,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmd.exe
 + 2004-08-05 12:00:00 352,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmdial32.dll
 + 2004-08-05 12:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmdl32.exe
 + 2004-08-05 12:00:00 40,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmmon32.exe
 + 2004-08-05 12:00:00 191,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmprops.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmsetacl.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmstp.exe
 + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmutil.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cnbjmon.dll
 + 2005-07-26 04:39:55 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\colbact.dll
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comaddin.dll
 + 2005-07-26 04:39:56 195,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comadmin.dll
 + 2006-08-25 15:51:14 617,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comctl32.dll
 + 2004-08-05 12:00:00 281,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comdlg32.dll
 + 2004-08-05 12:00:00 253,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\compatui.dll
 + 2004-08-05 12:00:00 230,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\compstui.dll
 + 2005-07-26 04:39:56 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrepl.dll
 + 2004-08-05 12:00:00 9,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrepl.exe
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrereg.exe
 + 2004-08-05 12:00:00 851,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comres.dll
 + 2004-08-05 12:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsetup.dll
 + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsnap.dll
 + 2005-07-26 04:39:57 1,267,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsvcs.dll
 + 2005-07-26 04:39:57 540,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comuid.dll
 + 2004-08-05 12:00:00 1,044,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\conf.exe
 + 2004-08-05 12:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\confmrsl.dll
 + 2004-08-05 12:00:00 346,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\confmsp.dll
 + 2004-08-05 12:00:00 27,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\conime.exe
 + 2007-08-13 17:42:54 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\corpol.dll
 + 2004-08-05 12:00:00 165,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\credui.dll
 + 2004-08-05 12:00:00 40,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\crusoe.sys
 + 2004-08-05 12:00:00 604,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\crypt32.dll
 + 2004-08-05 12:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptdlg.dll
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptdll.dll
 + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptext.dll
 + 2004-08-05 12:00:00 63,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptnet.dll
 + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptsvc.dll
 + 2004-08-05 12:00:00 530,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptui.dll
 + 2004-08-05 12:00:00 102,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscdll.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscript.exe
 + 2004-08-05 12:00:00 337,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscui.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\csrsrv.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\csrss.exe
 + 2004-08-05 12:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ctfmon.exe
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\custsat.dll
 + 2004-08-05 12:00:00 1,179,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d8.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d8thk.dll
 + 2004-08-05 12:00:00 1,689,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d9.dll
 + 2004-08-05 12:00:00 825,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3dim700.dll
 + 2007-08-22 13:13:05 1,056,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\danim.dll
 + 2004-08-05 12:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dataclen.dll
 + 2004-08-05 12:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\datime.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\davclnt.dll
 + 2004-08-05 12:00:00 640,000 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbghelp.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbmsrpcn.dll
 + 2004-08-05 12:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbnetlib.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbnmpntw.dll
 + 2004-08-05 12:00:00 1,788 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcache.bin
 + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcap32.dll
 + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dciman32.dll
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcomcnfg.exe
 + 2004-08-05 12:00:00 31,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddeshare.exe
 + 2004-08-05 12:00:00 266,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddraw.dll
 + 2004-08-05 12:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddrawex.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\defrag.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\devenum.dll
 + 2004-08-05 12:00:00 290,816 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\devmgr.dll
 + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgfat.exe
 + 2004-08-05 12:00:00 104,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgntfs.exe
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgsnap.dll
 + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgui.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfsshlex.dll
 + 2004-08-05 12:00:00 115,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dgnet.dll
 + 2006-05-19 13:23:35 112,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dhcpcsvc.dll
 + 2004-08-05 12:00:00 401,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dhcpmon.dll
 + 2004-08-05 12:00:00 548,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dialer.exe
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diantz.exe
 + 2004-08-05 12:00:00 68,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\digest.dll
 + 2004-08-05 12:00:00 165,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dinput.dll
 + 2004-08-05 12:00:00 187,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dinput8.dll
 + 2007-05-16 15:13:53 86,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\directdb.dll
 + 2004-08-05 12:00:00 36,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\disk.sys
 + 2004-08-05 12:00:00 1,502,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskcopy.dll
 + 2004-08-05 12:00:00 14,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskdump.sys
 + 2004-08-05 12:00:00 167,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskpart.exe
 + 2004-08-05 12:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dispex.dll
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dllhost.exe
 + 2004-08-05 12:00:00 225,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmadmin.exe
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmband.dll
 + 2004-08-05 12:00:00 800,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmboot.sys
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmcompos.dll
 + 2004-08-05 12:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmdlgs.dll
 + 2004-08-05 12:00:00 200,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmdskmgr.dll
 + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmime.dll
 + 2004-08-05 12:00:00 154,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmio.sys
 + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmloader.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmremote.exe
 + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmscript.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmserver.dll
 + 2004-08-05 12:00:00 105,984 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmstyle.dll
 + 2004-08-05 12:00:00 103,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmsynth.dll
 + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmusic.dll
 + 2004-08-03 21:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmusic.sys
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmutil.dll
 + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dnsapi.dll
 + 2008-02-20 05:35:05 45,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dnsrslvr.dll
 + 2004-08-05 12:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\docprop2.dll
 + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpcdll.dll
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dplaysvr.exe
 + 2004-08-05 12:00:00 229,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dplayx.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpmodemx.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnaddr.dll
 + 2004-08-05 12:00:00 375,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnet.dll
 + 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnhpast.dll
 + 2004-08-05 12:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnhupnp.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnlobby.dll
 + 2004-08-05 12:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnsvr.exe
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvacm.dll
 + 2004-08-05 12:00:00 213,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvoice.dll
 + 2004-08-05 12:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvsetup.exe
 + 2004-08-05 12:00:00 116,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvvox.dll
 + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpwsockx.dll
 + 2004-08-03 21:08:00 60,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drmk.sys
 + 2004-08-03 21:07:58 2,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drmkaud.sys
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drprov.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ds32gt.dll
 + 2004-08-05 12:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsdmo.dll
 + 2004-08-05 12:00:00 72,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsdmoprp.dll
 + 2004-08-05 12:00:00 93,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dskquota.dll
 + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dskquoui.dll
 + 2004-08-05 12:00:00 367,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsound.dll
 + 2004-08-05 12:00:00 1,294,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsound3d.dll
 + 2004-08-05 12:00:00 145,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsprop.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsprpres.dll
 + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsquery.dll
 + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dssec.dll
 + 2004-08-05 12:00:00 137,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dssenh.dll
 + 2004-08-05 12:00:00 113,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsuiext.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dswave.dll
 + 2004-08-05 12:00:00 10,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dumprep.exe
 + 2004-08-05 12:00:00 304,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\duser.dll
 + 2004-08-05 12:00:00 17,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dvdupgrd.exe
 + 2004-08-05 12:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dwwin.exe
 + 2004-08-05 12:00:00 619,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dx7vb.dll
 + 2004-08-05 12:00:00 1,227,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dx8vb.dll
 + 2004-08-05 12:00:00 1,298,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxdiag.exe
 + 2004-08-05 12:00:00 2,113,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxdiagn.dll
 + 2004-08-05 12:00:00 71,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxg.sys
 + 2006-08-24 11:17:20 500,278 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxmasf.dll
 + 2004-08-05 12:00:00 187,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\els.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\encapi.dll
 + 2004-08-05 12:00:00 186,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\encdec.dll
 + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ersvc.dll
 + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\es.dll
 + 2005-10-20 22:25:53 1,097,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\esent.dll
 + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\esscli.dll
 + 2004-08-05 12:00:00 195,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\eudcedit.exe
 + 2004-08-05 12:00:00 55,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\eventlog.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\evntrprv.dll
 + 2007-06-13 13:22:28 1,037,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\explorer.exe
 + 2004-08-05 12:00:00 380,957 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\expsrv.dll
 + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\extrac32.exe
 + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\exts.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\f3ahvoas.dll
 + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fastfat.sys
 + 2004-08-05 12:00:00 472,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fastprox.dll
 + 2004-08-05 12:00:00 80,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\faultrep.dll
 + 2004-08-05 12:00:00 27,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fdc.sys
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\feclient.dll
 + 2004-08-05 12:00:00 348,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\filemgmt.dll
 + 2004-08-05 12:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\findstr.exe
 + 2004-08-05 12:00:00 35,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fips.sys
 + 2004-08-05 12:00:00 88,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fldrclnr.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\flpydisk.sys
 + 2006-08-21 12:26:15 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltlib.dll
 + 2006-08-21 09:14:58 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltmc.exe
 + 2006-08-21 09:14:58 128,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltmgr.sys
 + 2004-08-05 12:00:00 386,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontext.dll
 + 2005-10-17 21:21:08 80,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontsub.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontview.exe
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\forcedos.exe
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\format.com
 + 2004-08-05 12:00:00 32,828 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp40ext.dll
 + 2004-05-12 23:39:48 184,435 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4amsft.dll
 + 2003-03-24 14:52:04 82,035 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4anscp.dll
 + 2003-03-24 14:52:04 147,513 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4apws.dll
 + 2003-03-24 14:52:04 49,210 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4areg.dll
 + 2003-03-24 14:52:04 102,509 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4atxt.dll
 + 2003-03-24 13:52:04 618,605 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4autl.dll
 + 2003-03-24 14:52:04 41,020 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4avnb.dll
 + 2003-03-24 14:52:04 32,826 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4avss.dll
 + 2003-03-24 14:52:04 49,212 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4awebs.dll
 + 2004-05-12 23:39:48 876,653 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4awel.dll
 + 2002-05-14 12:08:54 14,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp98sadm.exe
 + 2002-05-14 12:08:54 109,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp98swin.exe
 + 2003-03-24 14:52:04 188,494 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpcount.exe
 + 2002-05-14 12:08:54 94,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpencode.dll
 + 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpexedll.dll
 + 2004-05-12 23:39:48 598,071 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpmmc.dll
 + 2003-03-24 14:52:04 20,538 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpremadm.exe
 + 1999-01-21 00:06:22 16,449 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpsrvadm.exe
 + 1999-01-20 23:31:34 32,833 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpsrvwin.exe
 + 2004-08-05 12:00:00 9,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\framebuf.dll
 + 2004-08-05 12:00:00 185,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\framedyn.dll
 + 2004-08-05 12:00:00 193,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fsquirt.exe
 + 2004-08-05 12:00:00 46,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ftp.exe
 + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fwcfg.dll
 + 2004-08-05 12:00:00 452,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fxsapi.dll
 + 2004-08-05 12:00:00 132,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fxsocm.dll
 + 2008-02-20 06:51:00 282,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\gdi32.dll
 + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\glu32.dll
 + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\gpkrsrc.dll
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\grpconv.exe
 + 2004-08-05 12:00:00 125,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\guitrn.dll
 + 2004-08-05 12:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\h323cc.dll
 + 2004-08-05 12:00:00 614,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\h323msp.dll
 + 2004-08-05 12:00:00 131,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hal.dll
 + 2005-09-28 23:35:25 134,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\halmacpi.dll
 + 2005-09-28 23:35:25 134,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\halmacpi.dll.000
 + 2004-08-03 22:54:28 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hccoin.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\help.exe
 + 2004-08-05 12:00:00 768,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\helpctr.exe
 + 2004-08-05 12:00:00 743,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\helpsvc.exe
 + 2005-05-26 23:22:01 10,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hh.exe
 + 2005-05-27 02:08:06 41,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hhsetup.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hid.dll
 + 2004-08-05 12:00:00 36,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidclass.sys
 + 2004-08-05 12:00:00 24,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidparse.sys
 + 2004-08-03 22:54:28 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidserv.dll
 + 2001-08-17 20:02:20 9,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidusb.sys
 + 2006-07-21 08:27:28 72,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hlink.dll
 + 2004-08-05 12:00:00 347,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hnetcfg.dll
 + 2004-08-05 12:00:00 336,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hnetwiz.dll
 + 2004-08-05 12:00:00 146,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hotplug.dll
 + 2004-08-03 22:54:28 87,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hpfud50.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hscupd.exe
 + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\http.sys
 + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\http.sys.000
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\httpapi.dll
 + 2004-08-05 12:00:00 43,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\htui.dll
 + 2004-08-05 12:00:00 13,463,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hwxjpn.dll
 + 2004-11-17 17:42:33 354,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hypertrm.dll
 + 2004-08-03 21:00:52 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i2omgmt.sys
 + 2004-08-03 21:00:52 18,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i2omp.sys
 + 2004-08-05 12:00:00 54,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i8042prt.sys
 + 2004-08-05 12:00:00 119,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iasrad.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icaapi.dll
 + 2004-08-05 12:00:00 80,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iccvid.dll
 + 2005-06-29 01:49:41 254,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icm32.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icmp.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iconlib.dll
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn.dll
 + 2004-08-05 12:00:00 218,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn1.exe
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn2.exe
 + 2004-08-05 12:00:00 73,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwdial.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwdl.dll
 + 2004-08-05 12:00:00 176,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwhelp.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwphbk.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwrmind.exe
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwutil.dll
 + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\idq.dll
 + 2007-08-13 17:45:18 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ieencode.dll
 + 2004-08-05 12:00:00 114,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iexpress.exe
 + 2004-08-05 12:00:00 142,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ifmon.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\igmpagnt.dll
 + 2004-08-05 12:00:00 508,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iis.dll
 + 2004-08-05 12:00:00 81,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ils.dll
 + 2004-08-05 12:00:00 144,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imagehlp.dll
 + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imapi.exe
 + 2004-08-05 12:00:00 41,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imapi.sys
 + 2004-08-05 12:00:00 106,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imekrcic.dll
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imekrmbx.dll
 + 2004-08-05 12:00:00 36,921 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imeshare.dll
 + 2004-08-05 12:00:00 811,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjp81k.dll
 + 2004-08-05 12:00:00 368,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpcic.dll
 + 2004-08-05 12:00:00 716,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpcus.dll
 + 2004-08-05 12:00:00 81,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpdct.dll
 + 2004-08-05 12:00:00 274,489 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjputyc.dll
 + 2004-08-05 12:00:00 102,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imlang.dll
 + 2004-08-05 12:00:00 110,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imm32.dll
 + 2004-08-05 12:00:00 118,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imsinsnt.dll
 + 2004-08-05 12:00:00 315,452 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imskf.dll
 + 2004-08-05 12:00:00 282,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetcfg.dll
 + 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetcomm.dll
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetmib1.dll
 + 2004-08-05 12:00:00 75,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetpp.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetppui.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetres.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetwiz.exe
 + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\initpki.dll
 + 2004-08-05 12:00:00 126,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\input.dll
 + 2004-08-03 22:43:40 5,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\intelide.sys
 + 2004-08-05 12:00:00 40,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\intelppm.sys
 + 2004-08-05 12:00:00 29,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ip6fw.sys
 + 2004-08-05 12:00:00 58,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipconfig.exe
 + 2006-05-19 13:23:35 95,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iphlpapi.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipinip.sys
 + 2004-08-05 12:00:00 167,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipmontr.dll
 + 2004-09-29 22:28:37 134,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipnat.sys
 + 2004-08-05 12:00:00 332,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipnathlp.dll
 + 2004-08-05 12:00:00 355,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ippromon.dll
 + 2004-08-05 12:00:00 169,984 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iprtrmgr.dll
 + 2004-08-05 12:00:00 74,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsec.sys
 + 2004-08-05 12:00:00 361,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsecsnp.dll
 + 2004-08-05 12:00:00 184,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsecsvc.dll
 + 2004-08-05 12:00:00 388,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsmsnap.dll
 + 2004-08-05 12:00:00 53,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipv6.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipv6mon.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipxroute.exe
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipxwan.dll
 + 2004-08-05 12:00:00 120,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir41_qc.dll
 + 2004-08-05 12:00:00 338,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir41_qcx.dll
 + 2004-08-05 12:00:00 755,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_32.dll
 + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_qc.dll
 + 2004-08-05 12:00:00 183,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_qcx.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\irenum.sys
 + 2001-08-23 14:58:06 36,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isapnp.sys
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isign32.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isrdbg32.dll
 + 2005-05-27 02:08:06 155,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\itircl.dll
 + 2005-05-27 02:08:06 137,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\itss.dll
 + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ixsso.dll
 + 2004-08-05 12:00:00 47,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iyuv_32.dll
 + 2006-06-01 18:48:44 163,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jgdw400.dll
 + 2006-06-01 18:48:44 27,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jgpl400.dll
 + 2007-08-13 17:38:04 491,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jscript.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd101.dll
 + 2001-08-17 20:55:56 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd106.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd106n.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdax2.dll
 + 2004-08-03 22:45:12 25,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdclass.sys
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdfi1.dll
 + 2004-08-03 22:45:14 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdhid.sys
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdibm02.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinbe1.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinben.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinmal.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdlk41a.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdlk41j.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmaori.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmlt47.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmlt48.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdnec.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdno1.dll
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdsmsfi.dll
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdsmsno.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdukx.dll
 + 2004-08-05 12:00:00 7,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kd1394.dll
 + 2005-06-15 17:50:31 295,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kerberos.dll
 + 2007-04-16 15:53:11 1,049,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kernel32.dll
 + 2004-08-05 12:00:00 157,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\keymgr.dll
 + 2006-06-14 08:47:45 172,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kmixer.sys
 + 2006-06-14 08:47:45 172,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kmixer.sys.000
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\krnlprov.dll
 + 2004-08-03 21:15:22 140,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ks.sys
 + 2004-08-05 12:00:00 92,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ksecdd.sys
 + 2004-08-03 22:54:30 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ksuser.dll
 + 2004-08-05 12:00:00 424,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\licdll.dll
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\licwmi.dll
 + 2005-09-01 01:43:37 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\linkinfo.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lmhsvc.dll
 + 2004-08-05 12:00:00 399,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lmrt.dll
 + 2004-08-05 12:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\loadperf.dll
 + 2004-08-05 12:00:00 228,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\localsec.dll
 + 2004-08-05 12:00:00 344,576 -c----w C:\WINDOWS\$Nt

n°413181
jlpjlp
Posté le 26-07-2008 à 15:50:35  answer
Prévenir les modérateurs en cas d'abus
 

le rapport combofix est incomplet...

 fais en deux parties si besoin!

 et remets un rapport hijackthis aussi


 a plus

n°413182
chef.manu
Posté le 27-07-2008 à 01:36:42  answer
Prévenir les modérateurs en cas d'abus
 

Rapport combofix
 ComboFix 08-07-23.5 - Manu 2008-07-24 18:54:16.6 - NTFSx86
 Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.79 [GMT 2:00]
 Endroit: D:\Documents and Settings\Manu\Bureau\ComboFix.​exe
 * Création d'un nouveau point de restauration
 .
 The following files were disabled during the run:
 C:\Program Files\rnamfler\radprlib.dll
 C:\Program Files\rnamfler\radhslib.dll


 ((((((((((((((((((((((((((((((​((((((   Autres suppressions   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .

 C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
 D:\Documents and Settings\Maman\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
 D:\Documents and Settings\Manu\Bureaublackbird.​jpg
 D:\Documents and Settings\Manu\BureauEditorFKWP​1.5.exe
 D:\Documents and Settings\Manu\BureauEditorFKWP​2.0.exe
 D:\Documents and Settings\Manu\Bureaufilemanage​rclient.exe
 D:\Documents and Settings\Manu\Bureaufkwp1.5.ex​e
 D:\Documents and Settings\Manu\Bureaufkwp2.0.ex​e
 D:\Documents and Settings\Manu\Bureaufwebd.exe
 D:\Documents and Settings\Manu\BureauFWebdEdito​r.exe
 D:\Documents and Settings\Manu\BureauTrojan.Win​32.BlackBird.exe
 D:\Documents and Settings\Manu\Bureauvirii
 D:\Documents and Settings\Nous\Bureaublackbird.​jpg
 D:\Documents and Settings\Nous\BureauEditorFKWP​1.5.exe
 D:\Documents and Settings\Nous\BureauEditorFKWP​2.0.exe
 D:\Documents and Settings\Nous\Bureaufilemanage​rclient.exe
 D:\Documents and Settings\Nous\Bureaufkwp1.5.ex​e
 D:\Documents and Settings\Nous\Bureaufkwp2.0.ex​e
 D:\Documents and Settings\Nous\Bureaufwebd.exe
 D:\Documents and Settings\Nous\BureauFWebdEdito​r.exe
 D:\Documents and Settings\Nous\BureauTrojan.Win​32.BlackBird.exe
 D:\Documents and Settings\Nous\Bureauvirii
 H:\Autorun.inf

 .
 (((((((((((((((((((((((((((((   Fichiers cr‚‚s 2008-06-24 to 2008-07-24  ))))))))))))))))))))))))))))))​))))))
 .

 2008-07-23 15:38 . 2008-07-20 20:21 38,472 --a------ C:\WINDOWS\system32\drivers\mb​amswissarmy.sys

 .
 ((((((((((((((((((((((((((((((​((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .
 2008-07-24 16:52 --------- d-----w D:\Documents and Settings\Manu\Application Data\Spyware Terminator
 2008-07-24 16:51 --------- d-----w C:\Program Files\Spyware Terminator
 2008-07-24 14:03 --------- d-----w C:\Program Files\SPAMfighter
 2008-07-24 13:52 --------- d-----w D:\Documents and Settings\All Users\Application Data\Spyware Terminator
 2008-07-23 18:48 --------- d--h--r C:\Program Files\rnamfler
 2008-07-23 13:38 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
 2008-07-20 18:21 17,144 ----a-w C:\WINDOWS\system32\drivers\mb​am.sys
 2008-07-18 00:02 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help
 2008-07-16 13:33 77,824 ----a-w C:\WINDOWS\uinst001.exe
 2008-07-02 18:07 --------- d-----w C:\Program Files\Crazy Browser
 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tc​pip.sys
 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\af​d.sys
 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tc​pip6.sys
 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bt​hport.sys
 2008-06-14 10:12 --------- d-----w C:\Program Files\Zylom Games
 2008-06-10 12:11 --------- d-----w D:\Documents and Settings\Manu\Application Data\TaoUSign
 2008-05-31 17:02 --------- d-----w D:\Documents and Settings\Manu\Application Data\SPAMfighter
 2008-05-31 16:59 --------- d-----w C:\Program Files\Fichiers communs\Ankiro
 2008-05-31 16:57 --------- d-----w C:\Program Files\Fichiers communs\Application
 2008-05-28 07:50 96,384 ----a-w C:\WINDOWS\system32\drivers\sp​td4525.sys
 2008-05-25 21:33 141,312 ----a-w C:\WINDOWS\system32\drivers\sp​_rsdrv2.sys
 2008-05-25 15:33 --------- d-----w C:\WINDOWS\system32\config\sys​temprofile\Application Data\Spyware Terminator
 2008-05-18 09:28 921,632 ----a-w C:\SPC610NC.DAT
 2007-09-25 11:26 774,144 ----a-w C:\Program Files\RngInterstitial.dll
 .

 (((((((((((((((((((((((((((((   snapshot@2008-03-24_23.49.15.9​8   ))))))))))))))))))))))))))))))​)))))))))))
 .
 + 2008-02-26 11:49:32 297,984 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\SP2QFE\msctf.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v​3\update\updspapi.dll
 + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\S​P2QFE\win32k.sys
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\u​pdate\updspapi.dll
 + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\S​P2QFE\dnsapi.dll
 + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\S​P2QFE\dnsrslvr.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\u​pdate\updspapi.dll
 + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\advpack.dll
 + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\dxtmsft.dll
 + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\dxtrans.dll
 + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\extmgr.dll
 + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\icardie.dll
 + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ie4uinit.exe
 + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieakeng.dll
 + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieaksie.dll
 + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieakui.dll
 + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieapfltr.dat
 + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieapfltr.dll
 + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iedkcs32.dll
 + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieframe.dll
 + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iernonce.dll
 + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iertutil.dll
 + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\ieudinit.exe
 + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\iexplore.exe
 + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\jsproxy.dll
 + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msfeeds.dll
 + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msfeedsbs.dll
 + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mshtml.dll
 + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mshtmled.dll
 + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\msrating.dll
 + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\mstime.dll
 + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\occache.dll
 + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\pngfilt.dll
 + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\url.dll
 + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\urlmon.dll
 + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\webcheck.dll
 + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\SP2QFE\wininet.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-I​E7\update\updspapi.dll
 + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\S​P2QFE\gdi32.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\u​pdate\updspapi.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\update.exe
 + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\u​pdate\updspapi.dll
 + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\dao360.dll
 + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msexch40.dll
 + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msexcl40.dll
 + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjet40.dll
 + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjetol1.dll
 + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjint40.dll
 + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjter40.dll
 + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msjtes40.dll
 + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msltus40.dll
 + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mspbde40.dll
 + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrd2x40.dll
 + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrd3x40.dll
 + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msrepl40.dll
 + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mstext40.dll
 + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mswdat10.dll
 + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\mswstr10.dll
 + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\S​P2QFE\msxbde40.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\s​pmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\s​puninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\u​pdate\updspapi.dll
 + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\advpack.dll
 + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\dxtmsft.dll
 + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\dxtrans.dll
 + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\extmgr.dll
 + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\icardie.dll
 + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ie4uinit.exe
 + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieakeng.dll
 + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieaksie.dll
 + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieakui.dll
 + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieapfltr.dat
 + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieapfltr.dll
 + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iedkcs32.dll
 + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieframe.dll
 + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iernonce.dll
 + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iertutil.dll
 + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\ieudinit.exe
 + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\iexplore.exe
 + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\jsproxy.dll
 + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msfeeds.dll
 + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msfeedsbs.dll
 + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mshtml.dll
 + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mshtmled.dll
 + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\msrating.dll
 + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\mstime.dll
 + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\occache.dll
 + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\pngfilt.dll
 + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\url.dll
 + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\urlmon.dll
 + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\webcheck.dll
 + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\SP2QFE\wininet.dll
 + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\spmsg.dll
 + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\spuninst.exe
 + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\spcustom.dll
 + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\update.exe
 + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-I​E7\update\updspapi.dll
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\u​pdate\updspapi.dll
 + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\S​P3QFE\rmcast.sys
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\u​pdate\updspapi.dll
 + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\SP3QFE\bthport.sys
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\spmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\spuninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\spcustom.dll
 + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\update.exe
 + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v​2\update\updspapi.dll
 + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\S​P3QFE\bthport.sys
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\s​pmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\s​puninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\spcustom.dll
 + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\update.exe
 + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\u​pdate\updspapi.dll
 + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\S​P3QFE\quartz.dll
 + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\s​pmsg.dll
 + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\s​puninst.exe
 + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\spcustom.dll
 + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\update.exe
 + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\u​pdate\updspapi.dll
 + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\afd.sys
 + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\dnsapi.dll
 + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\mswsock.dll
 + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\tcpip.sys
 + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\S​P3QFE\tcpip6.sys
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\spcustom.dll
 + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\update.exe
 + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\u​pdate\updspapi.dll
 + 2008-05-07 09:07:23 135,168 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\cscript.exe
 + 2008-05-09 10:51:45 512,000 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\jscript.dll
 + 2008-05-09 10:51:45 180,224 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\scrobj.dll
 + 2008-05-09 10:51:45 172,032 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\scrrun.dll
 + 2008-05-09 10:51:45 430,080 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\vbscript.dll
 + 2008-05-08 11:24:44 155,648 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\wscript.exe
 + 2008-05-09 10:51:45 90,112 ----a-w C:\WINDOWS\$hf_mig$\KB951978\S​P3QFE\wshext.dll
 + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951978\s​pmsg.dll
 + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951978\s​puninst.exe
 + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\spcustom.dll
 + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\update.exe
 + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951978\u​pdate\updspapi.dll
 + 2004-08-03 21:10:08 53,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\1394bus.sys
 + 2006-08-16 11:59:27 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\6to4svc.dll
 + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acadproc.dll
 + 2006-10-04 14:05:26 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acadproc.dll.000
 + 2004-08-05 12:00:00 189,952 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\accwiz.exe
 + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acgenral.dll
 + 2004-08-05 12:00:00 1,852,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acgenral.dll.000
 + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclayers.dll
 + 2004-08-05 12:00:00 450,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclayers.dll.000
 + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclua.dll
 + 2004-08-05 12:00:00 137,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclua.dll.000
 + 2004-08-05 12:00:00 119,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aclui.dll
 + 2004-08-05 12:00:00 188,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acpi.sys
 + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acspecfc.dll
 + 2004-08-05 12:00:00 244,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acspecfc.dll.000
 + 2004-08-05 12:00:00 194,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\activeds.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\actmovie.exe
 + 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\actxprxy.dll
 + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acxtrnal.dll
 + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\acxtrnal.dll.000
 + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\admin.dll
 + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\admin.exe
 + 2004-08-05 12:00:00 175,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsldp.dll
 + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsldpc.dll
 + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsmsext.dll
 + 2004-08-05 12:00:00 263,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\adsnt.dll
 + 2004-08-05 12:00:00 685,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\advapi32.dll
 + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aec.sys
 + 2006-02-15 00:22:26 142,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\aec.sys.000
 + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\afd.sys
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentanm.dll
 + 2004-08-05 12:00:00 214,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentctl.dll
 + 2006-10-12 14:04:13 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentdp2.dll
 + 2007-03-09 13:48:06 57,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentdpv.dll
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentmpx.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentpsh.dll
 + 2004-08-05 12:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentsr.dll
 + 2006-10-12 11:09:53 256,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agentsvr.exe
 + 2004-08-03 21:07:42 42,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agp440.sys
 + 2004-08-03 21:07:44 44,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agpcpq.sys
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0401.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0404.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0405.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0406.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0407.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0408.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0409.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040b.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040c.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040d.dll
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt040e.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0410.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0411.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0412.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0413.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0414.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0415.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0416.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0419.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt041d.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt041f.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0804.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0816.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agt0c0a.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\agtintl.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ahui.exe
 + 2004-08-05 12:00:00 44,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alg.exe
 + 2004-08-03 21:07:42 42,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alim1541.sys
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\alrsvc.dll
 + 2004-08-03 21:07:44 43,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdagp.sys
 + 2004-08-05 12:00:00 41,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdk6.sys
 + 2004-08-05 12:00:00 41,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amdk7.sys
 + 2004-08-05 12:00:00 70,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\amstream.dll
 + 2004-08-05 12:00:00 126,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\apphelp.dll
 + 2004-08-05 12:00:00 60,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\arp1394.sys
 + 2004-08-05 12:00:00 65,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\asycfilt.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\asyncmac.sys
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\at.exe
 + 2004-08-03 20:59:44 95,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atapi.sys
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atl.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmadm.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmarpc.sys
 + 2004-08-05 12:00:00 285,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmfd.dll
 + 2004-08-05 12:00:00 55,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmlane.sys
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\atmlib.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\attrib.exe
 + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\audiosrv.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\auditusr.exe
 + 2003-03-24 14:52:04 20,540 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\author.dll
 + 2003-03-24 14:52:04 16,439 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\author.exe
 + 2005-03-02 18:10:36 56,832 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\authz.dll
 + 2004-08-05 12:00:00 625,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autochk.exe
 + 2004-08-05 12:00:00 638,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autoconv.exe
 + 2004-08-05 12:00:00 616,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autofmt.exe
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\autolfn.exe
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\avifil32.dll
 + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\basesrv.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\batmeter.dll
 + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\batt.dll
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bidispl.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bitsprx2.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bitsprx3.dll
 + 2004-08-05 12:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\blastcln.exe
 + 2004-08-05 12:00:00 71,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bridge.sys
 + 2004-08-05 12:00:00 70,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browselc.dll
 + 2004-08-05 12:00:00 77,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browser.dll
 + 2007-08-22 13:13:05 1,023,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browseui.dll
 + 2004-08-05 12:00:00 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\browsewm.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bthci.dll
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\bthserv.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\btpanui.dll
 + 2004-08-05 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\c_g18030.dll
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cabinet.dll
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cabview.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cacls.exe
 + 2004-08-05 12:00:00 385,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\callcont.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\camocx.dll
 + 2004-08-05 12:00:00 146,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\capesnpn.dll
 + 2005-07-26 04:39:54 225,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrv.dll
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrvps.dll
 + 2005-07-26 04:39:54 625,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\catsrvut.dll
 + 2004-08-03 21:10:18 17,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ccdecode.sys
 + 2004-08-05 12:00:00 63,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdfs.sys
 + 2007-08-22 13:13:05 152,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdfview.dll
 + 2005-09-10 01:55:14 2,067,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdosys.dll
 + 2004-08-05 12:00:00 49,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cdrom.sys
 + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\certcli.dll
 + 2004-08-05 12:00:00 467,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\certmgr.dll
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgbkend.dll
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgmgr32.dll
 + 2003-03-24 14:52:04 188,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cfgwiz.exe
 + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtmbx.dll
 + 2004-08-05 12:00:00 56,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtskdic.dll
 + 2004-08-05 12:00:00 173,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\chtskf.dll
 + 2004-08-05 12:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cic.dll
 + 2004-08-05 12:00:00 1,352,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cimwin32.dll
 + 2004-08-05 12:00:00 198,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cintime.dll
 + 2006-06-22 05:13:45 69,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ciodm.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cisvc.exe
 + 2004-08-05 12:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\classpnp.sys
 + 2005-07-26 04:39:55 110,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clbcatex.dll
 + 2005-07-26 04:39:55 498,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clbcatq.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cleanmgr.exe
 + 2004-08-05 12:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cliconfg.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cliconfg.exe
 + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clipbrd.exe
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clipsrv.exe
 + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\clusapi.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmcfg32.dll
 + 2004-08-05 12:00:00 400,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmd.exe
 + 2004-08-05 12:00:00 352,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmdial32.dll
 + 2004-08-05 12:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmdl32.exe
 + 2004-08-05 12:00:00 40,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmmon32.exe
 + 2004-08-05 12:00:00 191,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmprops.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmsetacl.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmstp.exe
 + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cmutil.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cnbjmon.dll
 + 2005-07-26 04:39:55 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\colbact.dll
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comaddin.dll
 + 2005-07-26 04:39:56 195,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comadmin.dll
 + 2006-08-25 15:51:14 617,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comctl32.dll
 + 2004-08-05 12:00:00 281,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comdlg32.dll
 + 2004-08-05 12:00:00 253,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\compatui.dll
 + 2004-08-05 12:00:00 230,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\compstui.dll
 + 2005-07-26 04:39:56 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrepl.dll
 + 2004-08-05 12:00:00 9,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrepl.exe
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comrereg.exe
 + 2004-08-05 12:00:00 851,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comres.dll
 + 2004-08-05 12:00:00 259,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsetup.dll
 + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsnap.dll
 + 2005-07-26 04:39:57 1,267,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comsvcs.dll
 + 2005-07-26 04:39:57 540,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\comuid.dll
 + 2004-08-05 12:00:00 1,044,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\conf.exe
 + 2004-08-05 12:00:00 45,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\confmrsl.dll
 + 2004-08-05 12:00:00 346,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\confmsp.dll
 + 2004-08-05 12:00:00 27,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\conime.exe
 + 2007-08-13 17:42:54 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\corpol.dll
 + 2004-08-05 12:00:00 165,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\credui.dll
 + 2004-08-05 12:00:00 40,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\crusoe.sys
 + 2004-08-05 12:00:00 604,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\crypt32.dll
 + 2004-08-05 12:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptdlg.dll
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptdll.dll
 + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptext.dll
 + 2004-08-05 12:00:00 63,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptnet.dll
 + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptsvc.dll
 + 2004-08-05 12:00:00 530,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cryptui.dll
 + 2004-08-05 12:00:00 102,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscdll.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscript.exe
 + 2004-08-05 12:00:00 337,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\cscui.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\csrsrv.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\csrss.exe
 + 2004-08-05 12:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ctfmon.exe
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\custsat.dll
 + 2004-08-05 12:00:00 1,179,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d8.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d8thk.dll
 + 2004-08-05 12:00:00 1,689,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3d9.dll
 + 2004-08-05 12:00:00 825,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\d3dim700.dll
 + 2007-08-22 13:13:05 1,056,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\danim.dll
 + 2004-08-05 12:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dataclen.dll
 + 2004-08-05 12:00:00 152,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\datime.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\davclnt.dll
 + 2004-08-05 12:00:00 640,000 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbghelp.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbmsrpcn.dll
 + 2004-08-05 12:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbnetlib.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dbnmpntw.dll
 + 2004-08-05 12:00:00 1,788 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcache.bin
 + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcap32.dll
 + 2004-08-05 12:00:00 8,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dciman32.dll
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dcomcnfg.exe
 + 2004-08-05 12:00:00 31,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddeshare.exe
 + 2004-08-05 12:00:00 266,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddraw.dll
 + 2004-08-05 12:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ddrawex.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\defrag.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\devenum.dll
 + 2004-08-05 12:00:00 290,816 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\devmgr.dll
 + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgfat.exe
 + 2004-08-05 12:00:00 104,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgntfs.exe
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgsnap.dll
 + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfrgui.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dfsshlex.dll
 + 2004-08-05 12:00:00 115,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dgnet.dll
 + 2006-05-19 13:23:35 112,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dhcpcsvc.dll
 + 2004-08-05 12:00:00 401,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dhcpmon.dll
 + 2004-08-05 12:00:00 548,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dialer.exe
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diantz.exe
 + 2004-08-05 12:00:00 68,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\digest.dll
 + 2004-08-05 12:00:00 165,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dinput.dll
 + 2004-08-05 12:00:00 187,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dinput8.dll
 + 2007-05-16 15:13:53 86,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\directdb.dll
 + 2004-08-05 12:00:00 36,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\disk.sys
 + 2004-08-05 12:00:00 1,502,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskcopy.dll
 + 2004-08-05 12:00:00 14,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskdump.sys
 + 2004-08-05 12:00:00 167,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\diskpart.exe
 + 2004-08-05 12:00:00 45,083 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dispex.dll
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dllhost.exe
 + 2004-08-05 12:00:00 225,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmadmin.exe
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmband.dll
 + 2004-08-05 12:00:00 800,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmboot.sys
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmcompos.dll
 + 2004-08-05 12:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmdlgs.dll
 + 2004-08-05 12:00:00 200,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmdskmgr.dll
 + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmime.dll
 + 2004-08-05 12:00:00 154,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmio.sys
 + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmloader.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmremote.exe
 + 2004-08-05 12:00:00 82,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmscript.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmserver.dll
 + 2004-08-05 12:00:00 105,984 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmstyle.dll
 + 2004-08-05 12:00:00 103,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmsynth.dll
 + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmusic.dll
 + 2004-08-03 21:07:40 52,864 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmusic.sys
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dmutil.dll
 + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dnsapi.dll
 + 2008-02-20 05:35:05 45,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dnsrslvr.dll
 + 2004-08-05 12:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\docprop2.dll
 + 2004-08-05 12:00:00 97,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpcdll.dll
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dplaysvr.exe
 + 2004-08-05 12:00:00 229,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dplayx.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpmodemx.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnaddr.dll
 + 2004-08-05 12:00:00 375,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnet.dll
 + 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnhpast.dll
 + 2004-08-05 12:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnhupnp.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnlobby.dll
 + 2004-08-05 12:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpnsvr.exe
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvacm.dll
 + 2004-08-05 12:00:00 213,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvoice.dll
 + 2004-08-05 12:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvsetup.exe
 + 2004-08-05 12:00:00 116,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpvvox.dll
 + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dpwsockx.dll
 + 2004-08-03 21:08:00 60,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drmk.sys
 + 2004-08-03 21:07:58 2,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drmkaud.sys
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\drprov.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ds32gt.dll
 + 2004-08-05 12:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsdmo.dll
 + 2004-08-05 12:00:00 72,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsdmoprp.dll
 + 2004-08-05 12:00:00 93,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dskquota.dll
 + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dskquoui.dll
 + 2004-08-05 12:00:00 367,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsound.dll
 + 2004-08-05 12:00:00 1,294,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsound3d.dll
 + 2004-08-05 12:00:00 145,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsprop.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsprpres.dll
 + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsquery.dll
 + 2004-08-05 12:00:00 52,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dssec.dll
 + 2004-08-05 12:00:00 137,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dssenh.dll
 + 2004-08-05 12:00:00 113,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dsuiext.dll
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dswave.dll
 + 2004-08-05 12:00:00 10,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dumprep.exe
 + 2004-08-05 12:00:00 304,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\duser.dll
 + 2004-08-05 12:00:00 17,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dvdupgrd.exe
 + 2004-08-05 12:00:00 180,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dwwin.exe
 + 2004-08-05 12:00:00 619,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dx7vb.dll
 + 2004-08-05 12:00:00 1,227,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dx8vb.dll
 + 2004-08-05 12:00:00 1,298,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxdiag.exe
 + 2004-08-05 12:00:00 2,113,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxdiagn.dll
 + 2004-08-05 12:00:00 71,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxg.sys
 + 2006-08-24 11:17:20 500,278 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\dxmasf.dll
 + 2004-08-05 12:00:00 187,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\els.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\encapi.dll
 + 2004-08-05 12:00:00 186,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\encdec.dll
 + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ersvc.dll
 + 2005-07-26 04:39:57 243,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\es.dll
 + 2005-10-20 22:25:53 1,097,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\esent.dll
 + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\esscli.dll
 + 2004-08-05 12:00:00 195,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\eudcedit.exe
 + 2004-08-05 12:00:00 55,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\eventlog.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\evntrprv.dll
 + 2007-06-13 13:22:28 1,037,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\explorer.exe
 + 2004-08-05 12:00:00 380,957 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\expsrv.dll
 + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\extrac32.exe
 + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\exts.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\f3ahvoas.dll
 + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fastfat.sys
 + 2004-08-05 12:00:00 472,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fastprox.dll
 + 2004-08-05 12:00:00 80,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\faultrep.dll
 + 2004-08-05 12:00:00 27,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fdc.sys
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\feclient.dll
 + 2004-08-05 12:00:00 348,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\filemgmt.dll
 + 2004-08-05 12:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\findstr.exe
 + 2004-08-05 12:00:00 35,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fips.sys
 + 2004-08-05 12:00:00 88,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fldrclnr.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\flpydisk.sys
 + 2006-08-21 12:26:15 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltlib.dll
 + 2006-08-21 09:14:58 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltmc.exe
 + 2006-08-21 09:14:58 128,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fltmgr.sys
 + 2004-08-05 12:00:00 386,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontext.dll
 + 2005-10-17 21:21:08 80,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontsub.dll
 + 2004-08-05 12:00:00 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fontview.exe
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\forcedos.exe
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\format.com
 + 2004-08-05 12:00:00 32,828 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp40ext.dll
 + 2004-05-12 23:39:48 184,435 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4amsft.dll
 + 2003-03-24 14:52:04 82,035 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4anscp.dll
 + 2003-03-24 14:52:04 147,513 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4apws.dll
 + 2003-03-24 14:52:04 49,210 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4areg.dll
 + 2003-03-24 14:52:04 102,509 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4atxt.dll
 + 2003-03-24 13:52:04 618,605 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4autl.dll
 + 2003-03-24 14:52:04 41,020 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4avnb.dll
 + 2003-03-24 14:52:04 32,826 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4avss.dll
 + 2003-03-24 14:52:04 49,212 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4awebs.dll
 + 2004-05-12 23:39:48 876,653 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp4awel.dll
 + 2002-05-14 12:08:54 14,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp98sadm.exe
 + 2002-05-14 12:08:54 109,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fp98swin.exe
 + 2003-03-24 14:52:04 188,494 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpcount.exe
 + 2002-05-14 12:08:54 94,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpencode.dll
 + 2003-03-24 14:52:04 20,541 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpexedll.dll
 + 2004-05-12 23:39:48 598,071 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpmmc.dll
 + 2003-03-24 14:52:04 20,538 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpremadm.exe
 + 1999-01-21 00:06:22 16,449 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpsrvadm.exe
 + 1999-01-20 23:31:34 32,833 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fpsrvwin.exe
 + 2004-08-05 12:00:00 9,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\framebuf.dll
 + 2004-08-05 12:00:00 185,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\framedyn.dll
 + 2004-08-05 12:00:00 193,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fsquirt.exe
 + 2004-08-05 12:00:00 46,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ftp.exe
 + 2004-08-05 12:00:00 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fwcfg.dll
 + 2004-08-05 12:00:00 452,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fxsapi.dll
 + 2004-08-05 12:00:00 132,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\fxsocm.dll
 + 2008-02-20 06:51:00 282,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\gdi32.dll
 + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\glu32.dll
 + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\gpkrsrc.dll
 + 2004-08-05 12:00:00 39,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\grpconv.exe
 + 2004-08-05 12:00:00 125,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\guitrn.dll
 + 2004-08-05 12:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\h323cc.dll
 + 2004-08-05 12:00:00 614,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\h323msp.dll
 + 2004-08-05 12:00:00 131,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hal.dll
 + 2005-09-28 23:35:25 134,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\halmacpi.dll
 + 2005-09-28 23:35:25 134,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\halmacpi.dll.000
 + 2004-08-03 22:54:28 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hccoin.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\help.exe
 + 2004-08-05 12:00:00 768,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\helpctr.exe
 + 2004-08-05 12:00:00 743,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\helpsvc.exe
 + 2005-05-26 23:22:01 10,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hh.exe
 + 2005-05-27 02:08:06 41,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hhsetup.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hid.dll
 + 2004-08-05 12:00:00 36,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidclass.sys
 + 2004-08-05 12:00:00 24,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidparse.sys
 + 2004-08-03 22:54:28 21,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidserv.dll
 + 2001-08-17 20:02:20 9,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hidusb.sys
 + 2006-07-21 08:27:28 72,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hlink.dll
 + 2004-08-05 12:00:00 347,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hnetcfg.dll
 + 2004-08-05 12:00:00 336,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hnetwiz.dll
 + 2004-08-05 12:00:00 146,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hotplug.dll
 + 2004-08-03 22:54:28 87,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hpfud50.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hscupd.exe
 + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\http.sys
 + 2006-03-17 00:33:10 262,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\http.sys.000
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\httpapi.dll
 + 2004-08-05 12:00:00 43,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\htui.dll
 + 2004-08-05 12:00:00 13,463,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hwxjpn.dll
 + 2004-11-17 17:42:33 354,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\hypertrm.dll
 + 2004-08-03 21:00:52 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i2omgmt.sys
 + 2004-08-03 21:00:52 18,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i2omp.sys
 + 2004-08-05 12:00:00 54,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\i8042prt.sys
 + 2004-08-05 12:00:00 119,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iasrad.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icaapi.dll
 + 2004-08-05 12:00:00 80,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iccvid.dll
 + 2005-06-29 01:49:41 254,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icm32.dll
 + 2004-08-05 12:00:00 3,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icmp.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iconlib.dll
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn.dll
 + 2004-08-05 12:00:00 218,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn1.exe
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwconn2.exe
 + 2004-08-05 12:00:00 73,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwdial.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwdl.dll
 + 2004-08-05 12:00:00 176,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwhelp.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwphbk.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwrmind.exe
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\icwutil.dll
 + 2004-08-05 12:00:00 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\idq.dll
 + 2007-08-13 17:45:18 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ieencode.dll
 + 2004-08-05 12:00:00 114,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iexpress.exe
 + 2004-08-05 12:00:00 142,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ifmon.dll
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\igmpagnt.dll
 + 2004-08-05 12:00:00 508,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iis.dll
 + 2004-08-05 12:00:00 81,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ils.dll
 + 2004-08-05 12:00:00 144,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imagehlp.dll
 + 2004-08-05 12:00:00 150,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imapi.exe
 + 2004-08-05 12:00:00 41,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imapi.sys
 + 2004-08-05 12:00:00 106,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imekrcic.dll
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imekrmbx.dll
 + 2004-08-05 12:00:00 36,921 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imeshare.dll
 + 2004-08-05 12:00:00 811,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjp81k.dll
 + 2004-08-05 12:00:00 368,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpcic.dll
 + 2004-08-05 12:00:00 716,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpcus.dll
 + 2004-08-05 12:00:00 81,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjpdct.dll
 + 2004-08-05 12:00:00 274,489 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imjputyc.dll
 + 2004-08-05 12:00:00 102,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imlang.dll
 + 2004-08-05 12:00:00 110,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imm32.dll
 + 2004-08-05 12:00:00 118,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imsinsnt.dll
 + 2004-08-05 12:00:00 315,452 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\imskf.dll
 + 2004-08-05 12:00:00 282,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetcfg.dll
 + 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetcomm.dll
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetmib1.dll
 + 2004-08-05 12:00:00 75,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetpp.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetppui.dll
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetres.dll
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\inetwiz.exe
 + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\initpki.dll
 + 2004-08-05 12:00:00 126,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\input.dll
 + 2004-08-03 22:43:40 5,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\intelide.sys
 + 2004-08-05 12:00:00 40,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\intelppm.sys
 + 2004-08-05 12:00:00 29,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ip6fw.sys
 + 2004-08-05 12:00:00 58,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipconfig.exe
 + 2006-05-19 13:23:35 95,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iphlpapi.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipinip.sys
 + 2004-08-05 12:00:00 167,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipmontr.dll
 + 2004-09-29 22:28:37 134,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipnat.sys
 + 2004-08-05 12:00:00 332,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipnathlp.dll
 + 2004-08-05 12:00:00 355,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ippromon.dll
 + 2004-08-05 12:00:00 169,984 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iprtrmgr.dll
 + 2004-08-05 12:00:00 74,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsec.sys
 + 2004-08-05 12:00:00 361,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsecsnp.dll
 + 2004-08-05 12:00:00 184,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsecsvc.dll
 + 2004-08-05 12:00:00 388,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipsmsnap.dll
 + 2004-08-05 12:00:00 53,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipv6.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipv6mon.dll
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipxroute.exe
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ipxwan.dll
 + 2004-08-05 12:00:00 120,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir41_qc.dll
 + 2004-08-05 12:00:00 338,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir41_qcx.dll
 + 2004-08-05 12:00:00 755,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_32.dll
 + 2004-08-05 12:00:00 200,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_qc.dll
 + 2004-08-05 12:00:00 183,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ir50_qcx.dll
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\irenum.sys
 + 2001-08-23 14:58:06 36,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isapnp.sys
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isign32.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\isrdbg32.dll
 + 2005-05-27 02:08:06 155,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\itircl.dll
 + 2005-05-27 02:08:06 137,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\itss.dll
 + 2004-08-05 12:00:00 54,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ixsso.dll
 + 2004-08-05 12:00:00 47,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\iyuv_32.dll
 + 2006-06-01 18:48:44 163,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jgdw400.dll
 + 2006-06-01 18:48:44 27,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jgpl400.dll
 + 2007-08-13 17:38:04 491,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\jscript.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd101.dll
 + 2001-08-17 20:55:56 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd106.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbd106n.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdax2.dll
 + 2004-08-03 22:45:12 25,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdclass.sys
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdfi1.dll
 + 2004-08-03 22:45:14 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdhid.sys
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdibm02.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinbe1.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinben.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdinmal.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdlk41a.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdlk41j.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmaori.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmlt47.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdmlt48.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdnec.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdno1.dll
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdsmsfi.dll
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdsmsno.dll
 + 2004-08-05 12:00:00 7,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kbdukx.dll
 + 2004-08-05 12:00:00 7,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kd1394.dll
 + 2005-06-15 17:50:31 295,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kerberos.dll
 + 2007-04-16 15:53:11 1,049,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kernel32.dll
 + 2004-08-05 12:00:00 157,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\keymgr.dll
 + 2006-06-14 08:47:45 172,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kmixer.sys
 + 2006-06-14 08:47:45 172,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\kmixer.sys.000
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\krnlprov.dll
 + 2004-08-03 21:15:22 140,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ks.sys
 + 2004-08-05 12:00:00 92,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ksecdd.sys
 + 2004-08-03 22:54:30 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ksuser.dll
 + 2004-08-05 12:00:00 424,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\licdll.dll
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\licwmi.dll
 + 2005-09-01 01:43:37 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\linkinfo.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lmhsvc.dll
 + 2004-08-05 12:00:00 399,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lmrt.dll
 + 2004-08-05 12:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\loadperf.dll
 + 2004-08-05 12:00:00 228,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\localsec.dll
 + 2004-08-05 12:00:00 344,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\localspl.dll
 + 2004-08-05 12:00:00 11,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\localui.dll
 + 2004-08-05 12:00:00 75,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\locator.exe
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\log.dll
 + 2004-08-05 12:00:00 61,952 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\logman.exe
 + 2004-08-05 12:00:00 221,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\logon.scr
 + 2004-08-05 12:00:00 515,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\logonui.exe
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lpk.dll
 + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lprhelp.dll
 + 2007-11-07 09:28:31 728,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lsasrv.dll
 + 2004-08-05 12:00:00 13,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\lsass.exe
 + 2004-08-05 12:00:00 73,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\magnify.exe
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\makecab.exe
 + 2004-08-05 12:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\mcastmib.dll
 + 2004-08-05 12:00:00 85,504 -c----w C:\WINDOWS\$NtServic

n°413183
chef.manu
Posté le 27-07-2008 à 01:38:42  answer
Prévenir les modérateurs en cas d'abus
 

rapport combofix suite
 + 2004-08-05 12:00:00 267,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oakley.dll
 + 2004-08-05 12:00:00 288,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\objsel.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ocgen.dll
 + 2004-08-05 12:00:00 62,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ocmanage.dll
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ocmsn.dll
 + 2004-08-05 12:00:00 249,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbc32.dll
 + 2004-08-05 12:00:00 16,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbc32gt.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcad32.exe
 + 2004-08-05 12:00:00 24,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcbcp.dll
 + 2004-08-05 12:00:00 135,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcconf.dll
 + 2004-08-05 12:00:00 69,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcconf.exe
 + 2004-08-05 12:00:00 106,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbccp32.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbccr32.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbccu32.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcint.dll
 + 2004-08-05 12:00:00 61,712 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcji32.dll
 + 2004-08-05 12:00:00 278,559 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcjt32.dll
 + 2004-08-05 12:00:00 12,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbcp32r.dll
 + 2004-08-05 12:00:00 147,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odbctrac.dll
 + 2004-08-05 12:00:00 20,511 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oddbse32.dll
 + 2004-08-05 12:00:00 20,510 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odexl32.dll
 + 2004-08-05 12:00:00 20,510 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odfox32.dll
 + 2004-08-05 12:00:00 20,510 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odpdx32.dll
 + 2004-08-05 12:00:00 20,511 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\odtext32.dll
 + 2004-08-05 12:00:00 104,448 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oeimport.dll
 + 2004-08-05 12:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oemig50.exe
 + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oemiglib.dll
 + 2004-08-05 12:00:00 120,832 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\offfilt.dll
 + 2004-08-03 21:10:10 61,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ohci1394.sys
 + 2005-07-26 04:40:00 1,284,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ole32.dll
 + 2007-12-04 18:41:36 550,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oleaut32.dll
 + 2005-07-26 04:40:00 75,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\olecli32.dll
 + 2005-07-26 04:40:00 37,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\olecnv32.dll
 + 2004-08-05 12:00:00 487,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oledb32.dll
 + 2004-08-05 12:00:00 77,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oledb32r.dll
 + 2006-10-16 16:16:00 124,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oledlg.dll
 + 2004-08-05 12:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oleprn.dll
 + 2004-08-05 12:00:00 83,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\olepro32.dll
 + 2004-08-05 12:00:00 51,712 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\oobebaln.exe
 + 2004-08-05 12:00:00 713,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\opengl32.dll
 + 2004-08-05 12:00:00 216,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\osk.exe
 + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\osuninst.dll
 + 2004-08-05 12:00:00 116,224 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p2p.dll
 + 2004-08-05 12:00:00 86,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p2pgasvc.dll
 + 2004-08-05 12:00:00 312,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p2pgraph.dll
 + 2004-08-05 12:00:00 88,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p2pnetsh.dll
 + 2004-08-05 12:00:00 526,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p2psvc.dll
 + 2004-08-05 12:00:00 46,720 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\p3.sys
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\packager.exe
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\padrs404.dll
 + 2004-08-05 12:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\padrs804.dll
 + 2004-08-05 12:00:00 80,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\parport.sys
 + 2004-08-05 12:00:00 18,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\partmgr.sys
 + 2004-08-05 12:00:00 65,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pautoenr.dll
 + 2004-08-05 12:00:00 102,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pchshell.dll
 + 2004-08-05 12:00:00 38,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pchsvc.dll
 + 2004-08-03 22:37:06 68,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pci.sys
 + 2004-08-03 20:59:42 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pciidex.sys
 + 2004-08-05 12:00:00 120,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pcmcia.sys
 + 2004-08-05 12:00:00 286,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pdh.dll
 + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfctrs.dll
 + 2004-08-05 12:00:00 27,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfdisk.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfmon.exe
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfnet.dll
 + 2004-08-05 12:00:00 26,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfos.dll
 + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\perfproc.dll
 + 2004-08-05 12:00:00 172,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\photowiz.dll
 + 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pid.dll
 + 2004-08-05 12:00:00 24,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pidgen.dll
 + 2004-08-05 12:00:00 284,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pinball.exe
 + 2004-08-05 12:00:00 19,456 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ping.exe
 + 2004-08-05 12:00:00 175,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pintlcsa.dll
 + 2004-08-05 12:00:00 53,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pintlcsd.dll
 + 2004-08-05 12:00:00 70,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pintlphr.exe
 + 2004-08-05 12:00:00 15,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pjlmon.dll
 + 2004-08-05 12:00:00 67,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pmigrate.dll
 + 2004-08-05 12:00:00 48,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pnrpnsp.dll
 + 2004-08-05 12:00:00 106,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\polstore.dll
 + 2004-08-03 21:15:50 145,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\portcls.sys
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\powercfg.exe
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\powrprof.dll
 + 2004-08-05 12:00:00 578,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\printui.dll
 + 2004-08-05 12:00:00 39,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\processr.sys
 + 2004-08-05 12:00:00 27,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\profmap.dll
 + 2004-08-05 12:00:00 109,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\progman.exe
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\proquota.exe
 + 2004-08-05 12:00:00 237,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\provthrd.dll
 + 2004-08-05 12:00:00 9,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\proxycfg.exe
 + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\psapi.dll
 + 2004-08-05 12:00:00 98,816 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\psbase.dll
 + 2004-08-05 12:00:00 69,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\psched.sys
 + 2004-08-05 12:00:00 43,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pstorec.dll
 + 2004-08-05 12:00:00 34,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\pstorsvc.dll
 + 2004-08-05 12:00:00 192,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qcap.dll
 + 2004-08-05 12:00:00 279,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qdv.dll
 + 2004-08-05 12:00:00 386,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qdvd.dll
 + 2004-08-05 12:00:00 563,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qedit.dll
 + 2004-08-05 12:00:00 733,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qedwipes.dll
 + 2004-08-05 12:00:00 382,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qmgr.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qmgrprxy.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\qprocess.exe
 + 2007-10-29 22:43:32 1,293,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\quartz.dll
 + 2006-06-22 05:13:46 1,440,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\query.dll
 + 2004-08-05 12:00:00 43,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\racpldlg.dll
 + 2006-06-26 17:41:32 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasadhlp.dll
 + 2004-08-05 12:00:00 237,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasapi32.dll
 + 2004-08-05 12:00:00 89,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasauto.dll
 + 2004-08-05 12:00:00 69,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\raschap.dll
 + 2004-08-05 12:00:00 685,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasdlg.dll
 + 2004-08-05 12:00:00 51,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasl2tp.sys
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasman.dll
 + 2006-06-22 10:48:06 181,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasmans.dll
 + 2004-08-05 12:00:00 57,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasphone.exe
 + 2004-08-05 12:00:00 206,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rasppp.dll
 + 2004-08-05 12:00:00 41,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\raspppoe.sys
 + 2004-08-05 12:00:00 48,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\raspptp.sys
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rassapi.dll
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rastapi.dll
 + 2004-08-05 12:00:00 113,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rastls.dll
 + 2004-08-05 12:00:00 103,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rcbdyctl.dll
 + 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rcimlby.exe
 + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rcp.exe
 + 2006-05-05 09:47:57 174,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdbss.sys
 + 2004-08-05 12:00:00 147,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdchost.dll
 + 2004-08-05 12:00:00 62,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpclip.exe
 + 2004-08-05 12:00:00 92,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpdd.dll
 + 2004-08-03 21:01:16 196,864 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpdr.sys
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpsnd.dll
 + 2005-06-10 04:11:22 139,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpwd.sys
 + 2004-08-05 12:00:00 87,176 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdpwsx.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdsaddin.exe
 + 2004-08-05 12:00:00 67,072 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rdshost.exe
 + 2004-08-03 22:39:44 58,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\redbook.sys
 + 2004-08-05 12:00:00 53,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\reg.exe
 + 2004-08-05 12:00:00 49,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\regapi.dll
 + 2004-08-05 12:00:00 153,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\regedit.exe
 + 2004-08-05 12:00:00 59,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\regsvc.dll
 + 2004-08-05 12:00:00 12,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\regsvr32.exe
 + 2004-08-05 12:00:00 405,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\regwizc.dll
 + 2004-08-05 12:00:00 61,952 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\remotepg.dll
 + 2004-08-05 12:00:00 177,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\repdrvfs.dll
 + 2004-08-05 12:00:00 58,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\resutils.dll
 + 2004-08-05 12:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rexec.exe
 + 2006-11-27 14:55:31 433,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\riched20.dll
 + 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rmcast.sys
 + 2004-08-05 12:00:00 30,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rndismp.sys
 + 2007-07-09 13:11:46 584,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rpcrt4.dll
 + 2005-07-26 04:40:00 397,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rpcss.dll
 + 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rrcm.dll
 + 2004-08-05 12:00:00 152,576 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rsaenh.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rsh.exe
 + 2004-08-05 12:00:00 40,960 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rshx32.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rsmps.dll
 + 2004-08-05 12:00:00 384,512 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rstrui.exe
 + 2004-08-05 12:00:00 90,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rsvpsp.dll
 + 2004-08-05 12:00:00 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rtcshare.exe
 + 2004-08-05 12:00:00 31,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rtipxmib.dll
 + 2004-08-05 12:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rtutils.dll
 + 2004-08-05 12:00:00 33,792 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\rundll32.exe
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\runonce.exe
 + 2004-08-05 12:00:00 43,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\safrcdlg.dll
 + 2004-08-05 12:00:00 29,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\safrdm.dll
 + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\safrslv.dll
 + 2004-08-05 12:00:00 64,000 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\samlib.dll
 + 2004-08-05 12:00:00 431,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\samsrv.dll
 + 2004-08-05 12:00:00 741,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sapi.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\savedump.exe
 + 2004-08-05 12:00:00 270,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sbe.dll
 + 2004-08-05 12:00:00 159,232 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sbeio.dll
 + 2004-08-05 12:00:00 71,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scarddlg.dll
 + 2004-08-05 12:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scardsvr.exe
 + 2004-08-05 12:00:00 171,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sccsccp.dll
 + 2004-08-05 12:00:00 186,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scecli.dll
 + 2004-08-05 12:00:00 328,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scesrv.dll
 + 2007-04-25 14:22:35 144,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\schannel.dll
 + 2004-08-05 12:00:00 193,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\schedsvc.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sclgntfy.dll
 + 2004-08-05 12:00:00 36,864 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scrcons.exe
 + 2004-08-05 12:00:00 204,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\script.dll
 + 2004-08-05 12:00:00 9,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scrnsave.scr
 + 2004-08-05 12:00:00 159,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scrobj.dll
 + 2004-08-05 12:00:00 151,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scrrun.dll
 + 2004-08-05 12:00:00 96,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\scsiport.sys
 + 2004-08-05 12:00:00 78,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sdbinst.exe
 + 2004-08-05 12:00:00 67,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sdbus.sys
 + 2004-08-05 12:00:00 29,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sdhcinst.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\seclogon.dll
 + 2004-08-05 12:00:00 55,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\secur32.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\security.dll
 + 2004-08-05 12:00:00 29,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sendcmsg.dll
 + 2004-08-05 12:00:00 55,296 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sendmail.dll
 + 2004-08-05 12:00:00 38,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sens.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sensapi.dll
 + 2004-08-05 12:00:00 15,488 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\serenum.sys
 + 2004-08-05 12:00:00 66,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\serial.sys
 + 2004-08-05 12:00:00 56,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\servdeps.dll
 + 2004-08-05 12:00:00 108,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\services.exe
 + 2004-08-05 12:00:00 142,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sessmgr.exe
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sethc.exe
 + 2004-08-05 12:00:00 23,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\setup.exe
 + 2004-08-05 12:00:00 73,728 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\setup50.exe
 + 2004-08-05 12:00:00 1,003,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\setupapi.dll
 + 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\setupqry.dll
 + 2004-08-05 12:00:00 5,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sfc.dll
 + 2004-08-05 12:00:00 142,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sfc_os.dll
 + 2004-08-05 12:00:00 1,548,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sfcfiles.dll
 + 2004-08-05 12:00:00 11,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sffdisk.sys
 + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sffp_sd.sys
 + 2004-08-05 12:00:00 11,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sfloppy.sys
 + 2004-08-05 12:00:00 572,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shdoclc.dll
 + 2007-08-22 13:13:08 1,495,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shdocvw.dll
 + 2007-10-25 16:56:24 8,510,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shell32.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shfolder.dll
 + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shgina.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shimeng.dll
 + 2004-08-05 12:00:00 440,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shimgvw.dll
 + 2007-08-22 13:13:08 474,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shlwapi.dll
 + 2004-08-05 12:00:00 153,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shmedia.dll
 + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shmgrate.exe
 + 2004-08-05 12:00:00 78,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shrpubw.exe
 + 2004-08-05 12:00:00 28,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shscrap.dll
 + 2006-12-19 21:49:47 135,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shsvcs.dll
 + 2003-03-24 14:52:04 20,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shtml.dll
 + 2003-03-24 14:52:04 16,437 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shtml.exe
 + 2004-08-05 12:00:00 20,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\shutdown.exe
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sigtab.dll
 + 2004-08-05 12:00:00 71,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sigverif.exe
 + 2004-08-03 21:07:44 41,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sisagp.sys
 + 2004-08-05 12:00:00 26,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\skeys.exe
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\slayerxp.dll
 + 2004-08-05 12:00:00 98,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\slbiop.dll
 + 2004-08-03 21:10:18 11,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\slip.sys
 + 2004-08-05 12:00:00 8,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\smbinst.exe
 + 2004-08-05 12:00:00 370,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\smlogcfg.dll
 + 2004-08-05 12:00:00 93,184 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\smlogsvc.exe
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\smss.exe
 + 2004-08-05 12:00:00 133,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sndrec32.exe
 + 2004-08-05 12:00:00 34,816 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sniffpol.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\snmpapi.dll
 + 2004-08-05 12:00:00 184,320 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\snmpsnap.dll
 + 2004-08-05 12:00:00 130,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\softkbd.dll
 + 2004-08-05 12:00:00 25,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sonydcam.sys
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sort.exe
 + 2004-08-05 12:00:00 62,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spgrmr.dll
 + 2004-08-05 12:00:00 539,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spider.exe
 + 2006-06-14 08:47:46 6,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\splitter.sys
 + 2006-06-14 08:47:46 6,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\splitter.sys.000
 + 2004-08-05 12:00:00 11,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spnpinst.exe
 + 2004-08-05 12:00:00 74,752 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spoolss.dll
 + 2005-06-10 23:53:32 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spoolsv.exe
 + 2004-08-05 12:00:00 272,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sptip.dll
 + 2008-04-13 17:33:42 438,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spuninst\spcompat.dll
 + 2007-08-10 06:18:14 234,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spuninst\spuninst.exe
 + 2007-08-10 06:18:24 406,392 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\spuninst\updspapi.dll
 + 2004-08-05 12:00:00 151,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqldb20.dll
 + 2004-08-05 12:00:00 528,384 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqloledb.dll
 + 2004-08-05 12:00:00 462,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqlqp20.dll
 + 2004-08-05 12:00:00 110,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqlse20.dll
 + 2004-08-05 12:00:00 442,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqlsrv32.dll
 + 2004-08-05 12:00:00 180,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqlunirl.dll
 + 2004-08-05 12:00:00 217,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sqlxmlx.dll
 + 2004-08-05 12:00:00 73,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sr.sys
 + 2004-08-05 12:00:00 58,434 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srchctls.dll
 + 2004-08-05 12:00:00 726,590 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srchui.dll
 + 2004-08-05 12:00:00 67,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srclient.dll
 + 2004-08-05 12:00:00 241,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srrstr.dll
 + 2004-08-05 12:00:00 171,008 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srsvc.dll
 + 2006-08-14 10:34:41 332,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srv.sys
 + 2004-12-07 19:34:00 96,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\srvsvc.dll
 + 2004-08-05 12:00:00 708,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ss3dfo.scr
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssbezier.scr
 + 2004-08-05 12:00:00 34,816 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssdpapi.dll
 + 2004-08-05 12:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssdpsrv.dll
 + 2004-08-05 12:00:00 393,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssflwbox.scr
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssmarque.scr
 + 2004-08-05 12:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssmypics.scr
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssmyst.scr
 + 2004-08-05 12:00:00 610,304 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sspipes.scr
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ssstars.scr
 + 2004-08-05 12:00:00 684,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sstext3d.scr
 + 2004-08-05 12:00:00 33,280 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sstub.dll
 + 2004-08-05 12:00:00 22,016 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\startoc.dll
 + 2004-08-05 12:00:00 54,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\stclient.dll
 + 2004-08-05 12:00:00 86,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\stdprov.dll
 + 2004-08-05 12:00:00 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sti.dll
 + 2004-08-05 12:00:00 138,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sti_ci.dll
 + 2004-08-05 12:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\stimon.exe
 + 2004-08-05 12:00:00 122,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\stobject.dll
 + 2004-08-03 22:54:44 76,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\storprop.dll
 + 2004-08-03 21:08:04 48,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\stream.sys
 + 2004-08-03 21:10:14 15,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\streamip.sys
 + 2006-08-24 11:19:40 246,814 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\strmdll.dll
 + 2004-08-05 12:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\strmfilt.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\svchost.exe
 + 2004-08-03 20:58:42 4,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\swenum.sys
 + 2001-08-17 20:00:52 54,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\swmidi.sys
 + 2006-10-20 01:38:44 716,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sxs.dll
 + 2004-08-05 12:00:00 57,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\synceng.dll
 + 2004-08-05 12:00:00 197,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\syncui.dll
 + 2004-08-03 21:15:56 60,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sysaudio.sys
 + 2004-08-05 12:00:00 169,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sysmod.dll
 + 2004-08-05 12:00:00 107,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\sysocmgr.exe
 + 2004-08-05 12:00:00 1,005,056 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\syssetup.dll
 + 2005-10-17 21:21:08 118,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\t2embed.dll
 + 2004-08-05 12:00:00 14,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tape.sys
 + 2004-08-05 12:00:00 860,160 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tapi3.dll
 + 2004-08-05 12:00:00 181,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tapi32.dll
 + 2005-07-08 16:28:58 249,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tapisrv.dll
 + 2004-08-05 12:00:00 143,360 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\taskmgr.exe
 + 2007-10-30 17:20:55 360,064 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcpip.sys
 + 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcpip6.sys
 + 2004-08-05 12:00:00 14,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcpmib.dll
 + 2004-08-05 12:00:00 46,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcpmon.dll
 + 2004-08-05 12:00:00 47,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcpmonui.dll
 + 2003-03-24 14:52:04 32,827 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tcptest.exe
 + 2004-08-05 12:00:00 18,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tdi.sys
 + 2004-08-05 12:00:00 12,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tdpipe.sys
 + 2004-08-05 12:00:00 21,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tdtcp.sys
 + 2005-05-11 02:30:03 78,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\telnet.exe
 + 2004-08-03 22:55:12 40,840 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\termdd.sys
 + 2004-08-05 12:00:00 358,912 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\termmgr.dll
 + 2004-08-05 12:00:00 297,984 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\termsrv.dll
 + 2004-08-05 12:00:00 391,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\themeui.dll
 + 2004-08-05 12:00:00 10,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tmigrate.dll
 + 2004-08-05 12:00:00 347,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tourstart.exe
 + 2004-08-05 12:00:00 13,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tracert.exe
 + 2004-08-05 12:00:00 11,264 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tree.com
 + 2004-08-05 12:00:00 153,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\triedit.dll
 + 2004-08-05 12:00:00 90,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\trkwks.dll
 + 2004-08-05 12:00:00 94,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tscfgwmi.dll
 + 2004-08-05 12:00:00 12,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tsddd.dll
 + 2004-08-05 12:00:00 279,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tshoot.dll
 + 2004-08-05 12:00:00 123,904 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tsoc.dll
 + 2004-08-05 12:00:00 12,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tunmp.sys
 + 2004-08-05 12:00:00 50,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\twain_32.dll
 + 2004-08-05 12:00:00 44,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\twext.dll
 + 2005-07-26 04:40:00 101,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\txflog.dll
 + 2007-11-13 11:31:11 60,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\tzchange.exe
 + 2004-08-05 12:00:00 66,176 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\udfs.sys
 + 2004-08-05 12:00:00 25,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\udhisapi.dll
 + 2004-08-05 12:00:00 311,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ulib.dll
 + 2004-08-05 12:00:00 36,864 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\umandlg.dll
 + 2005-08-23 03:39:36 124,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\umpnpmgr.dll
 + 2004-08-03 23:54:44 264,704 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\unidrv.dll
 + 2004-08-03 23:54:44 199,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\unidrvui.dll
 + 2004-08-05 12:00:00 76,288 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\uniime.dll
 + 2004-08-05 12:00:00 78,848 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\unimdmat.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\uniplat.dll
 + 2004-08-03 23:54:06 620,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\unires.dll
 + 2004-08-05 12:00:00 316,416 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\untfs.dll
 + 2004-08-05 12:00:00 209,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\update.sys
 + 2004-08-05 12:00:00 151,040 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\uploadm.exe
 + 2004-08-05 12:00:00 132,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\upnp.dll
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\upnpcont.exe
 + 2007-02-05 20:19:06 185,344 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\upnphost.dll
 + 2004-08-05 12:00:00 240,128 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\upnpui.dll
 + 2004-08-05 12:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ups.exe
 + 2004-08-05 12:00:00 12,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usb8023.sys
 + 2004-08-05 12:00:00 23,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbcamd.sys
 + 2004-08-05 12:00:00 23,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbcamd2.sys
 + 2004-08-03 21:08:48 31,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbccgp.sys
 + 2004-08-03 21:08:38 26,624 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbehci.sys
 + 2004-08-05 12:00:00 57,600 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbhub.sys
 + 2004-08-05 12:00:00 16,000 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbintel.sys
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbmon.dll
 + 2004-08-05 12:00:00 17,024 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbohci.sys
 + 2004-08-05 12:00:00 142,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbport.sys
 + 2004-08-03 22:01:26 25,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbprint.sys
 + 2004-08-03 21:58:46 15,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbscan.sys
 + 2004-08-03 21:08:48 26,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbstor.sys
 + 2004-08-03 22:54:44 77,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usbui.dll
 + 2007-03-08 15:37:50 578,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\user32.dll
 + 2004-08-05 12:00:00 731,136 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\userenv.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\userinit.exe
 + 2004-08-05 12:00:00 406,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\usp10.dll
 + 2004-08-05 12:00:00 50,176 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\utilman.exe
 + 2004-08-05 12:00:00 219,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\uxtheme.dll
 + 2004-08-05 12:00:00 30,749 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vbajet32.dll
 + 2007-08-13 17:54:10 413,696 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vbscript.dll
 + 2004-08-05 12:00:00 26,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vdmdbg.dll
 + 2004-08-05 12:00:00 51,712 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vdmredir.dll
 + 2006-03-17 00:38:01 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\verclsid.exe
 + 2004-08-05 12:00:00 13,312 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\verifier.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\version.dll
 + 2004-08-03 22:54:44 54,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vfwwdm32.dll
 + 2004-08-05 12:00:00 20,992 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vga.sys
 + 2004-08-03 21:07:44 42,240 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\viaagp.sys
 + 2004-08-03 20:59:44 5,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\viaide.sys
 + 2004-08-05 12:00:00 79,744 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\videoprt.sys
 + 2004-08-05 12:00:00 131,584 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\viewprov.dll
 + 2004-08-05 12:00:00 426,041 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\voicepad.dll
 + 2004-08-05 12:00:00 86,073 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\voicesub.dll
 + 2004-08-05 12:00:00 53,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\volsnap.sys
 + 2004-08-05 12:00:00 430,592 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vssapi.dll
 + 2004-08-05 12:00:00 295,424 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\vssvc.exe
 + 2004-08-05 12:00:00 177,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\w32time.dll
 + 2004-08-05 12:00:00 15,872 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\w3ssl.dll
 + 2004-08-05 12:00:00 46,080 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wab.exe
 + 2007-05-16 15:13:55 510,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wab32.dll
 + 2004-08-05 12:00:00 263,168 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wab32res.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wabfind.dll
 + 2007-05-16 15:13:55 85,504 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wabimp.dll
 + 2004-08-05 12:00:00 30,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wabmig.exe
 + 2004-08-05 12:00:00 34,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wanarp.sys
 + 2004-08-05 12:00:00 17,664 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\watchdog.sys
 + 2004-08-05 12:00:00 208,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wavemsp.dll
 + 2004-08-05 12:00:00 201,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemcntl.dll
 + 2004-08-05 12:00:00 214,528 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemcomn.dll
 + 2004-08-05 12:00:00 71,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemcons.dll
 + 2004-08-05 12:00:00 530,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemcore.dll
 + 2004-08-05 12:00:00 178,176 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemdisp.dll
 + 2004-08-05 12:00:00 273,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemess.dll
 + 2004-08-05 12:00:00 44,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemperf.dll
 + 2004-08-05 12:00:00 18,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemprox.dll
 + 2004-08-05 12:00:00 43,520 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemsvc.dll
 + 2004-08-05 12:00:00 119,808 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemtest.exe
 + 2004-08-05 12:00:00 197,120 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wbemupgd.dll
 + 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wdigest.dll
 + 2004-08-03 22:55:04 23,552 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wdmaud.drv
 + 2006-06-14 09:00:45 82,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wdmaud.sys
 + 2006-06-14 09:00:45 82,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wdmaud.sys.000
 + 2006-01-04 03:35:11 68,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\webclnt.dll
 + 2004-08-05 12:00:00 136,192 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\webvw.dll
 + 2004-08-05 12:00:00 66,560 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wextract.exe
 + 2004-08-05 12:00:00 438,784 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiaacmgr.exe
 + 2004-08-05 12:00:00 465,920 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiadefui.dll
 + 2004-08-05 12:00:00 124,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiadss.dll
 + 2004-08-05 12:00:00 75,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiascr.dll
 + 2006-12-19 18:17:50 334,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiaservc.dll
 + 2004-08-05 12:00:00 594,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiashext.dll
 + 2004-08-05 12:00:00 111,104 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wiavideo.dll
 + 2008-03-20 08:09:22 1,845,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\win32k.sys
 + 2004-08-05 12:00:00 102,400 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\win32spl.dll
 + 2004-08-05 12:00:00 938,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winbrand.dll
 + 2004-08-05 12:00:00 288,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winhlp32.exe
 + 2004-08-05 12:00:00 351,232 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winhttp.dll
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winipsec.dll
 + 2004-08-05 12:00:00 506,368 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winlogon.exe
 + 2004-08-05 12:00:00 180,736 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winmm.dll
 + 2004-08-05 12:00:00 773,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winntbbu.dll
 + 2004-08-05 12:00:00 16,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winrnr.dll
 + 2004-08-05 12:00:00 100,352 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winscard.dll
 + 2004-08-05 12:00:00 17,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winshfhc.dll
 + 2004-08-05 12:00:00 146,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winspool.drv
 + 2007-03-17 13:44:47 293,376 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winsrv.dll
 + 2004-08-05 12:00:00 53,760 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winsta.dll
 + 2004-08-05 12:00:00 176,640 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wintrust.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\winver.exe
 + 2006-08-17 12:29:49 132,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wkssvc.dll
 + 2004-08-05 12:00:00 172,544 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wldap32.dll
 + 2004-08-05 12:00:00 94,208 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wlnotify.dll
 + 2004-08-05 12:00:00 5,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmi.dll
 + 2004-08-05 12:00:00 196,608 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiadap.exe
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiapres.dll
 + 2004-08-05 12:00:00 89,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiaprpl.dll
 + 2004-08-05 12:00:00 126,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiapsrv.exe
 + 2004-08-05 12:00:00 60,928 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmicookr.dll
 + 2004-08-05 12:00:00 140,800 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmidcprv.dll
 + 2004-08-05 12:00:00 156,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmipcima.dll
 + 2004-08-05 12:00:00 132,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmipdskq.dll
 + 2004-08-05 12:00:00 62,464 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmipiprt.dll
 + 2004-08-05 12:00:00 62,976 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmipjobj.dll
 + 2004-08-05 12:00:00 144,896 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiprov.dll
 + 2004-08-05 12:00:00 437,248 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiprvsd.dll
 + 2004-08-05 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiprvse.exe
 + 2004-08-05 12:00:00 41,472 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmipsess.dll
 + 2004-08-05 12:00:00 145,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmisvc.dll
 + 2004-08-05 12:00:00 99,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmiutils.dll
 + 2004-08-05 12:00:00 167,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2ae.dll
 + 2004-08-05 12:00:00 4,096 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2eres.dll
 + 2004-08-05 12:00:00 7,680 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2ext.dll
 + 2004-08-05 12:00:00 402,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2filt.dll
 + 2004-08-05 12:00:00 502,272 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2fxa.dll
 + 2004-08-05 12:00:00 325,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2fxb.dll
 + 2004-08-05 12:00:00 4,290,048 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2res.dll
 + 2004-08-05 12:00:00 6,144 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmm2res2.dll
 + 2004-08-05 12:00:00 115,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmsdmoe.dll
 + 2004-08-05 12:00:00 303,616 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wmstream.dll
 + 2004-08-05 12:00:00 218,112 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wordpad.exe
 + 2004-08-05 12:00:00 265,216 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wow32.dll
 + 2004-08-05 12:00:00 32,256 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wpabaln.exe
 + 2004-08-05 12:00:00 32,768 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wpnpinst.exe
 + 2004-08-05 12:00:00 82,944 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ws2_32.dll
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\ws2help.dll
 + 2004-08-05 12:00:00 13,824 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wscntfy.exe
 + 2004-08-05 12:00:00 114,688 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wscript.exe
 + 2004-08-05 12:00:00 81,408 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wscsvc.dll
 + 2004-08-05 12:00:00 108,032 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wshbth.dll
 + 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wshcon.dll
 + 2004-08-05 12:00:00 65,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wshext.dll
 + 2004-08-05 12:00:00 14,336 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wship6.dll
 + 2004-08-05 12:00:00 11,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wshrm.dll
 + 2004-08-05 12:00:00 19,968 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wshtcpip.dll
 + 2004-08-05 12:00:00 42,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wsnmp32.dll
 + 2004-08-05 12:00:00 25,088 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wsock32.dll
 + 2004-08-03 21:10:22 19,328 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wstcodec.sys
 + 2004-08-05 12:00:00 51,200 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wstdecod.dll
 + 2004-08-05 12:00:00 18,432 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wtsapi32.dll
 + 2004-08-05 12:00:00 6,656 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wuauserv.dll
 + 2004-08-05 12:00:00 378,880 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wzcdlg.dll
 + 2004-08-05 12:00:00 51,712 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wzcsapi.dll
 + 2004-08-05 12:00:00 359,936 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\wzcsvc.dll
 + 2004-08-05 12:00:00 91,648 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xactsrv.dll
 + 2004-08-05 12:00:00 30,720 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xcopy.exe
 + 2006-07-14 15:51:51 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xmllite.dll
 + 2004-08-05 12:00:00 129,536 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xmlprov.dll
 + 2004-08-05 12:00:00 50,176 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xmlprovi.dll
 + 2006-03-01 19:43:51 11,776 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xolehlp.dll
 + 2004-08-05 12:00:00 445,440 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xpob2res.dll
 + 2004-08-05 12:00:00 197,632 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xpsp1res.dll
 + 2004-08-05 12:00:00 2,986,496 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xpsp2res.dll
 + 2007-10-29 15:35:14 121,856 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\xpsp3res.dll
 + 2004-08-05 12:00:00 340,480 -c----w C:\WINDOWS\$NtServicePackUnins​tall$\zipfldr.dll
 + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB92623​9$\spuninst\spuninst.exe
 + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB92623​9$\spuninst\updspapi.dll
 + 2006-10-18 19:47:16 414,208 -c----w C:\WINDOWS\$NtUninstallKB92939​9$\msscp.dll
 + 2005-06-28 08:23:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB92939​9$\spuninst\spuninst.exe
 + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB92939​9$\spuninst\updspapi.dll
 + 2004-08-05 12:00:00 294,400 -c----w C:\WINDOWS\$NtUninstallKB93282​3-v3$\msctf.dll
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB93282​3-v3$\spuninst\spuninst.exe
 + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB93282​3-v3$\spuninst\updspapi.dll
 + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB93678​2_WMP11$\spuninst\spuninst.exe​
 + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB93678​2_WMP11$\spuninst\updspapi.dll​
 + 2006-10-18 19:47:20 10,834,432 -c----w C:\WINDOWS\$NtUninstallKB93678​2_WMP11$\wmp.dll
 + 2005-06-28 08:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB93968​3$\spuninst\spuninst.exe
 + 2005-06-28 08:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB93968​3$\spuninst\updspapi.dll
 + 2006-11-03 07:58:34 317,440 -c----w C:\WINDOWS\$NtUninstallKB93968​3$\unregmp2.exe
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB94169​3$\spuninst\spuninst.exe
 + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB94169​3$\spuninst\updspapi.dll
 + 2007-03-08 15:33:58 1,843,712 -c----w C:\WINDOWS\$NtUninstallKB94169​3$\win32k.sys
 + 2006-06-26 17:41:32 148,480 -c----w C:\WINDOWS\$NtUninstallKB94555​3$\dnsapi.dll
 + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtUninstallKB94555​3$\dnsrslvr.dll
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB94555​3$\spuninst\spuninst.exe
 + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB94555​3$\spuninst\updspapi.dll
 + 2007-06-19 13:32:25 282,112 -c----w C:\WINDOWS\$NtUninstallKB94859​0$\gdi32.dll
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB94859​0$\spuninst\spuninst.exe
 + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB94859​0$\spuninst\updspapi.dll
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB94888​1$\spuninst\spuninst.exe
 + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB94888​1$\spuninst\updspapi.dll
 + 2004-08-05 12:00:00 561,179 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\dao360.dll
 + 2004-08-05 12:00:00 512,029 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msexch40.dll
 + 2004-08-05 12:00:00 319,517 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msexcl40.dll
 + 2004-08-05 12:00:00 1,507,356 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msjet40.dll
 + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msjetoledb40.dll
 + 2004-08-05 12:00:00 184,351 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msjint40.dll
 + 2004-08-05 12:00:00 53,279 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msjter40.dll
 + 2004-08-05 12:00:00 241,693 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msjtes40.dll
 + 2004-08-05 12:00:00 213,023 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msltus40.dll
 + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\mspbde40.dll
 + 2004-08-05 12:00:00 421,919 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msrd2x40.dll
 + 2004-08-05 12:00:00 315,423 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msrd3x40.dll
 + 2004-08-05 12:00:00 552,989 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msrepl40.dll
 + 2004-08-05 12:00:00 258,077 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\mstext40.dll
 + 2004-08-05 12:00:00 831,519 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\mswdat10.dll
 + 2004-08-05 12:00:00 614,429 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\mswstr10.dll
 + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\msxbde40.dll
 + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\spuninst\spuninst.exe
 + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB95074​9$\spuninst\updspapi.dll
 + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB95076​0$\spuninst\spuninst.exe
 + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB95076​0$\spuninst\updspapi.dll
 + 2008-04-13 18:55:08 202,624 -c----w C:\WINDOWS\$NtUninstallKB95076​2$\rmcast.sys
 + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB95076​2$\spuninst\spuninst.exe
 + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB95076​2$\spuninst\updspapi.dll
 + 2008-04-14 15:59:30 272,768 -c----w C:\WINDOWS\$NtUninstallKB95137​6-v2$\bthport.sys
 + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB95137​6-v2$\spuninst\spuninst.exe
 + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB95137​6-v2$\spuninst\updspapi.dll
 + 2008-04-14 01:58:00 273,664 -c----w C:\WINDOWS\$NtUninstallKB95137​6$\bthport.sys
 + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB95137​6$\spuninst\spuninst.exe
 + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB95137​6$\spuninst\updspapi.dll
 + 2008-04-14 02:33:39 1,294,336 -c----w C:\WINDOWS\$NtUninstallKB95169​8$\quartz.dll
 + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB95169​8$\spuninst\spuninst.exe
 + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB95169​8$\spuninst\updspapi.dll
 + 2006-09-25 15:58:48 221,488 -c----w C:\WINDOWS\$NtUninstallMSCompP​ackV1$\spuninst\spuninst.exe
 + 2006-09-25 15:58:48 379,184 -c----w C:\WINDOWS\$NtUninstallMSCompP​ackV1$\spuninst\updspapi.dll
 + 2005-01-28 13:22:12 486,912 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\audiodev.dll
 + 2005-01-28 06:53:28 294,912 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\blackbox.dll
 + 2005-01-28 06:53:20 164,864 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\cewmdm.dll
 + 2005-01-28 06:53:38 502,272 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\drmv2clt.dll
 + 2005-01-28 06:53:16 6,656 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\laprxy.dll
 + 2005-01-27 23:21:46 96,768 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\logagent.exe
 + 2004-08-05 12:00:00 310,272 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mp43dmod.dll
 + 2004-08-05 12:00:00 384,512 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mp4sdmod.dll
 + 2004-08-05 12:00:00 240,640 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mpg4dmod.dll
 + 2005-01-28 06:53:22 142,336 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\msnetobj.dll
 + 2005-01-28 06:53:20 25,088 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mspmsnsv.dll
 + 2005-01-28 06:53:20 173,568 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mspmsp.dll
 + 2005-01-28 11:32:44 364,784 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\msscp.dll
 + 2005-01-28 13:22:12 316,416 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\mswmdm.dll
 + 2004-08-10 22:45:18 221,184 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\qasf.dll
 + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\spuninst\spuninst.exe
 + 2006-05-16 16:11:54 371,424 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\spuninst\updspapi.dll
 + 2006-11-02 09:46:52 13,312 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\spuninst\wpdinstallutil.dl​l
 + 2005-01-27 23:36:04 47,104 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\uwdf.exe
 + 2005-01-27 23:35:58 15,872 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wdfapi.dll
 + 2005-01-27 23:36:00 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wdfmgr.exe
 + 2005-01-28 11:32:44 396,528 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmadmod.dll
 + 2005-01-28 06:53:18 716,288 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmadmoe.dll
 + 2007-10-20 05:01:32 227,328 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmasf.dll
 + 2005-01-28 06:53:20 28,160 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmdmlog.dll
 + 2005-01-28 06:53:20 33,792 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmdmps.dll
 + 2005-01-28 06:53:50 335,872 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmdrmdev.dll
 + 2005-01-28 06:53:54 290,816 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmdrmnet.dll
 + 2005-01-28 06:53:16 150,016 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmidx.dll
 + 2005-01-28 06:53:16 1,027,072 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmnetmgr.dll
 + 2005-01-28 11:32:56 774,904 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmsdmod.dll
 + 2005-01-28 06:53:18 1,119,744 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmsdmoe2.dll
 + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmsetsdk.exe
 + 2005-01-28 11:32:44 413,944 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmspdmod.dll
 + 2005-01-28 06:53:18 940,544 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmspdmoe.dll
 + 2005-01-28 11:32:56 1,218,808 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmvadvd.dll
 + 2005-01-28 06:53:20 1,512,448 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmvadve.dll
 + 2006-12-07 05:29:34 2,374,472 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmvcore.dll
 + 2004-08-10 23:38:56 871,160 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmvdmod.dll
 + 2005-01-28 06:53:18 1,003,008 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wmvdmoe2.dll
 + 2005-01-27 23:36:28 38,912 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpd_ci.dll
 + 2005-01-27 23:36:20 61,952 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpdconns.dll
 + 2005-01-27 23:36:24 114,176 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpdmtp.dll
 + 2005-01-27 23:36:22 66,560 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpdmtpus.dll
 + 2005-01-27 23:36:28 331,264 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpdsp.dll
 + 2005-01-27 23:36:24 18,944 -c----w C:\WINDOWS\$NtUninstallWMFDist​11$\wpdusb.sys
 + 2005-01-28 13:22:24 8,704 -c----w C:\WINDOWS\$NtUninstallwmp11$\​asferror.dll
 + 2005-01-28 13:22:12 352,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\​mpvis.dll
 + 2005-01-28 13:22:12 827,392 -c----w C:\WINDOWS\$NtUninstallwmp11$\​setup_wm.exe
 + 2006-05-16 16:11:54 213,216 -c----w C:\WINDOWS\$NtUninstallwmp11$\​spuninst\spuninst.exe
 + 2006-05-16 16:11:56 394,976 -c----w C:\WINDOWS\$NtUninstallwmp11$\​spuninst\updspapi.dll
 + 2005-01-28 13:22:12 192,512 -c----w C:\WINDOWS\$NtUninstallwmp11$\​unregmp2.exe
 + 2005-01-28 13:22:24 226,304 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmerror.dll
 + 2005-01-27 23:26:30 122,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmlaunch.exe
 + 2007-04-30 06:20:24 5,537,792 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmp.dll
 + 2005-01-28 06:53:20 135,168 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpasf.dll
 + 2005-01-28 13:22:12 77,824 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpband.dll
 + 2005-01-28 06:53:20 282,624 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpdxm.dll
 + 2005-01-27 23:26:30 28,672 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpenc.exe
 + 2005-01-28 06:53:18 1,594,880 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpencen.dll
 + 2005-01-28 13:22:12 73,728 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmplayer.exe
 + 2004-08-11 18:49:12 3,424,256 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmploc.dll
 + 2004-08-11 18:49:12 86,016 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpshell.dll
 + 2005-01-28 06:53:18 175,104 -c----w C:\WINDOWS\$NtUninstallwmp11$\​wmpsrcwp.dll
 + 2006-09-15 23:05:22 221,488 -c----w C:\WINDOWS\$NtUninstallWudf010​00$\spuninst\spuninst.exe
 + 2006-09-15 23:05:22 379,184 -c----w C:\WINDOWS\$NtUninstallWudf010​00$\spuninst\updspapi.dll
 + 2006-09-28 17:01:52 58,368 -c----w C:\WINDOWS\$NtUninstallWudf010​00$\spuninst\WudfCustom.dll
 + 2008-04-14 02:33:18 39,424 ----a-w C:\WINDOWS\AppPatch\acadproc.d​ll
 - 2004-08-05 12:00:00 1,852,416 ----a-w C:\WINDOWS\AppPatch\AcGenral.d​ll
 + 2008-04-14 02:33:18 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.d​ll
 - 2004-08-05 12:00:00 450,048 ----a-w C:\WINDOWS\AppPatch\AcLayers.d​ll
 + 2008-04-14 02:33:18 451,072 ----a-w C:\WINDOWS\AppPatch\aclayers.d​ll
 - 2004-08-05 12:00:00 137,728 ----a-w C:\WINDOWS\AppPatch\AcLua.dll
 + 2008-04-14 02:33:18 141,312 ----a-w C:\WINDOWS\AppPatch\aclua.dll
 - 2004-08-05 12:00:00 244,736 ----a-w C:\WINDOWS\AppPatch\AcSpecfc.d​ll
 + 2008-04-14 02:33:18 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.d​ll
 - 2004-08-05 12:00:00 116,224 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.d​ll
 + 2008-04-14 02:33:18 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.d​ll
 - 2007-07-02 15:49:56 248,632 ----a-w C:\WINDOWS\assembly\GAC\Micros​oft.Office.Interop.PowerPoint\​12.0.0.0__71e9bce111e9429c\Mic​rosoft.Office.Interop.PowerPoi​nt.dll
 + 2008-03-30 23:08:31 251,272 ----a-w C:\WINDOWS\assembly\GAC\Micros​oft.Office.Interop.PowerPoint\​12.0.0.0__71e9bce111e9429c\Mic​rosoft.Office.Interop.PowerPoi​nt.dll
 - 2007-07-02 15:49:56 781,104 ----a-w C:\WINDOWS\assembly\GAC\Micros​oft.Office.Interop.Word\12.0.0​.0__71e9bce111e9429c\Microsoft​.Office.Interop.Word.dll
 + 2008-03-30 23:07:42 783,744 ----a-w C:\WINDOWS\assembly\GAC\Micros​oft.Office.Interop.Word\12.0.0​.0__71e9bce111e9429c\Microsoft​.Office.Interop.Word.dll
 - 2007-07-12 01:03:58 68,608 ----a-w C:\WINDOWS\assembly\GAC_32\Cus​tomMarshalers\2.0.0.0__b03f5f7​f11d50a3a\CustomMarshalers.dll​
 + 2008-03-31 14:03:01 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\Cus​tomMarshalers\2.0.0.0__b03f5f7​f11d50a3a\CustomMarshalers.dll​
 - 2007-07-12 01:04:09 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISy​mWrapper\2.0.0.0__b03f5f7f11d5​0a3a\ISymWrapper.dll
 + 2008-03-31 14:03:06 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISy​mWrapper\2.0.0.0__b03f5f7f11d5​0a3a\ISymWrapper.dll
 - 2007-07-02 15:50:41 118,112 ----a-w C:\WINDOWS\assembly\GAC_32\Mic​rosoft.Office.InfoPath.Client.​Internal.Host.Interop\12.0.0.0​__71e9bce111e9429c\Microsoft.O​ffice.Infopath.Client.Internal​.Host.Interop.dll
 + 2008-03-30 23:08:12 120,408 ----a-w C:\WINDOWS\assembly\GAC_32\Mic​rosoft.Office.InfoPath.Client.​Internal.Host.Interop\12.0.0.0​__71e9bce111e9429c\Microsoft.O​ffice.Infopath.Client.Internal​.Host.Interop.dll
 - 2007-07-12 01:04:10 4,308,992 ----a-w C:\WINDOWS\assembly\GAC_32\msc​orlib\2.0.0.0__b77a5c561934e08​9\mscorlib.dll
 + 2008-03-31 14:02:48 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\msc​orlib\2.0.0.0__b77a5c561934e08​9\mscorlib.dll
 - 2007-07-12 01:04:13 482,304 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Data.OracleClient\2.0.0.0_​_b77a5c561934e089\System.Data.​OracleClient.dll
 + 2008-03-31 14:03:08 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Data.OracleClient\2.0.0.0_​_b77a5c561934e089\System.Data.​OracleClient.dll
 - 2007-07-12 01:04:05 2,902,016 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Data\2.0.0.0__b77a5c561934​e089\System.Data.dll
 + 2008-03-31 14:02:54 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Data\2.0.0.0__b77a5c561934​e089\System.Data.dll
 - 2007-07-12 01:03:53 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.EnterpriseServices\2.0.0.0​__b03f5f7f11d50a3a\System.Ente​rpriseServices.dll
 + 2008-03-31 14:03:11 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.EnterpriseServices\2.0.0.0​__b03f5f7f11d50a3a\System.Ente​rpriseServices.dll
 - 2007-07-12 01:03:53 114,176 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.EnterpriseServices\2.0.0.0​__b03f5f7f11d50a3a\System.Ente​rpriseServices.Wrapper.dll
 + 2008-03-31 14:03:11 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.EnterpriseServices\2.0.0.0​__b03f5f7f11d50a3a\System.Ente​rpriseServices.Wrapper.dll
 - 2007-07-12 01:04:21 260,096 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Transactions\2.0.0.0__b77a​5c561934e089\System.Transactio​ns.dll
 + 2008-03-31 14:03:07 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Transactions\2.0.0.0__b77a​5c561934e089\System.Transactio​ns.dll
 - 2007-07-12 01:04:01 5,156,864 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Web\2.0.0.0__b03f5f7f11d50​a3a\System.Web.dll
 + 2008-03-31 14:02:52 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\Sys​tem.Web\2.0.0.0__b03f5f7f11d50​a3a\System.Web.dll
 - 2007-07-12 01:03:58 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\A​ccessibility\2.0.0.0__b03f5f7f​11d50a3a\Accessibility.dll
 + 2008-03-31 14:02:58 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\A​ccessibility\2.0.0.0__b03f5f7f​11d50a3a\Accessibility.dll
 - 2007-07-12 01:03:52 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\A​spNetMMCExt\2.0.0.0__b03f5f7f1​1d50a3a\AspNetMMCExt.dll
 + 2008-03-31 14:02:53 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\A​spNetMMCExt\2.0.0.0__b03f5f7f1​1d50a3a\AspNetMMCExt.dll
 - 2007-07-12 01:03:55 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\c​scompmgd\8.0.0.0__b03f5f7f11d5​0a3a\cscompmgd.dll
 + 2008-03-31 14:03:00 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\c​scompmgd\8.0.0.0__b03f5f7f11d5​0a3a\cscompmgd.dll
 - 2007-07-12 01:04:07 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​EExecRemote\2.0.0.0__b03f5f7f1​1d50a3a\IEExecRemote.dll
 + 2008-03-31 14:03:03 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​EExecRemote\2.0.0.0__b03f5f7f1​1d50a3a\IEExecRemote.dll
 - 2007-07-12 01:04:08 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​EHost\2.0.0.0__b03f5f7f11d50a3​a\IEHost.dll
 + 2008-03-31 14:03:04 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​EHost\2.0.0.0__b03f5f7f11d50a3​a\IEHost.dll
 - 2007-07-12 01:04:08 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​IEHost\2.0.0.0__b03f5f7f11d50a​3a\IIEHost.dll
 + 2008-03-31 14:03:04 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\I​IEHost\2.0.0.0__b03f5f7f11d50a​3a\IIEHost.dll
 - 2007-07-12 01:03:56 413,696 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Engine\2.0.0.0_​_b03f5f7f11d50a3a\Microsoft.Bu​ild.Engine.dll
 + 2008-03-31 14:03:12 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Engine\2.0.0.0_​_b03f5f7f11d50a3a\Microsoft.Bu​ild.Engine.dll
 - 2007-07-12 01:03:56 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Framework\2.0.0​.0__b03f5f7f11d50a3a\Microsoft​.Build.Framework.dll
 + 2008-03-31 14:03:13 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Framework\2.0.0​.0__b03f5f7f11d50a3a\Microsoft​.Build.Framework.dll
 - 2007-07-12 01:03:57 647,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Tasks\2.0.0.0__​b03f5f7f11d50a3a\Microsoft.Bui​ld.Tasks.dll
 + 2008-03-31 14:03:13 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Tasks\2.0.0.0__​b03f5f7f11d50a3a\Microsoft.Bui​ld.Tasks.dll
 - 2007-07-12 01:03:57 73,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Utilities\2.0.0​.0__b03f5f7f11d50a3a\Microsoft​.Build.Utilities.dll
 + 2008-03-31 14:03:14 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Build.Utilities\2.0.0​.0__b03f5f7f11d50a3a\Microsoft​.Build.Utilities.dll
 - 2007-07-12 01:03:55 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.JScript\8.0.0.0__b03f​5f7f11d50a3a\Microsoft.JScript​.dll
 + 2008-03-31 14:03:05 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.JScript\8.0.0.0__b03f​5f7f11d50a3a\Microsoft.JScript​.dll
 - 2007-07-02 15:50:40 609,104 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Office.InfoPath.Clien​t.Internal.Host\12.0.0.0__71e9​bce111e9429c\Microsoft.Office.​Infopath.Client.Internal.Host.​dll
 + 2008-03-30 23:08:12 611,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Office.InfoPath.Clien​t.Internal.Host\12.0.0.0__71e9​bce111e9429c\Microsoft.Office.​Infopath.Client.Internal.Host.​dll
 - 2007-07-12 01:04:23 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Compatibi​lity.Data\8.0.0.0__b03f5f7f11d​50a3a\Microsoft.VisualBasic.Co​mpatibility.Data.dll
 + 2008-03-31 14:03:03 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Compatibi​lity.Data\8.0.0.0__b03f5f7f11d​50a3a\Microsoft.VisualBasic.Co​mpatibility.Data.dll
 - 2007-07-12 01:04:22 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Compatibi​lity\8.0.0.0__b03f5f7f11d50a3a​\Microsoft.VisualBasic.Compati​bility.dll
 + 2008-03-31 14:03:02 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Compatibi​lity\8.0.0.0__b03f5f7f11d50a3a​\Microsoft.VisualBasic.Compati​bility.dll
 - 2007-07-12 01:03:50 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Vsa\8.0.0​.0__b03f5f7f11d50a3a\Microsoft​.VisualBasic.Vsa.dll
 + 2008-03-31 14:03:09 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic.Vsa\8.0.0​.0__b03f5f7f11d50a3a\Microsoft​.VisualBasic.Vsa.dll
 - 2007-07-12 01:04:22 667,648 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic\8.0.0.0__​b03f5f7f11d50a3a\Microsoft.Vis​ualBasic.dll
 + 2008-03-31 14:03:02 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualBasic\8.0.0.0__​b03f5f7f11d50a3a\Microsoft.Vis​ualBasic.dll
 - 2007-07-12 01:04:23 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualC\8.0.0.0__b03f​5f7f11d50a3a\Microsoft.VisualC​.Dll
 + 2008-03-31 14:02:50 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.VisualC\8.0.0.0__b03f​5f7f11d50a3a\Microsoft.VisualC​.Dll
 - 2007-07-12 01:03:52 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Vsa.Vb.CodeDOMProcess​or\8.0.0.0__b03f5f7f11d50a3a\M​icrosoft.Vsa.Vb.CodeDOMProcess​or.dll
 + 2008-03-31 14:03:10 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\M​icrosoft.Vsa.Vb.CodeDOMProcess​or\8.0.0.0__b03f5f7f11d50a3a\M​icrosoft.Vsa.Vb.CodeDOMProcess​o

n°413184
chef.manu
Posté le 27-07-2008 à 01:40:53  answer
Prévenir les modérateurs en cas d'abus
 

rapport combofx suite 3
 + 2006-10-26 12:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\REVERSE.DLL
 + 2006-10-26 18:13:00 503,624 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\SELFCERT.EXE
 + 2006-10-26 18:06:58 439,600 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\SETUP.EXE
 + 2006-10-26 19:18:16 502,608 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\SOA.DLL
 + 2006-07-28 13:21:58 277,320 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\SSGEN.DLL
 + 2006-10-27 12:57:08 2,330,968 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\STSLIST.DLL
 + 2006-10-26 12:04:48 29,976 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\THOCRAPI.DLL
 + 2006-10-26 12:05:04 126,784 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWCUTCHR.DLL
 + 2006-10-26 12:05:02 86,840 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWCUTLIN.DLL
 + 2006-10-26 12:04:56 58,168 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWLAY32.DLL
 + 2006-10-26 12:04:48 27,456 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWORIENT.DLL
 + 2006-10-26 12:04:54 51,008 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWRECE.DLL
 + 2006-10-26 12:04:44 19,784 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWRECS.DLL
 + 2006-10-26 12:04:58 76,624 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\TWSTRUCT.DLL
 + 2006-09-29 22:42:56 2,583,344 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\VBE6.DLL
 + 2006-10-26 21:00:12 1,841,984 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\VVIEWDWG.DLL
 + 2006-10-26 20:58:38 3,732,792 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\VVIEWER.DLL
 + 2006-10-27 13:23:04 347,432 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\WINWORD.EXE
 + 2007-07-02 15:49:56 781,104 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\WORDPIA.DLL
 + 2006-10-26 12:05:08 1,181,520 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\XIMAGE3B.DLL
 + 2006-10-26 12:05:08 530,760 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.4518\XPAGE3C.DLL
 + 2007-08-28 21:38:10 500,648 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\MORPH9.DLL
 + 2007-08-28 21:38:46 9,584,512 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\MSPUB.EXE
 + 2007-08-24 01:43:28 138,648 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\PRTF9.DLL
 + 2007-08-28 21:39:14 625,560 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\PTXT9.DLL
 + 2007-08-24 01:43:36 593,296 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\PUBCONV.DLL
 + 2007-08-24 05:10:14 1,846,160 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\VVIEWDWG.DLL
 + 2007-08-28 21:16:00 350,064 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\WINWORD.EXE
 + 2007-09-06 16:03:02 4,280,176 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\WRD12CNV.DLL
 + 2007-08-28 22:07:58 24,928 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\WRD12EXE.EXE
 + 2007-09-06 15:56:32 17,490,800 ----a-r C:\WINDOWS\Installer\$PatchCac​he$\Managed\00002109030000000000000000F01FE​C\12.0.6215\WWLIB.DLL
 + 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut1_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut10_2D73ED7BCF5749BA​9891E131D7FE5FBF.exe
 + 2008-06-25 13:28:24 14,366 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut2_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-06-25 13:28:24 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut5_86F3D0BB3537401DB​B67D4F0DA976EAC_1.exe
 + 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut51_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 + 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut52_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 - 2008-03-12 02:05:10 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​accicons.exe
 + 2008-07-18 00:01:37 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​accicons.exe
 - 2008-03-12 02:05:10 20,240 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​cagicon.exe
 + 2008-07-18 00:01:40 20,240 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​cagicon.exe
 - 2008-03-12 02:05:10 159,504 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​inficon.exe
 + 2008-07-18 00:01:38 159,504 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​inficon.exe
 - 2008-03-12 02:05:10 184,080 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​joticon.exe
 + 2008-07-18 00:01:38 184,080 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​joticon.exe
 - 2008-03-12 02:05:10 217,864 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​misc.exe
 + 2008-07-18 00:01:40 217,864 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​misc.exe
 - 2008-03-12 02:05:10 18,704 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​mspicons.exe
 + 2008-07-18 00:01:40 18,704 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​mspicons.exe
 - 2008-03-12 02:05:10 35,088 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​oisicon.exe
 + 2008-07-18 00:01:41 35,088 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​oisicon.exe
 - 2008-03-12 02:05:10 845,584 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​outicon.exe
 + 2008-07-18 00:01:39 845,584 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​outicon.exe
 - 2008-03-12 02:05:10 922,384 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​pptico.exe
 + 2008-07-18 00:01:39 922,384 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​pptico.exe
 - 2008-03-12 02:05:10 272,648 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​pubs.exe
 + 2008-07-18 00:01:40 272,648 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​pubs.exe
 - 2008-03-12 02:05:10 888,080 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​wordicon.exe
 + 2008-07-18 00:01:40 888,080 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​wordicon.exe
 - 2008-03-12 02:05:10 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​xlicons.exe
 + 2008-07-18 00:01:38 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000​-0030-0000-0000-0000000FF1CE}\​xlicons.exe
 - 2007-07-02 16:00:36 217,864 ----a-r C:\WINDOWS\Installer\{90120000​-006E-040C-0000-0000000FF1CE}\​misc.exe
 + 2008-03-31 00:40:10 217,864 ----a-r C:\WINDOWS\Installer\{90120000​-006E-040C-0000-0000000FF1CE}\​misc.exe
 + 2008-04-15 15:31:48 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86​-7AD7-1036-7B44-A81200000003}\​SC_Reader.exe
 - 2008-03-21 15:11:16 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744​-3787-48F6-B8C9-4C4995401D65}\​MsblIco.Exe
 + 2008-06-04 19:33:15 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744​-3787-48F6-B8C9-4C4995401D65}\​MsblIco.Exe
 - 2007-08-28 01:03:40 32,768 ----a-r C:\WINDOWS\Installer\{C04E32E0​-0416-434D-AFB9-6969D703A9EF}\​icon.exe
 + 2008-03-31 22:55:50 32,768 ----a-r C:\WINDOWS\Installer\{C04E32E0​-0416-434D-AFB9-6969D703A9EF}\​icon.exe
 + 2008-01-18 15:13:09 2,247 ------w C:\WINDOWS\Installer\tsclientm​sitrans\tscdsbl.bat
 + 2007-12-12 10:33:51 18,917 ------w C:\WINDOWS\Installer\tsclientm​sitrans\tscinst.vbs
 + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\Installer\tsclientm​sitrans\tscuinst.vbs
 + 2008-04-14 02:33:06 25,600 ------w C:\WINDOWS\Installer\tsclientm​sitrans\tscupdc.dll
 - 2005-09-23 05:28:52 72,704 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\NETFXSBS10.exe
 + 2007-10-23 23:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\NETFXSBS10.exe
 - 2005-09-23 05:28:52 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp10.dll
 + 2007-10-23 23:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp10.dll
 - 2005-09-23 05:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp20_mscorwks.dll
 + 2007-10-23 23:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp20_mscorwks.dll
 - 2005-09-23 05:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp20_perfcounter.dll
 + 2007-10-23 23:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\sbscmp20_perfcounter.dll
 - 2005-09-23 05:28:56 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\SharedReg12.dll
 + 2007-10-23 23:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\SharedReg12.dll
 - 2005-09-23 05:28:52 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v1.0.3705\mscormmc.dll
 + 2007-10-23 23:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v1.0.3705\mscormmc.dll
 - 2005-09-23 05:28:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\alinkui.d​ll
 + 2007-10-23 23:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\alinkui.d​ll
 - 2005-09-23 05:28:42 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\cscompui.​dll
 + 2007-10-23 23:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\cscompui.​dll
 - 2005-09-23 05:28:44 4,608 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\CvtResUI.​dll
 + 2007-10-23 23:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\CvtResUI.​dll
 - 2005-09-23 05:29:04 183,808 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\vbc7ui.dl​l
 + 2007-10-23 23:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\vbc7ui.dl​l
 - 2005-09-23 05:28:28 208,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\Vsavb7rtU​I.dll
 + 2007-10-23 23:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\1033\Vsavb7rtU​I.dll
 - 2005-09-23 05:28:56 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Accessibility.​dll
 + 2007-10-23 23:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Accessibility.​dll
 - 2005-09-23 05:28:58 138,240 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AdoNetDiag.dll​
 + 2007-10-23 23:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AdoNetDiag.dll​
 - 2005-09-23 05:28:36 87,552 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\alink.dll
 + 2007-10-23 23:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\alink.dll
 - 2007-04-13 01:21:18 58,712 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AppLaunch.exe
 + 2007-10-23 23:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AppLaunch.exe
 - 2005-09-23 05:28:32 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_compile​r.exe
 + 2007-10-23 23:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_compile​r.exe
 - 2007-04-13 01:20:52 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_filter.​dll
 + 2007-10-23 23:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_filter.​dll
 - 2007-04-13 01:20:52 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_isapi.d​ll
 + 2007-10-23 23:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_isapi.d​ll
 - 2007-04-13 01:20:52 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Aspnet_perf.dl​l
 + 2007-10-23 23:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Aspnet_perf.dl​l
 - 2007-04-13 01:20:50 75,264 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_rc.dll
 + 2007-10-23 23:47:22 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_rc.dll
 - 2005-09-23 05:28:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regbrow​sers.exe
 + 2007-10-23 23:47:22 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regbrow​sers.exe
 - 2007-04-13 01:20:52 32,608 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regiis.​exe
 + 2007-10-23 23:47:22 32,776 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regiis.​exe
 - 2005-09-23 05:28:32 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regsql.​exe
 + 2007-10-23 23:47:22 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_regsql.​exe
 - 2007-04-13 01:20:52 33,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_state.e​xe
 + 2007-10-23 23:47:22 33,800 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_state.e​xe
 - 2007-04-13 01:20:52 32,600 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_wp.exe
 + 2007-10-23 23:47:22 33,280 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\aspnet_wp.exe
 - 2007-04-13 01:20:52 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AspNetMMCExt.d​ll
 + 2007-10-23 23:47:22 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\AspNetMMCExt.d​ll
 - 2005-09-23 05:28:56 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CasPol.exe
 + 2007-10-23 23:47:40 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CasPol.exe
 - 2007-04-13 01:21:16 88,576 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CORPerfMonExt.​dll
 + 2007-10-23 23:47:40 101,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CORPerfMonExt.​dll
 - 2005-09-23 05:28:42 76,984 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\csc.exe
 + 2007-10-23 23:47:30 80,376 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\csc.exe
 - 2005-09-23 05:28:42 1,144,832 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cscomp.dll
 + 2007-10-23 23:47:30 1,162,744 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cscomp.dll
 - 2005-09-23 05:28:42 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cscompmgd.dll
 + 2007-10-23 23:47:30 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cscompmgd.dll
 - 2005-09-23 05:28:58 17,920 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Culture.dll
 + 2007-10-23 23:47:42 27,136 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Culture.dll
 - 2005-09-23 05:28:56 68,608 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CustomMarshale​rs.dll
 + 2007-10-23 23:47:40 69,120 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\CustomMarshale​rs.dll
 - 2005-09-23 05:28:44 31,936 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cvtres.exe
 + 2007-10-23 23:47:30 35,320 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\cvtres.exe
 - 2005-09-23 05:28:38 52,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\dfdll.dll
 + 2007-10-23 23:47:28 66,552 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\dfdll.dll
 - 2007-04-13 01:20:58 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\dfsvc.exe
 + 2007-10-23 23:47:28 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\dfsvc.exe
 - 2005-09-23 05:29:12 547,840 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\diasymreader.d​ll
 + 2007-10-23 23:47:54 572,936 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\diasymreader.d​ll
 - 2005-09-23 05:28:56 788,992 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\EventLogMessag​es.dll
 + 2007-10-23 23:47:40 798,224 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\EventLogMessag​es.dll
 - 2005-09-23 05:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\fusion.dll
 + 2007-10-23 23:47:36 18,936 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\fusion.dll
 - 2007-04-13 01:21:16 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEExec.exe
 + 2007-10-23 23:47:40 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEExec.exe
 - 2005-09-23 05:28:56 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEExecRemote.d​ll
 + 2007-10-23 23:47:40 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEExecRemote.d​ll
 - 2005-09-23 05:28:56 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEHost.dll
 + 2007-10-23 23:47:40 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IEHost.dll
 - 2005-09-23 05:28:56 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IIEHost.dll
 + 2007-10-23 23:47:40 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\IIEHost.dll
 - 2007-04-13 01:21:16 228,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ilasm.exe
 + 2007-10-23 23:47:40 230,904 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ilasm.exe
 - 2007-04-13 01:21:16 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\InstallUtil.ex​e
 + 2007-10-23 23:47:40 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\InstallUtil.ex​e
 - 2005-09-23 05:28:56 55,296 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\InstallUtilLib​.dll
 + 2007-10-23 23:47:40 65,032 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\InstallUtilLib​.dll
 - 2005-09-23 05:28:56 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ISymWrapper.dl​l
 + 2007-10-23 23:47:40 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ISymWrapper.dl​l
 - 2005-09-23 05:28:48 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\jsc.exe
 + 2007-10-23 23:47:34 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\jsc.exe
 - 2007-04-13 01:21:10 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Engine.dll
 + 2007-10-23 23:47:36 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Engine.dll
 - 2005-09-23 05:28:48 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Framework.dll
 + 2007-10-23 23:47:36 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Framework.dll
 - 2007-04-13 01:21:10 647,168 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Tasks.dll
 + 2007-10-23 23:47:36 655,360 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Tasks.dll
 - 2005-09-23 05:28:48 73,728 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Utilities.dll
 + 2007-10-23 23:47:36 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Buil​d.Utilities.dll
 - 2007-04-13 01:21:08 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.JScr​ipt.dll
 + 2007-10-23 23:47:34 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.JScr​ipt.dll
 - 2005-09-23 05:29:10 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Compatibility.Data.dll​
 + 2007-10-23 23:47:52 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Compatibility.Data.dll​
 - 2005-09-23 05:29:10 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Compatibility.dll
 + 2007-10-23 23:47:52 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Compatibility.dll
 - 2005-09-23 05:29:08 667,648 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.dll
 + 2007-10-23 23:47:50 671,744 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.dll
 - 2005-09-23 05:28:30 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Vsa.dll
 + 2007-10-23 23:47:20 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alBasic.Vsa.dll
 - 2005-09-23 05:29:10 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alC.Dll
 + 2007-10-23 23:47:52 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Visu​alC.Dll
 - 2005-09-23 05:28:30 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Vsa.​dll
 + 2007-10-23 23:47:20 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Vsa.​dll
 - 2005-09-23 05:28:30 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Vsa.​Vb.CodeDOMProcessor.dll
 + 2007-10-23 23:47:20 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft.Vsa.​Vb.CodeDOMProcessor.dll
 - 2005-09-23 05:28:30 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft_VsaV​b.dll
 + 2007-10-23 23:47:20 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\Microsoft_VsaV​b.dll
 - 2007-04-13 01:20:52 87,040 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MmcAspExt.dll
 + 2007-10-23 23:47:22 97,792 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MmcAspExt.dll
 - 2005-09-23 05:28:48 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MSBuild.exe
 + 2007-10-23 23:47:36 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MSBuild.exe
 - 2007-04-13 01:21:18 802,304 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordacwks.dl​l
 + 2007-10-23 23:47:40 822,280 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordacwks.dl​l
 - 2005-09-23 05:28:56 73,216 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordbc.dll
 + 2007-10-23 23:47:40 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordbc.dll
 - 2005-09-23 05:28:56 288,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordbi.dll
 + 2007-10-23 23:47:40 308,224 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscordbi.dll
 - 2007-04-13 01:21:16 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorie.dll
 + 2007-10-23 23:47:40 47,104 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorie.dll
 - 2007-04-13 01:21:16 326,656 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorjit.dll
 + 2007-10-23 23:47:40 348,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorjit.dll
 - 2005-09-23 05:28:56 81,408 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorld.dll
 + 2007-10-23 23:47:40 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorld.dll
 - 2007-04-13 01:21:16 4,308,992 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorlib.dll
 + 2007-10-23 23:47:40 4,444,160 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorlib.dll
 - 2007-04-13 01:21:16 102,912 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorpe.dll
 + 2007-10-23 23:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorpe.dll
 - 2005-09-23 05:29:00 330,752 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorrc.dll
 + 2007-10-23 23:47:44 340,992 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorrc.dll
 - 2005-09-23 05:28:56 67,072 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsec.dll
 + 2007-10-23 23:47:40 77,312 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsec.dll
 - 2005-09-23 05:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsn.dll
 + 2007-10-23 23:47:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsn.dll
 - 2007-04-13 01:21:18 227,328 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsvc.dll
 + 2007-10-23 23:47:40 242,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsvc.dll
 - 2007-04-13 01:21:18 68,952 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsvw.exe
 + 2007-10-23 23:47:40 70,144 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorsvw.exe
 - 2005-09-23 05:28:56 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscortim.dll
 + 2007-10-23 23:47:40 19,456 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscortim.dll
 - 2007-04-13 01:21:12 5,634,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorwks.dll
 + 2007-10-23 23:47:36 5,814,784 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\mscorwks.dll
 - 2005-09-23 05:29:00 22,528 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MUI\0409\mscorsecr.dll
 + 2007-10-23 23:47:44 31,744 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\MUI\0409\mscorsecr.dll
 - 2007-04-13 01:21:16 99,152 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ngen.exe
 + 2007-10-23 23:47:40 101,880 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ngen.exe
 - 2007-04-13 01:21:18 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\normalization.​dll
 + 2007-10-23 23:47:40 24,584 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\normalization.​dll
 - 2005-09-23 05:28:56 78,336 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\PerfCounter.dl​l
 + 2007-10-23 23:47:40 89,096 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\PerfCounter.dl​l
 - 2007-04-13 01:21:12 136,192 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\peverify.dll
 + 2007-10-23 23:47:36 144,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\peverify.dll
 - 2005-09-23 05:28:56 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\RegAsm.exe
 + 2007-10-23 23:47:40 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\RegAsm.exe
 - 2005-09-23 05:28:56 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\RegSvcs.exe
 + 2007-10-23 23:47:40 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\RegSvcs.exe
 - 2005-09-23 05:29:02 59,072 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\regtlibv12.exe​
 + 2007-10-23 23:47:46 61,952 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\regtlibv12.exe​
 - 2005-09-23 05:28:58 7,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\sbscmp20_mscor​lib.dll
 + 2007-10-23 23:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\sbscmp20_mscor​lib.dll
 - 2005-09-23 05:28:56 107,520 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\shfusion.dll
 + 2007-10-23 23:47:40 119,296 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\shfusion.dll
 - 2005-09-23 05:29:00 85,504 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ShFusRes.dll
 + 2007-10-23 23:47:44 95,232 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\ShFusRes.dll
 - 2007-04-13 01:21:18 382,464 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\SOS.dll
 + 2007-10-23 23:47:40 392,696 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\SOS.dll
 - 2007-04-13 01:21:18 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\sysglobl.dll
 + 2007-10-23 23:47:40 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\sysglobl.dll
 - 2007-04-13 01:21:18 413,696 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.configu​ration.dll
 + 2007-10-23 23:47:42 425,984 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.configu​ration.dll
 - 2005-09-23 05:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Configu​ration.Install.dll
 + 2007-10-23 23:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Configu​ration.Install.dll
 - 2007-04-13 01:21:16 2,902,016 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.dl​l
 + 2007-10-23 23:47:40 3,036,160 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.dl​l
 - 2007-04-13 01:21:18 482,304 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.Or​acleClient.dll
 + 2007-10-23 23:47:40 483,840 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.Or​acleClient.dll
 - 2007-04-13 01:21:18 716,800 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.Sq​lXml.dll
 + 2007-10-23 23:47:40 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Data.Sq​lXml.dll
 - 2007-04-13 01:20:58 888,832 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Deploym​ent.dll
 + 2007-10-23 23:47:28 933,888 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Deploym​ent.dll
 - 2007-04-13 01:21:16 5,001,216 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Design.​dll
 + 2007-10-23 23:47:40 5,070,848 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Design.​dll
 - 2005-09-23 05:28:56 397,312 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Directo​ryServices.dll
 + 2007-10-23 23:47:40 401,408 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Directo​ryServices.dll
 - 2007-04-13 01:21:18 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Directo​ryServices.Protocols.dll
 + 2007-10-23 23:47:40 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Directo​ryServices.Protocols.dll
 - 2007-04-13 01:21:16 2,940,928 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.dll
 + 2007-10-23 23:47:40 3,076,096 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.dll
 - 2005-09-23 05:28:56 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Drawing​.Design.dll
 + 2007-10-23 23:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Drawing​.Design.dll
 - 2007-04-13 01:21:16 577,536 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Drawing​.dll
 + 2007-10-23 23:47:40 630,784 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Drawing​.dll
 - 2007-04-13 01:21:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.dll
 + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.dll
 - 2007-04-13 01:21:18 47,616 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.Thunk.dll
 + 2007-10-23 23:47:40 57,392 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.Thunk.dll
 - 2007-04-13 01:21:18 114,176 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.Wrapper.dll
 + 2007-10-23 23:47:40 113,664 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Enterpr​iseServices.Wrapper.dll
 - 2007-04-13 01:21:16 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Managem​ent.dll
 + 2007-10-23 23:47:40 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Managem​ent.dll
 - 2005-09-23 05:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Messagi​ng.dll
 + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Messagi​ng.dll
 - 2007-04-13 01:21:16 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Runtime​.Remoting.dll
 + 2007-10-23 23:47:40 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Runtime​.Remoting.dll
 - 2005-09-23 05:28:56 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Runtime​.Serialization.Formatters.Soap​.dll
 + 2007-10-23 23:47:40 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Runtime​.Serialization.Formatters.Soap​.dll
 - 2005-09-23 05:28:56 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Securit​y.dll
 + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Securit​y.dll
 - 2005-09-23 05:28:56 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Service​Process.dll
 + 2007-10-23 23:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Service​Process.dll
 - 2007-04-13 01:21:18 260,096 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Transac​tions.dll
 + 2007-10-23 23:47:40 261,120 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Transac​tions.dll
 - 2007-04-13 01:21:16 5,156,864 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.dll​
 + 2007-10-23 23:47:40 5,431,296 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.dll​
 - 2005-09-23 05:28:56 835,584 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Mob​ile.dll
 + 2007-10-23 23:47:40 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Mob​ile.dll
 - 2005-09-23 05:28:56 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Reg​ularExpressions.dll
 + 2007-10-23 23:47:40 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Reg​ularExpressions.dll
 - 2005-09-23 05:28:56 823,296 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Ser​vices.dll
 + 2007-10-23 23:47:40 839,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Web.Ser​vices.dll
 - 2007-04-13 01:21:16 5,152,768 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Windows​.Forms.dll
 + 2007-10-23 23:47:40 5,013,504 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.Windows​.Forms.dll
 - 2007-04-13 01:21:16 2,027,520 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.XML.dll​
 + 2007-10-23 23:47:40 2,068,480 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\System.XML.dll​
 - 2005-09-23 05:28:56 71,680 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\TLBREF.DLL
 + 2007-10-23 23:47:40 81,400 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\TLBREF.DLL
 - 2007-04-13 01:21:28 1,166,672 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\vbc.exe
 + 2007-10-23 23:47:48 1,172,472 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\vbc.exe
 - 2007-04-13 01:20:50 1,330,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\VsaVb7rt.dll
 + 2007-10-23 23:47:20 1,344,000 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\VsaVb7rt.dll
 - 2007-04-13 01:20:52 406,016 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\webengine.dll
 + 2007-10-23 23:47:22 434,688 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\webengine.dll
 - 2005-09-23 05:28:56 28,160 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\WMINet_Utils.d​ll
 + 2007-10-23 23:47:40 37,896 ----a-w C:\WINDOWS\Microsoft.NET\Frame​work\v2.0.50727\WMINet_Utils.d​ll
 - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dl​l
 + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dl​l
 - 2004-08-05 12:00:00 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dl​l
 + 2008-04-14 02:33:18 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dl​l
 - 2006-10-12 14:04:13 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dl​l
 + 2008-04-14 02:33:18 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dl​l
 - 2007-03-09 13:48:06 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dl​l
 + 2008-04-14 02:33:18 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dl​l
 - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dl​l
 + 2008-04-14 02:33:18 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dl​l
 - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dl​l
 + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dl​l
 - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll​
 + 2008-04-14 02:33:18 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll​
 - 2006-10-12 11:09:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.ex​e
 + 2008-04-14 02:33:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.ex​e
 - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll​
 + 2008-04-14 02:33:19 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll​
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​1.dll
 + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​1.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​4.dll
 + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​4.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​5.dll
 + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​5.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​6.dll
 + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​6.dll
 - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040​7.dll
 + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040​7.dll
 - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt040​8.dll
 + 2007-04-02 18:26:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt040​8.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​9.dll
 + 2008-04-13 17:32:28 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040​9.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​b.dll
 + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​b.dll
 - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040​c.dll
 + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040​c.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​d.dll
 + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040​d.dll
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040​e.dll
 + 2007-04-02 18:26:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040​e.dll
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt041​0.dll
 + 2007-04-02 18:26:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt041​0.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​1.dll
 + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​1.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​2.dll
 + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​2.dll
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt041​3.dll
 + 2007-04-02 18:26:01 20,992 ----a-w C:\WINDOWS\msagent\intl\agt041​3.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​4.dll
 + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​4.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​5.dll
 + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​5.dll
 - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt041​6.dll
 + 2007-04-02 18:26:01 20,480 ----a-w C:\WINDOWS\msagent\intl\agt041​6.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​9.dll
 + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​9.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​d.dll
 + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​d.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​f.dll
 + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041​f.dll
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt080​4.dll
 + 2007-04-02 18:26:02 19,456 ----a-w C:\WINDOWS\msagent\intl\agt080​4.dll
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt081​6.dll
 + 2007-04-02 18:26:02 20,992 ----a-w C:\WINDOWS\msagent\intl\agt081​6.dll
 - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0​a.dll
 + 2007-04-02 18:26:02 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0​a.dll
 - 2004-08-05 12:00:00 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dl​l
 + 2008-04-14 02:33:32 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dl​l
 + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\network diagnostic\custsat.dll
 + 2008-04-13 18:53:32 558,080 ------w C:\WINDOWS\network diagnostic\xpnetdiag.exe
 - 2000-08-31 07:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe
 + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe
 - 2004-08-05 12:00:00 70,656 ----a-w C:\WINDOWS\NOTEPAD.EXE
 + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\notepad.exe
 - 2004-08-05 12:00:00 768,512 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\HelpCtr.exe
 + 2008-04-14 02:34:06 769,024 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\helpctr.exe
 - 2004-08-05 12:00:00 743,936 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\HelpSvc.exe
 + 2008-04-14 02:34:06 744,448 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\helpsvc.exe
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\HscUpd.exe
 + 2008-04-14 02:34:06 18,432 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\hscupd.exe
 - 2004-08-05 12:00:00 160,768 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\msconfig.exe
 + 2008-04-14 02:34:12 172,544 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\msconfig.exe
 - 2004-08-05 12:00:00 381,952 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\msinfo.dll
 + 2008-04-14 02:33:32 382,464 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\msinfo.dll
 - 2004-08-05 12:00:00 102,400 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\pchshell.dll
 + 2008-04-14 02:33:38 102,912 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\pchshell.dll
 - 2004-08-05 12:00:00 38,912 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\pchsvc.dll
 + 2008-04-14 02:33:38 38,400 ----a-w C:\WINDOWS\pchealth\helpctr\bi​naries\pchsvc.dll
 - 2004-08-16 16:28:44 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\Of​flineCache\index.dat
 + 2008-05-28 07:47:29 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\Of​flineCache\index.dat
 + 2008-05-28 07:47:29 2,998 ----a-w C:\WINDOWS\pchealth\helpctr\Pa​ckageStore\SkuStore.bin
 - 2004-08-05 12:00:00 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\B​inaries\UploadM.exe
 + 2008-04-14 02:34:26 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\B​inaries\uploadm.exe
 - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll​
 + 2008-04-14 02:33:46 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll​
 - 2004-08-05 12:00:00 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll​
 + 2008-04-14 02:33:46 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll​
 - 2004-08-05 12:00:00 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll​
 + 2008-04-14 02:33:46 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll​
 + 2005-11-11 14:44:06 2,571 ----a-w C:\WINDOWS\Philips\SPC500NC\Ct​lStiSc.bat
 - 2004-08-05 12:00:00 153,088 ----a-w C:\WINDOWS\regedit.exe
 + 2008-04-14 02:34:19 153,088 ----a-w C:\WINDOWS\regedit.exe
 + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
 + 2008-04-13 18:46:18 53,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\1394bus.sys
 + 2008-04-13 18:40:50 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\4mmdat.sys
 + 2008-04-13 18:46:20 48,128 ------w C:\WINDOWS\ServicePackFiles\i3​86\61883.sys
 + 2008-04-14 02:33:18 100,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\6to4svc.dll
 + 2008-04-14 02:33:18 136,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\aaclient.dll
 + 2004-08-03 20:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\ac97ali.sys
 + 2004-08-03 20:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\ac97via.sys
 + 2008-04-14 02:33:18 39,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\acadproc.dll
 + 2008-04-14 02:33:53 190,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\accwiz.exe
 + 2008-04-14 02:33:18 1,852,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\acgenral.dll
 + 2008-04-14 02:33:18 451,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\aclayers.dll
 + 2008-04-14 02:33:18 141,312 ------w C:\WINDOWS\ServicePackFiles\i3​86\aclua.dll
 + 2008-04-14 02:33:18 120,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\aclui.dll
 + 2008-04-14 01:52:42 188,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\acpi.sys
 + 2008-04-14 02:33:18 245,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\acspecfc.dll
 + 2008-04-14 02:33:18 193,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\activeds.dll
 + 2008-04-14 02:33:53 4,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\actmovie.exe
 + 2008-04-14 02:33:18 98,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\actxprxy.dll
 + 2008-04-14 02:33:18 116,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\acxtrnal.dll
 + 2008-04-14 02:33:18 20,540 ------w C:\WINDOWS\ServicePackFiles\i3​86\admin.dll
 + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i3​86\admin.exe
 + 2004-08-03 20:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\admjoy.sys
 + 2008-04-14 02:33:18 61,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\admparse.dll
 + 2008-04-14 02:33:18 175,616 ------w C:\WINDOWS\ServicePackFiles\i3​86\adsldp.dll
 + 2008-04-14 02:33:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\adsldpc.dll
 + 2008-04-14 02:33:18 68,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\adsmsext.dll
 + 2008-04-14 02:33:18 263,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\adsnt.dll
 + 2008-04-14 02:33:18 4,255 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv01nt5.dll
 + 2008-04-14 02:33:18 3,967 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv02nt5.dll
 + 2008-04-14 02:33:18 3,615 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv05nt5.dll
 + 2008-04-14 02:33:18 3,647 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv07nt5.dll
 + 2008-04-14 02:33:18 3,135 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv08nt5.dll
 + 2008-04-14 02:33:18 3,711 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv09nt5.dll
 + 2008-04-14 02:33:18 3,775 ------w C:\WINDOWS\ServicePackFiles\i3​86\adv11nt5.dll
 + 2008-04-14 02:33:18 685,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\advapi32.dll
 + 2008-04-14 02:33:18 101,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\advpack.dll
 + 2008-04-13 16:39:23 142,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\aec.sys
 + 2008-04-13 19:19:23 138,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\afd.sys
 + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentanm.dll
 + 2008-04-14 02:33:18 214,016 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentctl.dll
 + 2008-04-14 02:33:18 42,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentdp2.dll
 + 2008-04-14 02:33:18 57,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentdpv.dll
 + 2008-04-14 02:33:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentmpx.dll
 + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentpsh.dll
 + 2008-04-14 02:33:18 44,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentsr.dll
 + 2008-04-14 02:33:53 256,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\agentsvr.exe
 + 2008-04-13 18:36:38 42,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\agp440.sys
 + 2008-04-13 18:36:39 44,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\agpcpq.sys
 + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0401.dll
 + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0404.dll
 + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0405.dll
 + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0406.dll
 + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0407.dll
 + 2007-04-02 18:26:00 22,016 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0408.dll
 + 2008-04-13 17:32:28 19,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0409.dll
 + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt040b.dll
 + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt040c.dll
 + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt040d.dll
 + 2007-04-02 18:26:00 19,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt040e.dll
 + 2007-04-02 18:26:00 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0410.dll
 + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0411.dll
 + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0412.dll
 + 2007-04-02 18:26:01 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0413.dll
 + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0414.dll
 + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0415.dll
 + 2007-04-02 18:26:01 20,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0416.dll
 + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0419.dll
 + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt041d.dll
 + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt041f.dll
 + 2007-04-02 18:26:02 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0804.dll
 + 2007-04-02 18:26:02 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0816.dll
 + 2007-04-02 18:26:02 20,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\agt0c0a.dll
 + 2008-04-14 02:33:19 24,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\agtintl.dll
 + 2008-04-14 02:33:53 98,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\ahui.exe
 + 2008-04-14 02:33:53 44,544 ------w C:\WINDOWS\ServicePackFiles\i3​86\alg.exe
 + 2008-04-13 18:36:38 42,752 ------w C:\WINDOWS\ServicePackFiles\i3​86\alim1541.sys
 + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\alrsvc.dll
 + 2008-04-13 18:36:39 43,008 ------w C:\WINDOWS\ServicePackFiles\i3​86\amdagp.sys
 + 2008-04-14 01:54:28 41,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\amdk6.sys
 + 2008-04-14 01:54:29 41,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\amdk7.sys
 + 2008-04-14 02:33:19 70,656 ------w C:\WINDOWS\ServicePackFiles\i3​86\amstream.dll
 + 2004-08-03 20:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\an983.sys
 + 2008-04-14 02:33:19 125,952 ------w C:\WINDOWS\ServicePackFiles\i3​86\apphelp.dll
 + 2008-04-14 02:33:19 334,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\aqueue.dll
 + 2008-04-13 18:51:25 60,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\arp1394.sys
 + 2008-04-14 02:33:19 65,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\asycfilt.dll
 + 2008-04-13 18:57:27 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\asyncmac.sys
 + 2008-04-14 02:33:53 25,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\at.exe
 + 2008-04-13 18:40:30 96,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\atapi.sys
 + 2004-08-03 20:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1btxx.sys
 + 2004-08-03 20:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1mdxx.sys
 + 2004-08-03 20:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1pdxx.sys
 + 2004-08-03 20:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1raxx.sys
 + 2004-08-03 20:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1rvxx.sys
 + 2004-08-03 20:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1snxx.sys
 + 2004-08-03 20:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1ttxx.sys
 + 2004-08-03 20:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1tuxx.sys
 + 2004-08-03 20:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1xbxx.sys
 + 2004-08-03 20:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati1xsxx.sys
 + 2008-04-14 02:33:19 229,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati2cqag.dll
 + 2008-04-14 02:33:19 377,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati2dvaa.dll
 + 2008-04-14 02:33:19 201,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati2dvag.dll
 + 2004-08-03 22:38:42 327,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati2mtaa.sys
 + 2004-08-03 22:38:44 701,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati2mtag.sys
 + 2008-04-14 02:33:19 870,784 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati3d1ag.dll
 + 2008-04-14 02:33:19 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati3d2ag.dll
 + 2008-04-14 02:33:19 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\ati3duag.dll
 + 2004-08-03 20:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinbtxx.sys
 + 2004-08-03 20:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinmdxx.sys
 + 2004-08-03 20:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinpdxx.sys
 + 2004-08-03 20:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinraxx.sys
 + 2004-08-03 20:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinrvxx.sys
 + 2004-08-03 20:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinsnxx.sys
 + 2004-08-03 20:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinttxx.sys
 + 2004-08-03 20:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\atintuxx.sys
 + 2004-08-03 20:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinxbxx.sys
 + 2004-08-03 20:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i3​86\atinxsxx.sys
 + 2008-04-14 02:33:19 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\ativtmxx.dll
 + 2008-04-14 02:33:19 516,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\ativvaxx.dll
 + 2008-04-14 02:33:19 58,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\atl.dll
 + 2008-04-14 02:33:53 11,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\atmadm.exe
 + 2008-04-13 18:51:25 59,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\atmarpc.sys
 + 2008-04-14 02:31:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\atmfd.dll
 + 2008-04-13 18:51:30 55,808 ------w C:\WINDOWS\ServicePackFiles\i3​86\atmlane.sys
 + 2008-04-14 02:33:19 30,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\atmlib.dll
 + 2008-04-14 02:33:53 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\attrib.exe
 + 2008-04-14 02:33:19 21,183 ------w C:\WINDOWS\ServicePackFiles\i3​86\atv01nt5.dll
 + 2008-04-14 02:33:19 11,359 ------w C:\WINDOWS\ServicePackFiles\i3​86\atv02nt5.dll
 + 2008-04-14 02:33:19 25,471 ------w C:\WINDOWS\ServicePackFiles\i3​86\atv04nt5.dll
 + 2008-04-14 02:33:19 14,143 ------w C:\WINDOWS\ServicePackFiles\i3​86\atv06nt5.dll
 + 2008-04-14 02:33:19 17,279 ------w C:\WINDOWS\ServicePackFiles\i3​86\atv10nt5.dll
 + 2008-04-14 02:33:19 42,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\audiosrv.dll
 + 2008-04-14 02:33:53 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\auditusr.exe
 + 2008-04-14 02:33:19 20,540 ------w C:\WINDOWS\ServicePackFiles\i3​86\author.dll
 + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i3​86\author.exe
 + 2008-04-14 02:33:19 62,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\authz.dll
 + 2008-04-14 02:33:53 625,152 ------w C:\WINDOWS\ServicePackFiles\i3​86\autochk.exe
 + 2008-04-14 02:33:53 638,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\autoconv.exe
 + 2008-04-14 02:33:54 616,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\autofmt.exe
 + 2008-04-14 02:33:54 11,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\autolfn.exe
 + 2008-04-13 18:46:20 38,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\avc.sys
 + 2008-04-13 18:46:07 13,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\avcstrm.sys
 + 2008-04-14 02:33:19 85,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\avifil32.dll
 + 2008-04-14 02:33:19 233,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\azroles.dll
 + 2008-04-14 02:33:19 52,736 ------w C:\WINDOWS\ServicePackFiles\i3​86\basesrv.dll
 + 2008-04-14 02:33:19 29,184 ------w C:\WINDOWS\ServicePackFiles\i3​86\batmeter.dll
 + 2008-04-14 02:33:19 8,704 ------w C:\WINDOWS\ServicePackFiles\i3​86\batt.dll
 + 2008-04-13 18:36:32 14,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\battc.sys
 + 2008-04-13 18:46:21 11,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\bdasup.sys
 + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\bidispl.dll
 + 2008-04-14 02:33:19 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\bitsprx2.dll
 + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\bitsprx3.dll
 + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\bitsprx4.dll
 + 2008-04-14 02:33:55 71,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\blastcln.exe
 + 2008-04-13 18:53:23 71,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\bridge.sys
 + 2008-04-14 01:57:48 70,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\browselc.dll
 + 2008-04-14 02:33:20 77,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\browser.dll
 + 2008-04-14 02:33:20 1,025,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\browseui.dll
 + 2008-04-14 02:33:20 78,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\browsewm.dll
 + 2008-04-14 02:33:20 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthci.dll
 + 2008-04-13 18:46:33 17,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthenum.sys
 + 2008-04-13 18:46:33 37,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthmodem.sys
 + 2008-04-13 18:51:34 101,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthpan.sys
 + 2008-04-14 01:58:00 273,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthport.sys
 + 2008-04-13 18:46:31 36,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthprint.sys
 + 2008-04-14 02:33:20 30,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthserv.dll
 + 2008-04-13 18:46:29 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\bthusb.sys
 + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\btpanui.dll
 + 2008-04-14 02:33:20 218,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\c_g18030.dll
 + 2008-04-14 02:33:20 60,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\cabinet.dll
 + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\cabview.dll
 + 2008-04-14 02:33:55 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\cacls.exe
 + 2008-04-14 02:33:20 385,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\callcont.dll
 + 2008-04-14 02:33:20 121,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\camext30.dll
 + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\camocx.dll
 + 2008-04-14 02:33:20 153,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\capesnpn.dll
 + 2008-04-14 02:33:20 226,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\catsrv.dll
 + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\catsrvps.dll
 + 2008-04-14 02:33:20 625,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\catsrvut.dll
 + 2008-04-13 18:46:23 17,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\ccdecode.sys
 + 2008-04-13 19:14:21 63,744 ------w C:\WINDOWS\ServicePackFiles\i3​86\cdfs.sys
 + 2008-04-14 02:33:20 152,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\cdfview.dll
 + 2008-04-14 02:33:20 66,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\cdm.dll
 + 2008-04-14 02:33:20 2,091,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\cdosys.dll
 + 2008-04-13 18:40:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\cdrom.sys
 + 2008-04-14 02:33:20 200,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\certcli.dll
 + 2008-04-14 02:33:20 467,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\certmgr.dll
 + 2008-04-14 02:33:20 39,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\cfgbkend.dll
 + 2008-04-14 02:31:03 16,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\cfgmgr32.dll
 + 2008-04-14 02:33:56 188,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\cfgwiz.exe
 + 2008-04-14 02:33:20 15,423 ------w C:\WINDOWS\ServicePackFiles\i3​86\ch7xxnt5.dll
 + 2008-04-13 18:40:58 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\changer.sys
 + 2008-04-14 02:33:20 148,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\cic.dll
 + 2008-04-14 02:33:20 1,359,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\cimwin32.dll
 + 2008-04-14 02:33:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\ciodm.dll
 + 2008-04-14 02:33:57 5,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\cisvc.exe
 + 2008-04-13 19:16:22 49,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\classpnp.sys
 + 2008-04-14 02:33:21 110,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\clbcatex.dll
 + 2008-04-14 02:33:21 498,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\clbcatq.dll
 + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\cleanmgr.exe
 + 2008-04-14 02:33:21 77,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\cliconfg.dll
 + 2008-04-14 02:33:57 20,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\cliconfg.exe
 + 2008-04-14 02:33:57 104,448 ------w C:\WINDOWS\ServicePackFiles\i3​86\clipbrd.exe
 + 2008-04-14 02:33:57 33,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\clipsrv.exe
 + 2008-04-14 02:33:21 58,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\clusapi.dll
 + 2008-04-13 18:36:37 13,952 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmbatt.sys
 + 2008-04-14 02:33:21 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmcfg32.dll
 + 2008-04-14 02:33:57 401,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmd.exe
 + 2008-04-14 02:33:21 353,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmdial32.dll
 + 2008-04-14 02:33:57 25,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmdl32.exe
 + 2008-04-14 02:33:57 39,936 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmmon32.exe
 + 2008-04-14 02:33:21 191,488 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmprops.dll
 + 2008-04-14 02:33:21 13,312 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmsetacl.dll
 + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmstp.exe
 + 2008-04-14 02:33:21 40,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\cmutil.dll
 + 2008-04-14 02:33:21 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\cnbjmon.dll
 + 2008-04-14 02:33:21 83,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\cnbjmon2.dll
 + 2008-04-13 16:44:16 17,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\cobramsg.dll
 + 2008-04-14 02:33:21 60,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\colbact.dll
 + 2008-04-14 02:33:21 28,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\comaddin.dll
 + 2008-04-14 02:33:21 195,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\comadmin.dll
 + 2008-04-14 02:33:21 617,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\comctl32.dll
 + 2008-04-14 02:33:21 281,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\comdlg32.dll
 + 2008-04-14 02:33:21 253,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\compatui.dll
 + 2008-04-13 18:36:37 10,240 ------w C:\WINDOWS\ServicePackFiles\i3​86\compbatt.sys
 + 2008-04-14 02:33:21 230,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\compstui.dll
 + 2008-04-14 02:33:21 97,792 ------w C:\WINDOWS\ServicePackFiles\i3​86\comrepl.dll
 + 2008-04-14 02:33:57 9,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\comrepl.exe
 + 2008-04-14 02:33:57 6,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\comrereg.exe
 + 2008-04-14 02:33:21 851,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\comres.dll
 + 2008-04-14 02:33:21 274,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\comsetup.dll
 + 2008-04-14 02:33:21 167,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\comsnap.dll
 + 2008-04-14 02:33:21 1,267,200 ------w C:\WINDOWS\ServicePackFiles\i3​86\comsvcs.dll
 + 2008-04-14 02:33:21 539,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\comuid.dll
 + 2008-04-14 02:33:58 1,044,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\conf.exe
 + 2008-04-14 02:33:21 45,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\confmrsl.dll
 + 2008-04-14 02:33:21 358,400 ------w C:\WINDOWS\ServicePackFiles\i3​86\confmsp.dll
 + 2008-04-14 02:33:59 27,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\conime.exe
 + 2008-04-14 02:33:21 35,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\corpol.dll
 + 2008-04-14 02:33:21 12,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\credssp.dll
 + 2008-04-14 02:33:21 165,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\credui.dll
 + 2008-04-14 02:02:47 40,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\crusoe.sys
 + 2008-04-14 02:33:21 606,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\crypt32.dll
 + 2008-04-14 02:33:21 75,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptdlg.dll
 + 2008-04-14 02:33:21 33,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptdll.dll
 + 2008-04-14 02:33:21 54,784 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptext.dll
 + 2008-04-14 02:33:21 64,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptnet.dll
 + 2008-04-14 02:33:21 62,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptsvc.dll
 + 2008-04-14 02:33:21 530,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\cryptui.dll
 + 2008-04-14 02:33:21 102,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\cscdll.dll
 + 2008-04-14 02:33:59 139,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\cscript.exe
 + 2008-04-14 02:33:21 337,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\cscui.dll
 + 2008-04-14 02:33:22 32,256 ------w C:\WINDOWS\ServicePackFiles\i3​86\csrsrv.dll
 + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\csrss.exe
 + 2008-04-14 02:33:59 15,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\ctfmon.exe
 + 2008-04-14 02:33:22 252,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\ctmasetp.dll
 + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\ServicePackFiles\i3​86\custsat.dll
 + 2004-08-03 20:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i3​86\cwrwdm.sys
 + 2008-04-14 02:33:22 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\d3d8.dll
 + 2008-04-14 02:33:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\d3d8thk.dll
 + 2008-04-14 02:33:22 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\d3d9.dll
 + 2008-04-14 02:33:22 824,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\d3dim700.dll
 + 2008-04-14 02:33:22 1,056,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\danim.dll
 + 2008-03-25 04:50:25 554,008 ------w C:\WINDOWS\ServicePackFiles\i3​86\dao360.dll
 + 2008-04-14 02:33:22 55,296 ------w C:\WINDOWS\ServicePackFiles\i3​86\dataclen.dll
 + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\datime.dll
 + 2008-04-14 02:33:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\davclnt.dll
 + 2008-04-14 02:33:22 640,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\dbghelp.dll
 + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\dbmsrpcn.dll
 + 2008-04-14 02:33:22 110,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\dbnetlib.dll
 + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePack

n°413185
chef.manu
Posté le 27-07-2008 à 01:42:36  answer
Prévenir les modérateurs en cas d'abus
 

Rapport combofix suite 4
 + 2008-04-14 02:34:14 177,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\napstat.exe
 + 2008-04-14 02:34:14 55,296 ------w C:\WINDOWS\ServicePackFiles\i3​86\narrator.exe
 + 2008-04-14 02:33:34 36,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\ncobjapi.dll
 + 2008-04-14 02:33:34 47,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\ncprov.dll
 + 2008-04-14 02:33:34 9,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\ncpsres.dll
 + 2008-04-14 02:33:34 18,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\nddeapi.dll
 + 2008-04-14 02:34:15 4,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\nddeapir.exe
 + 2008-04-14 02:33:34 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\nddenb32.dll
 + 2008-04-13 19:20:37 182,656 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndis.sys
 + 2008-04-13 18:46:22 10,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndisip.sys
 + 2008-04-14 02:33:34 57,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndisnpp.dll
 + 2008-04-13 18:57:27 10,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndistapi.sys
 + 2008-04-13 18:55:58 14,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndisuio.sys
 + 2008-04-13 19:20:42 91,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndiswan.sys
 + 2008-04-13 18:57:29 40,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\ndproxy.sys
 + 2008-04-14 02:34:15 42,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\net.exe
 + 2008-04-14 02:34:15 124,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\net1.exe
 + 2008-04-14 02:33:34 337,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\netapi32.dll
 + 2008-04-13 18:56:02 34,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\netbios.sys
 + 2008-04-13 19:21:00 162,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\netbt.sys
 + 2008-04-14 02:33:34 634,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\netcfgx.dll
 + 2008-04-14 02:34:15 114,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\netdde.exe
 + 2008-04-14 02:33:34 144,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\netid.dll
 + 2008-04-14 02:33:34 407,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\netlogon.dll
 + 2008-04-14 02:33:34 198,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\netman.dll
 + 2008-04-14 02:33:34 78,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\netoc.dll
 + 2008-04-14 02:33:34 885,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\netplwiz.dll
 + 2008-04-14 02:33:34 11,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\netrap.dll
 + 2008-04-14 02:37:10 332,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\netsetup.exe
 + 2008-04-14 02:34:15 88,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\netsh.exe
 + 2008-04-14 02:33:35 1,719,808 ------w C:\WINDOWS\ServicePackFiles\i3​86\netshell.dll
 + 2008-04-14 02:34:15 37,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\netstat.exe
 + 2008-04-14 02:33:35 83,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\netui0.dll
 + 2008-04-14 02:33:35 245,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\netui1.dll
 + 2004-08-03 22:47:58 132,695 ------w C:\WINDOWS\ServicePackFiles\i3​86\netwlan5.sys
 + 2008-04-14 02:33:35 250,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\newdev.dll
 + 2008-04-13 18:51:25 61,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\nic1394.sys
 + 2008-04-14 02:33:35 98,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\nlhtml.dll
 + 2008-04-14 02:33:36 229,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmas.dll
 + 2008-04-14 02:33:36 28,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmasnt.dll
 + 2008-04-14 02:33:36 81,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmchat.dll
 + 2008-04-14 02:33:36 77,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmcom.dll
 + 2008-04-14 02:33:36 155,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmft.dll
 + 2008-04-14 02:33:36 28,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmmkcert.dll
 + 2008-04-13 18:53:09 40,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmnt.sys
 + 2008-04-14 02:33:36 172,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmoldwb.dll
 + 2008-04-14 02:33:36 192,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\nmwb.dll
 + 2008-04-14 02:34:15 70,656 ------w C:\WINDOWS\ServicePackFiles\i3​86\notepad.exe
 + 2008-04-13 18:32:39 30,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\npfs.sys
 + 2008-04-14 02:34:15 15,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\nppagent.exe
 + 2008-04-14 02:33:36 55,296 ------w C:\WINDOWS\ServicePackFiles\i3​86\npptools.dll
 + 2008-04-13 18:54:36 28,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\nscirda.sys
 + 2008-04-14 02:34:15 79,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\nslookup.exe
 + 2004-08-05 12:00:00 47,564 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntdetect.com
 + 2008-04-14 02:33:02 731,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntdll.dll
 + 2008-04-14 02:33:36 67,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntdsapi.dll
 + 2008-04-14 02:33:36 212,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntevt.dll
 + 2008-04-13 19:15:53 574,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntfs.sys
 + 2004-08-05 12:00:00 34,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntio.sys
 + 2004-08-05 12:00:00 34,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntio404.sys
 + 2004-08-05 12:00:00 35,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntio411.sys
 + 2004-08-05 12:00:00 35,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntio412.sys
 + 2004-08-05 12:00:00 34,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntio804.sys
 + 2008-04-14 02:07:16 2,147,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntkrnlmp.exe
 + 2008-04-14 02:07:26 2,067,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntkrnlpa.exe
 + 2008-04-14 02:07:35 2,025,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntkrpamp.exe
 + 2008-04-14 02:33:36 44,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntlanman.dll
 + 2008-04-14 02:33:36 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntlsapi.dll
 + 2008-04-14 02:33:36 119,808 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmarta.dll
 + 2008-04-14 02:33:36 40,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmsapi.dll
 + 2008-04-14 02:33:36 181,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmsdba.dll
 + 2008-04-14 02:33:36 496,640 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmsmgr.dll
 + 2008-04-14 02:33:36 438,272 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmssvc.dll
 + 2004-08-03 20:41:40 180,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntmtlfax.sys
 + 2008-04-14 02:33:36 63,488 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntoc.dll
 + 2008-04-14 02:08:03 2,191,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntoskrnl.exe
 + 2008-04-14 02:33:36 91,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntprint.dll
 + 2008-04-14 02:33:36 145,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntshrui.dll
 + 2008-04-14 02:34:16 421,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntvdm.exe
 + 2008-04-14 02:33:36 15,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\ntvdmd.dll
 + 2008-04-14 02:33:36 4,274,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\nv4_disp.dll
 + 2004-08-03 20:29:56 1,897,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\nv4_mini.sys
 + 2008-04-13 18:56:06 88,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\nwlnkipx.sys
 + 2008-04-14 02:33:36 145,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\nwprovau.dll
 + 2008-04-14 02:33:36 271,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\oakley.dll
 + 2008-04-14 02:33:37 289,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\objsel.dll
 + 2008-04-13 18:40:32 445,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\obrs040c.dll
 + 2008-04-14 02:33:38 97,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\occache.dll
 + 2008-04-14 02:33:38 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\ocgen.dll
 + 2008-04-14 02:33:38 69,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\ocmanage.dll
 + 2008-04-14 02:33:38 17,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\ocmsn.dll
 + 2004-08-05 12:00:00 26,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbc16gt.dll
 + 2008-04-14 02:33:38 249,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbc32.dll
 + 2008-04-14 02:33:38 16,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbc32gt.dll
 + 2008-04-14 02:34:17 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcad32.exe
 + 2008-04-14 02:33:38 24,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcbcp.dll
 + 2008-04-14 02:33:38 135,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcconf.dll
 + 2008-04-14 02:34:17 69,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcconf.exe
 + 2008-04-14 02:33:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbccp32.dll
 + 2008-04-14 02:33:38 65,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbccr32.dll
 + 2008-04-14 02:33:38 65,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbccu32.dll
 + 2007-03-28 12:56:42 98,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcint.dll
 + 2008-04-14 02:32:14 61,471 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcji32.dll
 + 2008-04-14 02:33:38 278,559 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcjt32.dll
 + 2008-04-13 17:26:05 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbcp32r.dll
 + 2008-04-14 02:33:38 147,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\odbctrac.dll
 + 2008-04-14 02:33:38 20,511 ------w C:\WINDOWS\ServicePackFiles\i3​86\oddbse32.dll
 + 2008-04-14 02:33:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i3​86\odexl32.dll
 + 2008-04-14 02:33:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i3​86\odfox32.dll
 + 2008-04-14 02:33:38 20,510 ------w C:\WINDOWS\ServicePackFiles\i3​86\odpdx32.dll
 + 2008-04-14 02:33:38 20,511 ------w C:\WINDOWS\ServicePackFiles\i3​86\odtext32.dll
 + 2008-04-14 02:33:38 104,448 ------w C:\WINDOWS\ServicePackFiles\i3​86\oeimport.dll
 + 2008-04-14 02:34:17 60,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\oemig50.exe
 + 2008-04-14 02:33:38 35,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\oemiglib.dll
 + 2008-04-14 02:33:38 192,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\offfilt.dll
 + 2008-04-13 18:46:18 61,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\ohci1394.sys
 + 2008-04-14 02:33:38 1,287,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\ole32.dll
 + 2008-04-14 02:33:38 551,936 ------w C:\WINDOWS\ServicePackFiles\i3​86\oleaut32.dll
 + 2008-04-14 02:33:38 75,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\olecli32.dll
 + 2008-04-14 02:33:38 37,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\olecnv32.dll
 + 2008-04-14 02:33:38 487,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\oledb32.dll
 + 2008-04-14 02:33:38 77,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\oledb32r.dll
 + 2008-04-14 02:33:38 124,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\oledlg.dll
 + 2008-04-14 02:33:38 110,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\oleprn.dll
 + 2008-04-14 02:33:38 84,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\olepro32.dll
 + 2008-04-14 02:33:38 144,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\onex.dll
 + 2008-04-14 02:34:17 51,712 ------w C:\WINDOWS\ServicePackFiles\i3​86\oobebaln.exe
 + 2008-04-14 02:33:38 713,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\opengl32.dll
 + 2008-04-13 18:32:32 166,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\oschoice.exe
 + 2008-04-14 02:34:17 216,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\osk.exe
 + 2008-04-13 18:31:52 232,448 ------w C:\WINDOWS\ServicePackFiles\i3​86\osloader.exe
 + 2008-04-14 02:33:38 68,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\osuninst.dll
 + 2008-04-14 02:33:38 153,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\p2p.dll
 + 2008-04-14 02:33:38 105,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\p2pgasvc.dll
 + 2008-04-14 02:33:38 313,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\p2pgraph.dll
 + 2008-04-14 02:33:38 115,712 ------w C:\WINDOWS\ServicePackFiles\i3​86\p2pnetsh.dll
 + 2008-04-14 02:33:38 554,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\p2psvc.dll
 + 2008-04-14 02:09:37 46,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\p3.sys
 + 2008-04-14 02:34:17 59,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\packager.exe
 + 2008-04-14 02:09:40 80,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\parport.sys
 + 2008-04-13 18:40:49 19,712 ------w C:\WINDOWS\ServicePackFiles\i3​86\partmgr.sys
 + 2008-04-14 02:33:38 69,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\pautoenr.dll
 + 2004-08-03 20:31:24 29,502 ------w C:\WINDOWS\ServicePackFiles\i3​86\pca200e.sys
 + 2008-04-14 02:33:38 102,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\pchshell.dll
 + 2008-04-14 02:33:38 38,400 ------w C:\WINDOWS\ServicePackFiles\i3​86\pchsvc.dll
 + 2008-04-14 02:09:47 68,608 ------w C:\WINDOWS\ServicePackFiles\i3​86\pci.sys
 + 2008-04-13 18:40:29 24,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\pciidex.sys
 + 2007-05-15 08:08:11 288,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\pcl4res.dll
 + 2007-05-15 08:08:13 1,058,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\pcl5eres.dll
 + 2007-05-15 08:08:14 1,057,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\pcl5ures.dll
 + 2007-05-15 08:08:14 207,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\pclxl.dll
 + 2008-04-14 02:09:53 120,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\pcmcia.sys
 + 2004-08-03 20:06:18 169,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\pcx500.sys
 + 2008-04-14 02:33:38 286,720 ------w C:\WINDOWS\ServicePackFiles\i3​86\pdh.dll
 + 2008-04-14 02:33:38 42,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfctrs.dll
 + 2008-04-14 02:33:38 27,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfdisk.dll
 + 2008-04-14 02:34:17 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfmon.exe
 + 2008-04-14 02:33:38 18,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfnet.dll
 + 2008-04-14 02:33:38 26,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfos.dll
 + 2008-04-14 02:33:38 35,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\perfproc.dll
 + 2008-04-13 18:44:29 27,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\perm2.sys
 + 2008-04-14 02:32:16 211,584 ------w C:\WINDOWS\ServicePackFiles\i3​86\perm2dll.dll
 + 2008-04-13 18:44:30 28,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\perm3.sys
 + 2008-04-14 02:32:16 259,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\perm3dd.dll
 + 2008-04-14 02:33:38 172,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\photowiz.dll
 + 2008-04-14 02:33:38 35,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\pid.dll
 + 2008-04-13 18:35:22 24,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\pidgen.dll
 + 2008-04-14 02:34:18 284,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\pinball.exe
 + 2008-04-14 02:34:18 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\ping.exe
 + 2008-04-14 02:33:38 15,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\pjlmon.dll
 + 2008-04-14 02:33:38 44,544 ------w C:\WINDOWS\ServicePackFiles\i3​86\plotter.dll
 + 2008-04-14 02:33:38 53,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\plotui.dll
 + 2008-04-14 02:33:38 412,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\pmh.dll
 + 2008-04-14 02:33:38 39,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\pngfilt.dll
 + 2008-04-14 02:33:38 58,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\pnrpnsp.dll
 + 2008-04-14 02:33:38 106,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\polstore.dll
 + 2008-04-13 19:19:41 146,048 ------w C:\WINDOWS\ServicePackFiles\i3​86\portcls.sys
 + 2008-04-14 02:34:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i3​86\powercfg.exe
 + 2008-04-13 18:40:56 8,832 ------w C:\WINDOWS\ServicePackFiles\i3​86\powerfil.sys
 + 2008-04-14 02:33:38 17,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\powrprof.dll
 + 2008-04-13 18:41:00 17,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\ppa3.sys
 + 2008-04-14 02:33:38 578,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\printui.dll
 + 2008-04-14 01:55:30 40,064 ------w C:\WINDOWS\ServicePackFiles\i3​86\processr.sys
 + 2008-04-14 02:33:38 27,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\profmap.dll
 + 2008-04-14 02:34:18 109,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\progman.exe
 + 2008-04-14 02:34:18 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\proquota.exe
 + 2008-04-14 02:33:38 237,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\provthrd.dll
 + 2008-04-14 02:34:18 9,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\proxycfg.exe
 + 2008-04-14 02:33:38 728,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\ps5ui.dll
 + 2008-04-14 02:33:38 23,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\psapi.dll
 + 2008-04-14 02:33:38 98,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\psbase.dll
 + 2008-04-13 18:56:38 69,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\psched.sys
 + 2008-04-14 02:33:38 543,232 ------w C:\WINDOWS\ServicePackFiles\i3​86\pscript5.dll
 + 2008-04-14 02:33:38 363,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\psisdecd.dll
 + 2008-04-14 02:33:38 43,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\pstorec.dll
 + 2008-04-14 02:33:38 34,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\pstorsvc.dll
 + 2008-04-14 02:33:39 159,232 ------w C:\WINDOWS\ServicePackFiles\i3​86\ptpusd.dll
 + 2008-04-14 02:33:39 151,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\qagent.dll
 + 2008-04-14 02:33:39 293,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\qagentrt.dll
 + 2008-04-14 02:33:39 237,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\qasf.dll
 + 2008-04-14 02:33:39 192,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\qcap.dll
 + 2008-04-14 02:33:39 62,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\qcliprov.dll
 + 2008-04-14 02:33:39 279,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\qdv.dll
 + 2008-04-14 02:33:39 387,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\qdvd.dll
 + 2008-04-14 02:33:39 563,200 ------w C:\WINDOWS\ServicePackFiles\i3​86\qedit.dll
 + 2008-04-13 17:21:32 733,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\qedwipes.dll
 + 2008-04-13 18:40:52 6,016 ------w C:\WINDOWS\ServicePackFiles\i3​86\qic157.sys
 + 2008-04-14 02:33:39 409,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\qmgr.dll
 + 2008-04-14 02:33:39 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\qmgrprxy.dll
 + 2008-04-14 02:34:18 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\qprocess.exe
 + 2008-04-14 02:33:39 1,294,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\quartz.dll
 + 2008-04-14 02:33:39 1,440,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\query.dll
 + 2008-04-14 02:33:39 76,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\qutil.dll
 + 2008-04-14 02:33:39 43,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\racpldlg.dll
 + 2008-04-13 18:41:23 20,736 ------w C:\WINDOWS\ServicePackFiles\i3​86\ramdisk.sys
 + 2008-04-14 02:33:39 7,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasadhlp.dll
 + 2008-04-14 02:33:39 237,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasapi32.dll
 + 2008-04-14 02:33:39 88,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasauto.dll
 + 2008-04-14 02:33:39 79,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\raschap.dll
 + 2008-04-14 02:33:39 685,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasdlg.dll
 + 2008-04-13 19:19:43 51,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasl2tp.sys
 + 2008-04-14 02:33:39 61,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasman.dll
 + 2008-04-14 02:33:39 186,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasmans.dll
 + 2008-04-14 02:34:18 57,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasphone.exe
 + 2008-04-14 02:33:39 210,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasppp.dll
 + 2008-04-13 18:57:32 41,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\raspppoe.sys
 + 2008-04-13 19:19:48 48,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\raspptp.sys
 + 2008-04-14 02:33:39 61,952 ------w C:\WINDOWS\ServicePackFiles\i3​86\rasqec.dll
 + 2008-04-14 02:33:39 16,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\rassapi.dll
 + 2008-04-14 02:33:39 58,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\rastapi.dll
 + 2008-04-14 02:33:39 151,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\rastls.dll
 + 2008-04-14 02:33:39 102,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\rcbdyctl.dll
 + 2008-04-14 02:34:18 35,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\rcimlby.exe
 + 2008-04-14 02:34:18 23,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\rcp.exe
 + 2008-04-13 19:28:39 175,744 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdbss.sys
 + 2008-04-14 02:33:39 147,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdchost.dll
 + 2008-04-14 02:34:18 62,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpclip.exe
 + 2008-04-14 02:34:53 92,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpdd.dll
 + 2008-04-13 18:32:51 196,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpdr.sys
 + 2008-04-14 02:33:39 19,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpsnd.dll
 + 2008-04-14 02:34:54 139,656 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpwd.sys
 + 2008-04-14 02:34:54 87,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdpwsx.dll
 + 2008-04-14 02:34:18 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdsaddin.exe
 + 2008-04-14 02:34:18 67,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\rdshost.exe
 + 2004-08-03 20:41:40 13,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\recagent.sys
 + 2008-04-14 01:57:34 58,752 ------w C:\WINDOWS\ServicePackFiles\i3​86\redbook.sys
 + 2004-08-05 12:00:00 3,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\redir.exe
 + 2008-04-14 02:34:18 53,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\reg.exe
 + 2008-04-14 02:33:39 49,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\regapi.dll
 + 2008-04-14 02:34:19 153,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\regedit.exe
 + 2008-04-14 02:33:39 59,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\regsvc.dll
 + 2008-04-14 02:34:19 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\regsvr32.exe
 + 2008-04-14 02:33:39 405,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\regwizc.dll
 + 2008-04-14 02:33:39 61,952 ------w C:\WINDOWS\ServicePackFiles\i3​86\remotepg.dll
 + 2008-04-14 02:33:39 178,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\repdrvfs.dll
 + 2008-04-14 02:33:39 58,880 ------w C:\WINDOWS\ServicePackFiles\i3​86\resutils.dll
 + 2008-04-14 02:34:19 14,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\rexec.exe
 + 2008-04-13 18:46:32 59,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\rfcomm.sys
 + 2008-04-14 02:33:39 290,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\rhttpaa.dll
 + 2008-04-14 02:33:39 124,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\riafres.dll
 + 2008-04-14 02:33:39 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\riafui1.dll
 + 2008-04-14 02:33:39 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\riafui2.dll
 + 2008-04-14 02:33:39 433,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\riched20.dll
 + 2008-04-13 18:55:08 202,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\rmcast.sys
 + 2008-04-13 18:56:49 30,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\rndismp.sys
 + 2008-04-13 18:56:49 30,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\rndismpx.sys
 + 2008-04-14 01:58:29 79,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\rocket.sys
 + 2008-04-14 02:33:39 584,704 ------w C:\WINDOWS\ServicePackFiles\i3​86\rpcrt4.dll
 + 2008-04-14 02:33:39 399,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\rpcss.dll
 + 2008-04-14 02:33:39 61,440 ------w C:\WINDOWS\ServicePackFiles\i3​86\rrcm.dll
 + 2008-04-13 17:37:57 208,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\rsaenh.dll
 + 2008-04-14 02:34:19 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\rsh.exe
 + 2008-04-14 02:33:39 40,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\rshx32.dll
 + 2008-04-14 02:33:39 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\rsmps.dll
 + 2008-04-14 02:34:19 384,512 ------w C:\WINDOWS\ServicePackFiles\i3​86\rstrui.exe
 + 2008-04-14 02:33:39 92,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\rsvpsp.dll
 + 2008-04-14 02:34:20 78,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\rtcshare.exe
 + 2008-04-14 02:33:39 31,744 ------w C:\WINDOWS\ServicePackFiles\i3​86\rtipxmib.dll
 + 2004-08-03 20:31:34 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\rtl8139.sys
 + 2008-04-14 02:33:39 44,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\rtutils.dll
 + 2008-04-14 02:34:20 33,792 ------w C:\WINDOWS\ServicePackFiles\i3​86\rundll32.exe
 + 2008-04-14 02:34:20 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\runonce.exe
 + 2008-04-14 02:33:39 28,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\rw001ext.dll
 + 2008-04-14 02:33:39 29,184 ------w C:\WINDOWS\ServicePackFiles\i3​86\rw330ext.dll
 + 2008-04-14 02:33:39 28,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\rw430ext.dll
 + 2008-04-14 02:33:39 29,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\rw450ext.dll
 + 2008-04-14 02:33:39 397,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\s3gnb.dll
 + 2004-08-03 20:29:52 166,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\s3gnbm.sys
 + 2008-04-14 02:33:39 43,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\safrcdlg.dll
 + 2008-04-14 02:33:39 29,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\safrdm.dll
 + 2008-04-14 02:33:39 45,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\safrslv.dll
 + 2008-04-14 02:33:39 64,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\samlib.dll
 + 2008-04-14 02:33:39 431,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\samsrv.dll
 + 2008-04-14 02:33:39 741,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\sapi.dll
 + 2008-04-14 02:34:20 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\savedump.exe
 + 2008-04-14 02:33:39 270,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\sbe.dll
 + 2008-04-14 02:33:39 159,232 ------w C:\WINDOWS\ServicePackFiles\i3​86\sbeio.dll
 + 2008-04-13 18:40:48 43,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\sbp2port.sys
 + 2008-04-14 02:33:40 71,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\scarddlg.dll
 + 2008-04-14 02:34:20 100,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\scardsvr.exe
 + 2004-08-05 12:00:00 169,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\sccbase.dll
 + 2008-04-14 02:33:40 171,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\sccsccp.dll
 + 2008-04-14 02:33:40 187,392 ------w C:\WINDOWS\ServicePackFiles\i3​86\scecli.dll
 + 2008-04-14 02:33:40 329,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\scesrv.dll
 + 2008-04-14 02:33:40 144,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\schannel.dll
 + 2008-04-14 02:33:40 194,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\schedsvc.dll
 + 2008-04-14 02:33:40 22,016 ------w C:\WINDOWS\ServicePackFiles\i3​86\sclgntfy.dll
 + 2008-04-14 02:34:20 36,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\scrcons.exe
 + 2008-04-14 02:33:40 217,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\script.dll
 + 2008-04-14 02:33:40 201,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\scripta.dll
 + 2008-04-14 02:34:32 9,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\scrnsave.scr
 + 2008-04-14 02:33:40 180,224 ------w C:\WINDOWS\ServicePackFiles\i3​86\scrobj.dll
 + 2008-04-14 02:33:40 172,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\scrrun.dll
 + 2008-04-13 18:40:30 96,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\scsiport.sys
 + 2008-04-13 18:45:33 11,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\scsiscan.sys
 + 2008-04-14 02:34:20 78,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\sdbinst.exe
 + 2008-04-13 18:36:44 79,232 ------w C:\WINDOWS\ServicePackFiles\i3​86\sdbus.sys
 + 2008-04-14 02:33:40 29,184 ------w C:\WINDOWS\ServicePackFiles\i3​86\sdhcinst.dll
 + 2007-11-13 10:25:54 20,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\secdrv.sys
 + 2008-04-14 02:33:40 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\seclogon.dll
 + 2006-12-30 17:27:08 4,569 ------w C:\WINDOWS\ServicePackFiles\i3​86\secupd.dat
 + 2008-04-14 02:33:40 56,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\secur32.dll
 + 2008-04-14 02:33:40 5,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\security.dll
 + 2008-04-14 02:33:40 29,696 ------w C:\WINDOWS\ServicePackFiles\i3​86\sendcmsg.dll
 + 2008-04-14 02:33:40 55,296 ------w C:\WINDOWS\ServicePackFiles\i3​86\sendmail.dll
 + 2008-04-14 02:33:40 39,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\sens.dll
 + 2008-04-14 02:33:40 7,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\sensapi.dll
 + 2008-04-13 18:40:12 15,744 ------w C:\WINDOWS\ServicePackFiles\i3​86\serenum.sys
 + 2008-04-14 02:00:08 66,048 ------w C:\WINDOWS\ServicePackFiles\i3​86\serial.sys
 + 2008-04-14 02:33:40 56,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\servdeps.dll
 + 2008-04-14 02:34:20 109,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\services.exe
 + 2008-04-14 02:34:21 142,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\sessmgr.exe
 + 2008-04-14 02:34:21 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\sethc.exe
 + 2008-04-14 02:34:21 23,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\setup.exe
 + 2008-04-14 02:34:21 73,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\setup50.exe
 + 2008-04-13 17:33:42 1,005,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\setupapi.dll
 + 2008-04-14 02:34:21 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\setupn.exe
 + 2008-04-14 02:33:41 101,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\setupqry.dll
 + 2008-04-14 02:33:41 5,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\sfc.dll
 + 2008-04-14 02:33:41 142,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\sfc_os.dll
 + 2008-04-14 02:33:41 1,571,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\sfcfiles.dll
 + 2008-04-13 18:40:47 11,904 ------w C:\WINDOWS\ServicePackFiles\i3​86\sffdisk.sys
 + 2008-04-13 18:40:48 10,240 ------w C:\WINDOWS\ServicePackFiles\i3​86\sffp_mmc.sys
 + 2008-04-13 18:40:47 11,008 ------w C:\WINDOWS\ServicePackFiles\i3​86\sffp_sd.sys
 + 2008-04-13 18:40:48 11,392 ------w C:\WINDOWS\ServicePackFiles\i3​86\sfloppy.sys
 + 2008-04-14 02:00:59 572,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\shdoclc.dll
 + 2008-04-14 02:33:41 1,499,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\shdocvw.dll
 + 2008-04-14 02:33:41 8,517,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\shell32.dll
 + 2008-04-14 02:33:41 25,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\shfolder.dll
 + 2008-04-14 02:33:41 68,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\shgina.dll
 + 2008-04-14 02:33:41 65,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\shimeng.dll
 + 2008-04-14 02:33:41 440,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\shimgvw.dll
 + 2008-04-14 02:33:41 474,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\shlwapi.dll
 + 2008-04-14 02:34:21 45,056 ------w C:\WINDOWS\ServicePackFiles\i3​86\shmgrate.exe
 + 2008-04-14 02:34:21 78,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\shrpubw.exe
 + 2008-04-14 02:33:41 28,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\shscrap.dll
 + 2008-04-14 02:33:41 135,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\shsvcs.dll
 + 2008-04-14 02:33:41 20,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\shtml.dll
 + 2008-04-14 02:34:21 16,437 ------w C:\WINDOWS\ServicePackFiles\i3​86\shtml.exe
 + 2008-04-14 02:34:21 20,480 ------w C:\WINDOWS\ServicePackFiles\i3​86\shutdown.exe
 + 2008-04-14 02:33:41 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\sigtab.dll
 + 2008-04-14 02:34:21 71,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\sigverif.exe
 + 2008-04-14 02:33:41 3,901 ------w C:\WINDOWS\ServicePackFiles\i3​86\siint5.dll
 + 2008-04-13 18:36:39 40,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\sisagp.sys
 + 2004-08-03 20:31:36 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\sisnic.sys
 + 2008-04-14 02:34:21 26,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\skeys.exe
 + 2004-08-03 20:31:42 63,547 ------w C:\WINDOWS\ServicePackFiles\i3​86\sla30nd5.sys
 + 2008-04-14 02:33:41 25,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\slayerxp.dll
 + 2004-08-05 12:00:00 306,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\slbcsp.dll
 + 2008-04-14 02:33:41 98,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\slbiop.dll
 + 2008-04-14 02:33:41 73,832 ------w C:\WINDOWS\ServicePackFiles\i3​86\slcoinst.dll
 + 2008-04-14 02:33:41 286,792 ------w C:\WINDOWS\ServicePackFiles\i3​86\slextspk.dll
 + 2008-04-14 02:33:41 188,508 ------w C:\WINDOWS\ServicePackFiles\i3​86\slgen.dll
 + 2008-04-13 18:46:23 11,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\slip.sys
 + 2004-08-03 20:41:42 129,535 ------w C:\WINDOWS\ServicePackFiles\i3​86\slnt7554.sys
 + 2004-08-03 20:41:44 404,990 ------w C:\WINDOWS\ServicePackFiles\i3​86\slntamr.sys
 + 2004-08-03 20:41:46 95,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\slnthal.sys
 + 2008-04-14 02:34:22 32,866 ------w C:\WINDOWS\ServicePackFiles\i3​86\slrundll.exe
 + 2008-04-14 02:34:22 73,796 ------w C:\WINDOWS\ServicePackFiles\i3​86\slserv.exe
 + 2004-08-03 20:41:46 13,240 ------w C:\WINDOWS\ServicePackFiles\i3​86\slwdmsup.sys
 + 2008-04-13 18:36:34 5,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\smbali.sys
 + 2008-04-13 18:36:33 16,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\smbbatt.sys
 + 2008-04-13 18:36:33 6,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\smbclass.sys
 + 2008-04-14 02:34:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\smbinst.exe
 + 2008-04-14 02:34:22 236,544 ------w C:\WINDOWS\ServicePackFiles\i3​86\smi2smir.exe
 + 2008-04-14 02:33:41 370,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\smlogcfg.dll
 + 2008-04-14 02:34:22 93,184 ------w C:\WINDOWS\ServicePackFiles\i3​86\smlogsvc.exe
 + 2008-04-14 02:34:22 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\smss.exe
 + 2008-04-14 02:33:41 466,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\smtpsvc.dll
 + 2008-04-14 02:34:22 133,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\sndrec32.exe
 + 2008-04-14 02:33:41 34,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\sniffpol.dll
 + 2008-04-14 02:34:22 33,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmp.exe
 + 2008-04-14 02:33:41 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpapi.dll
 + 2008-04-14 02:33:41 259,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpcl.dll
 + 2008-04-14 02:33:41 358,400 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpincl.dll
 + 2008-04-14 02:33:41 6,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpmib.dll
 + 2008-04-14 02:33:41 188,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpsmir.dll
 + 2008-04-14 02:33:41 184,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpsnap.dll
 + 2008-04-14 02:33:41 39,936 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmpthrd.dll
 + 2008-04-14 02:34:22 8,704 ------w C:\WINDOWS\ServicePackFiles\i3​86\snmptrap.exe
 + 2008-04-14 02:33:41 130,048 ------w C:\WINDOWS\ServicePackFiles\i3​86\softkbd.dll
 + 2008-04-13 18:40:52 7,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\sonyait.sys
 + 2008-04-13 18:46:07 25,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\sonydcam.sys
 + 2008-04-14 02:34:22 26,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\sort.exe
 + 2008-04-14 02:34:22 7,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\spdwnwxp.exe
 + 2008-04-13 16:43:18 62,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\spgrmr.dll
 + 2008-04-14 02:34:23 539,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\spider.exe
 + 2008-04-13 18:45:07 6,272 ------w C:\WINDOWS\ServicePackFiles\i3​86\splitter.sys
 + 2008-04-13 17:34:24 11,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\spnpinst.exe
 + 2008-04-14 02:33:41 75,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\spoolss.dll
 + 2008-04-14 02:34:23 57,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\spoolsv.exe
 + 2008-04-13 18:35:20 197,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\sprs040c.dll
 + 2008-04-13 18:36:46 2,986,496 ------w C:\WINDOWS\ServicePackFiles\i3​86\sprt040c.dll
 + 2008-04-13 18:39:17 778,752 ------w C:\WINDOWS\ServicePackFiles\i3​86\spru040c.dll
 + 2008-04-14 02:33:46 272,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\sptip.dll
 + 2008-04-14 02:34:23 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\spupdwxp.exe
 + 2008-04-14 02:33:46 151,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqldb20.dll
 + 2008-04-14 02:33:46 528,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqloledb.dll
 + 2008-04-14 02:33:46 462,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqlqp20.dll
 + 2008-04-14 02:33:46 110,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqlse20.dll
 + 2008-04-14 02:33:46 442,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqlsrv32.dll
 + 2008-04-14 02:33:46 180,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqlunirl.dll
 + 2008-04-14 02:33:46 217,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\sqlxmlx.dll
 + 2008-04-14 02:10:03 73,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\sr.sys
 + 2008-04-14 02:33:46 58,434 ------w C:\WINDOWS\ServicePackFiles\i3​86\srchctls.dll
 + 2008-04-14 02:33:46 727,102 ------w C:\WINDOWS\ServicePackFiles\i3​86\srchui.dll
 + 2008-04-14 02:33:46 67,584 ------w C:\WINDOWS\ServicePackFiles\i3​86\srclient.dll
 + 2008-04-14 02:33:46 241,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\srrstr.dll
 + 2008-04-14 02:33:46 171,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\srsvc.dll
 + 2008-04-13 19:15:11 334,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\srv.sys
 + 2008-04-14 02:33:46 96,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\srvsvc.dll
 + 2008-04-14 02:34:32 708,608 ------w C:\WINDOWS\ServicePackFiles\i3​86\ss3dfo.scr
 + 2008-04-14 02:34:32 19,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssbezier.scr
 + 2008-04-14 02:33:46 34,816 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssdpapi.dll
 + 2008-04-14 02:33:46 71,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssdpsrv.dll
 + 2008-04-14 02:34:32 393,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssflwbox.scr
 + 2008-04-14 02:34:33 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssmarque.scr
 + 2008-04-14 02:34:33 47,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssmypics.scr
 + 2008-04-14 02:34:33 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssmyst.scr
 + 2008-04-14 02:34:33 610,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\sspipes.scr
 + 2008-04-14 02:34:33 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\ssstars.scr
 + 2008-04-14 02:34:33 684,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\sstext3d.scr
 + 2008-04-14 02:33:46 33,280 ------w C:\WINDOWS\ServicePackFiles\i3​86\sstub.dll
 + 2008-04-14 02:33:46 26,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\startoc.dll
 + 2008-04-14 02:33:46 59,392 ------w C:\WINDOWS\ServicePackFiles\i3​86\stclient.dll
 + 2008-04-14 02:33:46 86,528 ------w C:\WINDOWS\ServicePackFiles\i3​86\stdprov.dll
 + 2008-04-14 02:33:46 68,608 ------w C:\WINDOWS\ServicePackFiles\i3​86\sti.dll
 + 2008-04-14 02:33:46 138,240 ------w C:\WINDOWS\ServicePackFiles\i3​86\sti_ci.dll
 + 2008-04-14 02:34:23 14,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\stimon.exe
 + 2008-04-14 02:33:46 122,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\stobject.dll
 + 2008-04-14 02:33:46 76,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\storprop.dll
 + 2008-04-13 18:45:15 49,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\stream.sys
 + 2008-04-13 18:46:21 15,232 ------w C:\WINDOWS\ServicePackFiles\i3​86\streamip.sys
 + 2008-04-14 02:33:46 75,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\strmfilt.dll
 + 2008-04-14 02:34:23 16,449 ------w C:\WINDOWS\ServicePackFiles\i3​86\stub_fpsrvadm.exe
 + 2008-04-14 02:34:23 65,601 ------w C:\WINDOWS\ServicePackFiles\i3​86\stub_fpsrvwin.exe
 + 2008-04-14 02:34:23 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\svchost.exe
 + 2008-04-13 18:39:53 4,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\swenum.sys
 + 2008-04-13 18:45:09 56,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\swmidi.sys
 + 2008-04-14 02:33:46 716,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\sxs.dll
 + 2008-04-14 02:33:46 57,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\synceng.dll
 + 2008-04-14 02:33:46 197,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\syncui.dll
 + 2008-04-13 19:15:55 60,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\sysaudio.sys
 + 2008-04-14 02:33:46 193,536 ------w C:\WINDOWS\ServicePackFiles\i3​86\sysmod.dll
 + 2008-04-14 02:33:46 173,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\sysmoda.dll
 + 2008-04-14 02:34:24 107,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\sysocmgr.exe
 + 2008-04-14 02:33:46 1,013,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\syssetup.dll
 + 2008-04-14 02:33:46 117,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\t2embed.dll
 + 2008-04-13 18:40:50 14,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\tape.sys
 + 2008-04-14 02:33:46 860,160 ------w C:\WINDOWS\ServicePackFiles\i3​86\tapi3.dll
 + 2008-04-14 02:33:46 181,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\tapi32.dll
 + 2008-04-14 02:33:46 249,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\tapisrv.dll
 + 2008-04-14 02:34:25 143,360 ------w C:\WINDOWS\ServicePackFiles\i3​86\taskmgr.exe
 + 2008-04-13 19:20:16 361,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcpip.sys
 + 2008-04-13 19:00:02 225,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcpip6.sys
 + 2008-04-14 02:33:46 14,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcpmib.dll
 + 2008-04-14 02:33:46 46,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcpmon.dll
 + 2008-04-14 02:33:46 47,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcpmonui.dll
 + 2008-04-14 02:34:25 32,827 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcptest.exe
 + 2003-04-14 19:29:34 16,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\tcptsat.dll
 + 2008-04-13 19:00:05 19,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\tdi.sys
 + 2008-04-14 02:34:52 12,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\tdpipe.sys
 + 2008-04-14 02:34:53 21,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\tdtcp.sys
 + 2008-04-14 02:34:25 78,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\telnet.exe
 + 2008-04-14 02:34:52 40,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\termdd.sys
 + 2008-04-14 02:33:46 358,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\termmgr.dll
 + 2008-04-14 02:33:46 297,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\termsrv.dll
 + 2008-04-13 18:40:50 149,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\tffsport.sys
 + 2008-04-14 02:33:46 391,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\themeui.dll
 + 2008-04-14 02:34:25 347,136 ------w C:\WINDOWS\ServicePackFiles\i3​86\tourstrt.exe
 + 2008-04-14 02:34:25 82,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\tp4mon.exe
 + 2008-04-14 02:34:25 13,312 ------w C:\WINDOWS\ServicePackFiles\i3​86\tracert.exe
 + 2008-04-14 02:34:31 12,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\tree.com
 + 2008-04-14 02:33:46 153,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\triedit.dll
 + 2008-04-14 02:33:46 90,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\trkwks.dll
 + 2008-01-18 15:13:09 2,247 ------w C:\WINDOWS\ServicePackFiles\i3​86\tscdsbl.bat
 + 2008-04-14 02:33:46 94,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\tscfgwmi.dll
 + 2007-12-12 10:33:51 18,917 ------w C:\WINDOWS\ServicePackFiles\i3​86\tscinst.vbs
 + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\ServicePackFiles\i3​86\tscuinst.vbs
 + 2008-04-14 02:33:06 25,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\tscupdc.dll
 + 2008-04-14 02:34:53 12,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\tsddd.dll
 + 2008-04-14 02:33:46 53,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\tsgqec.dll
 + 2008-04-14 02:33:46 279,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\tshoot.dll
 + 2008-04-14 02:33:46 132,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\tsoc.dll
 + 2008-04-14 02:33:46 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\tspkg.dll
 + 2008-04-14 02:33:46 8,704 ------w C:\WINDOWS\ServicePackFiles\i3​86\tty.dll
 + 2008-04-14 01:54:11 39,936 ------w C:\WINDOWS\ServicePackFiles\i3​86\ttyres.dll
 + 2008-04-14 02:33:47 16,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\ttyui.dll
 + 2008-04-13 18:56:01 12,288 ------w C:\WINDOWS\ServicePackFiles\i3​86\tunmp.sys
 + 2008-04-14 02:33:47 50,688 ------w C:\WINDOWS\ServicePackFiles\i3​86\twain_32.dll
 + 2008-04-14 02:33:47 57,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\twext.dll
 + 2008-04-14 02:33:47 101,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\txflog.dll
 + 2008-04-14 02:34:25 60,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\tzchange.exe
 + 2008-04-13 18:36:40 44,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\uagp35.sys
 + 2008-04-13 18:32:36 66,048 ------w C:\WINDOWS\ServicePackFiles\i3​86\udfs.sys
 + 2008-04-14 02:33:47 26,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\udhisapi.dll
 + 2008-04-14 02:33:47 311,808 ------w C:\WINDOWS\ServicePackFiles\i3​86\ulib.dll
 + 2008-04-14 02:33:47 36,864 ------w C:\WINDOWS\ServicePackFiles\i3​86\umandlg.dll
 + 2008-04-14 02:33:47 124,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\umpnpmgr.dll
 + 2008-04-14 02:33:47 373,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\unidrv.dll
 + 2008-04-14 02:33:47 744,448 ------w C:\WINDOWS\ServicePackFiles\i3​86\unidrvui.dll
 + 2008-04-14 02:33:47 78,848 ------w C:\WINDOWS\ServicePackFiles\i3​86\unimdmat.dll
 + 2008-04-14 02:33:47 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\uniplat.dll
 + 2007-05-15 08:08:53 761,344 ------w C:\WINDOWS\ServicePackFiles\i3​86\unires.dll
 + 2008-04-14 02:33:47 316,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\untfs.dll
 + 2008-04-13 18:39:46 384,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\update.sys
 + 2008-04-14 02:34:26 151,040 ------w C:\WINDOWS\ServicePackFiles\i3​86\uploadm.exe
 + 2008-04-14 02:33:47 133,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\upnp.dll
 + 2008-04-14 02:34:26 16,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\upnpcont.exe
 + 2008-04-14 02:33:48 186,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\upnphost.dll
 + 2008-04-14 02:33:48 240,128 ------w C:\WINDOWS\ServicePackFiles\i3​86\upnpui.dll
 + 2008-04-14 02:34:26 18,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\ups.exe
 + 2008-04-14 02:33:48 37,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\url.dll
 + 2008-04-14 02:33:48 621,568 ------w C:\WINDOWS\ServicePackFiles\i3​86\urlmon.dll
 + 2004-08-03 22:43:18 32,384 ------w C:\WINDOWS\ServicePackFiles\i3​86\usb101et.sys
 + 2008-04-13 18:56:49 12,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\usb8023.sys
 + 2008-04-13 18:56:49 12,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\usb8023x.sys
 + 2008-04-13 18:45:12 60,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbaudio.sys
 + 2008-04-13 18:45:40 25,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbcamd.sys
 + 2008-04-13 18:45:41 25,728 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbcamd2.sys
 + 2008-04-13 18:45:39 32,128 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbccgp.sys
 + 2008-04-13 18:45:35 30,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbehci.sys
 + 2008-04-13 18:45:37 59,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbhub.sys
 + 2008-04-13 18:45:43 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbintel.sys
 + 2008-04-14 02:33:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbmon.dll
 + 2008-04-13 18:45:35 17,152 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbohci.sys
 + 2008-04-13 18:45:36 143,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbport.sys
 + 2008-04-13 18:47:37 25,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbprint.sys
 + 2008-04-13 18:45:34 15,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbscan.sys
 + 2008-04-13 18:45:36 26,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbser.sys
 + 2008-04-13 18:45:38 26,368 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbstor.sys
 + 2008-04-13 18:45:35 20,608 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbuhci.sys
 + 2008-04-14 02:33:48 77,312 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbui.dll
 + 2008-04-13 18:46:20 121,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\usbvideo.sys
 + 2008-04-14 02:33:48 579,584 ------w C:\WINDOWS\ServicePackFiles\i3​86\user32.dll
 + 2008-04-14 02:33:48 734,720 ------w C:\WINDOWS\ServicePackFiles\i3​86\userenv.dll
 + 2008-04-14 02:34:26 26,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\userinit.exe
 + 2008-04-14 02:33:48 406,016 ------w C:\WINDOWS\ServicePackFiles\i3​86\usp10.dll
 + 2008-04-14 02:34:26 50,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\utilman.exe
 + 2008-04-14 02:33:48 219,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\uxtheme.dll
 + 2008-04-14 02:33:48 30,749 ------w C:\WINDOWS\ServicePackFiles\i3​86\vbajet32.dll
 + 2008-04-14 02:33:48 434,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\vbscript.dll
 + 2008-04-14 02:33:48 11,325 ------w C:\WINDOWS\ServicePackFiles\i3​86\vchnt5.dll
 + 2008-04-14 02:33:48 26,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\vdmdbg.dll
 + 2008-04-14 02:33:48 51,712 ------w C:\WINDOWS\ServicePackFiles\i3​86\vdmredir.dll
 + 2008-04-14 02:34:26 28,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\verclsid.exe
 + 2008-04-14 02:33:48 26,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\verifier.dll
 + 2008-04-14 02:33:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\version.dll
 + 2008-04-14 02:33:48 54,784 ------w C:\WINDOWS\ServicePackFiles\i3​86\vfwwdm32.dll
 + 2008-04-13 18:44:40 20,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\vga.sys
 + 2008-04-14 02:33:48 851,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\vgx.dll
 + 2008-04-13 18:36:40 42,240 ------w C:\WINDOWS\ServicePackFiles\i3​86\viaagp.sys
 + 2008-04-13 18:40:31 5,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\viaide.sys
 + 2008-04-13 18:44:40 81,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\videoprt.sys
 + 2008-04-14 02:33:48 131,584 ------w C:\WINDOWS\ServicePackFiles\i3​86\viewprov.dll
 + 2008-04-14 01:56:04 53,376 ------w C:\WINDOWS\ServicePackFiles\i3​86\volsnap.sys
 + 2008-04-14 02:33:48 430,592 ------w C:\WINDOWS\ServicePackFiles\i3​86\vssapi.dll
 + 2008-04-14 02:34:26 295,424 ------w C:\WINDOWS\ServicePackFiles\i3​86\vssvc.exe
 + 2008-04-14 02:33:48 178,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\w32time.dll
 + 2008-04-14 02:33:48 15,872 ------w C:\WINDOWS\ServicePackFiles\i3​86\w3ssl.dll
 + 2008-04-14 02:33:48 498,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\w95upgnt.dll
 + 2008-04-14 02:34:26 46,080 ------w C:\WINDOWS\ServicePackFiles\i3​86\wab.exe
 + 2008-04-14 02:33:48 510,976 ------w C:\WINDOWS\ServicePackFiles\i3​86\wab32.dll
 + 2008-04-14 01:56:23 263,168 ------w C:\WINDOWS\ServicePackFiles\i3​86\wab32res.dll
 + 2008-04-14 02:33:48 32,768 ------w C:\WINDOWS\ServicePackFiles\i3​86\wabfind.dll
 + 2008-04-14 02:33:48 85,504 ------w C:\WINDOWS\ServicePackFiles\i3​86\wabimp.dll
 + 2008-04-14 02:34:26 30,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\wabmig.exe
 + 2008-04-13 18:43:55 14,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\wacompen.sys
 + 2004-08-03 20:29:38 12,415 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv01nt.sys
 + 2004-08-03 20:29:38 12,127 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv02nt.sys
 + 2004-08-03 20:29:38 11,775 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv05nt.sys
 + 2004-08-03 20:29:40 11,807 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv07nt.sys
 + 2004-08-03 20:29:40 11,295 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv08nt.sys
 + 2004-08-03 20:29:42 11,871 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv09nt.sys
 + 2004-08-03 20:29:42 11,935 ------w C:\WINDOWS\ServicePackFiles\i3​86\wadv11nt.sys
 + 2008-04-13 18:57:21 34,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\wanarp.sys
 + 2008-04-13 18:44:59 17,664 ------w C:\WINDOWS\ServicePackFiles\i3​86\watchdog.sys
 + 2004-08-03 20:29:42 29,311 ------w C:\WINDOWS\ServicePackFiles\i3​86\watv01nt.sys
 + 2004-08-03 20:29:44 19,551 ------w C:\WINDOWS\ServicePackFiles\i3​86\watv02nt.sys
 + 2004-08-03 20:29:44 33,599 ------w C:\WINDOWS\ServicePackFiles\i3​86\watv04nt.sys
 + 2004-08-03 20:29:46 22,271 ------w C:\WINDOWS\ServicePackFiles\i3​86\watv06nt.sys
 + 2004-08-03 20:29:46 25,471 ------w C:\WINDOWS\ServicePackFiles\i3​86\watv10nt.sys
 + 2008-04-14 02:33:48 215,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\wavemsp.dll
 + 2008-04-14 02:33:48 201,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemcntl.dll
 + 2008-04-14 02:33:48 214,528 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemcomn.dll
 + 2008-04-14 02:33:48 71,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemcons.dll
 + 2008-04-14 02:33:48 531,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemcore.dll
 + 2008-04-14 02:33:48 178,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemdisp.dll
 + 2008-04-14 02:33:48 273,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemess.dll
 + 2008-04-14 02:33:48 44,544 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemperf.dll
 + 2008-04-14 02:33:48 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemprox.dll
 + 2008-04-14 02:33:48 43,520 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemsvc.dll
 + 2008-04-14 02:34:26 119,808 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemtest.exe
 + 2008-04-14 02:33:48 197,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\wbemupgd.dll
 + 2008-04-14 01:57:13 32,128 ------w C:\WINDOWS\ServicePackFiles\i3​86\wceusbsh.sys
 + 2004-08-03 20:29:46 23,615 ------w C:\WINDOWS\ServicePackFiles\i3​86\wch7xxnt.sys
 + 2008-04-14 02:33:48 49,152 ------w C:\WINDOWS\ServicePackFiles\i3​86\wdigest.dll
 + 2008-04-14 02:34:34 23,552 ------w C:\WINDOWS\ServicePackFiles\i3​86\wdmaud.drv
 + 2008-04-13 19:17:18 83,072 ------w C:\WINDOWS\ServicePackFiles\i3​86\wdmaud.sys
 + 2008-04-14 02:33:48 281,600 ------w C:\WINDOWS\ServicePackFiles\i3​86\webcheck.dll
 + 2008-04-14 02:33:48 68,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\webclnt.dll
 + 2008-04-14 02:33:48 136,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\webvw.dll
 + 2008-04-14 02:34:26 66,560 ------w C:\WINDOWS\ServicePackFiles\i3​86\wextract.exe
 + 2008-04-14 02:34:27 438,784 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiaacmgr.exe
 + 2008-04-14 02:33:48 465,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiadefui.dll
 + 2008-04-14 02:33:48 124,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiadss.dll
 + 2008-04-14 02:33:48 75,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiascr.dll
 + 2008-04-14 02:33:48 334,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiaservc.dll
 + 2008-04-14 02:33:48 594,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiashext.dll
 + 2008-04-14 02:33:48 111,104 ------w C:\WINDOWS\ServicePackFiles\i3​86\wiavideo.dll
 + 2008-04-14 02:33:48 712,704 ------w C:\WINDOWS\ServicePackFiles\i3​86\wic.dll
 + 2008-04-14 02:33:48 346,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\wicext.dll
 + 2008-04-14 01:58:06 1,845,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\win32k.sys
 + 2008-04-14 02:33:48 102,912 ------w C:\WINDOWS\ServicePackFiles\i3​86\win32spl.dll
 + 2008-04-14 01:58:13 1,647,616 ------w C:\WINDOWS\ServicePackFiles\i3​86\winbrand.dll
 + 2008-04-14 02:34:27 288,256 ------w C:\WINDOWS\ServicePackFiles\i3​86\winhlp32.exe
 + 2008-04-14 02:33:48 354,304 ------w C:\WINDOWS\ServicePackFiles\i3​86\winhttp.dll
 + 2008-04-14 02:33:48 670,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\wininet.dll
 + 2008-04-14 02:33:48 32,256 ------w C:\WINDOWS\ServicePackFiles\i3​86\winipsec.dll
 + 2008-04-14 02:34:28 512,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\winlogon.exe
 + 2008-04-14 02:33:48 180,736 ------w C:\WINDOWS\ServicePackFiles\i3​86\winmm.dll
 + 2004-08-05 12:00:00 5,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\winnls.dll
 + 2008-04-14 02:32:53 764,416 ------w C:\WINDOWS\ServicePackFiles\i3​86\winntbbu.dll
 + 2008-04-14 02:33:48 16,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\winrnr.dll
 + 2008-04-14 02:33:48 100,352 ------w C:\WINDOWS\ServicePackFiles\i3​86\winscard.dll
 + 2008-04-14 02:33:48 17,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\winshfhc.dll
 + 2008-04-14 02:34:34 146,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\winspool.drv
 + 2008-04-14 02:33:48 293,888 ------w C:\WINDOWS\ServicePackFiles\i3​86\winsrv.dll
 + 2008-04-14 02:33:48 53,760 ------w C:\WINDOWS\ServicePackFiles\i3​86\winsta.dll
 + 2008-04-14 02:33:48 176,640 ------w C:\WINDOWS\ServicePackFiles\i3​86\wintrust.dll
 + 2008-04-14 02:34:28 5,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\winver.exe
 + 2008-04-14 02:33:48 132,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\wkssvc.dll
 + 2008-04-14 02:33:48 69,120 ------w C:\WINDOWS\ServicePackFiles\i3​86\wlanapi.dll
 + 2008-04-14 02:33:48 172,544 ------w C:\WINDOWS\ServicePackFiles\i3​86\wldap32.dll
 + 2004-08-03 20:31:28 154,624 ------w C:\WINDOWS\ServicePackFiles\i3​86\wlluc48.sys
 + 2008-04-14 02:33:48 94,208 ------w C:\WINDOWS\ServicePackFiles\i3​86\wlnotify.dll
 + 2008-04-14 02:32:55 5,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmi.dll
 + 2008-04-13 18:36:38 8,832 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiacpi.sys
 + 2008-04-14 02:34:28 196,608 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiadap.exe
 + 2008-04-14 01:59:39 7,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiapres.dll
 + 2008-04-14 02:33:48 88,576 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiaprpl.dll
 + 2008-04-14 02:34:28 126,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiapsrv.exe
 + 2008-04-14 02:33:48 60,928 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmicookr.dll
 + 2008-04-14 02:33:48 140,800 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmidcprv.dll
 + 2008-04-14 02:33:48 156,672 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmipcima.dll
 + 2008-04-14 02:33:48 132,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmipdskq.dll
 + 2008-04-14 02:33:48 61,952 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmipiprt.dll
 + 2008-04-14 02:33:48 62,464 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmipjobj.dll
 + 2008-04-14 02:33:48 144,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiprov.dll
 + 2008-04-14 02:33:48 437,248 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiprvsd.dll
 + 2008-04-14 02:34:28 218,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiprvse.exe
 + 2008-04-14 02:33:48 41,472 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmipsess.dll
 + 2008-04-14 02:33:48 145,408 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmisvc.dll
 + 2008-04-14 02:33:48 99,328 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmiutils.dll
 + 2008-04-14 02:33:48 167,936 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2ae.dll
 + 2008-04-14 02:33:48 4,096 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2eres.dll
 + 2008-04-14 02:33:48 7,680 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2ext.dll
 + 2008-04-14 02:33:48 402,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2filt.dll
 + 2008-04-14 02:33:48 502,272 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2fxa.dll
 + 2008-04-14 02:33:48 325,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2fxb.dll
 + 2008-04-14 02:33:48 4,290,048 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2res.dll
 + 2008-04-14 02:33:48 6,144 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmm2res2.dll
 + 2008-04-14 02:33:48 276,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\wmphoto.dll
 + 2008-04-14 02:34:29 218,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\wordpad.exe
 + 2008-04-14 02:33:49 265,216 ------w C:\WINDOWS\ServicePackFiles\i3​86\wow32.dll
 + 2008-04-14 02:34:29 32,256 ------w C:\WINDOWS\ServicePackFiles\i3​86\wpabaln.exe
 + 2008-04-14 02:34:29 11,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\wpnpinst.exe
 + 2008-04-14 02:33:49 82,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\ws2_32.dll
 + 2008-04-14 02:33:49 19,968 ------w C:\WINDOWS\ServicePackFiles\i3​86\ws2help.dll
 + 2008-04-14 02:34:29 13,824 ------w C:\WINDOWS\ServicePackFiles\i3​86\wscntfy.exe
 + 2008-04-14 02:34:29 155,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\wscript.exe
 + 2008-04-14 02:33:50 80,896 ------w C:\WINDOWS\ServicePackFiles\i3​86\wscsvc.dll
 + 2008-04-14 02:33:50 108,032 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshbth.dll
 + 2008-04-14 02:33:50 36,864 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshcon.dll
 + 2008-04-14 02:33:50 90,112 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshext.dll
 + 2008-04-14 02:33:50 14,336 ------w C:\WINDOWS\ServicePackFiles\i3​86\wship6.dll
 + 2008-04-14 02:33:50 8,192 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshirda.dll
 + 2008-04-14 02:33:50 11,264 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshrm.dll
 + 2008-04-14 02:33:50 19,456 ------w C:\WINDOWS\ServicePackFiles\i3​86\wshtcpip.dll
 + 2004-08-03 20:29:48 12,063 ------w C:\WINDOWS\ServicePackFiles\i3​86\wsiintxx.sys
 + 2008-04-14 02:33:50 41,984 ------w C:\WINDOWS\ServicePackFiles\i3​86\wsnmp32.dll
 + 2008-04-14 02:33:50 25,088 ------w C:\WINDOWS\ServicePackFiles\i3​86\wsock32.dll
 + 2008-04-13 18:46:24 19,200 ------w C:\WINDOWS\ServicePackFiles\i3​86\wstcodec.sys
 + 2008-04-14 02:33:50 51,200 ------w C:\WINDOWS\ServicePackFiles\i3​86\wstdecod.dll
 + 2008-04-14 02:33:50 18,432 ------w C:\WINDOWS\ServicePackFiles\i3​86\wtsapi32.dll
 + 2008-04-14 02:33:50 432,640 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuapi.dll
 + 2008-04-14 02:34:29 112,640 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuauclt.exe
 + 2008-04-14 02:34:29 168,960 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuauclt1.exe
 + 2008-04-14 02:33:50 1,135,616 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuaueng.dll
 + 2008-04-14 02:33:50 184,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuaueng1.dll
 + 2008-04-14 02:33:50 6,656 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuauserv.dll
 + 2008-04-14 02:33:51 114,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\wucltui.dll
 + 2008-04-14 02:33:51 32,256 ------w C:\WINDOWS\ServicePackFiles\i3​86\wups.dll
 + 2008-04-14 02:33:51 120,320 ------w C:\WINDOWS\ServicePackFiles\i3​86\wuweb.dll
 + 2004-08-03 20:29:50 19,455 ------w C:\WINDOWS\ServicePackFiles\i3​86\wvchntxx.sys
 + 2008-04-14 02:33:51 384,000 ------w C:\WINDOWS\ServicePackFiles\i3​86\wzcdlg.dll
 + 2008-04-14 02:33:51 52,736 ------w C:\WINDOWS\ServicePackFiles\i3​86\wzcsapi.dll
 + 2008-04-14 02:33:52 483,840 ------w C:\WINDOWS\ServicePackFiles\i3​86\wzcsvc.dll
 + 2008-04-14 02:33:52 91,648 ------w C:\WINDOWS\ServicePackFiles\i3​86\xactsrv.dll
 + 2008-04-14 02:34:29 30,720 ------w C:\WINDOWS\ServicePackFiles\i3​86\xcopy.exe
 + 2004-08-05 12:00:00 177,784 ------w C:\WINDOWS\ServicePackFiles\i3​86\xenroll.dll
 + 2008-04-14 02:33:52 121,856 ------w C:\WINDOWS\ServicePackFiles\i3​86\xmllite.dll
 + 2008-04-14 02:33:52 129,024 ------w C:\WINDOWS\ServicePackFiles\i3​86\xmlprov.dll
 + 2008-04-14 02:33:52 50,176 ------w C:\WINDOWS\ServicePackFiles\i3​86\xmlprovi.dll
 + 2008-04-14 02:33:52 11,776 ------w C:\WINDOWS\ServicePackFiles\i3​86\xolehlp.dll
 + 2008-04-13 18:53:32 558,080 ------w C:\WINDOWS\ServicePackFiles\i3​86\xpnetdg.exe
 + 2008-04-14 02:04:46 197,632 ------w C:\WINDOWS\ServicePackFiles\i3​86\xpsp1res.dll
 + 2008-04-13 17:39:24 2,897,920 ------w C:\WINDOWS\ServicePackFiles\i3​86\xpsp2res.dll
 + 2008-04-14 02:33:52 18,944 ------w C:\WINDOWS\ServicePackFiles\i3​86\xrxscnui.dll
 + 2008-04-14 02:33:52 116,736 ------w C:\WINDOWS\ServicePackFiles\i3​86\xrxwiadr.dll
 + 2008-04-14 02:33:52 340,992 ------w C:\WINDOWS\ServicePackFiles\i3​86\zipfldr.dll
 + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\ServicePackFiles\Se​rvicePackCache\i386\custsat.dl​l
 + 2008-04-14 02:33:31 82,944 ------w C:\WINDOWS\ServicePackFiles\Se​rvicePackCache\i386\msgsc.dll
 + 2008-04-13 17:30:28 180,224 ------w C:\WINDOWS\ServicePackFiles\Se​rvicePackCache\i386\msgslang.d​ll
 + 2008-04-14 02:34:13 1,695,232 ------w C:\WINDOWS\ServicePackFiles\Se​rvicePackCache\i386\msmsgs.exe​
 + 2008-04-14 02:34:22 32,866 ------w C:\WINDOWS\slrundll.exe
 - 2004-08-05 12:00:00 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dl​l
 + 2008-04-14 02:33:31 3,166,208 ----a-w C:\WINDOWS\srchasst\msgr3en.dl​l
 - 2004-08-05 12:00:00 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.d​ll
 + 2008-04-14 02:33:46 58,434 ----a-w C:\WINDOWS\srchasst\srchctls.d​ll
 - 2004-08-05 12:00:00 726,590 ----a-w C:\WINDOWS\srchasst\srchui.dll​
 + 2008-04-14 02:33:46 727,102 ----a-w C:\WINDOWS\srchasst\srchui.dll​
 + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
 + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
 + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
 + 2004-08-05 12:00:00 2,000 ----a-w C:\WINDOWS\system\KEYBOARD.DRV​
 + 2004-08-05 12:00:00 2,032 ----a-w C:\WINDOWS\system\MOUSE.DRV
 + 2004-08-05 12:00:00 1,744 ----a-w C:\WINDOWS\system\SOUND.DRV
 + 2004-08-05 12:00:00 2,176 ----a-w C:\WINDOWS\system\VGA.DRV
 - 2004-08-05 12:00:00 146,944 ----a-w C:\WINDOWS\system\WINSPOOL.DRV​
 + 2008-04-14 02:34:34 146,944 ----a-w C:\WINDOWS\system\winspool.drv​
 - 2006-08-16 11:59:27 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dl​l
 + 2008-04-14 02:33:18 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dl​l
 + 2008-04-14 02:33:18 136,192 ------w C:\WINDOWS\system32\aaclient.d​ll
 - 2004-08-05 12:00:00 189,952 ----a-w C:\WINDOWS\system32\accwiz.exe​
 + 2008-04-14 02:33:53 190,464 ----a-w C:\WINDOWS\system32\accwiz.exe​
 - 2004-08-05 12:00:00 119,296 ----a-w C:\WINDOWS\system32\aclui.dll
 + 2008-04-14 02:33:18 120,320 ----a-w C:\WINDOWS\system32\aclui.dll
 - 2004-08-05 12:00:00 194,048 ----a-w C:\WINDOWS\system32\activeds.d​ll
 + 2008-04-14 02:33:18 193,536 ----a-w C:\WINDOWS\system32\activeds.d​ll
 - 2004-08-05 12:00:00 4,096 ----a-w C:\WINDOWS\system32\actmovie.e​xe
 + 2008-04-14 02:33:53 4,096 ----a-w C:\WINDOWS\system32\actmovie.e​xe
 - 2004-08-05 12:00:00 101,888 ----a-w C:\WINDOWS\system32\actxprxy.d​ll
 + 2008-04-14 02:33:18 98,304 ----a-w C:\WINDOWS\system32\actxprxy.d​ll
 - 2004-08-05 12:00:00 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll​
 + 2008-04-14 02:33:18 175,616 ----a-w C:\WINDOWS\system32\adsldp.dll​
 - 2004-08-05 12:00:00 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dl​l
 + 2008-04-14 02:33:18 143,360 ----a-w C:\WINDOWS\system32\adsldpc.dl​l
 - 2004-08-05 12:00:00 68,096 ----a-w C:\WINDOWS\system32\adsmsext.d​ll
 + 2008-04-14 02:33:18 68,096 ----a-w C:\WINDOWS\system32\adsmsext.d​ll
 - 2004-08-05 12:00:00 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll
 + 2008-04-14 02:33:18 263,680 ----a-w C:\WINDOWS\system32\adsnt.dll
 - 2004-08-05 12:00:00 685,056 ----a-w C:\WINDOWS\system32\advapi32.d​ll
 + 2008-04-14 02:33:18 685,568 ----a-w C:\WINDOWS\system32\advapi32.d​ll
 - 2007-12-07 02:08:32 124,928 ----a-w C:\WINDOWS\system32\advpack.dl​l
 + 2008-04-23 04:16:39 124,928 ----a-w C:\WINDOWS\system32\advpack.dl​l
 - 2004-08-05 12:00:00 98,304 ----a-w C:\WINDOWS\system32\ahui.exe
 + 2008-04-14 02:33:53 98,304 ----a-w C:\WINDOWS\system32\ahui.exe
 - 2004-08-05 12:00:00 44,544 ----a-w C:\WINDOWS\system32\alg.exe
 + 2008-04-14 02:33:53 44,544 ----a-w C:\WINDOWS\system32\alg.exe
 - 2004-08-05 12:00:00 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll​
 + 2008-04-14 02:33:19 17,408 ----a-w C:\WINDOWS\system32\alrsvc.dll​
 - 2004-08-05 12:00:00 70,656 ----a-w C:\WINDOWS\system32\amstream.d​ll
 + 2008-04-14 02:33:19 70,656 ----a-w C:\WINDOWS\system32\amstream.d​ll
 - 2004-08-05 12:00:00 126,976 ----a-w C:\WINDOWS\system32\apphelp.dl​l
 + 2008-04-14 02:33:19 125,952 ----a-w C:\WINDOWS\sy

n°413186
chef.manu
Posté le 27-07-2008 à 01:44:32  answer
Prévenir les modérateurs en cas d'abus
 

Rapport combofix suite 5

 - 2004-08-03 21:07:40 52,864 ----a-w C:\WINDOWS\system32\drivers\DM​usic.sys
 + 2008-04-13 18:45:01 52,864 ----a-w C:\WINDOWS\system32\drivers\dm​usic.sys
 - 2004-08-03 21:08:00 60,288 ----a-w C:\WINDOWS\system32\drivers\dr​mk.sys
 + 2008-04-13 18:45:14 60,160 ----a-w C:\WINDOWS\system32\drivers\dr​mk.sys
 + 2008-04-13 18:45:13 2,944 ----a-w C:\WINDOWS\system32\drivers\dr​mkaud.sys
 - 2004-08-05 12:00:00 71,040 ----a-w C:\WINDOWS\system32\drivers\dx​g.sys
 + 2008-04-13 18:38:29 71,168 ----a-w C:\WINDOWS\system32\drivers\dx​g.sys
 - 2004-08-05 12:00:00 143,360 ----a-w C:\WINDOWS\system32\drivers\fa​stfat.sys
 + 2008-04-13 19:14:29 143,744 ----a-w C:\WINDOWS\system32\drivers\fa​stfat.sys
 - 2004-08-05 12:00:00 27,392 ----a-w C:\WINDOWS\system32\drivers\fd​c.sys
 + 2008-04-13 18:40:25 27,392 ----a-w C:\WINDOWS\system32\drivers\fd​c.sys
 - 2004-08-05 12:00:00 35,072 ----a-w C:\WINDOWS\system32\drivers\fi​ps.sys
 + 2008-04-14 01:57:38 44,672 ----a-w C:\WINDOWS\system32\drivers\fi​ps.sys
 - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\system32\drivers\fl​pydisk.sys
 + 2008-04-13 18:40:25 20,480 ----a-w C:\WINDOWS\system32\drivers\fl​pydisk.sys
 - 2006-08-21 09:14:58 128,896 ----a-w C:\WINDOWS\system32\drivers\fl​tmgr.sys
 + 2008-04-13 18:32:59 129,792 ----a-w C:\WINDOWS\system32\drivers\fl​tmgr.sys
 + 2008-04-13 18:36:40 46,464 ------w C:\WINDOWS\system32\drivers\ga​gp30kx.sys
 + 2008-04-13 16:36:05 144,384 ------w C:\WINDOWS\system32\drivers\hd​audbus.sys
 + 2008-04-14 01:59:54 25,856 ------w C:\WINDOWS\system32\drivers\hi​dbth.sys
 - 2004-08-05 12:00:00 36,224 ----a-w C:\WINDOWS\system32\drivers\hi​dclass.sys
 + 2008-04-13 18:45:26 36,864 ----a-w C:\WINDOWS\system32\drivers\hi​dclass.sys
 + 2008-04-13 18:45:26 19,200 ------w C:\WINDOWS\system32\drivers\hi​dir.sys
 - 2004-08-05 12:00:00 24,960 ----a-w C:\WINDOWS\system32\drivers\hi​dparse.sys
 + 2008-04-13 18:45:22 24,960 ----a-w C:\WINDOWS\system32\drivers\hi​dparse.sys
 - 2001-08-17 20:02:20 9,600 ----a-w C:\WINDOWS\system32\drivers\hi​dusb.sys
 + 2008-04-13 18:45:27 10,368 ----a-w C:\WINDOWS\system32\drivers\hi​dusb.sys
 + 2004-08-03 20:41:48 220,032 ------w C:\WINDOWS\system32\drivers\hs​fbs2s2.sys
 + 2004-08-03 20:41:50 685,056 ------w C:\WINDOWS\system32\drivers\hs​fcxts2.sys
 + 2004-08-03 20:41:56 1,041,536 ------w C:\WINDOWS\system32\drivers\hs​fdpsp2.sys
 - 2006-03-17 00:33:10 262,784 ----a-w C:\WINDOWS\system32\drivers\ht​tp.sys
 + 2008-04-13 18:53:53 264,832 ----a-w C:\WINDOWS\system32\drivers\ht​tp.sys
 - 2004-08-03 21:00:52 8,192 ----a-w C:\WINDOWS\system32\drivers\i2​omgmt.sys
 + 2008-04-13 18:41:22 8,576 ----a-w C:\WINDOWS\system32\drivers\i2​omgmt.sys
 - 2004-08-03 21:00:52 18,560 ----a-w C:\WINDOWS\system32\drivers\i2​omp.sys
 + 2008-04-13 18:41:22 18,560 ----a-w C:\WINDOWS\system32\drivers\i2​omp.sys
 - 2004-08-05 12:00:00 54,400 ----a-w C:\WINDOWS\system32\drivers\i8​042prt.sys
 + 2008-04-14 02:00:52 54,144 ----a-w C:\WINDOWS\system32\drivers\i8​042prt.sys
 - 2004-08-05 12:00:00 41,856 ----a-w C:\WINDOWS\system32\drivers\im​api.sys
 + 2008-04-13 18:40:58 42,112 ----a-w C:\WINDOWS\system32\drivers\im​api.sys
 - 2004-08-03 22:43:40 5,504 ----a-w C:\WINDOWS\system32\drivers\in​telide.sys
 + 2008-04-14 02:03:25 5,504 ----a-w C:\WINDOWS\system32\drivers\in​telide.sys
 - 2004-08-05 12:00:00 40,320 ----a-w C:\WINDOWS\system32\drivers\in​telppm.sys
 + 2008-04-14 02:03:26 40,576 ----a-w C:\WINDOWS\system32\drivers\in​telppm.sys
 - 2004-08-05 12:00:00 29,056 ----a-w C:\WINDOWS\system32\drivers\ip​6fw.sys
 + 2008-04-13 18:53:34 36,608 ----a-w C:\WINDOWS\system32\drivers\ip​6fw.sys
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\drivers\ip​inip.sys
 + 2008-04-13 18:57:07 20,864 ----a-w C:\WINDOWS\system32\drivers\ip​inip.sys
 - 2004-09-29 22:28:37 134,912 ----a-w C:\WINDOWS\system32\drivers\ip​nat.sys
 + 2008-04-13 18:57:15 152,832 ----a-w C:\WINDOWS\system32\drivers\ip​nat.sys
 - 2004-08-05 12:00:00 74,752 ----a-w C:\WINDOWS\system32\drivers\ip​sec.sys
 + 2008-04-13 19:19:42 75,264 ----a-w C:\WINDOWS\system32\drivers\ip​sec.sys
 - 2004-08-05 12:00:00 11,264 ----a-w C:\WINDOWS\system32\drivers\ir​enum.sys
 + 2008-04-13 18:54:28 11,264 ----a-w C:\WINDOWS\system32\drivers\ir​enum.sys
 - 2001-08-23 14:58:06 36,224 ----a-w C:\WINDOWS\system32\drivers\is​apnp.sys
 + 2008-04-14 02:04:35 37,632 ----a-w C:\WINDOWS\system32\drivers\is​apnp.sys
 - 2004-08-03 22:45:12 25,216 ----a-w C:\WINDOWS\system32\drivers\kb​dclass.sys
 + 2008-04-14 02:05:14 25,216 ----a-w C:\WINDOWS\system32\drivers\kb​dclass.sys
 - 2004-08-03 22:45:14 14,848 ----a-w C:\WINDOWS\system32\drivers\kb​dhid.sys
 + 2008-04-14 02:05:15 14,720 ----a-w C:\WINDOWS\system32\drivers\kb​dhid.sys
 - 2006-06-14 08:47:45 172,416 ----a-w C:\WINDOWS\system32\drivers\km​ixer.sys
 + 2008-04-13 18:45:09 172,416 ----a-w C:\WINDOWS\system32\drivers\km​ixer.sys
 - 2004-08-03 21:15:22 140,928 ----a-w C:\WINDOWS\system32\drivers\ks​.sys
 + 2008-04-13 19:16:36 141,056 ----a-w C:\WINDOWS\system32\drivers\ks​.sys
 - 2004-08-05 12:00:00 92,032 ----a-w C:\WINDOWS\system32\drivers\ks​ecdd.sys
 + 2008-04-13 18:31:43 92,288 ----a-w C:\WINDOWS\system32\drivers\ks​ecdd.sys
 + 2004-08-03 20:41:56 11,868 ------w C:\WINDOWS\system32\drivers\md​mxsdk.sys
 - 2004-08-05 12:00:00 63,744 ----a-w C:\WINDOWS\system32\drivers\mf​.sys
 + 2008-04-13 18:36:41 63,744 ----a-w C:\WINDOWS\system32\drivers\mf​.sys
 - 2004-08-05 12:00:00 30,336 ----a-w C:\WINDOWS\system32\drivers\mo​dem.sys
 + 2008-04-14 01:53:05 30,336 ----a-w C:\WINDOWS\system32\drivers\mo​dem.sys
 - 2004-08-03 22:37:26 23,680 ----a-w C:\WINDOWS\system32\drivers\mo​uclass.sys
 + 2008-04-14 01:53:18 23,680 ----a-w C:\WINDOWS\system32\drivers\mo​uclass.sys
 - 2004-08-05 12:00:00 42,240 ----a-w C:\WINDOWS\system32\drivers\mo​untmgr.sys
 + 2008-04-13 18:39:46 42,368 ----a-w C:\WINDOWS\system32\drivers\mo​untmgr.sys
 - 2007-12-18 09:51:35 179,584 ----a-w C:\WINDOWS\system32\drivers\mr​xdav.sys
 + 2008-04-13 18:32:44 180,608 ----a-w C:\WINDOWS\system32\drivers\mr​xdav.sys
 - 2006-05-05 09:41:45 453,120 ----a-w C:\WINDOWS\system32\drivers\mr​xsmb.sys
 + 2008-04-13 19:17:01 456,576 ----a-w C:\WINDOWS\system32\drivers\mr​xsmb.sys
 - 2004-08-05 12:00:00 19,072 ----a-w C:\WINDOWS\system32\drivers\ms​fs.sys
 + 2008-04-13 18:32:39 19,072 ----a-w C:\WINDOWS\system32\drivers\ms​fs.sys
 - 2004-08-05 12:00:00 35,072 ----a-w C:\WINDOWS\system32\drivers\ms​gpc.sys
 + 2008-04-13 18:56:32 35,072 ----a-w C:\WINDOWS\system32\drivers\ms​gpc.sys
 - 2004-08-03 20:58:42 7,552 ----a-w C:\WINDOWS\system32\drivers\MS​KSSRV.sys
 + 2008-04-13 18:39:52 7,552 ----a-w C:\WINDOWS\system32\drivers\ms​kssrv.sys
 - 2004-08-03 20:58:40 5,376 ----a-w C:\WINDOWS\system32\drivers\MS​PCLOCK.sys
 + 2008-04-13 18:39:50 5,376 ----a-w C:\WINDOWS\system32\drivers\ms​pclock.sys
 - 2004-08-03 20:58:42 4,992 ----a-w C:\WINDOWS\system32\drivers\MS​PQM.sys
 + 2008-04-13 18:39:51 4,992 ----a-w C:\WINDOWS\system32\drivers\ms​pqm.sys
 - 2004-08-03 21:07:48 15,488 ----a-w C:\WINDOWS\system32\drivers\ms​smbios.sys
 + 2008-04-13 18:36:46 15,488 ----a-w C:\WINDOWS\system32\drivers\ms​smbios.sys
 - 2004-08-03 20:58:40 5,504 ----a-w C:\WINDOWS\system32\drivers\MS​TEE.sys
 + 2008-04-13 18:39:50 5,504 ----a-w C:\WINDOWS\system32\drivers\ms​tee.sys
 + 2004-08-03 20:41:40 126,686 ------w C:\WINDOWS\system32\drivers\mt​lmnt5.sys
 + 2004-08-03 20:41:38 1,309,184 ------w C:\WINDOWS\system32\drivers\mt​lstrm.sys
 + 2004-08-03 20:29:38 452,736 ------w C:\WINDOWS\system32\drivers\mt​xparhm.sys
 - 2004-08-05 12:00:00 107,904 ----a-w C:\WINDOWS\system32\drivers\mu​p.sys
 + 2008-04-13 19:17:05 105,344 ----a-w C:\WINDOWS\system32\drivers\mu​p.sys
 + 2008-04-13 18:43:55 12,672 ------w C:\WINDOWS\system32\drivers\mu​tohpen.sys
 - 2004-08-03 21:10:30 85,376 ----a-w C:\WINDOWS\system32\drivers\NA​BTSFEC.sys
 + 2008-04-13 18:46:25 85,248 ----a-w C:\WINDOWS\system32\drivers\na​btsfec.sys
 - 2004-08-05 12:00:00 182,912 ----a-w C:\WINDOWS\system32\drivers\nd​is.sys
 + 2008-04-13 19:20:37 182,656 ----a-w C:\WINDOWS\system32\drivers\nd​is.sys
 - 2004-08-03 21:10:14 10,880 ----a-w C:\WINDOWS\system32\drivers\Nd​isIP.sys
 + 2008-04-13 18:46:22 10,880 ----a-w C:\WINDOWS\system32\drivers\nd​isip.sys
 - 2004-08-05 12:00:00 9,600 ----a-w C:\WINDOWS\system32\drivers\nd​istapi.sys
 + 2008-04-13 18:57:27 10,112 ----a-w C:\WINDOWS\system32\drivers\nd​istapi.sys
 - 2004-08-05 12:00:00 12,928 ----a-w C:\WINDOWS\system32\drivers\nd​isuio.sys
 + 2008-04-13 18:55:58 14,592 ----a-w C:\WINDOWS\system32\drivers\nd​isuio.sys
 - 2004-08-05 12:00:00 91,776 ----a-w C:\WINDOWS\system32\drivers\nd​iswan.sys
 + 2008-04-13 19:20:42 91,520 ----a-w C:\WINDOWS\system32\drivers\nd​iswan.sys
 - 2004-08-05 12:00:00 38,016 ----a-w C:\WINDOWS\system32\drivers\nd​proxy.sys
 + 2008-04-13 18:57:29 40,576 ----a-w C:\WINDOWS\system32\drivers\nd​proxy.sys
 - 2004-08-05 12:00:00 34,560 ----a-w C:\WINDOWS\system32\drivers\ne​tbios.sys
 + 2008-04-13 18:56:02 34,688 ----a-w C:\WINDOWS\system32\drivers\ne​tbios.sys
 - 2004-08-05 12:00:00 162,816 ----a-w C:\WINDOWS\system32\drivers\ne​tbt.sys
 + 2008-04-13 19:21:00 162,816 ----a-w C:\WINDOWS\system32\drivers\ne​tbt.sys
 - 2004-08-05 12:00:00 61,824 ----a-w C:\WINDOWS\system32\drivers\ni​c1394.sys
 + 2008-04-13 18:51:25 61,824 ----a-w C:\WINDOWS\system32\drivers\ni​c1394.sys
 - 2004-08-05 12:00:00 40,320 ----a-w C:\WINDOWS\system32\drivers\nm​nt.sys
 + 2008-04-13 18:53:09 40,320 ----a-w C:\WINDOWS\system32\drivers\nm​nt.sys
 - 2004-08-05 12:00:00 30,848 ----a-w C:\WINDOWS\system32\drivers\np​fs.sys
 + 2008-04-13 18:32:39 30,848 ----a-w C:\WINDOWS\system32\drivers\np​fs.sys
 - 2007-02-09 11:10:35 574,464 ----a-w C:\WINDOWS\system32\drivers\nt​fs.sys
 + 2008-04-13 19:15:53 574,976 ----a-w C:\WINDOWS\system32\drivers\nt​fs.sys
 + 2004-08-03 20:41:40 180,360 ------w C:\WINDOWS\system32\drivers\nt​mtlfax.sys
 + 2004-08-05 12:00:00 2,944 ----a-w C:\WINDOWS\system32\drivers\nu​ll.sys
 + 2004-08-03 20:29:56 1,897,408 ------w C:\WINDOWS\system32\drivers\nv​4_mini.sys
 - 2004-08-05 12:00:00 88,448 ----a-w C:\WINDOWS\system32\drivers\nw​lnkipx.sys
 + 2008-04-13 18:56:06 88,320 ----a-w C:\WINDOWS\system32\drivers\nw​lnkipx.sys
 - 2004-08-03 21:10:10 61,056 ----a-w C:\WINDOWS\system32\drivers\oh​ci1394.sys
 + 2008-04-13 18:46:18 61,696 ----a-w C:\WINDOWS\system32\drivers\oh​ci1394.sys
 - 2004-08-05 12:00:00 46,720 ----a-w C:\WINDOWS\system32\drivers\p3​.sys
 + 2008-04-14 02:09:37 46,848 ----a-w C:\WINDOWS\system32\drivers\p3​.sys
 - 2004-08-05 12:00:00 80,384 ----a-w C:\WINDOWS\system32\drivers\pa​rport.sys
 + 2008-04-14 02:09:40 80,384 ----a-w C:\WINDOWS\system32\drivers\pa​rport.sys
 - 2004-08-05 12:00:00 18,688 ----a-w C:\WINDOWS\system32\drivers\pa​rtmgr.sys
 + 2008-04-13 18:40:49 19,712 ----a-w C:\WINDOWS\system32\drivers\pa​rtmgr.sys
 - 2004-08-03 22:37:06 68,608 ----a-w C:\WINDOWS\system32\drivers\pc​i.sys
 + 2008-04-14 02:09:47 68,608 ----a-w C:\WINDOWS\system32\drivers\pc​i.sys
 - 2004-08-03 20:59:42 25,088 ----a-w C:\WINDOWS\system32\drivers\pc​iidex.sys
 + 2008-04-13 18:40:29 24,960 ----a-w C:\WINDOWS\system32\drivers\pc​iidex.sys
 - 2004-08-05 12:00:00 120,320 ----a-w C:\WINDOWS\system32\drivers\pc​mcia.sys
 + 2008-04-14 02:09:53 120,576 ----a-w C:\WINDOWS\system32\drivers\pc​mcia.sys
 - 2004-08-03 21:15:50 145,792 ----a-w C:\WINDOWS\system32\drivers\po​rtcls.sys
 + 2008-04-13 19:19:41 146,048 ----a-w C:\WINDOWS\system32\drivers\po​rtcls.sys
 - 2004-08-05 12:00:00 39,552 ----a-w C:\WINDOWS\system32\drivers\pr​ocessr.sys
 + 2008-04-14 01:55:30 40,064 ----a-w C:\WINDOWS\system32\drivers\pr​ocessr.sys
 - 2004-08-05 12:00:00 69,120 ----a-w C:\WINDOWS\system32\drivers\ps​ched.sys
 + 2008-04-13 18:56:38 69,120 ----a-w C:\WINDOWS\system32\drivers\ps​ched.sys
 - 2004-08-05 12:00:00 51,328 ----a-w C:\WINDOWS\system32\drivers\ra​sl2tp.sys
 + 2008-04-13 19:19:43 51,328 ----a-w C:\WINDOWS\system32\drivers\ra​sl2tp.sys
 - 2004-08-05 12:00:00 41,472 ----a-w C:\WINDOWS\system32\drivers\ra​spppoe.sys
 + 2008-04-13 18:57:32 41,472 ----a-w C:\WINDOWS\system32\drivers\ra​spppoe.sys
 - 2004-08-05 12:00:00 48,384 ----a-w C:\WINDOWS\system32\drivers\ra​spptp.sys
 + 2008-04-13 19:19:48 48,384 ----a-w C:\WINDOWS\system32\drivers\ra​spptp.sys
 - 2006-05-05 09:47:57 174,592 ----a-w C:\WINDOWS\system32\drivers\rd​bss.sys
 + 2008-04-13 19:28:39 175,744 ----a-w C:\WINDOWS\system32\drivers\rd​bss.sys
 - 2004-08-03 21:01:16 196,864 ----a-w C:\WINDOWS\system32\drivers\rd​pdr.sys
 + 2008-04-13 18:32:51 196,224 ----a-w C:\WINDOWS\system32\drivers\rd​pdr.sys
 - 2005-06-10 04:11:22 139,528 ----a-w C:\WINDOWS\system32\drivers\rd​pwd.sys
 + 2008-04-14 02:34:54 139,656 ----a-w C:\WINDOWS\system32\drivers\rd​pwd.sys
 + 2004-08-03 20:41:40 13,776 ------w C:\WINDOWS\system32\drivers\re​cagent.sys
 - 2004-08-03 22:39:44 58,496 ----a-w C:\WINDOWS\system32\drivers\re​dbook.sys
 + 2008-04-14 01:57:34 58,752 ----a-w C:\WINDOWS\system32\drivers\re​dbook.sys
 + 2008-04-13 18:46:32 59,136 ------w C:\WINDOWS\system32\drivers\rf​comm.sys
 - 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rm​cast.sys
 + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\system32\drivers\rm​cast.sys
 - 2004-08-05 12:00:00 30,080 ----a-w C:\WINDOWS\system32\drivers\rn​dismp.sys
 + 2008-04-13 18:56:49 30,592 ----a-w C:\WINDOWS\system32\drivers\rn​dismp.sys
 + 2008-04-13 18:56:49 30,592 ------w C:\WINDOWS\system32\drivers\rn​dismpx.sys
 + 2004-08-03 20:29:52 166,912 ------w C:\WINDOWS\system32\drivers\s3​gnbm.sys
 - 2004-08-05 12:00:00 96,256 ----a-w C:\WINDOWS\system32\drivers\sc​siport.sys
 + 2008-04-13 18:40:30 96,384 ----a-w C:\WINDOWS\system32\drivers\sc​siport.sys
 - 2004-08-05 12:00:00 67,584 ----a-w C:\WINDOWS\system32\drivers\sd​bus.sys
 + 2008-04-13 18:36:44 79,232 ----a-w C:\WINDOWS\system32\drivers\sd​bus.sys
 - 2004-08-05 12:00:00 15,488 ----a-w C:\WINDOWS\system32\drivers\se​renum.sys
 + 2008-04-13 18:40:12 15,744 ----a-w C:\WINDOWS\system32\drivers\se​renum.sys
 - 2004-08-05 12:00:00 66,560 ----a-w C:\WINDOWS\system32\drivers\se​rial.sys
 + 2008-04-14 02:00:08 66,048 ----a-w C:\WINDOWS\system32\drivers\se​rial.sys
 - 2004-08-05 12:00:00 11,136 ----a-w C:\WINDOWS\system32\drivers\sf​fdisk.sys
 + 2008-04-13 18:40:47 11,904 ----a-w C:\WINDOWS\system32\drivers\sf​fdisk.sys
 + 2008-04-13 18:40:48 10,240 ------w C:\WINDOWS\system32\drivers\sf​fp_mmc.sys
 - 2004-08-05 12:00:00 10,240 ----a-w C:\WINDOWS\system32\drivers\sf​fp_sd.sys
 + 2008-04-13 18:40:47 11,008 ----a-w C:\WINDOWS\system32\drivers\sf​fp_sd.sys
 - 2004-08-05 12:00:00 11,392 ----a-w C:\WINDOWS\system32\drivers\sf​loppy.sys
 + 2008-04-13 18:40:48 11,392 ----a-w C:\WINDOWS\system32\drivers\sf​loppy.sys
 + 2008-04-14 02:33:41 3,901 ------w C:\WINDOWS\system32\drivers\si​int5.dll
 - 2004-08-03 21:07:44 41,088 ----a-w C:\WINDOWS\system32\drivers\SI​SAGP.SYS
 + 2008-04-13 18:36:39 40,960 ----a-w C:\WINDOWS\system32\drivers\si​sagp.sys
 - 2004-08-03 21:10:18 11,136 ----a-w C:\WINDOWS\system32\drivers\SL​IP.sys
 + 2008-04-13 18:46:23 11,136 ----a-w C:\WINDOWS\system32\drivers\sl​ip.sys
 + 2004-08-03 20:41:42 129,535 ------w C:\WINDOWS\system32\drivers\sl​nt7554.sys
 + 2004-08-03 20:41:44 404,990 ------w C:\WINDOWS\system32\drivers\sl​ntamr.sys
 + 2004-08-03 20:41:46 95,424 ------w C:\WINDOWS\system32\drivers\sl​nthal.sys
 + 2004-08-03 20:41:46 13,240 ------w C:\WINDOWS\system32\drivers\sl​wdmsup.sys
 + 2008-04-13 18:36:34 5,888 ------w C:\WINDOWS\system32\drivers\sm​bali.sys
 - 2004-08-05 12:00:00 25,472 ----a-w C:\WINDOWS\system32\drivers\so​nydcam.sys
 + 2008-04-13 18:46:07 25,344 ----a-w C:\WINDOWS\system32\drivers\so​nydcam.sys
 - 2006-06-14 08:47:46 6,400 ----a-w C:\WINDOWS\system32\drivers\sp​litter.sys
 + 2008-04-13 18:45:07 6,272 ----a-w C:\WINDOWS\system32\drivers\sp​litter.sys
 - 2004-08-05 12:00:00 73,600 ----a-w C:\WINDOWS\system32\drivers\sr​.sys
 + 2008-04-14 02:10:03 73,600 ----a-w C:\WINDOWS\system32\drivers\sr​.sys
 - 2006-08-14 10:34:41 332,928 ----a-w C:\WINDOWS\system32\drivers\sr​v.sys
 + 2008-04-13 19:15:11 334,848 ----a-w C:\WINDOWS\system32\drivers\sr​v.sys
 + 2007-03-01 09:34:36 28,352 ----a-w C:\WINDOWS\system32\drivers\ss​mdrv.sys
 - 2004-08-03 21:08:04 48,640 ----a-w C:\WINDOWS\system32\drivers\st​ream.sys
 + 2008-04-13 18:45:15 49,408 ----a-w C:\WINDOWS\system32\drivers\st​ream.sys
 - 2004-08-03 21:10:14 15,360 ----a-w C:\WINDOWS\system32\drivers\St​reamIP.sys
 + 2008-04-13 18:46:21 15,232 ----a-w C:\WINDOWS\system32\drivers\st​reamip.sys
 - 2004-08-03 20:58:42 4,352 ----a-w C:\WINDOWS\system32\drivers\sw​enum.sys
 + 2008-04-13 18:39:53 4,352 ----a-w C:\WINDOWS\system32\drivers\sw​enum.sys
 - 2001-08-17 20:00:52 54,272 ----a-w C:\WINDOWS\system32\drivers\sw​midi.sys
 + 2008-04-13 18:45:09 56,576 ----a-w C:\WINDOWS\system32\drivers\sw​midi.sys
 - 2004-08-03 21:15:56 60,800 ----a-w C:\WINDOWS\system32\drivers\sy​saudio.sys
 + 2008-04-13 19:15:55 60,800 ----a-w C:\WINDOWS\system32\drivers\sy​saudio.sys
 - 2004-08-05 12:00:00 14,976 ----a-w C:\WINDOWS\system32\drivers\ta​pe.sys
 + 2008-04-13 18:40:50 14,976 ----a-w C:\WINDOWS\system32\drivers\ta​pe.sys
 - 2004-08-05 12:00:00 18,560 ----a-w C:\WINDOWS\system32\drivers\td​i.sys
 + 2008-04-13 19:00:05 19,072 ----a-w C:\WINDOWS\system32\drivers\td​i.sys
 - 2004-08-05 12:00:00 12,040 ----a-w C:\WINDOWS\system32\drivers\td​pipe.sys
 + 2008-04-14 02:34:52 12,040 ----a-w C:\WINDOWS\system32\drivers\td​pipe.sys
 - 2004-08-05 12:00:00 21,896 ----a-w C:\WINDOWS\system32\drivers\td​tcp.sys
 + 2008-04-14 02:34:53 21,896 ----a-w C:\WINDOWS\system32\drivers\td​tcp.sys
 - 2004-08-03 22:55:12 40,840 ----a-w C:\WINDOWS\system32\drivers\te​rmdd.sys
 + 2008-04-14 02:34:52 40,840 ----a-w C:\WINDOWS\system32\drivers\te​rmdd.sys
 - 2004-08-05 12:00:00 12,416 ----a-w C:\WINDOWS\system32\drivers\tu​nmp.sys
 + 2008-04-13 18:56:01 12,288 ----a-w C:\WINDOWS\system32\drivers\tu​nmp.sys
 + 2008-04-13 18:36:40 44,672 ------w C:\WINDOWS\system32\drivers\ua​gp35.sys
 - 2004-08-05 12:00:00 66,176 ----a-w C:\WINDOWS\system32\drivers\ud​fs.sys
 + 2008-04-13 18:32:36 66,048 ----a-w C:\WINDOWS\system32\drivers\ud​fs.sys
 + 2006-10-18 19:47:22 671,232 ------w C:\WINDOWS\system32\drivers\UM​DF\wpdmtpdr.dll
 - 2004-08-05 12:00:00 209,408 ----a-w C:\WINDOWS\system32\drivers\up​date.sys
 + 2008-04-13 18:39:46 384,768 ----a-w C:\WINDOWS\system32\drivers\up​date.sys
 - 2004-08-05 12:00:00 12,672 ----a-w C:\WINDOWS\system32\drivers\us​b8023.sys
 + 2008-04-13 18:56:49 12,800 ----a-w C:\WINDOWS\system32\drivers\us​b8023.sys
 + 2008-04-13 18:56:49 12,800 ------w C:\WINDOWS\system32\drivers\us​b8023x.sys
 - 2004-08-05 12:00:00 23,808 ----a-w C:\WINDOWS\system32\drivers\us​bcamd.sys
 + 2008-04-13 18:45:40 25,600 ----a-w C:\WINDOWS\system32\drivers\us​bcamd.sys
 - 2004-08-05 12:00:00 23,936 ----a-w C:\WINDOWS\system32\drivers\us​bcamd2.sys
 + 2008-04-13 18:45:41 25,728 ----a-w C:\WINDOWS\system32\drivers\us​bcamd2.sys
 - 2004-08-03 21:08:48 31,616 ----a-w C:\WINDOWS\system32\drivers\us​bccgp.sys
 + 2008-04-13 18:45:39 32,128 ----a-w C:\WINDOWS\system32\drivers\us​bccgp.sys
 - 2004-08-03 21:08:38 26,624 ----a-w C:\WINDOWS\system32\drivers\us​behci.sys
 + 2008-04-13 18:45:35 30,208 ----a-w C:\WINDOWS\system32\drivers\us​behci.sys
 - 2004-08-05 12:00:00 57,600 ----a-w C:\WINDOWS\system32\drivers\us​bhub.sys
 + 2008-04-13 18:45:37 59,520 ----a-w C:\WINDOWS\system32\drivers\us​bhub.sys
 - 2004-08-05 12:00:00 16,000 ----a-w C:\WINDOWS\system32\drivers\us​bintel.sys
 + 2008-04-13 18:45:43 15,872 ----a-w C:\WINDOWS\system32\drivers\us​bintel.sys
 - 2004-08-05 12:00:00 17,024 ----a-w C:\WINDOWS\system32\drivers\us​bohci.sys
 + 2008-04-13 18:45:35 17,152 ----a-w C:\WINDOWS\system32\drivers\us​bohci.sys
 - 2004-08-05 12:00:00 142,976 ----a-w C:\WINDOWS\system32\drivers\us​bport.sys
 + 2008-04-13 18:45:36 143,872 ----a-w C:\WINDOWS\system32\drivers\us​bport.sys
 - 2004-08-03 22:01:26 25,856 ----a-w C:\WINDOWS\system32\drivers\us​bprint.sys
 + 2008-04-13 18:47:37 25,856 ----a-w C:\WINDOWS\system32\drivers\us​bprint.sys
 - 2004-08-03 21:58:46 15,104 ----a-w C:\WINDOWS\system32\drivers\us​bscan.sys
 + 2008-04-13 18:45:34 15,104 ----a-w C:\WINDOWS\system32\drivers\us​bscan.sys
 - 2004-08-03 21:08:48 26,496 ----a-w C:\WINDOWS\system32\drivers\US​BSTOR.SYS
 + 2008-04-13 18:45:38 26,368 ----a-w C:\WINDOWS\system32\drivers\us​bstor.sys
 + 2008-04-13 18:46:20 121,984 ------w C:\WINDOWS\system32\drivers\us​bvideo.sys
 + 2008-04-14 02:33:48 11,325 ------w C:\WINDOWS\system32\drivers\vc​hnt5.dll
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\drivers\vg​a.sys
 + 2008-04-13 18:44:40 20,992 ----a-w C:\WINDOWS\system32\drivers\vg​a.sys
 - 2004-08-03 21:07:44 42,240 ----a-w C:\WINDOWS\system32\drivers\VI​AAGP.SYS
 + 2008-04-13 18:36:40 42,240 ----a-w C:\WINDOWS\system32\drivers\vi​aagp.sys
 - 2004-08-03 20:59:44 5,376 ----a-w C:\WINDOWS\system32\drivers\vi​aide.sys
 + 2008-04-13 18:40:31 5,376 ----a-w C:\WINDOWS\system32\drivers\vi​aide.sys
 - 2004-08-05 12:00:00 79,744 ----a-w C:\WINDOWS\system32\drivers\vi​deoprt.sys
 + 2008-04-13 18:44:40 81,664 ----a-w C:\WINDOWS\system32\drivers\vi​deoprt.sys
 - 2004-08-05 12:00:00 53,376 ----a-w C:\WINDOWS\system32\drivers\vo​lsnap.sys
 + 2008-04-14 01:56:04 53,376 ----a-w C:\WINDOWS\system32\drivers\vo​lsnap.sys
 + 2008-04-13 18:43:55 14,208 ------w C:\WINDOWS\system32\drivers\wa​compen.sys
 + 2004-08-03 20:29:40 11,807 ------w C:\WINDOWS\system32\drivers\wa​dv07nt.sys
 + 2004-08-03 20:29:40 11,295 ------w C:\WINDOWS\system32\drivers\wa​dv08nt.sys
 + 2004-08-03 20:29:42 11,871 ------w C:\WINDOWS\system32\drivers\wa​dv09nt.sys
 + 2004-08-03 20:29:42 11,935 ------w C:\WINDOWS\system32\drivers\wa​dv11nt.sys
 - 2004-08-05 12:00:00 34,560 ----a-w C:\WINDOWS\system32\drivers\wa​narp.sys
 + 2008-04-13 18:57:21 34,560 ----a-w C:\WINDOWS\system32\drivers\wa​narp.sys
 + 2004-08-03 20:29:46 22,271 ------w C:\WINDOWS\system32\drivers\wa​tv06nt.sys
 + 2004-08-03 20:29:46 25,471 ------w C:\WINDOWS\system32\drivers\wa​tv10nt.sys
 - 2006-06-14 09:00:45 82,944 ----a-w C:\WINDOWS\system32\drivers\wd​maud.sys
 + 2008-04-13 19:17:18 83,072 ----a-w C:\WINDOWS\system32\drivers\wd​maud.sys
 - 2005-01-27 23:36:24 18,944 ----a-w C:\WINDOWS\system32\drivers\wp​dusb.sys
 + 2006-10-18 18:00:00 38,528 ----a-w C:\WINDOWS\system32\drivers\wp​dusb.sys
 - 2004-08-03 21:10:22 19,328 ----a-w C:\WINDOWS\system32\drivers\WS​TCODEC.SYS
 + 2008-04-13 18:46:24 19,200 ----a-w C:\WINDOWS\system32\drivers\ws​tcodec.sys
 + 2006-09-28 16:55:50 77,568 ------w C:\WINDOWS\system32\drivers\Wu​dfPf.sys
 + 2006-09-28 17:00:34 82,944 ------w C:\WINDOWS\system32\drivers\Wu​dfRd.sys
 + 2006-10-18 18:00:46 249,856 ------w C:\WINDOWS\system32\drmupgds.e​xe
 - 2005-01-28 06:53:38 502,272 ----a-w C:\WINDOWS\system32\drmv2clt.d​ll
 + 2006-10-18 19:47:10 991,744 ----a-w C:\WINDOWS\system32\drmv2clt.d​ll
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\drprov.dll​
 + 2008-04-14 02:33:23 14,336 ----a-w C:\WINDOWS\system32\drprov.dll​
 - 2004-08-05 12:00:00 16,384 ----a-w C:\WINDOWS\system32\ds32gt.dll​
 + 2008-04-14 02:33:23 16,384 ----a-w C:\WINDOWS\system32\ds32gt.dll​
 - 2004-08-05 12:00:00 181,760 ----a-w C:\WINDOWS\system32\dsdmo.dll
 + 2008-04-14 02:33:23 181,248 ----a-w C:\WINDOWS\system32\dsdmo.dll
 - 2004-08-05 12:00:00 72,192 ----a-w C:\WINDOWS\system32\dsdmoprp.d​ll
 + 2008-04-14 02:33:23 72,192 ----a-w C:\WINDOWS\system32\dsdmoprp.d​ll
 - 2004-08-05 12:00:00 93,696 ----a-w C:\WINDOWS\system32\dskquota.d​ll
 + 2008-04-14 02:33:23 93,696 ----a-w C:\WINDOWS\system32\dskquota.d​ll
 - 2004-08-05 12:00:00 150,016 ----a-w C:\WINDOWS\system32\dskquoui.d​ll
 + 2008-04-14 02:33:23 161,280 ----a-w C:\WINDOWS\system32\dskquoui.d​ll
 - 2004-08-05 12:00:00 367,616 ----a-w C:\WINDOWS\system32\dsound.dll​
 + 2008-04-14 02:33:23 367,616 ----a-w C:\WINDOWS\system32\dsound.dll​
 - 2004-08-05 12:00:00 1,294,336 ----a-w C:\WINDOWS\system32\dsound3d.d​ll
 + 2008-04-14 02:33:23 1,293,824 ----a-w C:\WINDOWS\system32\dsound3d.d​ll
 - 2004-08-05 12:00:00 145,408 ----a-w C:\WINDOWS\system32\dsprop.dll​
 + 2008-04-14 02:33:23 145,920 ----a-w C:\WINDOWS\system32\dsprop.dll​
 - 2004-08-05 12:00:00 4,096 ----a-w C:\WINDOWS\system32\dsprpres.d​ll
 + 2008-04-14 02:06:29 4,096 ----a-w C:\WINDOWS\system32\dsprpres.d​ll
 - 2004-08-05 12:00:00 240,640 ----a-w C:\WINDOWS\system32\dsquery.dl​l
 + 2008-04-14 02:33:23 240,640 ----a-w C:\WINDOWS\system32\dsquery.dl​l
 - 2004-08-05 12:00:00 52,736 ----a-w C:\WINDOWS\system32\dssec.dll
 + 2008-04-14 02:33:23 52,736 ----a-w C:\WINDOWS\system32\dssec.dll
 - 2004-08-05 12:00:00 137,216 ----a-w C:\WINDOWS\system32\dssenh.dll​
 + 2008-04-13 17:37:57 138,752 ----a-w C:\WINDOWS\system32\dssenh.dll​
 - 2004-08-05 12:00:00 113,664 ----a-w C:\WINDOWS\system32\dsuiext.dl​l
 + 2008-04-14 02:33:23 113,664 ----a-w C:\WINDOWS\system32\dsuiext.dl​l
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\system32\dswave.dll​
 + 2008-04-14 02:33:23 19,456 ----a-w C:\WINDOWS\system32\dswave.dll​
 - 2004-08-05 12:00:00 10,752 ----a-w C:\WINDOWS\system32\dumprep.ex​e
 + 2008-04-14 02:34:01 10,752 ----a-w C:\WINDOWS\system32\dumprep.ex​e
 - 2004-08-05 12:00:00 304,128 ----a-w C:\WINDOWS\system32\duser.dll
 + 2008-04-14 02:33:23 304,128 ----a-w C:\WINDOWS\system32\duser.dll
 - 2004-08-05 12:00:00 17,920 ----a-w C:\WINDOWS\system32\dvdupgrd.e​xe
 + 2008-04-14 02:34:01 17,920 ----a-w C:\WINDOWS\system32\dvdupgrd.e​xe
 - 2004-08-05 12:00:00 180,224 ----a-w C:\WINDOWS\system32\dwwin.exe
 + 2008-04-14 02:34:01 180,224 ----a-w C:\WINDOWS\system32\dwwin.exe
 - 2004-08-05 12:00:00 619,008 ----a-w C:\WINDOWS\system32\dx7vb.dll
 + 2008-04-14 02:33:23 619,008 ----a-w C:\WINDOWS\system32\dx7vb.dll
 - 2004-08-05 12:00:00 1,227,264 ----a-w C:\WINDOWS\system32\dx8vb.dll
 + 2008-04-14 02:33:23 1,227,264 ----a-w C:\WINDOWS\system32\dx8vb.dll
 - 2004-08-05 12:00:00 1,298,432 ----a-w C:\WINDOWS\system32\dxdiag.exe​
 + 2008-04-14 02:34:01 1,298,432 ----a-w C:\WINDOWS\system32\dxdiag.exe​
 - 2004-08-05 12:00:00 2,113,536 ----a-w C:\WINDOWS\system32\dxdiagn.dl​l
 + 2008-04-14 02:33:23 2,113,536 ----a-w C:\WINDOWS\system32\dxdiagn.dl​l
 - 2006-08-24 11:17:20 500,278 ----a-w C:\WINDOWS\system32\dxmasf.dll​
 + 2008-04-14 02:33:23 500,278 ----a-w C:\WINDOWS\system32\dxmasf.dll​
 - 2007-12-19 22:53:23 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dl​l
 + 2008-04-23 04:16:39 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dl​l
 - 2007-12-07 02:08:32 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dl​l
 + 2008-04-23 04:16:39 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dl​l
 + 2008-04-14 02:33:23 30,720 ------w C:\WINDOWS\system32\eapolqec.d​ll
 + 2008-04-14 02:33:23 184,832 ------w C:\WINDOWS\system32\eapp3hst.d​ll
 + 2008-04-14 02:33:23 126,976 ------w C:\WINDOWS\system32\eappcfg.dl​l
 + 2008-04-14 02:33:23 94,720 ------w C:\WINDOWS\system32\eappgnui.d​ll
 + 2008-04-14 02:33:23 180,736 ------w C:\WINDOWS\system32\eapphost.d​ll
 + 2008-04-14 02:33:23 40,960 ------w C:\WINDOWS\system32\eappprxy.d​ll
 + 2008-04-14 02:33:23 59,392 ------w C:\WINDOWS\system32\eapqec.dll​
 + 2008-04-14 02:33:23 33,792 ------w C:\WINDOWS\system32\eapsvc.dll​
 - 2004-08-05 12:00:00 187,392 ----a-w C:\WINDOWS\system32\els.dll
 + 2008-04-14 02:33:23 187,392 ----a-w C:\WINDOWS\system32\els.dll
 - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\system32\encapi.dll​
 + 2008-04-14 02:33:23 20,480 ----a-w C:\WINDOWS\system32\encapi.dll​
 - 2004-08-05 12:00:00 186,368 ----a-w C:\WINDOWS\system32\encdec.dll​
 + 2008-04-14 02:33:23 186,880 ----a-w C:\WINDOWS\system32\encdec.dll​
 - 2004-08-05 12:00:00 23,040 ----a-w C:\WINDOWS\system32\ersvc.dll
 + 2008-04-14 02:33:24 23,040 ----a-w C:\WINDOWS\system32\ersvc.dll
 - 2005-07-26 04:39:57 243,200 ----a-w C:\WINDOWS\system32\es.dll
 + 2008-04-14 02:33:24 246,272 ----a-w C:\WINDOWS\system32\es.dll
 - 2005-10-20 22:25:53 1,097,728 ----a-w C:\WINDOWS\system32\esent.dll
 + 2008-04-14 02:33:24 1,097,728 ----a-w C:\WINDOWS\system32\esent.dll
 - 2004-08-05 12:00:00 195,072 ----a-w C:\WINDOWS\system32\eudcedit.e​xe
 + 2008-04-14 02:34:01 195,072 ----a-w C:\WINDOWS\system32\eudcedit.e​xe
 - 2004-08-05 12:00:00 55,808 ----a-w C:\WINDOWS\system32\eventlog.d​ll
 + 2008-04-14 02:33:24 56,320 ----a-w C:\WINDOWS\system32\eventlog.d​ll
 - 2004-08-05 12:00:00 380,957 ----a-w C:\WINDOWS\system32\expsrv.dll​
 + 2008-04-14 02:33:24 380,445 ----a-w C:\WINDOWS\system32\expsrv.dll​
 - 2007-12-07 02:08:32 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll​
 + 2008-04-23 04:16:39 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll​
 - 2004-08-05 12:00:00 45,568 ----a-w C:\WINDOWS\system32\extrac32.e​xe
 + 2008-04-14 02:34:04 24,064 ----a-w C:\WINDOWS\system32\extrac32.e​xe
 - 2004-08-05 12:00:00 121,856 ----a-w C:\WINDOWS\system32\exts.dll
 + 2008-04-14 02:33:24 125,952 ----a-w C:\WINDOWS\system32\exts.dll
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\f3ahvoas.d​ll
 + 2008-04-14 02:31:21 7,168 ----a-w C:\WINDOWS\system32\f3ahvoas.d​ll
 - 2004-08-05 12:00:00 80,896 ----a-w C:\WINDOWS\system32\faultrep.d​ll
 + 2008-04-14 02:33:24 80,896 ----a-w C:\WINDOWS\system32\faultrep.d​ll
 + 2008-04-14 02:34:04 20,992 ------w C:\WINDOWS\system32\faxpatch.e​xe
 - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\system32\feclient.d​ll
 + 2008-04-14 02:33:24 21,504 ----a-w C:\WINDOWS\system32\feclient.d​ll
 - 2004-08-05 12:00:00 348,160 ----a-w C:\WINDOWS\system32\filemgmt.d​ll
 + 2008-04-14 02:33:24 348,160 ----a-w C:\WINDOWS\system32\filemgmt.d​ll
 - 2004-08-05 12:00:00 29,184 ----a-w C:\WINDOWS\system32\findstr.ex​e
 + 2008-04-14 02:34:04 29,184 ----a-w C:\WINDOWS\system32\findstr.ex​e
 - 2004-08-05 12:00:00 88,064 ----a-w C:\WINDOWS\system32\fldrclnr.d​ll
 + 2008-04-14 02:33:24 88,064 ----a-w C:\WINDOWS\system32\fldrclnr.d​ll
 - 2006-08-21 12:26:15 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll​
 + 2008-04-14 02:33:24 16,896 ----a-w C:\WINDOWS\system32\fltlib.dll​
 - 2006-08-21 09:14:58 23,040 ----a-w C:\WINDOWS\system32\fltmc.exe
 + 2008-04-14 02:34:04 23,040 ----a-w C:\WINDOWS\system32\fltmc.exe
 - 2006-10-26 12:10:08 1,190,688 ----a-w C:\WINDOWS\system32\FM20.DLL
 + 2007-08-22 23:03:38 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL
 - 2007-12-24 09:12:01 380,832 ----a-w C:\WINDOWS\system32\FNTCACHE.D​AT
 + 2008-05-28 07:51:02 380,832 ----a-w C:\WINDOWS\system32\FNTCACHE.D​AT
 - 2004-08-05 12:00:00 386,560 ----a-w C:\WINDOWS\system32\fontext.dl​l
 + 2008-04-14 02:33:24 386,560 ----a-w C:\WINDOWS\system32\fontext.dl​l
 - 2005-10-17 21:21:08 80,896 ----a-w C:\WINDOWS\system32\fontsub.dl​l
 + 2008-04-14 02:33:24 80,896 ----a-w C:\WINDOWS\system32\fontsub.dl​l
 - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\system32\fontview.e​xe
 + 2008-04-14 02:34:04 21,504 ----a-w C:\WINDOWS\system32\fontview.e​xe
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\forcedos.e​xe
 + 2008-04-14 02:34:04 7,680 ----a-w C:\WINDOWS\system32\forcedos.e​xe
 - 2004-08-05 12:00:00 25,600 ----a-w C:\WINDOWS\system32\format.com​
 + 2008-04-14 02:34:31 29,696 ----a-w C:\WINDOWS\system32\format.com​
 + 2008-04-14 02:33:29 28,672 ------w C:\WINDOWS\system32\fr\microso​ft.managementconsole.resources​.dll
 + 2008-04-14 02:33:30 36,864 ------w C:\WINDOWS\system32\fr\mmcex.r​esources.dll
 + 2008-04-14 02:33:30 5,120 ------w C:\WINDOWS\system32\fr\mmcfxco​mmon.resources.dll
 - 2004-08-05 12:00:00 9,344 ----a-w C:\WINDOWS\system32\framebuf.d​ll
 + 2008-04-14 02:31:23 9,344 ----a-w C:\WINDOWS\system32\framebuf.d​ll
 - 2004-08-05 12:00:00 193,024 ----a-w C:\WINDOWS\system32\fsquirt.ex​e
 + 2008-04-14 02:34:04 193,024 ----a-w C:\WINDOWS\system32\fsquirt.ex​e
 - 2004-08-05 12:00:00 46,080 ----a-w C:\WINDOWS\system32\ftp.exe
 + 2008-04-14 02:34:04 46,080 ----a-w C:\WINDOWS\system32\ftp.exe
 - 2004-08-05 12:00:00 60,416 ----a-w C:\WINDOWS\system32\fwcfg.dll
 + 2008-04-14 02:33:25 60,416 ----a-w C:\WINDOWS\system32\fwcfg.dll
 + 2008-04-14 02:33:25 451,584 ----a-w C:\WINDOWS\system32\fxsapi.dll​
 - 2007-06-19 13:32:25 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
 + 2008-04-14 02:33:25 285,184 ----a-w C:\WINDOWS\system32\gdi32.dll
 - 2004-08-05 12:00:00 123,904 ----a-w C:\WINDOWS\system32\glu32.dll
 + 2008-04-14 02:33:25 123,904 ----a-w C:\WINDOWS\system32\glu32.dll
 - 2004-08-05 12:00:00 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dl​l
 + 2008-04-14 01:59:15 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dl​l
 - 2004-08-05 12:00:00 39,424 ----a-w C:\WINDOWS\system32\grpconv.ex​e
 + 2008-04-14 02:34:05 39,424 ----a-w C:\WINDOWS\system32\grpconv.ex​e
 - 2004-08-05 12:00:00 614,912 ----a-w C:\WINDOWS\system32\h323msp.dl​l
 + 2008-04-14 02:33:26 614,912 ----a-w C:\WINDOWS\system32\h323msp.dl​l
 - 2004-08-05 12:00:00 131,968 ----a-w C:\WINDOWS\system32\hal.dll
 + 2008-04-13 18:31:28 131,840 ----a-w C:\WINDOWS\system32\HAL.DLL
 - 2004-08-03 22:54:28 7,168 ----a-w C:\WINDOWS\system32\hccoin.dll​
 + 2008-04-14 02:33:26 7,168 ----a-w C:\WINDOWS\system32\hccoin.dll​
 - 2004-08-05 12:00:00 16,384 ----a-w C:\WINDOWS\system32\help.exe
 + 2008-04-14 02:34:05 17,408 ----a-w C:\WINDOWS\system32\help.exe
 - 2005-05-27 02:08:06 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dl​l
 + 2008-04-14 02:33:26 41,472 ----a-w C:\WINDOWS\system32\hhsetup.dl​l
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\hid.dll
 + 2008-04-14 02:33:26 20,992 ----a-w C:\WINDOWS\system32\hid.dll
 - 2004-08-03 22:54:28 21,504 ----a-w C:\WINDOWS\system32\hidserv.dl​l
 + 2008-04-14 02:33:26 21,504 ----a-w C:\WINDOWS\system32\hidserv.dl​l
 - 2006-07-21 08:27:28 72,704 ----a-w C:\WINDOWS\system32\hlink.dll
 + 2008-04-14 02:33:26 72,704 ----a-w C:\WINDOWS\system32\hlink.dll
 - 2004-08-05 12:00:00 347,648 ----a-w C:\WINDOWS\system32\hnetcfg.dl​l
 + 2008-04-14 02:33:26 347,136 ----a-w C:\WINDOWS\system32\hnetcfg.dl​l
 - 2004-08-05 12:00:00 336,384 ----a-w C:\WINDOWS\system32\hnetwiz.dl​l
 + 2008-04-14 02:33:26 336,384 ----a-w C:\WINDOWS\system32\hnetwiz.dl​l
 - 2004-08-05 12:00:00 146,944 ----a-w C:\WINDOWS\system32\hotplug.dl​l
 + 2008-04-14 02:33:26 146,944 ----a-w C:\WINDOWS\system32\hotplug.dl​l
 + 2008-04-14 02:33:26 32,285 ------w C:\WINDOWS\system32\hsfcisp2.d​ll
 - 2004-08-05 12:00:00 24,576 ----a-w C:\WINDOWS\system32\httpapi.dl​l
 + 2008-04-14 02:33:26 24,576 ----a-w C:\WINDOWS\system32\httpapi.dl​l
 - 2004-08-05 12:00:00 43,008 ----a-w C:\WINDOWS\system32\htui.dll
 + 2008-04-14 02:33:26 43,008 ----a-w C:\WINDOWS\system32\htui.dll
 - 2004-11-17 17:42:33 354,304 ----a-w C:\WINDOWS\system32\hypertrm.d​ll
 + 2008-04-14 02:33:26 354,304 ----a-w C:\WINDOWS\system32\hypertrm.d​ll
 - 2004-08-05 12:00:00 119,808 ----a-w C:\WINDOWS\system32\iasrad.dll​
 + 2008-04-14 02:33:26 119,808 ----a-w C:\WINDOWS\system32\iasrad.dll​
 - 2004-08-05 12:00:00 11,264 ----a-w C:\WINDOWS\system32\icaapi.dll​
 + 2008-04-14 02:33:26 11,264 ----a-w C:\WINDOWS\system32\icaapi.dll​
 - 2007-12-07 02:08:32 63,488 ----a-w C:\WINDOWS\system32\icardie.dl​l
 + 2008-04-23 04:16:39 63,488 ----a-w C:\WINDOWS\system32\icardie.dl​l
 - 2004-08-05 12:00:00 80,384 ----a-w C:\WINDOWS\system32\iccvid.dll​
 + 2008-04-14 02:33:26 80,384 ----a-w C:\WINDOWS\system32\iccvid.dll​
 - 2005-06-29 01:49:41 254,976 ----a-w C:\WINDOWS\system32\icm32.dll
 + 2008-04-14 02:33:26 254,976 ----a-w C:\WINDOWS\system32\icm32.dll
 - 2004-08-05 12:00:00 3,584 ----a-w C:\WINDOWS\system32\icmp.dll
 + 2008-04-14 02:31:30 3,584 ----a-w C:\WINDOWS\system32\icmp.dll
 - 2004-08-05 12:00:00 73,728 ----a-w C:\WINDOWS\system32\icwdial.dl​l
 + 2008-04-14 02:33:26 73,728 ----a-w C:\WINDOWS\system32\icwdial.dl​l
 - 2004-08-05 12:00:00 65,536 ----a-w C:\WINDOWS\system32\icwphbk.dl​l
 + 2008-04-14 02:33:26 65,536 ----a-w C:\WINDOWS\system32\icwphbk.dl​l
 - 2004-08-05 12:00:00 121,856 ----a-w C:\WINDOWS\system32\idq.dll
 + 2008-04-14 02:33:26 121,856 ----a-w C:\WINDOWS\system32\idq.dll
 - 2007-12-06 11:02:31 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.e​xe
 + 2008-04-22 07:41:08 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.e​xe
 - 2007-12-07 02:08:32 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dl​l
 + 2008-04-23 04:16:39 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dl​l
 - 2007-12-07 02:08:32 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dl​l
 + 2008-04-23 04:16:39 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dl​l
 - 2007-12-06 04:59:51 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll​
 + 2008-04-20 05:07:51 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll​
 - 2007-12-07 02:08:32 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.d​ll
 + 2008-04-23 04:16:39 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.d​ll
 - 2007-12-07 02:08:32 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.d​ll
 + 2008-04-23 04:16:39 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.d​ll
 - 2007-08-13 17:45:18 78,336 ----a-w C:\WINDOWS\system32\ieencode.d​ll
 + 2008-04-14 02:33:26 81,920 ----a-w C:\WINDOWS\system32\ieencode.d​ll
 - 2007-12-07 02:08:33 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dl​l
 + 2008-04-23 04:16:39 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dl​l
 - 2007-12-07 02:08:33 44,544 ----a-w C:\WINDOWS\system32\iernonce.d​ll
 + 2008-04-23 04:16:39 44,544 ----a-w C:\WINDOWS\system32\iernonce.d​ll
 - 2007-12-07 02:08:33 267,776 ----a-w C:\WINDOWS\system32\iertutil.d​ll
 + 2008-04-23 04:16:39 267,776 ----a-w C:\WINDOWS\system32\iertutil.d​ll
 - 2007-12-06 11:00:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.e​xe
 + 2008-04-22 07:39:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.e​xe
 - 2004-08-05 12:00:00 114,688 ----a-w C:\WINDOWS\system32\iexpress.e​xe
 + 2008-04-14 02:34:06 114,688 ----a-w C:\WINDOWS\system32\iexpress.e​xe
 - 2004-08-05 12:00:00 142,848 ----a-w C:\WINDOWS\system32\ifmon.dll
 + 2008-04-14 02:33:26 142,848 ----a-w C:\WINDOWS\system32\ifmon.dll
 - 2004-08-05 12:00:00 8,192 ----a-w C:\WINDOWS\system32\igmpagnt.d​ll
 + 2008-04-14 02:33:26 8,192 ----a-w C:\WINDOWS\system32\igmpagnt.d​ll
 - 2004-08-05 12:00:00 81,920 ----a-w C:\WINDOWS\system32\ils.dll
 + 2008-04-14 02:33:26 81,920 ----a-w C:\WINDOWS\system32\ils.dll
 - 2004-08-05 12:00:00 144,384 ----a-w C:\WINDOWS\system32\imagehlp.d​ll
 + 2008-04-14 02:33:26 144,384 ----a-w C:\WINDOWS\system32\imagehlp.d​ll
 - 2004-08-05 12:00:00 150,016 ----a-w C:\WINDOWS\system32\imapi.exe
 + 2008-04-14 02:34:07 150,528 ----a-w C:\WINDOWS\system32\imapi.exe
 - 2004-08-05 12:00:00 198,656 ----a-w C:\WINDOWS\system32\IME\CINTLG​NT\CINTIME.DLL
 + 2008-04-14 02:31:04 198,656 ----a-w C:\WINDOWS\system32\IME\CINTLG​NT\cintime.dll
 - 2004-08-05 12:00:00 70,144 ----a-w C:\WINDOWS\system32\IME\PINTLG​NT\PINTLPHR.EXE
 + 2008-04-13 16:43:36 70,144 ----a-w C:\WINDOWS\system32\IME\PINTLG​NT\pintlphr.exe
 - 2004-08-05 12:00:00 67,584 ----a-w C:\WINDOWS\system32\IME\PINTLG​NT\PMIGRATE.DLL
 + 2008-04-14 02:32:17 67,584 ----a-w C:\WINDOWS\system32\IME\PINTLG​NT\pmigrate.dll
 - 2004-08-05 12:00:00 10,240 ----a-w C:\WINDOWS\system32\IME\TINTLG​NT\TMIGRATE.DLL
 + 2008-04-14 02:32:42 10,240 ----a-w C:\WINDOWS\system32\IME\TINTLG​NT\tmigrate.dll
 - 2004-08-05 12:00:00 36,921 ----a-w C:\WINDOWS\system32\imeshare.d​ll
 + 2008-04-14 02:33:26 36,921 ----a-w C:\WINDOWS\system32\imeshare.d​ll
 - 2004-08-05 12:00:00 811,064 ----a-w C:\WINDOWS\system32\imjp81k.dl​l
 + 2008-04-14 02:31:33 811,064 ----a-w C:\WINDOWS\system32\imjp81k.dl​l
 - 2004-08-05 12:00:00 110,080 ----a-w C:\WINDOWS\system32\imm32.dll
 + 2008-04-14 02:33:26 110,080 ----a-w C:\WINDOWS\system32\imm32.dll
 - 2004-08-05 12:00:00 282,624 ----a-w C:\WINDOWS\system32\inetcfg.dl​l
 + 2008-04-14 02:33:26 282,624 ----a-w C:\WINDOWS\system32\inetcfg.dl​l
 - 2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\system32\inetcomm.d​ll
 + 2008-04-14 02:33:26 691,712 ----a-w C:\WINDOWS\system32\inetcomm.d​ll
 - 2004-08-05 12:00:00 33,280 ----a-w C:\WINDOWS\system32\inetmib1.d​ll
 + 2008-04-14 02:33:27 32,768 ----a-w C:\WINDOWS\system32\inetmib1.d​ll
 - 2004-08-05 12:00:00 75,264 ----a-w C:\WINDOWS\system32\inetpp.dll​
 + 2008-04-14 02:33:27 75,264 ----a-w C:\WINDOWS\system32\inetpp.dll​
 - 2004-08-05 12:00:00 16,384 ----a-w C:\WINDOWS\system32\inetppui.d​ll
 + 2008-04-14 02:33:27 16,384 ----a-w C:\WINDOWS\system32\inetppui.d​ll
 - 2004-08-05 12:00:00 50,688 ----a-w C:\WINDOWS\system32\inetres.dl​l
 + 2008-04-14 02:02:54 50,688 ----a-w C:\WINDOWS\system32\inetres.dl​l
 - 2004-08-05 12:00:00 147,456 ----a-w C:\WINDOWS\system32\initpki.dl​l
 + 2008-04-14 02:33:27 147,456 ----a-w C:\WINDOWS\system32\initpki.dl​l
 - 2004-08-05 12:00:00 126,464 ----a-w C:\WINDOWS\system32\input.dll
 + 2008-04-14 02:33:27 126,464 ----a-w C:\WINDOWS\system32\input.dll
 - 2004-08-05 12:00:00 58,368 ----a-w C:\WINDOWS\system32\ipconfig.e​xe
 + 2008-04-14 02:34:08 58,368 ----a-w C:\WINDOWS\system32\ipconfig.e​xe
 - 2006-05-19 13:23:35 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.d​ll
 + 2008-04-14 02:33:27 95,744 ----a-w C:\WINDOWS\system32\iphlpapi.d​ll
 - 2004-08-05 12:00:00 167,424 ----a-w C:\WINDOWS\system32\ipmontr.dl​l
 + 2008-04-14 02:33:27 174,592 ----a-w C:\WINDOWS\system32\ipmontr.dl​l
 - 2004-08-05 12:00:00 332,800 ----a-w C:\WINDOWS\system32\ipnathlp.d​ll
 + 2008-04-14 02:33:27 332,800 ----a-w C:\WINDOWS\system32\ipnathlp.d​ll
 - 2004-08-05 12:00:00 355,840 ----a-w C:\WINDOWS\system32\ippromon.d​ll
 + 2008-04-14 02:33:27 355,840 ----a-w C:\WINDOWS\system32\ippromon.d​ll
 - 2004-08-05 12:00:00 169,984 ----a-w C:\WINDOWS\system32\iprtrmgr.d​ll
 + 2008-04-14 02:33:27 177,152 ----a-w C:\WINDOWS\system32\iprtrmgr.d​ll
 - 2004-08-05 12:00:00 361,472 ----a-w C:\WINDOWS\system32\ipsecsnp.d​ll
 + 2008-04-14 02:33:27 361,472 ----a-w C:\WINDOWS\system32\ipsecsnp.d​ll
 - 2004-08-05 12:00:00 184,320 ----a-w C:\WINDOWS\system32\ipsecsvc.d​ll
 + 2008-04-14 02:33:27 185,344 ----a-w C:\WINDOWS\system32\ipsecsvc.d​ll
 - 2004-08-05 12:00:00 388,096 ----a-w C:\WINDOWS\system32\ipsmsnap.d​ll
 + 2008-04-14 02:33:27 388,096 ----a-w C:\WINDOWS\system32\ipsmsnap.d​ll
 - 2004-08-05 12:00:00 53,760 ----a-w C:\WINDOWS\system32\ipv6.exe
 + 2008-04-14 02:34:08 53,760 ----a-w C:\WINDOWS\system32\ipv6.exe
 - 2004-08-05 12:00:00 59,904 ----a-w C:\WINDOWS\system32\ipv6mon.dl​l
 + 2008-04-14 02:33:27 59,904 ----a-w C:\WINDOWS\system32\ipv6mon.dl​l
 - 2004-08-05 12:00:00 24,576 ----a-w C:\WINDOWS\system32\ipxroute.e​xe
 + 2008-04-14 02:34:08 24,576 ----a-w C:\WINDOWS\system32\ipxroute.e​xe
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\ipxwan.dll​
 + 2008-04-14 02:33:27 22,016 ----a-w C:\WINDOWS\system32\ipxwan.dll​
 - 2004-08-05 12:00:00 120,320 ----a-w C:\WINDOWS\system32\ir41_qc.dl​l
 + 2008-04-14 02:33:27 120,320 ----a-w C:\WINDOWS\system32\ir41_qc.dl​l
 - 2004-08-05 12:00:00 338,432 ----a-w C:\WINDOWS\system32\ir41_qcx.d​ll
 + 2008-04-14 02:33:27 338,432 ----a-w C:\WINDOWS\system32\ir41_qcx.d​ll
 - 2004-08-05 12:00:00 755,200 ----a-w C:\WINDOWS\system32\ir50_32.dl​l
 + 2008-04-14 02:33:27 755,200 ----a-w C:\WINDOWS\system32\ir50_32.dl​l
 - 2004-08-05 12:00:00 200,192 ----a-w C:\WINDOWS\system32\ir50_qc.dl​l
 + 2008-04-14 02:33:27 200,192 ----a-w C:\WINDOWS\system32\ir50_qc.dl​l
 - 2004-08-05 12:00:00 183,808 ----a-w C:\WINDOWS\system32\ir50_qcx.d​ll
 + 2008-04-14 02:33:27 183,808 ----a-w C:\WINDOWS\system32\ir50_qcx.d​ll
 - 2004-08-05 12:00:00 86,016 ----a-w C:\WINDOWS\system32\isign32.dl​l
 + 2008-04-14 02:33:27 86,016 ----a-w C:\WINDOWS\system32\isign32.dl​l
 - 2004-08-05 12:00:00 32,768 ----a-w C:\WINDOWS\system32\isrdbg32.d​ll
 + 2008-04-14 02:33:27 32,768 ----a-w C:\WINDOWS\system32\isrdbg32.d​ll
 - 2005-05-27 02:08:06 155,136 ----a-w C:\WINDOWS\system32\itircl.dll​
 + 2008-04-14 02:33:27 155,136 ----a-w C:\WINDOWS\system32\itircl.dll​
 - 2005-05-27 02:08:06 137,216 ----a-w C:\WINDOWS\system32\itss.dll
 + 2008-04-14 02:33:27 138,240 ----a-w C:\WINDOWS\system32\itss.dll
 - 2004-08-05 12:00:00 54,784 ----a-w C:\WINDOWS\system32\ixsso.dll
 + 2008-04-14 02:33:27 54,784 ----a-w C:\WINDOWS\system32\ixsso.dll
 - 2004-08-05 12:00:00 47,616 ----a-w C:\WINDOWS\system32\iyuv_32.dl​l
 + 2008-04-14 02:33:27 47,616 ----a-w C:\WINDOWS\system32\iyuv_32.dl​l
 - 2007-09-24 20:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe
 + 2008-02-21 23:23:35 135,168 ----a-w C:\WINDOWS\system32\java.exe
 - 2007-09-24 20:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
 + 2008-02-21 23:23:39 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
 - 2007-09-24 21:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe​
 + 2008-02-22 00:33:32 139,264 ----a-w C:\WINDOWS\system32\javaws.exe​
 - 2006-06-01 18:48:44 163,840 ----a-w C:\WINDOWS\system32\jgdw400.dl​l
 + 2008-04-14 02:33:27 163,840 ----a-w C:\WINDOWS\system32\jgdw400.dl​l
 - 2006-06-01 18:48:44 27,648 ----a-w C:\WINDOWS\system32\jgpl400.dl​l
 + 2008-04-14 02:33:27 27,648 ----a-w C:\WINDOWS\system32\jgpl400.dl​l
 - 2007-08-13 17:38:04 491,520 ----a-w C:\WINDOWS\system32\jscript.dl​l
 + 2008-05-09 10:55:00 512,000 ----a-w C:\WINDOWS\system32\jscript.dl​l
 - 2007-12-07 02:08:33 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dl​l
 + 2008-04-23 04:16:40 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dl​l
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbd101.dll​
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbd101.dll​
 - 2001-08-17 20:55:56 6,144 ----a-w C:\WINDOWS\system32\kbd106.dll​
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbd106.dll​
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbd106n.dl​l
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbd106n.dl​l
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbdax2.dll​
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdax2.dll​
 + 2008-04-14 02:31:42 6,144 ------w C:\WINDOWS\system32\kbdbhc.dll​
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdfi1.dll​
 + 2008-04-14 02:31:42 7,168 ----a-w C:\WINDOWS\system32\kbdfi1.dll​
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdibm02.d​ll
 + 2008-04-14 02:31:42 7,168 ----a-w C:\WINDOWS\system32\kbdibm02.d​ll
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbdinbe1.d​ll
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdinbe1.d​ll
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\kbdinben.d​ll
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdinben.d​ll
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\kbdinmal.d​ll
 + 2008-04-14 02:31:42 6,656 ----a-w C:\WINDOWS\system32\kbdinmal.d​ll
 + 2008-04-14 02:31:42 6,144 ------w C:\WINDOWS\system32\kbdiultn.d​ll
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\kbdlk41a.d​ll
 + 2008-04-14 02:31:42 6,656 ----a-w C:\WINDOWS\system32\kbdlk41a.d​ll
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbdlk41j.d​ll
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdlk41j.d​ll
 - 2004-08-05 12:00:00 5,632 ----a-w C:\WINDOWS\system32\kbdmaori.d​ll
 + 2008-04-14 02:31:42 5,632 ----a-w C:\WINDOWS\system32\kbdmaori.d​ll
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbdmlt47.d​ll
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdmlt47.d​ll
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\kbdmlt48.d​ll
 + 2008-04-14 02:31:42 6,144 ----a-w C:\WINDOWS\system32\kbdmlt48.d​ll
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdnec.dll​
 + 2008-04-14 02:31:42 7,168 ----a-w C:\WINDOWS\system32\kbdnec.dll​
 + 2008-04-14 02:31:42 6,144 ------w C:\WINDOWS\system32\kbdnepr.dl​l
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdno1.dll​
 + 2008-04-14 02:31:42 7,168 ----a-w C:\WINDOWS\system32\kbdno1.dll​
 + 2008-04-14 02:31:42 6,144 ------w C:\WINDOWS\system32\kbdpash.dl​l
 - 2004-08-05 12:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdsmsfi.d​ll
 + 2008-04-14 02:31:42 7,680 ----a-w C:\WINDOWS\system32\kbdsmsfi.d​ll
 - 2004-08-05 12:00:00 7,680 ----a-w C:\WINDOWS\system32\kbdsmsno.d​ll
 + 2008-04-14 02:31:42 7,680 ----a-w C:\WINDOWS\system32\kbdsmsno.d​ll
 - 2004-08-05 12:00:00 7,168 ----a-w C:\WINDOWS\system32\kbdukx.dll​
 + 2008-04-14 02:31:42 7,168 ----a-w C:\WINDOWS\system32\kbdukx.dll​
 - 2004-08-05 12:00:00 7,424 ----a-w C:\WINDOWS\system32\kd1394.dll​
 + 2008-04-13 18:31:35 7,424 ----a-w C:\WINDOWS\system32\kd1394.dll​
 - 2005-06-15 17:50:31 295,936 ----a-w C:\WINDOWS\system32\kerberos.d​ll
 + 2008-04-14 02:33:28 299,520 ----a-w C:\WINDOWS\system32\kerberos.d​ll
 - 2007-04-16 15:53:11 1,049,600 ----a-w C:\WINDOWS\system32\kernel32.d​ll
 + 2008-04-14 02:33:28 1,054,720 ----a-w C:\WINDOWS\system32\kernel32.d​ll
 + 2004-08-05 12:00:00 2,000 ----a-w C:\WINDOWS\system32\keyboard.d​rv
 - 2004-08-05 12:00:00 157,184 ----a-w C:\WINDOWS\system32\keymgr.dll​
 + 2008-04-14 02:33:28 157,184 ----a-w C:\WINDOWS\system32\keymgr.dll​
 + 2008-04-14 02:33:28 61,440 ------w C:\WINDOWS\system32\kmsvc.dll
 - 2004-08-03 22:54:30 4,096 ----a-w C:\WINDOWS\system32\ksuser.dll​
 + 2008-04-14 02:33:28 4,096 ----a-w C:\WINDOWS\system32\ksuser.dll​
 + 2008-04-14 02:33:28 37,376 ------w C:\WINDOWS\system32\l2gpstore.​dll
 - 2005-01-28 06:53:16 6,656 ----a-w C:\WINDOWS\system32\laprxy.dll​
 + 2006-10-18 19:47:14 11,264 ----a-w C:\WINDOWS\system32\LAPRXY.dll​
 - 2007-10-11 13:12:48 1,468,968 ----a-w C:\WINDOWS\system32\LegitCheck​Control.dll
 + 2008-03-20 16:06:36 1,480,232 ----a-w C:\WINDOWS\system32\LegitCheck​Control.dll
 - 2004-08-05 12:00:00 424,960 ----a-w C:\WINDOWS\system32\licdll.dll​
 + 2008-04-13 17:33:30 424,960 ----a-w C:\WINDOWS\system32\licdll.dll​
 - 2004-08-05 12:00:00 58,880 ----a-w C:\WINDOWS\system32\licwmi.dll​
 + 2008-04-14 02:33:28 58,880 ----a-w C:\WINDOWS\system32\licwmi.dll​
 - 2005-09-01 01:43:37 19,968 ----a-w C:\WINDOWS\system32\linkinfo.d​ll
 + 2008-04-14 02:33:28 19,968 ----a-w C:\WINDOWS\system32\linkinfo.d​ll
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\lmhsvc.dll​
 + 2008-04-14 02:33:28 13,824 ----a-w C:\WINDOWS\system32\lmhsvc.dll​
 - 2004-08-05 12:00:00 399,872 ----a-w C:\WINDOWS\system32\lmrt.dll
 + 2008-04-14 02:33:28 399,872 ----a-w C:\WINDOWS\system32\lmrt.dll
 - 2004-08-05 12:00:00 100,352 ----a-w C:\WINDOWS\system32\loadperf.d​ll
 + 2008-04-14 02:33:28 100,352 ----a-w C:\WINDOWS\system32\loadperf.d​ll
 - 2004-08-05 12:00:00 228,352 ----a-w C:\WINDOWS\system32\localsec.d​ll
 + 2008-04-14 02:33:28 228,352 ----a-w C:\WINDOWS\system32\localsec.d​ll
 - 2004-08-05 12:00:00 344,576 ----a-w C:\WINDOWS\system32\localspl.d​ll
 + 2008-04-14 02:33:28 346,112 ----a-w C:\WINDOWS\system32\localspl.d​ll
 - 2004-08-05 12:00:00 11,776 ----a-w C:\WINDOWS\system32\localui.dl​l
 + 2008-04-14 02:33:28 11,776 ----a-w C:\WINDOWS\system32\localui.dl​l
 - 2004-08-05 12:00:00 75,264 ----a-w C:\WINDOWS\system32\locator.ex​e
 + 2008-04-14 02:34:09 75,264 ----a-w C:\WINDOWS\system32\locator.ex​e
 - 2005-01-27 23:21:46 96,768 ----a-w C:\WINDOWS\system32\logagent.e​xe
 + 2006-10-18 18:03:58 100,864 ----a-w C:\WINDOWS\system32\logagent.e​xe
 - 2004-08-05 12:00:00 61,952 ----a-w C:\WINDOWS\system32\logman.exe​
 + 2008-04-14 02:34:09 61,952 ----a-w C:\WINDOWS\system32\logman.exe​
 - 2004-08-05 12:00:00 221,696 ----a-w C:\WINDOWS\system32\logon.scr
 + 2008-04-14 02:34:32 221,696 ----a-w C:\WINDOWS\system32\logon.scr
 - 2004-08-05 12:00:00 515,584 ----a-w C:\WINDOWS\system32\logonui.ex​e
 + 2008-04-14 02:34:09 515,584 ----a-w C:\WINDOWS\system32\logonui.ex​e
 - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\system32\lpk.dll
 + 2008-04-14 02:33:28 22,016 ----a-w C:\WINDOWS\system32\lpk.dll
 - 2004-08-05 12:00:00 10,240 ----a-w C:\WINDOWS\system32\lprhelp.dl​l
 + 2008-04-14 02:33:28 10,240 ----a-w C:\WINDOWS\system32\lprhelp.dl​l
 - 2007-11-07 09:28:31 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll​
 + 2008-04-14 02:33:28 734,720 ----a-w C:\WINDOWS\system32\lsasrv.dll​
 - 2004-08-05 12:00:00 13,312 ----a-w C:\WINDOWS\system32\lsass.exe
 + 2008-04-14 02:34:09 13,312 ----a-w C:\WINDOWS\system32\lsass.exe
 + 2004-08-05 12:00:00 2,560 ----a-w C:\WINDOWS\system32\lz32.dll
 + 2008-07-04 20:32:32 53,248 ----a-w C:\WINDOWS\system32\Macromed\S​hockwave 10\PostUpdate.exe
 - 2004-08-05 12:00:00 73,216 ----a-w C:\WINDOWS\system32\magnify.ex​e
 + 2008-04-14 02:34:10 73,216 ----a-w C:\WINDOWS\system32\magnify.ex​e
 - 2004-08-05 12:00:00 85,504 ----a-w C:\WINDOWS\system32\makecab.ex​e
 + 2008-04-14 02:34:10 57,344 ----a-w C:\WINDOWS\system32\makecab.ex​e
 - 2004-08-05 12:00:00 14,848 ----a-w C:\WINDOWS\system32\mcastmib.d​ll
 + 2008-04-14 02:33:28 14,336 ----a-w C:\WINDOWS\system32\mcastmib.d​ll
 - 2004-08-05 12:00:00 85,504 ----a-w C:\WINDOWS\system32\mciavi32.d​ll
 + 2008-04-14 02:33:28 85,504 ----a-w C:\WINDOWS\system32\mciavi32.d​ll
 - 2004-08-05 12:00:00 35,328 ----a-w C:\WINDOWS\system32\mciqtz32.d​ll
 + 2008-04-14 02:33:28 35,328 ----a-w C:\WINDOWS\system32\mciqtz32.d​ll
 - 2004-08-05 12:00:00 23,040 ----a-w C:\WINDOWS\system32\mciseq.dll​
 + 2008-04-14 02:33:28 23,040 ----a-w C:\WINDOWS\system32\mciseq.dll​
 - 2004-08-05 12:00:00 23,552 ----a-w C:\WINDOWS\system32\mciwave.dl​l
 + 2008-04-14 02:33:28 23,552 ----a-w C:\WINDOWS\system32\mciwave.dl​l
 - 2004-08-05 12:00:00 120,320 ----a-w C:\WINDOWS\system32\mdminst.dl​l
 + 2008-04-14 02:33:28 120,320 ----a-w C:\WINDOWS\system32\mdminst.dl​l
 + 2008-04-14 02:33:28 86,016 ------w C:\WINDOWS\system32\mdmxsdk.dl​l
 - 2007-03-08 15:37:50 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll​
 + 2008-04-14 02:33:28 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll​
 - 2006-11-01 19:18:42 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll​
 + 2008-04-14 02:33:28 927,504 ----a-w C:\WINDOWS\system32\mfc40u.dll​
 - 2004-08-05 12:00:00 1,028,096 ----a-w C:\WINDOWS\system32\mfc42.dll
 + 2008-04-14 02:33:29 1,028,096 ----a-w C:\WINDOWS\system32\mfc42.dll
 - 2004-08-05 12:00:00 22,528 ----a-w C:\WINDOWS\system32\mfcsubs.dl​l
 + 2008-04-14 02:33:29 22,528 ----a-w C:\WINDOWS\system32\mfcsubs.dl​l
 + 2006-10-18 19:47:14 212,992 ------w C:\WINDOWS\system32\MFPLAT.dll​
 - 2004-08-05 12:00:00 14,848 ----a-w C:\WINDOWS\system32\mgmtapi.dl​l
 + 2008-04-14 02:33:29 14,848 ----a-w C:\WINDOWS\system32\mgmtapi.dl​l
 + 2008-04-14 02:33:29 184,320 ------w C:\WINDOWS\system32\microsoft.​managementconsole.dll
 + 2007-07-31 00:25:54 142,696 ----a-w C:\WINDOWS\system32\MicrosoftU​pdateCatalogWebControl.dll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\midimap.dl​l
 + 2008-04-14 02:33:29 18,944 ----a-w C:\WINDOWS\system32\midimap.dl​l
 - 2004-08-05 12:00:00 60,928 ----a-w C:\WINDOWS\system32\miglibnt.d​ll
 + 2008-04-14 02:33:29 60,928 ----a-w C:\WINDOWS\system32\miglibnt.d​ll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\mimefilt.d​ll
 + 2008-04-14 02:33:29 29,696 ----a-w C:\WINDOWS\system32\mimefilt.d​ll
 - 2004-08-05 12:00:00 586,240 ----a-w C:\WINDOWS\system32\mlang.dll
 + 2008-04-14 02:33:29 586,240 ----a-w C:\WINDOWS\system32\mlang.dll
 - 2004-08-05 12:00:00 816,128 ----a-w C:\WINDOWS\system32\mmc.exe
 + 2008-04-14 02:34:11 1,415,680 ----a-w C:\WINDOWS\system32\mmc.exe
 - 2004-08-05 12:00:00 79,872 ----a-w C:\WINDOWS\system32\mmcbase.dl​l
 + 2008-04-14 02:33:29 174,080 ----a-w C:\WINDOWS\system32\mmcbase.dl​l
 + 2008-04-14 02:33:30 397,312 ------w C:\WINDOWS\system32\mmcex.dll
 + 2008-04-14 02:33:30 106,496 ------w C:\WINDOWS\system32\mmcfxcommo​n.dll
 - 2004-08-05 12:00:00 1,198,080 ----a-w C:\WINDOWS\system32\mmcndmgr.d​ll
 + 2008-04-14 02:33:30 1,879,040 ----a-w C:\WINDOWS\system32\mmcndmgr.d​ll
 + 2008-04-14 02:34:11 33,792 ------w C:\WINDOWS\system32\mmcperf.ex​e
 - 2004-08-05 12:00:00 50,688 ----a-w C:\WINDOWS\system32\mmcshext.d​ll
 + 2008-04-14 02:33:30 61,440 ----a-w C:\WINDOWS\system32\mmcshext.d​ll
 - 2004-08-05 12:00:00 17,920 ----a-w C:\WINDOWS\system32\mmfutil.dl​l
 + 2008-04-14 02:33:30 17,920 ----a-w C:\WINDOWS\system32\mmfutil.dl​l
 - 2004-08-05 12:00:00 34,560 ----a-w C:\WINDOWS\system32\mnmdd.dll
 + 2008-04-14 02:33:30 34,560 ----a-w C:\WINDOWS\system32\mnmdd.dll
 - 2004-08-05 12:00:00 32,768 ----a-w C:\WINDOWS\system32\mnmsrvc.ex​e
 + 2008-04-14 02:34:11 32,768 ----a-w C:\WINDOWS\system32\mnmsrvc.ex​e
 - 2004-08-05 12:00:00 210,432 ----a-w C:\WINDOWS\system32\mobsync.dl​l
 + 2008-04-14 02:33:30 210,432 ----a-w C:\WINDOWS\system32\mobsync.dl​l
 - 2004-08-05 12:00:00 144,384 ----a-w C:\WINDOWS\system32\mobsync.ex​e
 + 2008-04-14 02:34:11 143,872 ----a-w C:\WINDOWS\system32\mobsync.ex​e
 - 2004-08-05 12:00:00 156,160 ----a-w C:\WINDOWS\system32\modemui.dl​l
 + 2008-04-14 02:33:30 156,160 ----a-w C:\WINDOWS\system32\modemui.dl​l
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\more.com
 + 2008-04-14 02:34:31 16,896 ----a-w C:\WINDOWS\system32\more.com
 - 2004-08-05 12:00:00 216,064 ----a-w C:\WINDOWS\system32\moricons.d​ll
 + 2008-04-13 16:45:30 216,064 ----a-w C:\WINDOWS\system32\moricons.d​ll
 + 2004-08-05 12:00:00 2,032 ----a-w C:\WINDOWS\system32\mouse.drv
 + 2006-10-18 19:47:14 259,072 ------w C:\WINDOWS\system32\MP43DECD.d​ll
 - 2004-08-05 12:00:00 310,272 ----a-w C:\WINDOWS\system32\mp43dmod.d​ll
 + 2006-10-18 19:47:14 4,096 ----a-w C:\WINDOWS\system32\MP43DMOD.d​ll
 + 2006-10-18 19:47:14 317,440 ------w C:\WINDOWS\system32\MP4SDECD.d​ll
 - 2004-08-05 12:00:00 384,512 ----a-w C:\WINDOWS\system32\mp4sdmod.d​ll
 + 2006-10-18 19:47:14 4,096 ----a-w C:\WINDOWS\system32\MP4SDMOD.d​ll
 + 2006-10-18 19:47:14 259,072 ------w C:\WINDOWS\system32\MPG4DECD.d​ll
 - 2004-08-05 12:00:00 240,640 ----a-w C:\WINDOWS\system32\mpg4dmod.d​ll
 + 2006-10-18 19:47:14 4,096 ----a-w C:\WINDOWS\system32\MPG4DMOD.d​ll
 - 2004-08-05 12:00:00 124,928 ----a-w C:\WINDOWS\system32\mplay32.ex​e
 + 2008-04-14 02:34:12 124,928 ----a-w C:\WINDOWS\system32\mplay32.ex​e
 - 2004-08-05 12:00:00 59,904 ----a-w C:\WINDOWS\system32\mpr.dll
 + 2008-04-14 02:33:30 59,904 ----a-w C:\WINDOWS\system32\mpr.dll
 - 2004-08-05 12:00:00 87,040 ----a-w C:\WINDOWS\system32\mprapi.dll​
 + 2008-04-14 02:33:30 87,040 ----a-w C:\WINDOWS\system32\mprapi.dll​
 - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\system32\mprdim.dll​
 + 2008-04-14 02:33:30 53,248 ----a-w C:\WINDOWS\system32\mprdim.dll​
 - 2008-03-05 16:30:54 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe
 + 2008-06-25 16:15:46 17,972,344 ----a-w C:\WINDOWS\system32\MRT.exe
 - 2004-08-05 12:00:00 72,192 ----a-w C:\WINDOWS\system32\msacm32.dl​l
 + 2008-04-14 02:33:30 72,192 ----a-w C:\WINDOWS\system32\msacm32.dl​l
 - 2004-08-05 12:00:00 3,584 ----a-w C:\WINDOWS\system32\msafd.dll
 + 2008-04-14 02:31:51 3,584 ----a-w C:\WINDOWS\system32\msafd.dll
 - 2004-08-05 12:00:00 86,016 ----a-w C:\WINDOWS\system32\msapsspc.d​ll
 + 2008-04-14 02:33:30 86,016 ----a-w C:\WINDOWS\system32\msapsspc.d​ll
 - 2004-08-05 12:00:00 57,344 ----a-w C:\WINDOWS\system32\msasn1.dll​
 + 2008-04-14 02:33:30 57,344 ----a-w C:\WINDOWS\system32\msasn1.dll​
 - 2005-06-29 01:49:41 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
 + 2008-04-14 02:33:30 73,728 ----a-w C:\WINDOWS\system32\mscms.dll
 - 2004-08-05 12:00:00 69,632 ----a-w C:\WINDOWS\system32\msconf.dll​
 + 2008-04-14 02:33:30 69,632 ----a-w C:\WINDOWS\system32\msconf.dll​
 - 2006-12-22 10:28:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dl​l
 + 2007-10-23 23:47:38 282,112 ----a-w C:\WINDOWS\system32\mscoree.dl​l
 - 2005-09-23 05:28:52 150,016 ----a-w C:\WINDOWS\system32\mscorier.d​ll
 + 2007-10-23 23:47:38 158,720 ----a-w C:\WINDOWS\system32\mscorier.d​ll
 - 2005-09-23 05:28:52 74,240 ----a-w C:\WINDOWS\system32\mscories.d​ll
 + 2007-10-23 23:47:38 84,480 ----a-w C:\WINDOWS\system32\mscories.d​ll
 - 2004-08-05 12:00:00 12,288 ----a-w C:\WINDOWS\system32\mscpx32r.d​LL
 + 2008-04-13 17:26:07 12,288 ----a-w C:\WINDOWS\system32\mscpx32r.d​ll
 - 2004-08-05 12:00:00 36,864 ----a-w C:\WINDOWS\system32\mscpxl32.d​LL
 + 2008-04-14 02:33:30 36,864 ----a-w C:\WINDOWS\system32\mscpxl32.d​ll
 - 2004-08-05 12:00:00 294,400 ----a-w C:\WINDOWS\system32\MSCTF.dll
 + 2008-04-14 02:33:30 297,984 ----a-w C:\WINDOWS\system32\msctf.dll
 - 2004-08-05 12:00:00 69,120 ----a-w C:\WINDOWS\system32\MSCTFP.dll​
 + 2008-04-14 02:33:30 68,608 ----a-w C:\WINDOWS\system32\msctfp.dll​
 - 2004-08-05 12:00:00 118,784 ----a-w C:\WINDOWS\system32\msdadiag.d​ll
 + 2008-04-14 02:33:30 118,784 ----a-w C:\WINDOWS\system32\msdadiag.d​ll
 - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\system32\msdart.dll​
 + 2008-04-14 02:33:31 151,552 ----a-w C:\WINDOWS\system32\msdart.dll​
 + 2006-10-02 13:28:42 312,128 ------w C:\WINDOWS\system32\msdelta.dl​l
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\msdmo.dll
 + 2008-04-14 02:33:31 14,336 ----a-w C:\WINDOWS\system32\msdmo.dll
 - 2004-08-05 12:00:00 6,144 ----a-w C:\WINDOWS\system32\msdtc.exe
 + 2008-04-14 02:34:12 6,144 ----a-w C:\WINDOWS\system32\msdtc.exe
 - 2004-08-05 12:00:00 58,880 ----a-w C:\WINDOWS\system32\msdtclog.d​ll
 + 2008-04-14 02:33:31 58,880 ----a-w C:\WINDOWS\system32\msdtclog.d​ll
 - 2006-03-01 19:43:50 426,496 ----a-w C:\WINDOWS\system32\msdtcprx.d​ll
 + 2008-04-14 02:33:31 427,008 ----a-w C:\WINDOWS\system32\msdtcprx.d​ll
 - 2006-03-01 19:43:50 956,416 ----a-w C:\WINDOWS\system32\msdtctm.dl​l
 + 2008-04-14 02:33:31 956,928 ----a-w C:\WINDOWS\system32\msdtctm.dl​l
 - 2006-03-01 19:43:51 161,280 ----a-w C:\WINDOWS\system32\msdtcuiu.d​ll
 + 2008-04-14 02:33:31 161,792 ----a-w C:\WINDOWS\system32\msdtcuiu.d​ll
 - 2004-08-05 12:00:00 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dl​l
 + 2008-04-14 02:31:53 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dl​l
 - 2004-08-05 12:00:00 512,029 ----a-w C:\WINDOWS\system32\msexch40.d​ll
 + 2008-03-25 04:50:28 518,944 ----a-w C:\WINDOWS\system32\msexch40.d​ll
 - 2004-08-05 12:00:00 319,517 ----a-w C:\WINDOWS\system32\msexcl40.d​ll
 + 2008-03-25 04:50:30 326,432 ----a-w C:\WINDOWS\system32\msexcl40.d​ll
 - 2007-12-07 02:08:33 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dl​l
 + 2008-04-23 04:16:40 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dl​l
 - 2007-12-07 02:08:33 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.​dll
 + 2008-04-23 04:16:40 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.​dll
 - 2006-11-27 14:55:30 539,136 ----a-w C:\WINDOWS\system32\msftedit.d​ll
 + 2008-04-14 02:33:31 539,136 ----a-w C:\WINDOWS\system32\msftedit.d​ll
 - 2004-08-05 12:00:00 1,004,032 ----a-w C:\WINDOWS\system32\msgina.dll​
 + 2008-04-14 02:33:31 1,007,104 ----a-w C:\WINDOWS\system32\msgina.dll​
 - 2004-08-05 12:00:00 33,792 ----a-w C:\WINDOWS\system32\msgsvc.dll​
 + 2008-04-14 02:33:31 33,792 ----a-w C:\WINDOWS\system32\msgsvc.dll​
 - 2004-08-05 12:00:00 188,416 ----a-w C:\WINDOWS\system32\msh261.drv​
 + 2008-04-14 02:34:34 188,416 ----a-w C:\WINDOWS\system32\msh261.drv​
 - 2004-08-05 12:00:00 294,912 ----a-w C:\WINDOWS\system32\msh263.drv​
 + 2008-04-14 02:34:34 294,912 ----a-w C:\WINDOWS\system32\msh263.drv​
 - 2007-12-08 05:08:36 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll​
 + 2008-04-23 20:16:42 3,591,680 ----a-w C:\WINDOWS\system32\mshtml.dll​
 - 2007-12-07 02:08:34 478,208 ----a-w C:\WINDOWS\system32\mshtmled.d​ll
 + 2008-04-23 04:16:40 478,208 ----a-w C:\WINDOWS\system32\mshtmled.d​ll
 - 2007-04-18 16:14:18 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
 + 2008-04-14 02:33:32 2,843,136 ----a-w C:\WINDOWS\system32\msi.dll
 - 2004-08-05 12:00:00 51,712 ----a-w C:\WINDOWS\system32\msident.dl​l
 + 2008-04-14 02:33:32 51,712 ----a-w C:\WINDOWS\system32\msident.dl​l
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\msidle.dll​
 + 2008-04-14 02:33:32 6,656 ----a-w C:\WINDOWS\system32\msidle.dll​
 - 2004-08-05 12:00:00 252,416 ----a-w C:\WINDOWS\system32\msieftp.dl​l
 + 2008-04-14 02:33:32 252,416 ----a-w C:\WINDOWS\system32\msieftp.dl​l
 - 2005-05-04 12:45:36 78,848 ----a-w C:\WINDOWS\system32\msiexec.ex​e
 + 2008-04-14 02:34:13 78,848 ----a-w C:\WINDOWS\system32\msiexec.ex​e
 - 2005-05-04 12:45:36 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll​
 + 2008-04-14 02:33:32 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll​
 - 2004-08-05 12:00:00 4,608 ----a-w C:\WINDOWS\system32\msimg32.dl​l
 + 2008-04-14 02:33:32 4,608 ----a-w C:\WINDOWS\system32\msimg32.dl​l
 - 2005-05-04 12:45:36 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll​
 + 2008-04-13 15:39:43 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll​
 - 2004-08-05 12:00:00 159,232 ----a-w C:\WINDOWS\system32\MSIMTF.dll​
 + 2008-04-14 02:33:32 159,232 ----a-w C:\WINDOWS\system32\msimtf.dll​
 - 2005-05-04 12:45:36 15,360 ----a-w C:\WINDOWS\system32\msisip.dll​
 + 2008-04-14 02:33:32 15,360 ----a-w C:\WINDOWS\system32\msisip.dll​
 - 2004-08-05 12:00:00 1,507,356 ----a-w C:\WINDOWS\system32\msjet40.dl​l
 + 2008-03-25 04:50:34 1,516,568 ----a-w C:\WINDOWS\system32\msjet40.dl​l
 - 2004-08-05 12:00:00 358,976 ----a-w C:\WINDOWS\system32\msjetoledb​40.dll
 + 2008-03-25 04:50:40 355,112 ----a-w C:\WINDOWS\system32\msjetoledb​40.dll
 - 2004-08-05 12:00:00 184,351 ----a-w C:\WINDOWS\system32\msjint40.d​ll
 + 2008-03-25 04:51:08 194,144 ----a-w C:\WINDOWS\system32\msjint40.d​ll
 - 2004-08-05 12:00:00 53,279 ----a-w C:\WINDOWS\system32\msjter40.d​ll
 + 2008-03-25 04:50:42 60,192 ----a-w C:\WINDOWS\system32\msjter40.d​ll
 - 2004-08-05 12:00:00 241,693 ----a-w C:\WINDOWS\system32\msjtes40.d​ll
 + 2008-03-25 04:50:42 248,608 ----a-w C:\WINDOWS\system32\msjtes40.d​ll
 - 2004-08-05 12:00:00 25,600 ----a-w C:\WINDOWS\system32\mslbui.dll​
 + 2008-04-14 02:33:32 25,600 ----a-w C:\WINDOWS\system32\mslbui.dll​
 - 2004-08-05 12:00:00 213,023 ----a-w C:\WINDOWS\system32\msltus40.d​ll
 + 2008-03-25 04:50:44 219,936 ----a-w C:\WINDOWS\system32\msltus40.d​ll
 - 2005-01-28 06:53:22 142,336 ----a-w C:\WINDOWS\system32\msnetobj.d​ll
 + 2006-10-18 19:47:16 179,712 ----a-w C:\WINDOWS\system32\msnetobj.d​ll
 - 2004-08-05 12:00:00 290,816 ----a-w C:\WINDOWS\system32\msnsspc.dl​l
 + 2008-04-14 02:33:32 290,816 ----a-w C:\WINDOWS\system32\msnsspc.dl​l
 - 2004-08-05 12:00:00 252,928 ----a-w C:\WINDOWS\system32\msoeacct.d​ll
 + 2008-04-14 02:33:32 252,928 ----a-w C:\WINDOWS\system32\

n°413187
chef.manu
Posté le 27-07-2008 à 01:46:12  answer
Prévenir les modérateurs en cas d'abus
 

Rapport combofix suite et fin

 + 2008-04-14 02:33:32 19,456 ----a-w C:\WINDOWS\system32\oobe\msobw​eb.dll
 - 2004-08-05 12:00:00 28,160 ----a-w C:\WINDOWS\system32\oobe\msoob​e.exe
 + 2008-04-14 02:34:13 29,184 ----a-w C:\WINDOWS\system32\oobe\msoob​e.exe
 - 2004-08-05 12:00:00 51,712 ----a-w C:\WINDOWS\system32\oobe\oobeb​aln.exe
 + 2008-04-14 02:34:17 51,712 ----a-w C:\WINDOWS\system32\oobe\oobeb​aln.exe
 - 2004-08-05 12:00:00 713,728 ----a-w C:\WINDOWS\system32\opengl32.d​ll
 + 2008-04-14 02:33:38 713,728 ----a-w C:\WINDOWS\system32\opengl32.d​ll
 - 2004-08-05 12:00:00 216,576 ----a-w C:\WINDOWS\system32\osk.exe
 + 2008-04-14 02:34:17 216,576 ----a-w C:\WINDOWS\system32\osk.exe
 - 2004-08-05 12:00:00 68,096 ----a-w C:\WINDOWS\system32\osuninst.d​ll
 + 2008-04-14 02:33:38 68,096 ----a-w C:\WINDOWS\system32\osuninst.d​ll
 - 2004-08-05 12:00:00 116,224 ----a-w C:\WINDOWS\system32\p2p.dll
 + 2008-04-14 02:33:38 153,600 ----a-w C:\WINDOWS\system32\p2p.dll
 - 2004-08-05 12:00:00 86,016 ----a-w C:\WINDOWS\system32\p2pgasvc.d​ll
 + 2008-04-14 02:33:38 105,472 ----a-w C:\WINDOWS\system32\p2pgasvc.d​ll
 - 2004-08-05 12:00:00 312,320 ----a-w C:\WINDOWS\system32\p2pgraph.d​ll
 + 2008-04-14 02:33:38 313,856 ----a-w C:\WINDOWS\system32\p2pgraph.d​ll
 - 2004-08-05 12:00:00 88,064 ----a-w C:\WINDOWS\system32\p2pnetsh.d​ll
 + 2008-04-14 02:33:38 115,712 ----a-w C:\WINDOWS\system32\p2pnetsh.d​ll
 - 2004-08-05 12:00:00 526,848 ----a-w C:\WINDOWS\system32\p2psvc.dll​
 + 2008-04-14 02:33:38 554,496 ----a-w C:\WINDOWS\system32\p2psvc.dll​
 - 2004-08-05 12:00:00 59,904 ----a-w C:\WINDOWS\system32\packager.e​xe
 + 2008-04-14 02:34:17 59,904 ----a-w C:\WINDOWS\system32\packager.e​xe
 - 2004-08-05 12:00:00 65,024 ----a-w C:\WINDOWS\system32\pautoenr.d​ll
 + 2008-04-14 02:33:38 69,632 ----a-w C:\WINDOWS\system32\pautoenr.d​ll
 - 2004-08-05 12:00:00 286,208 ----a-w C:\WINDOWS\system32\pdh.dll
 + 2008-04-14 02:33:38 286,720 ----a-w C:\WINDOWS\system32\pdh.dll
 - 2007-11-12 08:40:40 63,324 ----a-w C:\WINDOWS\system32\perfc009.d​at
 + 2008-05-28 07:54:32 64,508 ----a-w C:\WINDOWS\system32\perfc009.d​at
 - 2007-11-12 08:40:40 76,384 ----a-w C:\WINDOWS\system32\perfc00C.d​at
 + 2008-05-28 07:54:32 78,156 ----a-w C:\WINDOWS\system32\perfc00C.d​at
 - 2004-08-05 12:00:00 42,496 ----a-w C:\WINDOWS\system32\perfctrs.d​ll
 + 2008-04-14 02:33:38 42,496 ----a-w C:\WINDOWS\system32\perfctrs.d​ll
 - 2004-08-05 12:00:00 27,136 ----a-w C:\WINDOWS\system32\perfdisk.d​ll
 + 2008-04-14 02:33:38 27,136 ----a-w C:\WINDOWS\system32\perfdisk.d​ll
 - 2007-11-12 08:40:40 404,104 ----a-w C:\WINDOWS\system32\perfh009.d​at
 + 2008-05-28 07:54:32 409,368 ----a-w C:\WINDOWS\system32\perfh009.d​at
 - 2007-11-12 08:40:40 471,246 ----a-w C:\WINDOWS\system32\perfh00C.d​at
 + 2008-05-28 07:54:33 477,490 ----a-w C:\WINDOWS\system32\perfh00C.d​at
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\perfmon.ex​e
 + 2008-04-14 02:34:17 15,872 ----a-w C:\WINDOWS\system32\perfmon.ex​e
 - 2004-08-05 12:00:00 17,408 ----a-w C:\WINDOWS\system32\perfnet.dl​l
 + 2008-04-14 02:33:38 18,432 ----a-w C:\WINDOWS\system32\perfnet.dl​l
 - 2004-08-05 12:00:00 26,624 ----a-w C:\WINDOWS\system32\perfos.dll​
 + 2008-04-14 02:33:38 26,624 ----a-w C:\WINDOWS\system32\perfos.dll​
 - 2004-08-05 12:00:00 35,840 ----a-w C:\WINDOWS\system32\perfproc.d​ll
 + 2008-04-14 02:33:38 35,840 ----a-w C:\WINDOWS\system32\perfproc.d​ll
 + 2008-04-14 02:33:38 412,160 ------w C:\WINDOWS\system32\photometad​atahandler.dll
 + 2002-03-19 15:30:00 21,504 ----a-w C:\WINDOWS\system32\phototoys.​dll
 - 2004-08-05 12:00:00 172,032 ----a-w C:\WINDOWS\system32\photowiz.d​ll
 + 2008-04-14 02:33:38 172,032 ----a-w C:\WINDOWS\system32\photowiz.d​ll
 - 2004-08-05 12:00:00 35,328 ----a-w C:\WINDOWS\system32\pid.dll
 + 2008-04-14 02:33:38 35,328 ----a-w C:\WINDOWS\system32\pid.dll
 - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\system32\pidgen.dll​
 + 2008-04-13 18:35:22 24,064 ----a-w C:\WINDOWS\system32\pidgen.dll​
 - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\system32\ping.exe
 + 2008-04-14 02:34:18 19,456 ----a-w C:\WINDOWS\system32\ping.exe
 - 2004-08-05 12:00:00 15,360 ----a-w C:\WINDOWS\system32\pjlmon.dll​
 + 2008-04-14 02:33:38 15,360 ----a-w C:\WINDOWS\system32\pjlmon.dll​
 - 2008-01-11 05:36:55 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dl​l
 + 2008-04-23 04:16:40 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dl​l
 - 2004-08-05 12:00:00 48,640 ----a-w C:\WINDOWS\system32\pnrpnsp.dl​l
 + 2008-04-14 02:33:38 58,880 ----a-w C:\WINDOWS\system32\pnrpnsp.dl​l
 - 2004-08-05 12:00:00 106,496 ----a-w C:\WINDOWS\system32\polstore.d​ll
 + 2008-04-14 02:33:38 106,496 ----a-w C:\WINDOWS\system32\polstore.d​ll
 + 2006-10-18 19:47:18 284,160 ------w C:\WINDOWS\system32\PortableDe​viceApi.dll
 + 2006-10-18 19:47:18 101,888 ------w C:\WINDOWS\system32\PortableDe​viceClassExtension.dll
 + 2006-10-18 19:47:18 166,912 ------w C:\WINDOWS\system32\PortableDe​viceTypes.dll
 + 2006-10-18 19:47:18 132,096 ------w C:\WINDOWS\system32\PortableDe​viceWiaCompat.dll
 + 2006-10-18 19:47:18 199,168 ------w C:\WINDOWS\system32\PortableDe​viceWMDRM.dll
 - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\system32\powercfg.e​xe
 + 2008-04-14 02:34:18 49,152 ----a-w C:\WINDOWS\system32\powercfg.e​xe
 - 2004-08-05 12:00:00 17,408 ----a-w C:\WINDOWS\system32\powrprof.d​ll
 + 2008-04-14 02:33:38 17,408 ----a-w C:\WINDOWS\system32\powrprof.d​ll
 - 2004-08-05 12:00:00 578,560 ----a-w C:\WINDOWS\system32\printui.dl​l
 + 2008-04-14 02:33:38 578,560 ----a-w C:\WINDOWS\system32\printui.dl​l
 - 2004-08-05 12:00:00 27,648 ----a-w C:\WINDOWS\system32\profmap.dl​l
 + 2008-04-14 02:33:38 27,648 ----a-w C:\WINDOWS\system32\profmap.dl​l
 - 2004-08-05 12:00:00 109,568 ----a-w C:\WINDOWS\system32\progman.ex​e
 + 2008-04-14 02:34:18 109,568 ----a-w C:\WINDOWS\system32\progman.ex​e
 - 2004-08-05 12:00:00 50,688 ----a-w C:\WINDOWS\system32\proquota.e​xe
 + 2008-04-14 02:34:18 50,688 ----a-w C:\WINDOWS\system32\proquota.e​xe
 - 2004-08-05 12:00:00 9,728 ----a-w C:\WINDOWS\system32\proxycfg.e​xe
 + 2008-04-14 02:34:18 9,728 ----a-w C:\WINDOWS\system32\proxycfg.e​xe
 - 2004-08-05 12:00:00 23,040 ----a-w C:\WINDOWS\system32\psapi.dll
 + 2008-04-14 02:33:38 23,040 ----a-w C:\WINDOWS\system32\psapi.dll
 - 2004-08-05 12:00:00 98,816 ----a-w C:\WINDOWS\system32\psbase.dll​
 + 2008-04-14 02:33:38 98,816 ----a-w C:\WINDOWS\system32\psbase.dll​
 - 2004-08-05 12:00:00 43,520 ----a-w C:\WINDOWS\system32\pstorec.dl​l
 + 2008-04-14 02:33:38 43,520 ----a-w C:\WINDOWS\system32\pstorec.dl​l
 - 2004-08-05 12:00:00 34,304 ----a-w C:\WINDOWS\system32\pstorsvc.d​ll
 + 2008-04-14 02:33:38 34,304 ----a-w C:\WINDOWS\system32\pstorsvc.d​ll
 + 2008-04-14 02:33:39 151,040 ------w C:\WINDOWS\system32\qagent.dll​
 + 2008-04-14 02:33:39 293,376 ------w C:\WINDOWS\system32\qagentrt.d​ll
 - 2005-01-28 06:53:22 221,184 ----a-w C:\WINDOWS\system32\qasf.dll
 + 2006-10-18 19:47:18 211,456 ----a-w C:\WINDOWS\system32\qasf.dll
 - 2004-08-05 12:00:00 192,512 ----a-w C:\WINDOWS\system32\qcap.dll
 + 2008-04-14 02:33:39 192,512 ----a-w C:\WINDOWS\system32\qcap.dll
 + 2008-04-14 02:33:39 62,464 ------w C:\WINDOWS\system32\qcliprov.d​ll
 - 2004-08-05 12:00:00 279,040 ----a-w C:\WINDOWS\system32\qdv.dll
 + 2008-04-14 02:33:39 279,040 ----a-w C:\WINDOWS\system32\qdv.dll
 - 2004-08-05 12:00:00 386,048 ----a-w C:\WINDOWS\system32\qdvd.dll
 + 2008-04-14 02:33:39 387,072 ----a-w C:\WINDOWS\system32\qdvd.dll
 - 2004-08-05 12:00:00 563,200 ----a-w C:\WINDOWS\system32\qedit.dll
 + 2008-04-14 02:33:39 563,200 ----a-w C:\WINDOWS\system32\qedit.dll
 - 2004-08-05 12:00:00 733,696 ----a-w C:\WINDOWS\system32\qedwipes.d​ll
 + 2008-04-13 17:21:32 733,696 ----a-w C:\WINDOWS\system32\qedwipes.d​ll
 - 2004-08-05 12:00:00 382,464 ----a-w C:\WINDOWS\system32\qmgr.dll
 + 2008-04-14 02:33:39 409,088 ----a-w C:\WINDOWS\system32\qmgr.dll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\qmgrprxy.d​ll
 + 2008-04-14 02:33:39 18,944 ----a-w C:\WINDOWS\system32\qmgrprxy.d​ll
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\qprocess.e​xe
 + 2008-04-14 02:34:18 20,992 ----a-w C:\WINDOWS\system32\qprocess.e​xe
 - 2007-10-29 22:43:32 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll​
 + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\system32\quartz.dll​
 - 2006-06-22 05:13:46 1,440,768 ----a-w C:\WINDOWS\system32\query.dll
 + 2008-04-14 02:33:39 1,440,768 ----a-w C:\WINDOWS\system32\query.dll
 + 2008-04-14 02:33:39 76,800 ------w C:\WINDOWS\system32\qutil.dll
 - 2004-08-05 12:00:00 43,520 ----a-w C:\WINDOWS\system32\racpldlg.d​ll
 + 2008-04-14 02:33:39 43,520 ----a-w C:\WINDOWS\system32\racpldlg.d​ll
 - 2006-06-26 17:41:32 8,192 ----a-w C:\WINDOWS\system32\rasadhlp.d​ll
 + 2008-04-14 02:33:39 7,680 ----a-w C:\WINDOWS\system32\rasadhlp.d​ll
 - 2004-08-05 12:00:00 237,056 ----a-w C:\WINDOWS\system32\rasapi32.d​ll
 + 2008-04-14 02:33:39 237,056 ----a-w C:\WINDOWS\system32\rasapi32.d​ll
 - 2004-08-05 12:00:00 89,088 ----a-w C:\WINDOWS\system32\rasauto.dl​l
 + 2008-04-14 02:33:39 88,576 ----a-w C:\WINDOWS\system32\rasauto.dl​l
 - 2004-08-05 12:00:00 69,632 ----a-w C:\WINDOWS\system32\raschap.dl​l
 + 2008-04-14 02:33:39 79,872 ----a-w C:\WINDOWS\system32\raschap.dl​l
 - 2004-08-05 12:00:00 685,056 ----a-w C:\WINDOWS\system32\rasdlg.dll​
 + 2008-04-14 02:33:39 685,568 ----a-w C:\WINDOWS\system32\rasdlg.dll​
 - 2004-08-05 12:00:00 61,440 ----a-w C:\WINDOWS\system32\rasman.dll​
 + 2008-04-14 02:33:39 61,440 ----a-w C:\WINDOWS\system32\rasman.dll​
 - 2006-06-22 10:48:06 181,248 ----a-w C:\WINDOWS\system32\rasmans.dl​l
 + 2008-04-14 02:33:39 186,368 ----a-w C:\WINDOWS\system32\rasmans.dl​l
 - 2004-08-05 12:00:00 57,344 ----a-w C:\WINDOWS\system32\rasphone.e​xe
 + 2008-04-14 02:34:18 57,344 ----a-w C:\WINDOWS\system32\rasphone.e​xe
 - 2004-08-05 12:00:00 206,336 ----a-w C:\WINDOWS\system32\rasppp.dll​
 + 2008-04-14 02:33:39 210,944 ----a-w C:\WINDOWS\system32\rasppp.dll​
 + 2008-04-14 02:33:39 61,952 ------w C:\WINDOWS\system32\rasqec.dll​
 - 2004-08-05 12:00:00 16,896 ----a-w C:\WINDOWS\system32\rassapi.dl​l
 + 2008-04-14 02:33:39 16,384 ----a-w C:\WINDOWS\system32\rassapi.dl​l
 - 2004-08-05 12:00:00 58,880 ----a-w C:\WINDOWS\system32\rastapi.dl​l
 + 2008-04-14 02:33:39 58,368 ----a-w C:\WINDOWS\system32\rastapi.dl​l
 - 2004-08-05 12:00:00 113,152 ----a-w C:\WINDOWS\system32\rastls.dll​
 + 2008-04-14 02:33:39 151,040 ----a-w C:\WINDOWS\system32\rastls.dll​
 - 2004-08-05 12:00:00 103,424 ----a-w C:\WINDOWS\system32\rcbdyctl.d​ll
 + 2008-04-14 02:33:39 102,912 ----a-w C:\WINDOWS\system32\rcbdyctl.d​ll
 - 2004-08-05 12:00:00 35,840 ----a-w C:\WINDOWS\system32\rcimlby.ex​e
 + 2008-04-14 02:34:18 35,840 ----a-w C:\WINDOWS\system32\rcimlby.ex​e
 - 2004-08-05 12:00:00 23,040 ----a-w C:\WINDOWS\system32\rcp.exe
 + 2008-04-14 02:34:18 23,040 ----a-w C:\WINDOWS\system32\rcp.exe
 - 2004-08-05 12:00:00 147,968 ----a-w C:\WINDOWS\system32\rdchost.dl​l
 + 2008-04-14 02:33:39 147,968 ----a-w C:\WINDOWS\system32\rdchost.dl​l
 - 2004-08-05 12:00:00 62,464 ----a-w C:\WINDOWS\system32\rdpclip.ex​e
 + 2008-04-14 02:34:18 62,976 ----a-w C:\WINDOWS\system32\rdpclip.ex​e
 - 2004-08-05 12:00:00 92,168 ----a-w C:\WINDOWS\system32\rdpdd.dll
 + 2008-04-14 02:34:53 92,424 ----a-w C:\WINDOWS\system32\rdpdd.dll
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\system32\rdpsnd.dll​
 + 2008-04-14 02:33:39 19,968 ----a-w C:\WINDOWS\system32\rdpsnd.dll​
 - 2004-08-05 12:00:00 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll​
 + 2008-04-14 02:34:54 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll​
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\rdsaddin.e​xe
 + 2008-04-14 02:34:18 13,824 ----a-w C:\WINDOWS\system32\rdsaddin.e​xe
 - 2004-08-05 12:00:00 67,072 ----a-w C:\WINDOWS\system32\rdshost.ex​e
 + 2008-04-14 02:34:18 67,072 ----a-w C:\WINDOWS\system32\rdshost.ex​e
 - 2004-08-05 12:00:00 53,248 ----a-w C:\WINDOWS\system32\reg.exe
 + 2008-04-14 02:34:18 53,248 ----a-w C:\WINDOWS\system32\reg.exe
 - 2004-08-05 12:00:00 49,664 ----a-w C:\WINDOWS\system32\regapi.dll​
 + 2008-04-14 02:33:39 49,664 ----a-w C:\WINDOWS\system32\regapi.dll​
 - 2004-08-05 12:00:00 59,904 ----a-w C:\WINDOWS\system32\regsvc.dll​
 + 2008-04-14 02:33:39 59,904 ----a-w C:\WINDOWS\system32\regsvc.dll​
 - 2004-08-05 12:00:00 12,288 ----a-w C:\WINDOWS\system32\regsvr32.e​xe
 + 2008-04-14 02:34:19 12,288 ----a-w C:\WINDOWS\system32\regsvr32.e​xe
 - 2004-08-05 12:00:00 405,504 ----a-w C:\WINDOWS\system32\regwizc.dl​l
 + 2008-04-14 02:33:39 405,504 ----a-w C:\WINDOWS\system32\regwizc.dl​l
 - 2004-08-05 12:00:00 61,952 ----a-w C:\WINDOWS\system32\remotepg.d​ll
 + 2008-04-14 02:33:39 61,952 ----a-w C:\WINDOWS\system32\remotepg.d​ll
 - 2004-08-05 12:00:00 384,512 ----a-w C:\WINDOWS\system32\Restore\rs​trui.exe
 + 2008-04-14 02:34:19 384,512 ----a-w C:\WINDOWS\system32\Restore\rs​trui.exe
 - 2004-08-05 12:00:00 58,880 ----a-w C:\WINDOWS\system32\resutils.d​ll
 + 2008-04-14 02:33:39 58,880 ----a-w C:\WINDOWS\system32\resutils.d​ll
 - 2004-08-05 12:00:00 14,848 ----a-w C:\WINDOWS\system32\rexec.exe
 + 2008-04-14 02:34:19 14,848 ----a-w C:\WINDOWS\system32\rexec.exe
 + 2008-04-14 02:33:39 290,304 ------w C:\WINDOWS\system32\rhttpaa.dl​l
 - 2006-11-27 14:55:31 433,152 ----a-w C:\WINDOWS\system32\riched20.d​ll
 + 2008-04-14 02:33:39 433,664 ----a-w C:\WINDOWS\system32\riched20.d​ll
 - 2007-07-09 13:11:46 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll​
 + 2008-04-14 02:33:39 584,704 ----a-w C:\WINDOWS\system32\rpcrt4.dll​
 - 2005-07-26 04:40:00 397,824 ----a-w C:\WINDOWS\system32\rpcss.dll
 + 2008-04-14 02:33:39 399,360 ----a-w C:\WINDOWS\system32\rpcss.dll
 - 2004-08-05 12:00:00 152,576 ----a-w C:\WINDOWS\system32\rsaenh.dll​
 + 2008-04-13 17:37:57 208,384 ----a-w C:\WINDOWS\system32\rsaenh.dll​
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\rsh.exe
 + 2008-04-14 02:34:19 15,872 ----a-w C:\WINDOWS\system32\rsh.exe
 - 2004-08-05 12:00:00 40,960 ----a-w C:\WINDOWS\system32\rshx32.dll​
 + 2008-04-14 02:33:39 40,960 ----a-w C:\WINDOWS\system32\rshx32.dll​
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\rsmps.dll
 + 2008-04-14 02:33:39 18,944 ----a-w C:\WINDOWS\system32\rsmps.dll
 - 2004-08-05 12:00:00 90,112 ----a-w C:\WINDOWS\system32\rsvpsp.dll​
 + 2008-04-14 02:33:39 92,672 ----a-w C:\WINDOWS\system32\rsvpsp.dll​
 - 2004-08-05 12:00:00 78,336 ----a-w C:\WINDOWS\system32\rtcshare.e​xe
 + 2008-04-14 02:34:20 78,336 ----a-w C:\WINDOWS\system32\rtcshare.e​xe
 - 2004-08-05 12:00:00 31,744 ----a-w C:\WINDOWS\system32\rtipxmib.d​ll
 + 2008-04-14 02:33:39 31,744 ----a-w C:\WINDOWS\system32\rtipxmib.d​ll
 - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\system32\rtutils.dl​l
 + 2008-04-14 02:33:39 44,032 ----a-w C:\WINDOWS\system32\rtutils.dl​l
 - 2004-08-05 12:00:00 33,792 ----a-w C:\WINDOWS\system32\rundll32.e​xe
 + 2008-04-14 02:34:20 33,792 ----a-w C:\WINDOWS\system32\rundll32.e​xe
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\runonce.ex​e
 + 2008-04-14 02:34:20 14,336 ----a-w C:\WINDOWS\system32\runonce.ex​e
 + 2008-04-14 02:33:39 397,056 ------w C:\WINDOWS\system32\s3gnb.dll
 - 2004-08-05 12:00:00 43,520 ----a-w C:\WINDOWS\system32\safrcdlg.d​ll
 + 2008-04-14 02:33:39 43,520 ----a-w C:\WINDOWS\system32\safrcdlg.d​ll
 - 2004-08-05 12:00:00 29,696 ----a-w C:\WINDOWS\system32\safrdm.dll​
 + 2008-04-14 02:33:39 29,696 ----a-w C:\WINDOWS\system32\safrdm.dll​
 - 2004-08-05 12:00:00 45,568 ----a-w C:\WINDOWS\system32\safrslv.dl​l
 + 2008-04-14 02:33:39 45,568 ----a-w C:\WINDOWS\system32\safrslv.dl​l
 - 2004-08-05 12:00:00 64,000 ----a-w C:\WINDOWS\system32\samlib.dll​
 + 2008-04-14 02:33:39 64,000 ----a-w C:\WINDOWS\system32\samlib.dll​
 - 2004-08-05 12:00:00 431,104 ----a-w C:\WINDOWS\system32\samsrv.dll​
 + 2008-04-14 02:33:39 431,104 ----a-w C:\WINDOWS\system32\samsrv.dll​
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\savedump.e​xe
 + 2008-04-14 02:34:20 13,824 ----a-w C:\WINDOWS\system32\savedump.e​xe
 - 2004-08-05 12:00:00 270,848 ----a-w C:\WINDOWS\system32\sbe.dll
 + 2008-04-14 02:33:39 270,848 ----a-w C:\WINDOWS\system32\sbe.dll
 - 2004-08-05 12:00:00 159,232 ----a-w C:\WINDOWS\system32\sbeio.dll
 + 2008-04-14 02:33:39 159,232 ----a-w C:\WINDOWS\system32\sbeio.dll
 - 2004-08-05 12:00:00 71,168 ----a-w C:\WINDOWS\system32\scarddlg.d​ll
 + 2008-04-14 02:33:40 71,168 ----a-w C:\WINDOWS\system32\scarddlg.d​ll
 - 2004-08-05 12:00:00 100,352 ----a-w C:\WINDOWS\system32\scardsvr.e​xe
 + 2008-04-14 02:34:20 100,352 ----a-w C:\WINDOWS\system32\scardsvr.e​xe
 - 2004-08-05 12:00:00 171,520 ----a-w C:\WINDOWS\system32\sccsccp.dl​l
 + 2008-04-14 02:33:40 171,520 ----a-w C:\WINDOWS\system32\sccsccp.dl​l
 - 2004-08-05 12:00:00 186,368 ----a-w C:\WINDOWS\system32\scecli.dll​
 + 2008-04-14 02:33:40 187,392 ----a-w C:\WINDOWS\system32\scecli.dll​
 - 2004-08-05 12:00:00 328,704 ----a-w C:\WINDOWS\system32\scesrv.dll​
 + 2008-04-14 02:33:40 329,728 ----a-w C:\WINDOWS\system32\scesrv.dll​
 - 2007-04-25 14:22:35 144,896 ----a-w C:\WINDOWS\system32\schannel.d​ll
 + 2008-04-14 02:33:40 144,384 ----a-w C:\WINDOWS\system32\schannel.d​ll
 - 2004-08-05 12:00:00 193,024 ----a-w C:\WINDOWS\system32\schedsvc.d​ll
 + 2008-04-14 02:33:40 194,560 ----a-w C:\WINDOWS\system32\schedsvc.d​ll
 - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\system32\sclgntfy.d​ll
 + 2008-04-14 02:33:40 22,016 ----a-w C:\WINDOWS\system32\sclgntfy.d​ll
 - 2004-08-05 12:00:00 9,216 ----a-w C:\WINDOWS\system32\scrnsave.s​cr
 + 2008-04-14 02:34:32 9,216 ----a-w C:\WINDOWS\system32\scrnsave.s​cr
 - 2004-08-05 12:00:00 159,744 ----a-w C:\WINDOWS\system32\scrobj.dll​
 + 2008-05-09 10:55:00 180,224 ----a-w C:\WINDOWS\system32\scrobj.dll​
 - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\system32\scrrun.dll​
 + 2008-05-09 10:55:00 172,032 ----a-w C:\WINDOWS\system32\scrrun.dll​
 - 2004-08-05 12:00:00 78,848 ----a-w C:\WINDOWS\system32\sdbinst.ex​e
 + 2008-04-14 02:34:20 78,848 ----a-w C:\WINDOWS\system32\sdbinst.ex​e
 - 2004-08-05 12:00:00 29,184 ----a-w C:\WINDOWS\system32\sdhcinst.d​ll
 + 2008-04-14 02:33:40 29,184 ----a-w C:\WINDOWS\system32\sdhcinst.d​ll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\seclogon.d​ll
 + 2008-04-14 02:33:40 18,944 ----a-w C:\WINDOWS\system32\seclogon.d​ll
 - 2004-08-05 12:00:00 55,808 ----a-w C:\WINDOWS\system32\secur32.dl​l
 + 2008-04-14 02:33:40 56,320 ----a-w C:\WINDOWS\system32\secur32.dl​l
 - 2004-08-05 12:00:00 5,632 ----a-w C:\WINDOWS\system32\security.d​ll
 + 2008-04-14 02:33:40 5,632 ----a-w C:\WINDOWS\system32\security.d​ll
 - 2004-08-05 12:00:00 29,696 ----a-w C:\WINDOWS\system32\sendcmsg.d​ll
 + 2008-04-14 02:33:40 29,696 ----a-w C:\WINDOWS\system32\sendcmsg.d​ll
 - 2004-08-05 12:00:00 55,296 ----a-w C:\WINDOWS\system32\sendmail.d​ll
 + 2008-04-14 02:33:40 55,296 ----a-w C:\WINDOWS\system32\sendmail.d​ll
 - 2004-08-05 12:00:00 38,912 ----a-w C:\WINDOWS\system32\sens.dll
 + 2008-04-14 02:33:40 39,424 ----a-w C:\WINDOWS\system32\sens.dll
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\sensapi.dl​l
 + 2008-04-14 02:33:40 7,168 ----a-w C:\WINDOWS\system32\sensapi.dl​l
 - 2004-08-05 12:00:00 56,320 ----a-w C:\WINDOWS\system32\servdeps.d​ll
 + 2008-04-14 02:33:40 56,320 ----a-w C:\WINDOWS\system32\servdeps.d​ll
 - 2004-08-05 12:00:00 108,544 ----a-w C:\WINDOWS\system32\services.e​xe
 + 2008-04-14 02:34:20 109,056 ----a-w C:\WINDOWS\system32\services.e​xe
 - 2004-08-05 12:00:00 142,336 ----a-w C:\WINDOWS\system32\sessmgr.ex​e
 + 2008-04-14 02:34:21 142,848 ----a-w C:\WINDOWS\system32\sessmgr.ex​e
 - 2004-08-05 12:00:00 32,768 ----a-w C:\WINDOWS\system32\sethc.exe
 + 2008-04-14 02:34:21 32,768 ----a-w C:\WINDOWS\system32\sethc.exe
 - 2004-08-05 12:00:00 23,040 ----a-w C:\WINDOWS\system32\setup.exe
 + 2008-04-14 02:34:21 23,040 ----a-w C:\WINDOWS\system32\setup.exe
 - 2004-08-05 12:00:00 259,584 ----a-w C:\WINDOWS\system32\Setup\coms​etup.dll
 + 2008-04-14 02:33:21 274,944 ----a-w C:\WINDOWS\system32\Setup\coms​etup.dll
 - 2004-08-05 12:00:00 32,828 ----a-w C:\WINDOWS\system32\Setup\fp40​ext.dll
 + 2008-04-14 02:33:24 32,828 ----a-w C:\WINDOWS\system32\Setup\fp40​ext.dll
 - 2004-08-05 12:00:00 132,608 ----a-w C:\WINDOWS\system32\Setup\fxso​cm.dll
 + 2008-04-14 02:33:25 132,608 ----a-w C:\WINDOWS\system32\Setup\fxso​cm.dll
 - 2004-08-05 12:00:00 508,416 ----a-w C:\WINDOWS\system32\Setup\iis.​dll
 + 2008-04-14 02:31:32 508,416 ----a-w C:\WINDOWS\system32\Setup\iis.​dll
 - 2004-08-05 12:00:00 118,784 ----a-w C:\WINDOWS\system32\Setup\imsi​nsnt.dll
 + 2008-04-14 02:33:26 126,464 ----a-w C:\WINDOWS\system32\Setup\imsi​nsnt.dll
 + 2008-04-14 02:33:28 8,192 ----a-w C:\WINDOWS\system32\Setup\koc.​dll
 - 2004-08-05 12:00:00 82,432 ----a-w C:\WINDOWS\system32\Setup\msdt​cstp.dll
 + 2008-04-14 02:33:31 90,112 ----a-w C:\WINDOWS\system32\Setup\msdt​cstp.dll
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\Setup\msgr​ocm.dll
 + 2008-04-14 02:33:31 15,360 ----a-w C:\WINDOWS\system32\Setup\msgr​ocm.dll
 - 2004-08-05 12:00:00 78,336 ----a-w C:\WINDOWS\system32\Setup\neto​c.dll
 + 2008-04-14 02:33:34 78,336 ----a-w C:\WINDOWS\system32\Setup\neto​c.dll
 - 2004-08-05 12:00:00 63,488 ----a-w C:\WINDOWS\system32\Setup\ntoc​.dll
 + 2008-04-14 02:33:36 63,488 ----a-w C:\WINDOWS\system32\Setup\ntoc​.dll
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\Setup\ocge​n.dll
 + 2008-04-14 02:33:38 15,872 ----a-w C:\WINDOWS\system32\Setup\ocge​n.dll
 - 2004-08-05 12:00:00 17,408 ----a-w C:\WINDOWS\system32\Setup\ocms​n.dll
 + 2008-04-14 02:33:38 17,408 ----a-w C:\WINDOWS\system32\Setup\ocms​n.dll
 - 2004-08-05 12:00:00 101,888 ----a-w C:\WINDOWS\system32\Setup\setu​pqry.dll
 + 2008-04-14 02:33:41 101,888 ----a-w C:\WINDOWS\system32\Setup\setu​pqry.dll
 - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\system32\Setup\star​toc.dll
 + 2008-04-14 02:33:46 26,624 ----a-w C:\WINDOWS\system32\Setup\star​toc.dll
 - 2004-08-05 12:00:00 123,904 ----a-w C:\WINDOWS\system32\Setup\tsoc​.dll
 + 2008-04-14 02:33:46 132,096 ----a-w C:\WINDOWS\system32\Setup\tsoc​.dll
 - 2004-08-05 12:00:00 1,003,520 ----a-w C:\WINDOWS\system32\setupapi.d​ll
 + 2008-04-13 17:33:42 1,005,056 ----a-w C:\WINDOWS\system32\setupapi.d​ll
 + 2008-04-14 02:34:21 32,768 ------w C:\WINDOWS\system32\setupn.exe​
 - 2004-08-05 12:00:00 5,120 ----a-w C:\WINDOWS\system32\sfc.dll
 + 2008-04-14 02:33:41 5,120 ----a-w C:\WINDOWS\system32\sfc.dll
 - 2004-08-05 12:00:00 142,336 ----a-w C:\WINDOWS\system32\sfc_os.dll​
 + 2008-04-14 02:33:41 142,336 ----a-w C:\WINDOWS\system32\sfc_os.dll​
 - 2004-08-05 12:00:00 1,548,288 ----a-w C:\WINDOWS\system32\sfcfiles.d​ll
 + 2008-04-14 02:33:41 1,571,840 ----a-w C:\WINDOWS\system32\sfcfiles.d​ll
 - 2004-08-05 12:00:00 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dl​l
 + 2008-04-14 02:00:59 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dl​l
 - 2007-08-22 13:13:08 1,495,040 ----a-w C:\WINDOWS\system32\shdocvw.dl​l
 + 2008-04-14 02:33:41 1,499,136 ----a-w C:\WINDOWS\system32\shdocvw.dl​l
 - 2007-10-25 16:56:24 8,510,976 ----a-w C:\WINDOWS\system32\shell32.dl​l
 + 2008-04-14 02:33:41 8,517,632 ----a-w C:\WINDOWS\system32\shell32.dl​l
 - 2004-08-05 12:00:00 25,088 ----a-w C:\WINDOWS\system32\shfolder.d​ll
 + 2008-04-14 02:33:41 25,088 ----a-w C:\WINDOWS\system32\shfolder.d​ll
 - 2004-08-05 12:00:00 68,096 ----a-w C:\WINDOWS\system32\shgina.dll​
 + 2008-04-14 02:33:41 68,096 ----a-w C:\WINDOWS\system32\shgina.dll​
 - 2004-08-05 12:00:00 65,536 ----a-w C:\WINDOWS\system32\shimeng.dl​l
 + 2008-04-14 02:33:41 65,024 ----a-w C:\WINDOWS\system32\shimeng.dl​l
 - 2004-08-05 12:00:00 440,320 ----a-w C:\WINDOWS\system32\shimgvw.dl​l
 + 2008-04-14 02:33:41 440,320 ----a-w C:\WINDOWS\system32\shimgvw.dl​l
 - 2007-08-22 13:13:08 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dl​l
 + 2008-04-14 02:33:41 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dl​l
 - 2004-08-05 12:00:00 153,088 ----a-w C:\WINDOWS\system32\shmedia.dl​l
 + 2008-04-14 02:33:41 153,600 ----a-w C:\WINDOWS\system32\shmedia.dl​l
 - 2004-08-05 12:00:00 42,496 ----a-w C:\WINDOWS\system32\shmgrate.e​xe
 + 2008-04-14 02:34:21 45,056 ----a-w C:\WINDOWS\system32\shmgrate.e​xe
 - 2004-08-05 12:00:00 78,848 ----a-w C:\WINDOWS\system32\shrpubw.ex​e
 + 2008-04-14 02:34:21 78,848 ----a-w C:\WINDOWS\system32\shrpubw.ex​e
 - 2004-08-05 12:00:00 28,160 ----a-w C:\WINDOWS\system32\shscrap.dl​l
 + 2008-04-14 02:33:41 28,160 ----a-w C:\WINDOWS\system32\shscrap.dl​l
 - 2006-12-19 21:49:47 135,168 ----a-w C:\WINDOWS\system32\shsvcs.dll​
 + 2008-04-14 02:33:41 135,680 ----a-w C:\WINDOWS\system32\shsvcs.dll​
 - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\system32\shutdown.e​xe
 + 2008-04-14 02:34:21 20,480 ----a-w C:\WINDOWS\system32\shutdown.e​xe
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\sigtab.dll​
 + 2008-04-14 02:33:41 13,824 ----a-w C:\WINDOWS\system32\sigtab.dll​
 - 2004-08-05 12:00:00 71,168 ----a-w C:\WINDOWS\system32\sigverif.e​xe
 + 2008-04-14 02:34:21 71,168 ----a-w C:\WINDOWS\system32\sigverif.e​xe
 - 2004-08-05 12:00:00 26,112 ----a-w C:\WINDOWS\system32\skeys.exe
 + 2008-04-14 02:34:21 26,112 ----a-w C:\WINDOWS\system32\skeys.exe
 - 2004-08-05 12:00:00 25,600 ----a-w C:\WINDOWS\system32\slayerxp.d​ll
 + 2008-04-14 02:33:41 25,600 ----a-w C:\WINDOWS\system32\slayerxp.d​ll
 - 2004-08-05 12:00:00 98,304 ----a-w C:\WINDOWS\system32\slbiop.dll​
 + 2008-04-14 02:33:41 98,304 ----a-w C:\WINDOWS\system32\slbiop.dll​
 + 2008-04-14 02:33:41 73,832 ------w C:\WINDOWS\system32\slcoinst.d​ll
 + 2008-04-14 02:33:41 286,792 ------w C:\WINDOWS\system32\slextspk.d​ll
 + 2008-04-14 02:33:41 188,508 ------w C:\WINDOWS\system32\slgen.dll
 + 2008-04-14 02:34:22 32,866 ------w C:\WINDOWS\system32\slrundll.e​xe
 + 2008-04-14 02:34:22 73,796 ------w C:\WINDOWS\system32\slserv.exe​
 - 2004-08-05 12:00:00 8,192 ----a-w C:\WINDOWS\system32\smbinst.ex​e
 + 2008-04-14 02:34:22 8,192 ----a-w C:\WINDOWS\system32\smbinst.ex​e
 - 2004-08-05 12:00:00 370,688 ----a-w C:\WINDOWS\system32\smlogcfg.d​ll
 + 2008-04-14 02:33:41 370,176 ----a-w C:\WINDOWS\system32\smlogcfg.d​ll
 - 2004-08-05 12:00:00 93,184 ----a-w C:\WINDOWS\system32\smlogsvc.e​xe
 + 2008-04-14 02:34:22 93,184 ----a-w C:\WINDOWS\system32\smlogsvc.e​xe
 - 2004-08-05 12:00:00 50,688 ----a-w C:\WINDOWS\system32\smss.exe
 + 2008-04-14 02:34:22 50,688 ----a-w C:\WINDOWS\system32\smss.exe
 - 2004-08-05 12:00:00 133,120 ----a-w C:\WINDOWS\system32\sndrec32.e​xe
 + 2008-04-14 02:34:22 133,120 ----a-w C:\WINDOWS\system32\sndrec32.e​xe
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\snmpapi.dl​l
 + 2008-04-14 02:33:41 18,944 ----a-w C:\WINDOWS\system32\snmpapi.dl​l
 - 2004-08-05 12:00:00 184,320 ----a-w C:\WINDOWS\system32\snmpsnap.d​ll
 + 2008-04-14 02:33:41 184,320 ----a-w C:\WINDOWS\system32\snmpsnap.d​ll
 - 2004-08-05 12:00:00 25,088 ----a-w C:\WINDOWS\system32\sort.exe
 + 2008-04-14 02:34:22 26,112 ----a-w C:\WINDOWS\system32\sort.exe
 + 2004-08-05 12:00:00 1,744 ----a-w C:\WINDOWS\system32\sound.drv
 + 2008-04-14 02:34:22 7,680 ----a-w C:\WINDOWS\system32\spdwnwxp.e​xe
 - 2004-08-05 12:00:00 539,136 ----a-w C:\WINDOWS\system32\spider.exe​
 + 2008-04-14 02:34:23 539,136 ----a-w C:\WINDOWS\system32\spider.exe​
 - 2007-10-08 13:46:18 14,640 ------w C:\WINDOWS\system32\spmsg.dll
 + 2007-11-30 12:39:29 18,296 ------w C:\WINDOWS\system32\spmsg.dll
 - 2004-08-05 12:00:00 11,776 ----a-w C:\WINDOWS\system32\spnpinst.e​xe
 + 2008-04-13 17:34:24 11,264 ----a-w C:\WINDOWS\system32\spnpinst.e​xe
 - 2004-08-03 22:54:28 87,552 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\HPFUD50.DLL
 + 2008-04-14 02:33:26 87,552 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\hpfud50.dll
 - 2004-08-03 23:54:44 264,704 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\UNIDRV.DLL
 + 2008-04-14 02:33:47 373,248 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\unidrv.dll
 - 2004-08-03 23:54:44 199,168 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\UNIDRVUI.DLL
 + 2008-04-14 02:33:47 744,448 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\unidrvui.dll
 - 2004-08-03 23:54:06 620,544 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\UNIRES.DLL
 + 2007-05-15 08:08:53 761,344 ----a-w C:\WINDOWS\system32\spool\driv​ers\w32x86\3\unires.dll
 - 2004-08-05 12:00:00 74,752 ----a-w C:\WINDOWS\system32\spoolss.dl​l
 + 2008-04-14 02:33:41 75,264 ----a-w C:\WINDOWS\system32\spoolss.dl​l
 - 2005-06-10 23:53:32 57,856 ----a-w C:\WINDOWS\system32\spoolsv.ex​e
 + 2008-04-14 02:34:23 57,856 ----a-w C:\WINDOWS\system32\spoolsv.ex​e
 - 2006-09-06 16:43:30 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.e​xe
 + 2007-08-10 06:18:14 26,488 ----a-w C:\WINDOWS\system32\spupdsvc.e​xe
 + 2008-04-14 02:34:23 20,992 ------w C:\WINDOWS\system32\spupdwxp.e​xe
 - 2004-08-05 12:00:00 442,368 ----a-w C:\WINDOWS\system32\sqlsrv32.d​ll
 + 2008-04-14 02:33:46 442,368 ----a-w C:\WINDOWS\system32\sqlsrv32.d​ll
 - 2004-08-05 12:00:00 180,800 ----a-w C:\WINDOWS\system32\sqlunirl.d​ll
 + 2008-04-14 02:33:46 180,800 ----a-w C:\WINDOWS\system32\sqlunirl.d​ll
 - 2004-08-05 12:00:00 67,584 ----a-w C:\WINDOWS\system32\srclient.d​ll
 + 2008-04-14 02:33:46 67,584 ----a-w C:\WINDOWS\system32\srclient.d​ll
 - 2004-08-05 12:00:00 241,664 ----a-w C:\WINDOWS\system32\srrstr.dll​
 + 2008-04-14 02:33:46 241,664 ----a-w C:\WINDOWS\system32\srrstr.dll​
 - 2004-08-05 12:00:00 171,008 ----a-w C:\WINDOWS\system32\srsvc.dll
 + 2008-04-14 02:33:46 171,520 ----a-w C:\WINDOWS\system32\srsvc.dll
 - 2004-12-07 19:34:00 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll​
 + 2008-04-14 02:33:46 96,768 ----a-w C:\WINDOWS\system32\srvsvc.dll​
 - 2004-08-05 12:00:00 708,608 ----a-w C:\WINDOWS\system32\ss3dfo.scr​
 + 2008-04-14 02:34:32 708,608 ----a-w C:\WINDOWS\system32\ss3dfo.scr​
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\system32\ssbezier.s​cr
 + 2008-04-14 02:34:32 19,968 ----a-w C:\WINDOWS\system32\ssbezier.s​cr
 - 2004-08-05 12:00:00 34,816 ----a-w C:\WINDOWS\system32\ssdpapi.dl​l
 + 2008-04-14 02:33:46 34,816 ----a-w C:\WINDOWS\system32\ssdpapi.dl​l
 - 2004-08-05 12:00:00 71,680 ----a-w C:\WINDOWS\system32\ssdpsrv.dl​l
 + 2008-04-14 02:33:46 71,680 ----a-w C:\WINDOWS\system32\ssdpsrv.dl​l
 - 2004-08-05 12:00:00 393,216 ----a-w C:\WINDOWS\system32\ssflwbox.s​cr
 + 2008-04-14 02:34:32 393,216 ----a-w C:\WINDOWS\system32\ssflwbox.s​cr
 - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\ssmarque.s​cr
 + 2008-04-14 02:34:33 20,992 ----a-w C:\WINDOWS\system32\ssmarque.s​cr
 - 2004-08-05 12:00:00 47,104 ----a-w C:\WINDOWS\system32\ssmypics.s​cr
 + 2008-04-14 02:34:33 47,104 ----a-w C:\WINDOWS\system32\ssmypics.s​cr
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\ssmyst.scr​
 + 2008-04-14 02:34:33 18,944 ----a-w C:\WINDOWS\system32\ssmyst.scr​
 - 2004-08-05 12:00:00 610,304 ----a-w C:\WINDOWS\system32\sspipes.sc​r
 + 2008-04-14 02:34:33 610,304 ----a-w C:\WINDOWS\system32\sspipes.sc​r
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\ssstars.sc​r
 + 2008-04-14 02:34:33 14,336 ----a-w C:\WINDOWS\system32\ssstars.sc​r
 - 2004-08-05 12:00:00 684,032 ----a-w C:\WINDOWS\system32\sstext3d.s​cr
 + 2008-04-14 02:34:33 684,032 ----a-w C:\WINDOWS\system32\sstext3d.s​cr
 - 2004-08-05 12:00:00 54,272 ----a-w C:\WINDOWS\system32\stclient.d​ll
 + 2008-04-14 02:33:46 59,392 ----a-w C:\WINDOWS\system32\stclient.d​ll
 - 2004-08-05 12:00:00 68,096 ----a-w C:\WINDOWS\system32\sti.dll
 + 2008-04-14 02:33:46 68,608 ----a-w C:\WINDOWS\system32\sti.dll
 - 2004-08-05 12:00:00 138,240 ----a-w C:\WINDOWS\system32\sti_ci.dll​
 + 2008-04-14 02:33:46 138,240 ----a-w C:\WINDOWS\system32\sti_ci.dll​
 - 2004-08-05 12:00:00 14,848 ----a-w C:\WINDOWS\system32\stimon.exe​
 + 2008-04-14 02:34:23 14,848 ----a-w C:\WINDOWS\system32\stimon.exe​
 - 2004-08-05 12:00:00 122,368 ----a-w C:\WINDOWS\system32\stobject.d​ll
 + 2008-04-14 02:33:46 122,368 ----a-w C:\WINDOWS\system32\stobject.d​ll
 - 2004-08-03 22:54:44 76,800 ----a-w C:\WINDOWS\system32\storprop.d​ll
 + 2008-04-14 02:33:46 76,800 ----a-w C:\WINDOWS\system32\storprop.d​ll
 - 2006-08-24 11:19:40 246,814 ----a-w C:\WINDOWS\system32\strmdll.dl​l
 + 2008-04-14 02:33:46 246,814 ----a-w C:\WINDOWS\system32\strmdll.dl​l
 - 2004-08-05 12:00:00 75,776 ----a-w C:\WINDOWS\system32\strmfilt.d​ll
 + 2008-04-14 02:33:46 75,776 ----a-w C:\WINDOWS\system32\strmfilt.d​ll
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\svchost.ex​e
 + 2008-04-14 02:34:23 14,336 ----a-w C:\WINDOWS\system32\svchost.ex​e
 - 2006-10-20 01:38:44 716,800 ----a-w C:\WINDOWS\system32\sxs.dll
 + 2008-04-14 02:33:46 716,800 ----a-w C:\WINDOWS\system32\sxs.dll
 - 2004-08-05 12:00:00 57,856 ----a-w C:\WINDOWS\system32\synceng.dl​l
 + 2008-04-14 02:33:46 57,856 ----a-w C:\WINDOWS\system32\synceng.dl​l
 - 2004-08-05 12:00:00 197,120 ----a-w C:\WINDOWS\system32\syncui.dll​
 + 2008-04-14 02:33:46 197,120 ----a-w C:\WINDOWS\system32\syncui.dll​
 - 2004-08-05 12:00:00 107,520 ----a-w C:\WINDOWS\system32\sysocmgr.e​xe
 + 2008-04-14 02:34:24 107,520 ----a-w C:\WINDOWS\system32\sysocmgr.e​xe
 - 2004-08-05 12:00:00 1,005,056 ----a-w C:\WINDOWS\system32\syssetup.d​ll
 + 2008-04-14 02:33:46 1,013,248 ----a-w C:\WINDOWS\system32\syssetup.d​ll
 - 2005-10-17 21:21:08 118,272 ----a-w C:\WINDOWS\system32\t2embed.dl​l
 + 2008-04-14 02:33:46 117,760 ----a-w C:\WINDOWS\system32\t2embed.dl​l
 - 2004-08-05 12:00:00 860,160 ----a-w C:\WINDOWS\system32\tapi3.dll
 + 2008-04-14 02:33:46 860,160 ----a-w C:\WINDOWS\system32\tapi3.dll
 - 2004-08-05 12:00:00 181,760 ----a-w C:\WINDOWS\system32\tapi32.dll​
 + 2008-04-14 02:33:46 181,760 ----a-w C:\WINDOWS\system32\tapi32.dll​
 - 2005-07-08 16:28:58 249,344 ----a-w C:\WINDOWS\system32\tapisrv.dl​l
 + 2008-04-14 02:33:46 249,856 ----a-w C:\WINDOWS\system32\tapisrv.dl​l
 - 2004-08-05 12:00:00 143,360 ----a-w C:\WINDOWS\system32\taskmgr.ex​e
 + 2008-04-14 02:34:25 143,360 ----a-w C:\WINDOWS\system32\taskmgr.ex​e
 - 2004-08-05 12:00:00 14,848 ----a-w C:\WINDOWS\system32\tcpmib.dll​
 + 2008-04-14 02:33:46 14,848 ----a-w C:\WINDOWS\system32\tcpmib.dll​
 - 2004-08-05 12:00:00 46,592 ----a-w C:\WINDOWS\system32\tcpmon.dll​
 + 2008-04-14 02:33:46 46,592 ----a-w C:\WINDOWS\system32\tcpmon.dll​
 - 2004-08-05 12:00:00 47,104 ----a-w C:\WINDOWS\system32\tcpmonui.d​ll
 + 2008-04-14 02:33:46 47,104 ----a-w C:\WINDOWS\system32\tcpmonui.d​ll
 - 2005-05-11 02:30:03 78,336 ----a-w C:\WINDOWS\system32\telnet.exe​
 + 2008-04-14 02:34:25 78,336 ----a-w C:\WINDOWS\system32\telnet.exe​
 - 2004-08-05 12:00:00 358,912 ----a-w C:\WINDOWS\system32\termmgr.dl​l
 + 2008-04-14 02:33:46 358,912 ----a-w C:\WINDOWS\system32\termmgr.dl​l
 - 2004-08-05 12:00:00 297,984 ----a-w C:\WINDOWS\system32\termsrv.dl​l
 + 2008-04-14 02:33:46 297,984 ----a-w C:\WINDOWS\system32\termsrv.dl​l
 - 2004-08-05 12:00:00 391,168 ----a-w C:\WINDOWS\system32\themeui.dl​l
 + 2008-04-14 02:33:46 391,168 ----a-w C:\WINDOWS\system32\themeui.dl​l
 - 2004-08-05 12:00:00 347,136 ----a-w C:\WINDOWS\system32\tourstart.​exe
 + 2008-04-14 02:34:25 347,136 ----a-w C:\WINDOWS\system32\tourstart.​exe
 - 2004-08-05 12:00:00 13,312 ----a-w C:\WINDOWS\system32\tracert.ex​e
 + 2008-04-14 02:34:25 13,312 ----a-w C:\WINDOWS\system32\tracert.ex​e
 - 2004-08-05 12:00:00 11,264 ----a-w C:\WINDOWS\system32\tree.com
 + 2008-04-14 02:34:31 12,800 ----a-w C:\WINDOWS\system32\tree.com
 - 2004-08-05 12:00:00 90,624 ----a-w C:\WINDOWS\system32\trkwks.dll​
 + 2008-04-14 02:33:46 90,112 ----a-w C:\WINDOWS\system32\trkwks.dll​
 - 2004-08-05 12:00:00 94,208 ----a-w C:\WINDOWS\system32\tscfgwmi.d​ll
 + 2008-04-14 02:33:46 94,208 ----a-w C:\WINDOWS\system32\tscfgwmi.d​ll
 - 2004-08-05 12:00:00 12,168 ----a-w C:\WINDOWS\system32\tsddd.dll
 + 2008-04-14 02:34:53 12,168 ----a-w C:\WINDOWS\system32\tsddd.dll
 + 2008-04-14 02:33:46 53,248 ------w C:\WINDOWS\system32\tsgqec.dll​
 + 2008-04-14 02:33:46 50,688 ------w C:\WINDOWS\system32\tspkg.dll
 - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\system32\twext.dll
 + 2008-04-14 02:33:47 57,856 ----a-w C:\WINDOWS\system32\twext.dll
 - 2005-07-26 04:40:00 101,376 ----a-w C:\WINDOWS\system32\txflog.dll​
 + 2008-04-14 02:33:47 101,376 ----a-w C:\WINDOWS\system32\txflog.dll​
 - 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.e​xe
 + 2008-04-14 02:34:25 60,416 ------w C:\WINDOWS\system32\tzchange.e​xe
 - 2004-08-05 12:00:00 25,600 ----a-w C:\WINDOWS\system32\udhisapi.d​ll
 + 2008-04-14 02:33:47 26,624 ----a-w C:\WINDOWS\system32\udhisapi.d​ll
 - 2004-08-05 12:00:00 311,808 ----a-w C:\WINDOWS\system32\ulib.dll
 + 2008-04-14 02:33:47 311,808 ----a-w C:\WINDOWS\system32\ulib.dll
 - 2004-08-05 12:00:00 36,864 ----a-w C:\WINDOWS\system32\umandlg.dl​l
 + 2008-04-14 02:33:47 36,864 ----a-w C:\WINDOWS\system32\umandlg.dl​l
 - 2005-08-23 03:39:36 124,928 ----a-w C:\WINDOWS\system32\umpnpmgr.d​ll
 + 2008-04-14 02:33:47 124,928 ----a-w C:\WINDOWS\system32\umpnpmgr.d​ll
 - 2004-08-05 12:00:00 76,288 ----a-w C:\WINDOWS\system32\uniime.dll​
 + 2008-04-14 02:32:44 76,288 ----a-w C:\WINDOWS\system32\uniime.dll​
 - 2004-08-05 12:00:00 78,848 ----a-w C:\WINDOWS\system32\unimdmat.d​ll
 + 2008-04-14 02:33:47 78,848 ----a-w C:\WINDOWS\system32\unimdmat.d​ll
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\uniplat.dl​l
 + 2008-04-14 02:33:47 13,824 ----a-w C:\WINDOWS\system32\uniplat.dl​l
 - 2004-08-05 12:00:00 316,416 ----a-w C:\WINDOWS\system32\untfs.dll
 + 2008-04-14 02:33:47 316,416 ----a-w C:\WINDOWS\system32\untfs.dll
 - 2004-08-05 12:00:00 132,608 ----a-w C:\WINDOWS\system32\upnp.dll
 + 2008-04-14 02:33:47 133,632 ----a-w C:\WINDOWS\system32\upnp.dll
 - 2004-08-05 12:00:00 16,896 ----a-w C:\WINDOWS\system32\upnpcont.e​xe
 + 2008-04-14 02:34:26 16,896 ----a-w C:\WINDOWS\system32\upnpcont.e​xe
 - 2007-02-05 20:19:06 185,344 ----a-w C:\WINDOWS\system32\upnphost.d​ll
 + 2008-04-14 02:33:48 186,368 ----a-w C:\WINDOWS\system32\upnphost.d​ll
 - 2004-08-05 12:00:00 240,128 ----a-w C:\WINDOWS\system32\upnpui.dll​
 + 2008-04-14 02:33:48 240,128 ----a-w C:\WINDOWS\system32\upnpui.dll​
 - 2004-08-05 12:00:00 18,432 ----a-w C:\WINDOWS\system32\ups.exe
 + 2008-04-14 02:34:26 18,432 ----a-w C:\WINDOWS\system32\ups.exe
 - 2007-12-07 02:08:34 105,984 ----a-w C:\WINDOWS\system32\url.dll
 + 2008-04-23 04:16:40 105,984 ----a-w C:\WINDOWS\system32\url.dll
 - 2007-12-07 02:08:34 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll​
 + 2008-04-23 04:16:40 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll​
 - 2004-08-05 12:00:00 16,896 ----a-w C:\WINDOWS\system32\usbmon.dll​
 + 2008-04-14 02:33:48 16,896 ----a-w C:\WINDOWS\system32\usbmon.dll​
 - 2004-08-03 22:54:44 77,312 ----a-w C:\WINDOWS\system32\usbui.dll
 + 2008-04-14 02:33:48 77,312 ----a-w C:\WINDOWS\system32\usbui.dll
 - 2007-03-08 15:37:50 578,560 ----a-w C:\WINDOWS\system32\user32.dll​
 + 2008-04-14 02:33:48 579,584 ----a-w C:\WINDOWS\system32\user32.dll​
 - 2004-08-05 12:00:00 731,136 ----a-w C:\WINDOWS\system32\userenv.dl​l
 + 2008-04-14 02:33:48 734,720 ----a-w C:\WINDOWS\system32\userenv.dl​l
 - 2004-08-05 12:00:00 25,088 ----a-w C:\WINDOWS\system32\userinit.e​xe
 + 2008-04-14 02:34:26 26,624 ----a-w C:\WINDOWS\system32\userinit.e​xe
 + 2008-04-13 16:44:16 17,920 ------w C:\WINDOWS\system32\usmt\cobra​msg.dll
 - 2004-08-05 12:00:00 125,440 ----a-w C:\WINDOWS\system32\usmt\guitr​n.dll
 + 2008-04-14 02:33:26 134,656 ----a-w C:\WINDOWS\system32\usmt\guitr​n.dll
 + 2008-04-14 02:33:26 115,712 ------w C:\WINDOWS\system32\usmt\guitr​na.dll
 - 2004-08-05 12:00:00 4,096 ----a-w C:\WINDOWS\system32\usmt\iconl​ib.dll
 + 2008-04-13 16:44:29 2,560 ----a-w C:\WINDOWS\system32\usmt\iconl​ib.dll
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\system32\usmt\log.d​ll
 + 2008-04-14 02:33:28 19,968 ----a-w C:\WINDOWS\system32\usmt\log.d​ll
 - 2004-08-05 12:00:00 201,216 ----a-w C:\WINDOWS\system32\usmt\migis​m.dll
 + 2008-04-14 02:33:29 274,432 ----a-w C:\WINDOWS\system32\usmt\migis​m.dll
 + 2008-04-14 02:33:29 261,120 ------w C:\WINDOWS\system32\usmt\migis​ma.dll
 - 2004-08-05 12:00:00 103,936 ----a-w C:\WINDOWS\system32\usmt\miglo​ad.exe
 + 2008-04-14 02:34:10 104,448 ----a-w C:\WINDOWS\system32\usmt\miglo​ad.exe
 - 2004-08-05 12:00:00 246,784 ----a-w C:\WINDOWS\system32\usmt\migwi​z.exe
 + 2008-04-14 02:34:11 251,904 ----a-w C:\WINDOWS\system32\usmt\migwi​z.exe
 + 2008-04-14 02:34:11 247,808 ------w C:\WINDOWS\system32\usmt\migwi​za.exe
 - 2004-08-05 12:00:00 204,800 ----a-w C:\WINDOWS\system32\usmt\scrip​t.dll
 + 2008-04-14 02:33:40 217,600 ----a-w C:\WINDOWS\system32\usmt\scrip​t.dll
 + 2008-04-14 02:33:40 201,216 ------w C:\WINDOWS\system32\usmt\scrip​ta.dll
 - 2004-08-05 12:00:00 169,472 ----a-w C:\WINDOWS\system32\usmt\sysmo​d.dll
 + 2008-04-14 02:33:46 193,536 ----a-w C:\WINDOWS\system32\usmt\sysmo​d.dll
 + 2008-04-14 02:33:46 173,568 ------w C:\WINDOWS\system32\usmt\sysmo​da.dll
 - 2004-08-05 12:00:00 406,528 ----a-w C:\WINDOWS\system32\usp10.dll
 + 2008-04-14 02:33:48 406,016 ----a-w C:\WINDOWS\system32\usp10.dll
 - 2004-08-05 12:00:00 50,176 ----a-w C:\WINDOWS\system32\utilman.ex​e
 + 2008-04-14 02:34:26 50,176 ----a-w C:\WINDOWS\system32\utilman.ex​e
 - 2005-01-27 23:36:04 47,104 ----a-w C:\WINDOWS\system32\uwdf.exe
 + 2006-10-18 19:58:00 8,704 ----a-w C:\WINDOWS\system32\uwdf.exe
 - 2004-08-05 12:00:00 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dl​l
 + 2008-04-14 02:33:48 219,648 ----a-w C:\WINDOWS\system32\uxtheme.dl​l
 - 2004-08-05 12:00:00 30,749 ----a-w C:\WINDOWS\system32\vbajet32.d​ll
 + 2008-04-14 02:33:48 30,749 ----a-w C:\WINDOWS\system32\vbajet32.d​ll
 - 2007-08-13 17:54:10 413,696 ----a-w C:\WINDOWS\system32\vbscript.d​ll
 + 2008-05-09 10:55:00 430,080 ----a-w C:\WINDOWS\system32\vbscript.d​ll
 - 2004-08-05 12:00:00 26,112 ----a-w C:\WINDOWS\system32\vdmdbg.dll​
 + 2008-04-14 02:33:48 26,112 ----a-w C:\WINDOWS\system32\vdmdbg.dll​
 - 2004-08-05 12:00:00 51,712 ----a-w C:\WINDOWS\system32\vdmredir.d​ll
 + 2008-04-14 02:33:48 51,712 ----a-w C:\WINDOWS\system32\vdmredir.d​ll
 - 2006-03-17 00:38:01 28,672 ------w C:\WINDOWS\system32\verclsid.e​xe
 + 2008-04-14 02:34:26 28,672 ------w C:\WINDOWS\system32\verclsid.e​xe
 - 2004-08-05 12:00:00 13,312 ----a-w C:\WINDOWS\system32\verifier.d​ll
 + 2008-04-14 02:33:48 26,624 ----a-w C:\WINDOWS\system32\verifier.d​ll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\version.dl​l
 + 2008-04-14 02:33:48 18,944 ----a-w C:\WINDOWS\system32\version.dl​l
 - 2004-08-03 22:54:44 54,784 ----a-w C:\WINDOWS\system32\vfwwdm32.d​ll
 + 2008-04-14 02:33:48 54,784 ----a-w C:\WINDOWS\system32\vfwwdm32.d​ll
 + 2004-08-05 12:00:00 2,176 ----a-w C:\WINDOWS\system32\vga.drv
 - 2004-08-05 12:00:00 430,592 ----a-w C:\WINDOWS\system32\vssapi.dll​
 + 2008-04-14 02:33:48 430,592 ----a-w C:\WINDOWS\system32\vssapi.dll​
 - 2004-08-05 12:00:00 295,424 ----a-w C:\WINDOWS\system32\vssvc.exe
 + 2008-04-14 02:34:26 295,424 ----a-w C:\WINDOWS\system32\vssvc.exe
 - 2004-08-05 12:00:00 177,664 ----a-w C:\WINDOWS\system32\w32time.dl​l
 + 2008-04-14 02:33:48 178,176 ----a-w C:\WINDOWS\system32\w32time.dl​l
 - 2004-08-05 12:00:00 15,872 ----a-w C:\WINDOWS\system32\w3ssl.dll
 + 2008-04-14 02:33:48 15,872 ----a-w C:\WINDOWS\system32\w3ssl.dll
 - 2004-08-05 12:00:00 17,664 ----a-w C:\WINDOWS\system32\watchdog.s​ys
 + 2008-04-13 18:44:59 17,664 ----a-w C:\WINDOWS\system32\watchdog.s​ys
 - 2004-08-05 12:00:00 208,896 ----a-w C:\WINDOWS\system32\wavemsp.dl​l
 + 2008-04-14 02:33:48 215,552 ----a-w C:\WINDOWS\system32\wavemsp.dl​l
 - 2004-08-05 12:00:00 1,352,704 ----a-w C:\WINDOWS\system32\wbem\cimwi​n32.dll
 + 2008-04-14 02:33:20 1,359,360 ----a-w C:\WINDOWS\system32\wbem\cimwi​n32.dll
 - 2004-08-05 12:00:00 247,808 ----a-w C:\WINDOWS\system32\wbem\esscl​i.dll
 + 2008-04-14 02:33:24 247,808 ----a-w C:\WINDOWS\system32\wbem\esscl​i.dll
 - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\system32\wbem\evntr​prv.dll
 + 2008-04-14 02:33:24 21,504 ----a-w C:\WINDOWS\system32\wbem\evntr​prv.dll
 - 2004-08-05 12:00:00 472,064 ----a-w C:\WINDOWS\system32\wbem\fastp​rox.dll
 + 2008-04-14 02:33:24 472,064 ----a-w C:\WINDOWS\system32\wbem\fastp​rox.dll
 - 2004-08-05 12:00:00 185,856 ----a-w C:\WINDOWS\system32\wbem\frame​dyn.dll
 + 2008-04-14 02:33:25 185,344 ----a-w C:\WINDOWS\system32\wbem\frame​dyn.dll
 - 2004-08-05 12:00:00 24,576 ----a-w C:\WINDOWS\system32\wbem\krnlp​rov.dll
 + 2008-04-14 02:33:28 24,576 ----a-w C:\WINDOWS\system32\wbem\krnlp​rov.dll
 - 2004-08-05 12:00:00 16,896 ----a-w C:\WINDOWS\system32\wbem\mofco​mp.exe
 + 2008-04-14 02:34:11 16,896 ----a-w C:\WINDOWS\system32\wbem\mofco​mp.exe
 - 2004-08-05 12:00:00 124,928 ----a-w C:\WINDOWS\system32\wbem\mofd.​dll
 + 2008-04-14 02:33:30 124,928 ----a-w C:\WINDOWS\system32\wbem\mofd.​dll
 - 2004-08-05 12:00:00 47,104 ----a-w C:\WINDOWS\system32\wbem\ncpro​v.dll
 + 2008-04-14 02:33:34 47,104 ----a-w C:\WINDOWS\system32\wbem\ncpro​v.dll
 - 2004-08-05 12:00:00 212,992 ----a-w C:\WINDOWS\system32\wbem\ntevt​.dll
 + 2008-04-14 02:33:36 212,992 ----a-w C:\WINDOWS\system32\wbem\ntevt​.dll
 - 2004-08-05 12:00:00 237,056 ----a-w C:\WINDOWS\system32\wbem\provt​hrd.dll
 + 2008-04-14 02:33:38 237,056 ----a-w C:\WINDOWS\system32\wbem\provt​hrd.dll
 - 2004-08-05 12:00:00 177,152 ----a-w C:\WINDOWS\system32\wbem\repdr​vfs.dll
 + 2008-04-14 02:33:39 178,176 ----a-w C:\WINDOWS\system32\wbem\repdr​vfs.dll
 - 2004-08-05 12:00:00 36,864 ----a-w C:\WINDOWS\system32\wbem\scrco​ns.exe
 + 2008-04-14 02:34:20 36,352 ----a-w C:\WINDOWS\system32\wbem\scrco​ns.exe
 - 2004-08-05 12:00:00 86,528 ----a-w C:\WINDOWS\system32\wbem\stdpr​ov.dll
 + 2008-04-14 02:33:46 86,528 ----a-w C:\WINDOWS\system32\wbem\stdpr​ov.dll
 - 2004-08-05 12:00:00 131,584 ----a-w C:\WINDOWS\system32\wbem\viewp​rov.dll
 + 2008-04-14 02:33:48 131,584 ----a-w C:\WINDOWS\system32\wbem\viewp​rov.dll
 - 2004-08-05 12:00:00 201,216 ----a-w C:\WINDOWS\system32\wbem\wbemc​ntl.dll
 + 2008-04-14 02:33:48 201,216 ----a-w C:\WINDOWS\system32\wbem\wbemc​ntl.dll
 - 2004-08-05 12:00:00 214,528 ----a-w C:\WINDOWS\system32\wbem\wbemc​omn.dll
 + 2008-04-14 02:33:48 214,528 ----a-w C:\WINDOWS\system32\wbem\wbemc​omn.dll
 - 2004-08-05 12:00:00 71,680 ----a-w C:\WINDOWS\system32\wbem\wbemc​ons.dll
 + 2008-04-14 02:33:48 71,680 ----a-w C:\WINDOWS\system32\wbem\wbemc​ons.dll
 - 2004-08-05 12:00:00 530,944 ----a-w C:\WINDOWS\system32\wbem\wbemc​ore.dll
 + 2008-04-14 02:33:48 531,456 ----a-w C:\WINDOWS\system32\wbem\wbemc​ore.dll
 - 2004-08-05 12:00:00 178,176 ----a-w C:\WINDOWS\system32\wbem\wbemd​isp.dll
 + 2008-04-14 02:33:48 178,176 ----a-w C:\WINDOWS\system32\wbem\wbemd​isp.dll
 - 2004-08-05 12:00:00 273,920 ----a-w C:\WINDOWS\system32\wbem\wbeme​ss.dll
 + 2008-04-14 02:33:48 273,920 ----a-w C:\WINDOWS\system32\wbem\wbeme​ss.dll
 - 2004-08-05 12:00:00 44,544 ----a-w C:\WINDOWS\system32\wbem\wbemp​erf.dll
 + 2008-04-14 02:33:48 44,544 ----a-w C:\WINDOWS\system32\wbem\wbemp​erf.dll
 - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\system32\wbem\wbemp​rox.dll
 + 2008-04-14 02:33:48 18,944 ----a-w C:\WINDOWS\system32\wbem\wbemp​rox.dll
 - 2004-08-05 12:00:00 43,520 ----a-w C:\WINDOWS\system32\wbem\wbems​vc.dll
 + 2008-04-14 02:33:48 43,520 ----a-w C:\WINDOWS\system32\wbem\wbems​vc.dll
 - 2004-08-05 12:00:00 119,808 ----a-w C:\WINDOWS\system32\wbem\wbemt​est.exe
 + 2008-04-14 02:34:26 119,808 ----a-w C:\WINDOWS\system32\wbem\wbemt​est.exe
 - 2004-08-05 12:00:00 197,120 ----a-w C:\WINDOWS\system32\wbem\wbemu​pgd.dll
 + 2008-04-14 02:33:48 197,120 ----a-w C:\WINDOWS\system32\wbem\wbemu​pgd.dll
 - 2004-08-05 12:00:00 196,608 ----a-w C:\WINDOWS\system32\wbem\wmiad​ap.exe
 + 2008-04-14 02:34:28 196,608 ----a-w C:\WINDOWS\system32\wbem\wmiad​ap.exe
 - 2004-08-05 12:00:00 7,680 ----a-w C:\WINDOWS\system32\wbem\wmiap​res.dll
 + 2008-04-14 01:59:39 7,680 ----a-w C:\WINDOWS\system32\wbem\wmiap​res.dll
 - 2004-08-05 12:00:00 89,088 ----a-w C:\WINDOWS\system32\wbem\wmiap​rpl.dll
 + 2008-04-14 02:33:48 88,576 ----a-w C:\WINDOWS\system32\wbem\wmiap​rpl.dll
 - 2004-08-05 12:00:00 126,464 ----a-w C:\WINDOWS\system32\wbem\wmiap​srv.exe
 + 2008-04-14 02:34:28 126,464 ----a-w C:\WINDOWS\system32\wbem\wmiap​srv.exe
 - 2004-08-05 12:00:00 60,928 ----a-w C:\WINDOWS\system32\wbem\wmico​okr.dll
 + 2008-04-14 02:33:48 60,928 ----a-w C:\WINDOWS\system32\wbem\wmico​okr.dll
 - 2004-08-05 12:00:00 140,800 ----a-w C:\WINDOWS\system32\wbem\wmidc​prv.dll
 + 2008-04-14 02:33:48 140,800 ----a-w C:\WINDOWS\system32\wbem\wmidc​prv.dll
 - 2004-08-05 12:00:00 156,672 ----a-w C:\WINDOWS\system32\wbem\wmipc​ima.dll
 + 2008-04-14 02:33:48 156,672 ----a-w C:\WINDOWS\system32\wbem\wmipc​ima.dll
 - 2004-08-05 12:00:00 132,096 ----a-w C:\WINDOWS\system32\wbem\wmipd​skq.dll
 + 2008-04-14 02:33:48 132,096 ----a-w C:\WINDOWS\system32\wbem\wmipd​skq.dll
 - 2004-08-05 12:00:00 62,464 ----a-w C:\WINDOWS\system32\wbem\wmipi​prt.dll
 + 2008-04-14 02:33:48 61,952 ----a-w C:\WINDOWS\system32\wbem\wmipi​prt.dll
 - 2004-08-05 12:00:00 62,976 ----a-w C:\WINDOWS\system32\wbem\wmipj​obj.dll
 + 2008-04-14 02:33:48 62,464 ----a-w C:\WINDOWS\system32\wbem\wmipj​obj.dll
 - 2004-08-05 12:00:00 144,896 ----a-w C:\WINDOWS\system32\wbem\wmipr​ov.dll
 + 2008-04-14 02:33:48 144,896 ----a-w C:\WINDOWS\system32\wbem\wmipr​ov.dll
 - 2004-08-05 12:00:00 437,248 ----a-w C:\WINDOWS\system32\wbem\wmipr​vsd.dll
 + 2008-04-14 02:33:48 437,248 ----a-w C:\WINDOWS\system32\wbem\wmipr​vsd.dll
 - 2004-08-05 12:00:00 218,112 ----a-w C:\WINDOWS\system32\wbem\wmipr​vse.exe
 + 2008-04-14 02:34:28 218,112 ----a-w C:\WINDOWS\system32\wbem\wmipr​vse.exe
 - 2004-08-05 12:00:00 41,472 ----a-w C:\WINDOWS\system32\wbem\wmips​ess.dll
 + 2008-04-14 02:33:48 41,472 ----a-w C:\WINDOWS\system32\wbem\wmips​ess.dll
 - 2004-08-05 12:00:00 145,408 ----a-w C:\WINDOWS\system32\wbem\wmisv​c.dll
 + 2008-04-14 02:33:48 145,408 ----a-w C:\WINDOWS\system32\wbem\wmisv​c.dll
 - 2004-08-05 12:00:00 99,328 ----a-w C:\WINDOWS\system32\wbem\wmiut​ils.dll
 + 2008-04-14 02:33:48 99,328 ----a-w C:\WINDOWS\system32\wbem\wmiut​ils.dll
 - 2005-01-27 23:35:58 15,872 ----a-w C:\WINDOWS\system32\wdfapi.dll​
 + 2006-10-18 19:47:18 4,096 ----a-w C:\WINDOWS\system32\wdfapi.dll​
 - 2005-01-27 23:36:00 38,912 ----a-w C:\WINDOWS\system32\wdfmgr.exe​
 + 2006-10-18 19:58:00 8,704 ----a-w C:\WINDOWS\system32\wdfmgr.exe​
 - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\system32\wdigest.dl​l
 + 2008-04-14 02:33:48 49,152 ----a-w C:\WINDOWS\system32\wdigest.dl​l
 - 2004-08-03 22:55:04 23,552 ----a-w C:\WINDOWS\system32\wdmaud.drv​
 + 2008-04-14 02:34:34 23,552 ----a-w C:\WINDOWS\system32\wdmaud.drv​
 - 2007-12-07 02:08:34 233,472 ----a-w C:\WINDOWS\system32\webcheck.d​ll
 + 2008-04-23 04:16:40 233,472 ----a-w C:\WINDOWS\system32\webcheck.d​ll
 - 2006-01-04 03:35:11 68,096 ----a-w C:\WINDOWS\system32\webclnt.dl​l
 + 2008-04-14 02:33:48 68,096 ----a-w C:\WINDOWS\system32\webclnt.dl​l
 - 2004-08-05 12:00:00 136,192 ----a-w C:\WINDOWS\system32\webvw.dll
 + 2008-04-14 02:33:48 136,192 ----a-w C:\WINDOWS\system32\webvw.dll
 - 2004-08-05 12:00:00 66,560 ----a-w C:\WINDOWS\system32\wextract.e​xe
 + 2008-04-14 02:34:26 66,560 ----a-w C:\WINDOWS\system32\wextract.e​xe
 - 2004-08-05 12:00:00 438,784 ----a-w C:\WINDOWS\system32\wiaacmgr.e​xe
 + 2008-04-14 02:34:27 438,784 ----a-w C:\WINDOWS\system32\wiaacmgr.e​xe
 - 2004-08-05 12:00:00 465,920 ----a-w C:\WINDOWS\system32\wiadefui.d​ll
 + 2008-04-14 02:33:48 465,920 ----a-w C:\WINDOWS\system32\wiadefui.d​ll
 - 2004-08-05 12:00:00 124,928 ----a-w C:\WINDOWS\system32\wiadss.dll​
 + 2008-04-14 02:33:48 124,928 ----a-w C:\WINDOWS\system32\wiadss.dll​
 - 2004-08-05 12:00:00 75,776 ----a-w C:\WINDOWS\system32\wiascr.dll​
 + 2008-04-14 02:33:48 75,776 ----a-w C:\WINDOWS\system32\wiascr.dll​
 - 2006-12-19 18:17:50 334,336 ----a-w C:\WINDOWS\system32\wiaservc.d​ll
 + 2008-04-14 02:33:48 334,336 ----a-w C:\WINDOWS\system32\wiaservc.d​ll
 - 2004-08-05 12:00:00 594,432 ----a-w C:\WINDOWS\system32\wiashext.d​ll
 + 2008-04-14 02:33:48 594,432 ----a-w C:\WINDOWS\system32\wiashext.d​ll
 - 2004-08-05 12:00:00 111,104 ----a-w C:\WINDOWS\system32\wiavideo.d​ll
 + 2008-04-14 02:33:48 111,104 ----a-w C:\WINDOWS\system32\wiavideo.d​ll
 - 2007-03-08 15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys​
 + 2008-04-14 01:58:06 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys​
 - 2004-08-05 12:00:00 102,400 ----a-w C:\WINDOWS\system32\win32spl.d​ll
 + 2008-04-14 02:33:48 102,912 ----a-w C:\WINDOWS\system32\win32spl.d​ll
 - 2004-08-05 12:00:00 938,496 ----a-w C:\WINDOWS\system32\winbrand.d​ll
 + 2008-04-14 01:58:13 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.d​ll
 + 2008-04-14 02:33:48 712,704 ------w C:\WINDOWS\system32\windowscod​ecs.dll
 + 2008-04-14 02:33:48 346,112 ------w C:\WINDOWS\system32\windowscod​ecsext.dll
 - 2004-08-05 12:00:00 351,232 ----a-w C:\WINDOWS\system32\winhttp.dl​l
 + 2008-04-14 02:33:48 354,304 ----a-w C:\WINDOWS\system32\winhttp.dl​l
 - 2007-12-07 02:08:34 824,832 ----a-w C:\WINDOWS\system32\wininet.dl​l
 + 2008-04-23 04:16:40 826,368 ----a-w C:\WINDOWS\system32\wininet.dl​l
 - 2004-08-05 12:00:00 32,768 ----a-w C:\WINDOWS\system32\winipsec.d​ll
 + 2008-04-14 02:33:48 32,256 ----a-w C:\WINDOWS\system32\winipsec.d​ll
 - 2004-08-05 12:00:00 506,368 ----a-w C:\WINDOWS\system32\winlogon.e​xe
 + 2008-04-14 02:34:28 512,000 ----a-w C:\WINDOWS\system32\winlogon.e​xe
 - 2004-08-05 12:00:00 180,736 ----a-w C:\WINDOWS\system32\winmm.dll
 + 2008-04-14 02:33:48 180,736 ----a-w C:\WINDOWS\system32\winmm.dll
 - 2004-08-05 12:00:00 773,632 ----a-w C:\WINDOWS\system32\winntbbu.d​ll
 + 2008-04-14 02:32:53 764,416 ----a-w C:\WINDOWS\system32\winntbbu.d​ll
 - 2004-08-05 12:00:00 16,896 ----a-w C:\WINDOWS\system32\winrnr.dll​
 + 2008-04-14 02:33:48 16,896 ----a-w C:\WINDOWS\system32\winrnr.dll​
 - 2004-08-05 12:00:00 100,352 ----a-w C:\WINDOWS\system32\winscard.d​ll
 + 2008-04-14 02:33:48 100,352 ----a-w C:\WINDOWS\system32\winscard.d​ll
 - 2004-08-05 12:00:00 17,408 ----a-w C:\WINDOWS\system32\winshfhc.d​ll
 + 2008-04-14 02:33:48 17,408 ----a-w C:\WINDOWS\system32\winshfhc.d​ll
 + 2004-08-05 12:00:00 2,864 ----a-w C:\WINDOWS\system32\winsock.dl​l
 - 2004-08-05 12:00:00 146,944 ----a-w C:\WINDOWS\system32\winspool.d​rv
 + 2008-04-14 02:34:34 146,944 ----a-w C:\WINDOWS\system32\winspool.d​rv
 + 2004-08-05 12:00:00 2,112 ----a-w C:\WINDOWS\system32\winspool.e​xe
 - 2007-03-17 13:44:47 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll​
 + 2008-04-14 02:33:48 293,888 ----a-w C:\WINDOWS\system32\winsrv.dll​
 - 2004-08-05 12:00:00 53,760 ----a-w C:\WINDOWS\system32\winsta.dll​
 + 2008-04-14 02:33:48 53,760 ----a-w C:\WINDOWS\system32\winsta.dll​
 - 2004-08-05 12:00:00 176,640 ----a-w C:\WINDOWS\system32\wintrust.d​ll
 + 2008-04-14 02:33:48 176,640 ----a-w C:\WINDOWS\system32\wintrust.d​ll
 - 2004-08-05 12:00:00 5,632 ----a-w C:\WINDOWS\system32\winver.exe​
 + 2008-04-14 02:34:28 5,632 ----a-w C:\WINDOWS\system32\winver.exe​
 - 2006-08-17 12:29:49 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll​
 + 2008-04-14 02:33:48 132,096 ----a-w C:\WINDOWS\system32\wkssvc.dll​
 + 2008-04-14 02:33:48 69,120 ------w C:\WINDOWS\system32\wlanapi.dl​l
 - 2004-08-05 12:00:00 172,544 ----a-w C:\WINDOWS\system32\wldap32.dl​l
 + 2008-04-14 02:33:48 172,544 ----a-w C:\WINDOWS\system32\wldap32.dl​l
 - 2004-08-05 12:00:00 94,208 ----a-w C:\WINDOWS\system32\wlnotify.d​ll
 + 2008-04-14 02:33:48 94,208 ----a-w C:\WINDOWS\system32\wlnotify.d​ll
 - 2005-01-28 11:32:44 396,528 ----a-w C:\WINDOWS\system32\wmadmod.dl​l
 + 2006-10-18 19:47:18 757,248 ----a-w C:\WINDOWS\system32\WMADMOD.dl​l
 - 2005-01-28 06:53:18 716,288 ----a-w C:\WINDOWS\system32\wmadmoe.dl​l
 + 2006-10-18 19:47:18 1,117,696 ----a-w C:\WINDOWS\system32\WMADMOE.dl​l
 - 2007-10-20 05:01:32 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
 + 2007-10-25 07:28:30 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
 - 2005-01-28 06:53:20 28,160 ----a-w C:\WINDOWS\system32\WMDMLOG.dl​l
 + 2006-10-18 19:47:18 33,792 ----a-w C:\WINDOWS\system32\wmdmlog.dl​l
 - 2005-01-28 06:53:20 33,792 ----a-w C:\WINDOWS\system32\WMDMPS.dll​
 + 2006-10-18 19:47:18 37,376 ----a-w C:\WINDOWS\system32\wmdmps.dll​
 - 2005-01-28 06:53:50 335,872 ----a-w C:\WINDOWS\system32\WMDRMdev.d​ll
 + 2006-10-18 19:47:18 429,056 ----a-w C:\WINDOWS\system32\wmdrmdev.d​ll
 - 2005-01-28 06:53:54 290,816 ----a-w C:\WINDOWS\system32\WMDRMNet.d​ll
 + 2006-10-18 19:47:20 348,672 ----a-w C:\WINDOWS\system32\wmdrmnet.d​ll
 + 2006-10-18 19:47:20 535,040 ------w C:\WINDOWS\system32\wmdrmsdk.d​ll
 - 2005-01-28 13:22:24 226,304 ----a-w C:\WINDOWS\system32\wmerror.dl​l
 + 2006-11-03 07:58:42 272,384 ----a-w C:\WINDOWS\system32\wmerror.dl​l
 - 2004-08-05 12:00:00 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
 + 2008-04-14 02:32:55 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
 - 2005-01-28 06:53:16 150,016 ----a-w C:\WINDOWS\system32\wmidx.dll
 + 2006-10-18 19:47:20 157,184 ----a-w C:\WINDOWS\system32\wmidx.dll
 - 2005-01-28 06:53:16 1,027,072 ----a-w C:\WINDOWS\system32\wmnetmgr.d​ll
 + 2006-10-18 19:47:20 937,984 ----a-w C:\WINDOWS\system32\WMNetMgr.d​ll
 - 2007-04-30 06:20:24 5,537,792 ----a-w C:\WINDOWS\system32\wmp.dll
 + 2007-06-11 21:51:12 10,834,944 ----a-w C:\WINDOWS\system32\wmp.dll
 - 2005-01-28 06:53:20 135,168 ----a-w C:\WINDOWS\system32\wmpasf.dll​
 + 2006-10-18 19:47:20 242,688 ----a-w C:\WINDOWS\system32\wmpasf.dll​
 - 2005-01-28 06:53:20 282,624 ----a-w C:\WINDOWS\system32\wmpdxm.dll​
 + 2006-10-18 19:47:20 314,880 ----a-w C:\WINDOWS\system32\wmpdxm.dll​
 + 2006-10-18 19:47:20 295,936 ------w C:\WINDOWS\system32\wmpeffects​.dll
 - 2005-01-28 06:53:18 1,594,880 ----a-w C:\WINDOWS\system32\wmpencen.d​ll
 + 2006-10-18 19:47:20 1,661,440 ----a-w C:\WINDOWS\system32\wmpencen.d​ll
 + 2008-04-14 02:33:48 276,992 ------w C:\WINDOWS\system32\wmphoto.dl​l
 - 2005-01-28 13:22:14 3,424,256 ----a-w C:\WINDOWS\system32\wmploc.dll​
 + 2006-11-03 08:03:34 8,292,352 ----a-w C:\WINDOWS\system32\wmploc.dll​
 + 2006-10-18 19:47:20 613,376 ------w C:\WINDOWS\system32\wmpmde.dll​
 + 2006-10-18 19:47:20 130,048 ------w C:\WINDOWS\system32\wmpps.dll
 - 2005-01-28 13:22:18 86,016 ----a-w C:\WINDOWS\system32\wmpshell.d​ll
 + 2006-11-03 07:59:06 99,840 ----a-w C:\WINDOWS\system32\wmpshell.d​ll
 - 2005-01-28 06:53:18 175,104 ----a-w C:\WINDOWS\system32\wmpsrcwp.d​ll
 + 2006-10-18 19:47:20 204,288 ----a-w C:\WINDOWS\system32\wmpsrcwp.d​ll
 - 2005-01-28 11:32:56 774,904 ----a-w C:\WINDOWS\system32\wmsdmod.dl​l
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\wmsdmod.dl​l
 - 2004-08-05 12:00:00 115,200 ----a-w C:\WINDOWS\system32\wmsdmoe.dl​l
 + 2008-04-14 02:33:48 115,200 ----a-w C:\WINDOWS\system32\wmsdmoe.dl​l
 - 2005-01-28 06:53:18 1,119,744 ----a-w C:\WINDOWS\system32\wmsdmoe2.d​ll
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\wmsdmoe2.d​ll
 - 2005-01-28 11:32:44 413,944 ----a-w C:\WINDOWS\system32\wmspdmod.d​ll
 + 2006-10-18 19:47:22 603,648 ----a-w C:\WINDOWS\system32\WMSPDMOD.d​ll
 - 2005-01-28 06:53:18 940,544 ----a-w C:\WINDOWS\system32\wmspdmoe.d​ll
 + 2006-10-18 19:47:22 1,329,152 ----a-w C:\WINDOWS\system32\WMSPDMOE.d​ll
 - 2004-08-05 12:00:00 303,616 ----a-w C:\WINDOWS\system32\wmstream.d​ll
 + 2008-04-14 02:33:49 303,616 ----a-w C:\WINDOWS\system32\wmstream.d​ll
 - 2005-01-28 11:32:56 1,218,808 ----a-w C:\WINDOWS\system32\wmvadvd.dl​l
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\WMVADVD.dl​l
 - 2005-01-28 06:53:20 1,512,448 ----a-w C:\WINDOWS\system32\WMVADVE.DL​L
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\WMVADVE.DL​L
 - 2006-12-07 05:29:34 2,374,472 ----a-w C:\WINDOWS\system32\wmvcore.dl​l
 + 2006-10-18 19:47:22 2,450,944 ----a-w C:\WINDOWS\system32\wmvcore.dl​l
 + 2006-10-18 19:47:22 1,543,680 ------w C:\WINDOWS\system32\WMVDECOD.d​ll
 - 2005-01-28 11:32:58 895,736 ----a-w C:\WINDOWS\system32\wmvdmod.dl​l
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\wmvdmod.dl​l
 - 2005-01-28 06:53:18 1,003,008 ----a-w C:\WINDOWS\system32\wmvdmoe2.d​ll
 + 2006-10-18 19:47:22 4,096 ----a-w C:\WINDOWS\system32\wmvdmoe2.d​ll
 + 2006-10-18 19:47:22 1,574,912 ------w C:\WINDOWS\system32\WMVENCOD.d​ll
 + 2006-10-18 19:47:22 1,382,912 ------w C:\WINDOWS\system32\WMVSDECD.d​ll
 + 2006-10-18 19:47:22 767,488 ------w C:\WINDOWS\system32\WMVSENCD.d​ll
 + 2006-10-18 19:47:22 656,896 ------w C:\WINDOWS\system32\WMVXENCD.d​ll
 - 2004-08-05 12:00:00 265,216 ----a-w C:\WINDOWS\system32\wow32.dll
 + 2008-04-14 02:33:49 265,216 ----a-w C:\WINDOWS\system32\wow32.dll
 + 2004-08-05 12:00:00 2,736 ----a-w C:\WINDOWS\system32\wowdeb.exe​
 - 2004-08-05 12:00:00 32,256 ----a-w C:\WINDOWS\system32\wpabaln.ex​e
 + 2008-04-14 02:34:29 32,256 ----a-w C:\WINDOWS\system32\wpabaln.ex​e
 - 2005-01-27 23:36:28 38,912 ----a-w C:\WINDOWS\system32\wpd_ci.dll​
 + 2006-10-18 19:47:22 629,760 ----a-w C:\WINDOWS\system32\wpd_ci.dll​
 - 2005-01-27 23:36:20 61,952 ----a-w C:\WINDOWS\system32\wpdconns.d​ll
 + 2006-10-18 19:47:22 35,840 ----a-w C:\WINDOWS\system32\wpdconns.d​ll
 - 2005-01-27 23:36:24 114,176 ----a-w C:\WINDOWS\system32\wpdmtp.dll​
 + 2006-10-18 19:47:22 154,624 ----a-w C:\WINDOWS\system32\wpdmtp.dll​
 - 2005-01-27 23:36:22 66,560 ----a-w C:\WINDOWS\system32\wpdmtpus.d​ll
 + 2006-10-18 19:47:22 63,488 ----a-w C:\WINDOWS\system32\wpdmtpus.d​ll
 + 2006-10-18 19:47:22 2,603,008 ------w C:\WINDOWS\system32\WpdShext.d​ll
 + 2006-10-18 18:00:14 17,408 ------w C:\WINDOWS\system32\wpdshextau​toplay.exe
 + 2006-11-02 09:52:12 44,032 ------w C:\WINDOWS\system32\wpdshextre​s.dll
 + 2006-10-18 19:47:22 133,632 ------w C:\WINDOWS\system32\WPDShServi​ceObj.dll
 - 2005-01-27 23:36:28 331,264 ----a-w C:\WINDOWS\system32\wpdsp.dll
 + 2006-10-18 19:47:22 356,352 ----a-w C:\WINDOWS\system32\wpdsp.dll
 - 2004-08-05 12:00:00 32,768 ----a-w C:\WINDOWS\system32\wpnpinst.e​xe
 + 2008-04-14 02:34:29 11,776 ----a-w C:\WINDOWS\system32\wpnpinst.e​xe
 - 2004-08-05 12:00:00 82,944 ----a-w C:\WINDOWS\system32\ws2_32.dll​
 + 2008-04-14 02:33:49 82,432 ----a-w C:\WINDOWS\system32\ws2_32.dll​
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\system32\ws2help.dl​l
 + 2008-04-14 02:33:49 19,968 ----a-w C:\WINDOWS\system32\ws2help.dl​l
 - 2004-08-05 12:00:00 13,824 ----a-w C:\WINDOWS\system32\wscntfy.ex​e
 + 2008-04-14 02:34:29 13,824 ----a-w C:\WINDOWS\system32\wscntfy.ex​e
 - 2004-08-05 12:00:00 114,688 ----a-w C:\WINDOWS\system32\wscript.ex​e
 + 2008-05-08 11:24:44 155,648 ----a-w C:\WINDOWS\system32\wscript.ex​e
 - 2004-08-05 12:00:00 81,408 ----a-w C:\WINDOWS\system32\wscsvc.dll​
 + 2008-04-14 02:33:50 80,896 ----a-w C:\WINDOWS\system32\wscsvc.dll​
 - 2004-08-05 12:00:00 108,032 ----a-w C:\WINDOWS\system32\wshbth.dll​
 + 2008-04-14 02:33:50 108,032 ----a-w C:\WINDOWS\system32\wshbth.dll​
 - 2004-08-05 12:00:00 28,672 ----a-w C:\WINDOWS\system32\wshcon.dll​
 + 2008-04-14 02:33:50 36,864 ----a-w C:\WINDOWS\system32\wshcon.dll​
 - 2004-08-05 12:00:00 65,536 ----a-w C:\WINDOWS\system32\wshext.dll​
 + 2008-05-09 10:55:00 90,112 ----a-w C:\WINDOWS\system32\wshext.dll​
 - 2004-08-05 12:00:00 14,336 ----a-w C:\WINDOWS\system32\wship6.dll​
 + 2008-04-14 02:33:50 14,336 ----a-w C:\WINDOWS\system32\wship6.dll​
 - 2004-08-05 12:00:00 11,776 ----a-w C:\WINDOWS\system32\WshRm.dll
 + 2008-04-14 02:33:50 11,264 ----a-w C:\WINDOWS\system32\wshrm.dll
 - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\system32\wshtcpip.d​ll
 + 2008-04-14 02:33:50 19,456 ----a-w C:\WINDOWS\system32\wshtcpip.d​ll
 - 2004-08-05 12:00:00 42,496 ----a-w C:\WINDOWS\system32\wsnmp32.dl​l
 + 2008-04-14 02:33:50 41,984 ----a-w C:\WINDOWS\system32\wsnmp32.dl​l
 - 2004-08-05 12:00:00 25,088 ----a-w C:\WINDOWS\system32\wsock32.dl​l
 + 2008-04-14 02:33:50 25,088 ----a-w C:\WINDOWS\system32\wsock32.dl​l
 - 2004-08-05 12:00:00 51,200 ----a-w C:\WINDOWS\system32\wstdecod.d​ll
 + 2008-04-14 02:33:50 51,200 ----a-w C:\WINDOWS\system32\wstdecod.d​ll
 - 2004-08-05 12:00:00 18,432 ----a-w C:\WINDOWS\system32\wtsapi32.d​ll
 + 2008-04-14 02:33:50 18,432 ----a-w C:\WINDOWS\system32\wtsapi32.d​ll
 - 2004-08-05 12:00:00 6,656 ----a-w C:\WINDOWS\system32\wuauserv.d​ll
 + 2008-04-14 02:33:50 6,656 ----a-w C:\WINDOWS\system32\wuauserv.d​ll
 + 2006-09-28 18:13:26 95,344 ------w C:\WINDOWS\system32\WUDFCoinst​aller.dll
 + 2006-09-28 16:56:38 146,432 ------w C:\WINDOWS\system32\WudfHost.e​xe
 + 2006-09-28 16:56:16 165,376 ------w C:\WINDOWS\system32\WudfPlatfo​rm.dll
 + 2006-09-28 16:56:14 55,808 ------w C:\WINDOWS\system32\WudfSvc.dl​l
 + 2006-09-28 16:56:38 316,416 ------w C:\WINDOWS\system32\WUDFx.dll
 - 2004-08-05 12:00:00 378,880 ----a-w C:\WINDOWS\system32\wzcdlg.dll​
 + 2008-04-14 02:33:51 384,000 ----a-w C:\WINDOWS\system32\wzcdlg.dll​
 - 2004-08-05 12:00:00 51,712 ----a-w C:\WINDOWS\system32\wzcsapi.dl​l
 + 2008-04-14 02:33:51 52,736 ----a-w C:\WINDOWS\system32\wzcsapi.dl​l
 - 2004-08-05 12:00:00 359,936 ----a-w C:\WINDOWS\system32\wzcsvc.dll​
 + 2008-04-14 02:33:52 483,840 ----a-w C:\WINDOWS\system32\wzcsvc.dll​
 - 2004-08-05 12:00:00 91,648 ----a-w C:\WINDOWS\system32\xactsrv.dl​l
 + 2008-04-14 02:33:52 91,648 ----a-w C:\WINDOWS\system32\xactsrv.dl​l
 - 2004-08-05 12:00:00 30,720 ----a-w C:\WINDOWS\system32\xcopy.exe
 + 2008-04-14 02:34:29 30,720 ----a-w C:\WINDOWS\system32\xcopy.exe
 - 2006-07-14 15:51:51 121,856 ------w C:\WINDOWS\system32\xmllite.dl​l
 + 2008-04-14 02:33:52 121,856 ------w C:\WINDOWS\system32\xmllite.dl​l
 - 2004-08-05 12:00:00 129,536 ----a-w C:\WINDOWS\system32\xmlprov.dl​l
 + 2008-04-14 02:33:52 129,024 ----a-w C:\WINDOWS\system32\xmlprov.dl​l
 - 2004-08-05 12:00:00 50,176 ----a-w C:\WINDOWS\system32\xmlprovi.d​ll
 + 2008-04-14 02:33:52 50,176 ----a-w C:\WINDOWS\system32\xmlprovi.d​ll
 - 2006-03-01 19:43:51 11,776 ----a-w C:\WINDOWS\system32\xolehlp.dl​l

n°413188
chef.manu
Posté le 27-07-2008 à 02:01:06  answer
Prévenir les modérateurs en cas d'abus
 

Rapport combofix suite et cette fois il est complet

 2004-08-05 12:00:00 445,440 ----a-w C:\WINDOWS\system32\xpob2res.d​ll
 + 2008-04-13 18:40:32 445,440 ----a-w C:\WINDOWS\system32\xpob2res.d​ll
 - 2004-08-05 12:00:00 197,632 ----a-w C:\WINDOWS\system32\xpsp1res.d​ll
 + 2008-04-13 18:35:20 197,632 ----a-w C:\WINDOWS\system32\xpsp1res.d​ll
 - 2004-08-05 12:00:00 2,986,496 ----a-w C:\WINDOWS\system32\xpsp2res.d​ll
 + 2008-04-13 18:36:46 2,986,496 ----a-w C:\WINDOWS\system32\xpsp2res.d​ll
 - 2007-10-29 15:35:14 121,856 ----a-w C:\WINDOWS\system32\xpsp3res.d​ll
 + 2008-04-13 18:39:17 778,752 ----a-w C:\WINDOWS\system32\xpsp3res.d​ll
 - 2004-08-05 12:00:00 340,480 ----a-w C:\WINDOWS\system32\zipfldr.dl​l
 + 2008-04-14 02:33:52 340,992 ----a-w C:\WINDOWS\system32\zipfldr.dl​l
 - 2004-08-05 12:00:00 50,688 ----a-w C:\WINDOWS\twain_32.dll
 + 2008-04-14 02:33:47 50,688 ----a-w C:\WINDOWS\twain_32.dll
 + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
 - 2004-08-05 12:00:00 288,256 ----a-w C:\WINDOWS\winhlp32.exe
 + 2008-04-14 02:34:27 288,256 ----a-w C:\WINDOWS\winhlp32.exe
 + 2008-03-31 14:03:03 8,192 ----a-w C:\WINDOWS\WinSxS\MSIL_IEExecR​emote_b03f5f7f11d50a3a_2.0.0.0​_x-ww_6e57c34e\IEExecRemote.dl​l
 - 2007-01-19 12:51:03 74,802 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\atl.dl​l
 + 2008-04-14 02:30:54 74,802 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\atl.dl​l
 - 2007-01-19 12:51:04 995,383 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\mfc42.​dll
 + 2008-04-14 02:30:54 995,383 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\mfc42.​dll
 - 2007-01-19 12:51:04 1,011,774 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\mfc42u​.dll
 + 2008-04-14 02:30:54 1,011,774 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\mfc42u​.dll
 - 2007-01-19 12:51:04 401,462 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\msvcp6​0.dll
 + 2008-04-14 02:30:54 401,462 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Tools.VisualCPlusPlus.Runtim​e-Libraries_6595b64144ccf1df_6​.0.9792.0_x-ww_08a6620a\msvcp6​0.dll
 + 2007-08-22 22:18:08 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.ATL_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_cbb27474\ATL8​0.dll
 + 2007-10-23 23:47:56 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.1433_x-ww_5cf844d2\msv​cm80.dll
 + 2007-10-23 23:47:56 558,080 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.1433_x-ww_5cf844d2\msv​cp80.dll
 + 2007-10-23 23:47:56 635,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.1433_x-ww_5cf844d2\msv​cr80.dll
 + 2007-08-22 22:18:08 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_6b128700\msvc​m80.dll
 + 2007-08-22 22:18:08 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_6b128700\msvc​p80.dll
 + 2007-08-22 22:18:08 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.CRT_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_6b128700\msvc​r80.dll
 + 2007-08-22 22:18:08 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFC_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_3bf8fa05\mfc8​0.dll
 + 2007-08-22 22:18:08 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFC_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_3bf8fa05\mfc8​0u.dll
 + 2007-08-22 22:18:08 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFC_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_3bf8fa05\mfcm​80.dll
 + 2007-08-22 22:18:08 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFC_1fc8b3b9a1e18e3b_8.​0.50727.762_x-ww_3bf8fa05\mfcm​80u.dll
 + 2007-08-22 22:18:08 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80CHS.dll
 + 2007-08-22 22:18:08 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80CHT.dll
 + 2007-08-22 22:18:08 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80DEU.dll
 + 2007-08-22 22:18:08 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80ENU.dll
 + 2007-08-22 22:18:08 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80ESP.dll
 + 2007-08-22 22:18:08 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80FRA.dll
 + 2007-08-22 22:18:08 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80ITA.dll
 + 2007-08-22 22:18:08 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80JPN.dll
 + 2007-08-22 22:18:08 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.VC80.MFCLOC_1fc8b3b9a1e18e3b​_8.0.50727.762_x-ww_91481303\m​fc80KOR.dll
 + 2008-04-14 02:30:54 1,054,208 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Common-Controls_6595​b64144ccf1df_6.0.2600.5512_x-w​w_35d4ce83\comctl32.dll
 + 2008-04-14 02:30:54 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.CPlusPlusRuntime_659​5b64144ccf1df_7.0.2600.5512_x-​ww_3fd60d63\msvcirt.dll
 + 2008-04-14 02:30:54 343,040 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.CPlusPlusRuntime_659​5b64144ccf1df_7.0.2600.5512_x-​ww_3fd60d63\msvcrt.dll
 + 2008-04-14 02:30:53 1,724,416 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.GdiPlus_6595b64144cc​f1df_1.0.2600.5512_x-ww_dfb54e​0c\GdiPlus.dll
 - 2004-08-05 12:00:00 852,992 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.Dxmrtp_65​95b64144ccf1df_5.2.2.3_x-ww_46​8466a7\dxmrtp.dll
 + 2008-04-14 02:30:54 852,992 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.Dxmrtp_65​95b64144ccf1df_5.2.2.3_x-ww_46​8466a7\dxmrtp.dll
 - 2004-08-05 12:00:00 994,816 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.RtcDll_65​95b64144ccf1df_5.2.2.3_x-ww_d6​bd8b95\rtcdll.dll
 + 2008-04-14 02:30:54 994,816 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.RtcDll_65​95b64144ccf1df_5.2.2.3_x-ww_d6​bd8b95\rtcdll.dll
 - 2004-08-05 12:00:00 137,728 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.RtcRes_65​95b64144ccf1df_5.2.2.3_fr_457e​bf3d\rtcres.dll
 + 2008-04-14 02:05:53 137,728 ----a-w C:\WINDOWS\WinSxS\x86_Microsof​t.Windows.Networking.RtcRes_65​95b64144ccf1df_5.2.2.3_fr_457e​bf3d\rtcres.dll
 - 2007-07-12 01:03:53 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.E​nterpriseServices_b03f5f7f11d5​0a3a_2.0.0.0_x-ww_7d5f3790\Sys​tem.EnterpriseServices.dll
 + 2008-03-31 14:03:11 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.E​nterpriseServices_b03f5f7f11d5​0a3a_2.0.0.0_x-ww_7d5f3790\Sys​tem.EnterpriseServices.dll
 - 2007-07-12 01:03:53 114,176 ----a-w C:\WINDOWS\WinSxS\x86_System.E​nterpriseServices_b03f5f7f11d5​0a3a_2.0.0.0_x-ww_7d5f3790\Sys​tem.EnterpriseServices.Wrapper​.dll
 + 2008-03-31 14:03:11 113,664 ----a-w C:\WINDOWS\WinSxS\x86_System.E​nterpriseServices_b03f5f7f11d5​0a3a_2.0.0.0_x-ww_7d5f3790\Sys​tem.EnterpriseServices.Wrapper​.dll
 + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
 .
 -- Snapshot reset to current date --
 .
 ((((((((((((((((((((((((((((((​(((   Point de chargement Reg   ))))))))))))))))))))))))))))))​)))))))))))))))))))
 .
 .
 REGEDIT4
 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "ctfmon.exe"="C:\WINDOWS\syste​m32\ctfmon.exe" [2008-04-14 04:33 15360]
 "swg"="C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​" [2007-06-09 00:58 68856]
 "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "wrna3ls"="C:\Program Files\rnamfler\naomf.exe" [2006-04-01 10:45 1253960]
 "ControlCenter2.0"="C:\Program​ Files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42 933888]
 "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
 "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe" [2007-08-24 07:00 33648]
 "DetectorApp"="C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 06:15 102400]
 "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-11-09 00:00 128920]
 "itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2006-07-08 01:14 576320]
 "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" [2003-10-16 14:59 69632]
 "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2006-07-08 01:15 600896]
 "IndexSearch"="C:\Program Files\ScanSoft\PaperPort\Index​Search.exe" [2005-03-17 20:30 40960]
 "PCMService"="c:\APPS\Powercin​ema\PCMService.exe" [2006-02-23 12:08 147456]
 "PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe" [2005-03-17 20:17 57393]
 "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" [2003-10-14 11:22 155648]
 "SetDefPrt"="C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe" [2005-01-26 18:02 49152]
 "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-15 09:30 98304]
 "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe" [2007-09-22 17:21 185632]
 "SweetIM"="C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe" [2006-12-27 16:53 73840]
 "VirtualCloneDrive"="C:\Progra​m Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" [2006-04-29 15:21 94208]
 "SunJavaUpdateSched"="C:\Progr​am Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
 "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 18:52 266497]
 "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
 "SpywareTerminator"="C:\Progra​m Files\Spyware Terminator\SpywareTerminatorSh​ield.exe" [2008-05-25 23:33 1817600]
 "SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe"​ [2008-05-14 15:23 321160]
 "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]

 [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
 "CTFMON.EXE"="C:\WINDOWS\syste​m32\CTFMON.EXE" [2008-04-14 04:33 15360]

 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina]
 2006-01-30 08:53 49152 C:\APPS\Softex\OmniPass\OPXPGi​na.dll

 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
 "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​Vio\Dvacm.acm
 "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​MPEG\ulmp3acm.acm
 "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​MPEG\mpegacm.acm

 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
 Notification Packages REG_MULTI_SZ    scecli scecli scecli scecli

 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
 "DisableMonitoring"=dword:0000​0001

 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
 "EnableFirewall"= 0 (0x0)

 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
 "%ProgramFiles%\\AOL 9.0\\aol.exe"=
 "%ProgramFiles%\\UBISOFT\\Spli​nter Cell Pandora Tomorrow\\logo_ubi.exe"=
 "%ProgramFiles%\\UBISOFT\\Spli​nter Cell Pandora Tomorrow\\pandora.exe"=
 "%windir%\\system32\\sessmgr.e​xe"=
 "C:\\Program Files\\AOL 9.0\\waol.exe"=
 "C:\\Program Files\\Messenger\\msmsgs.exe"=​
 "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"​=
 "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=​
 "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"​=
 "C:\\WINDOWS\\pchealth\\helpct​r\\binaries\\HelpCtr.exe"=
 "C:\\Program Files\\LimeWire\\LimeWire.exe"​=
 "C:\\Program Files\\Real\\RealPlayer\\realp​lay.exe"=
 "C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kod​ak Software Updater.exe"=
 "C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=​
 "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
 "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=​
 "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"​=

 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
 "1700:TCP"= 1700:TCP:MioNet Remote Drive Access
 "1641:TCP"= 1641:TCP:MioNet Remote Drive Verification
 "1700:UDP"= 1700:UDP:Windows Media Format SDK (iexplore.exe)
 "1701:UDP"= 1701:UDP:Windows Media Format SDK (iexplore.exe)
 "7654:TCP"= 7654:TCP:eMule_TCP
 "7664:UDP"= 7664:UDP:eMule_UDP

 R1 kbfilter;Keyboard Filter Driver;C:\WINDOWS\system32\dri​vers\kbfilter.sys [2003-03-27 14:55]
 R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\​sp_rsdrv2.sys [2008-05-25 23:33]
 R2 MioNet;MioNet Service;C:\Program Files\MioNet\MioNetManager.exe​ [2005-07-15 22:38]
 R2 SPAMfighter Update Service;SPAMfighter Update Service;C:\Program Files\SPAMfighter\sfus.exe [2008-05-14 15:24]
 R3 SPC610NC;Philips SPC500NC Webcam;C:\WINDOWS\system32\DRI​VERS\SPC610NC.SYS [2005-10-13 16:41]
 R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVER​S\USBSTOR.SYS [2008-04-13 20:45]
 S3 archbus;NEC WMC USB_BJ1 Composite Device driver (WDM);C:\WINDOWS\system32\DRIV​ERS\archbus.sys [2005-08-30 13:17]
 S3 archmdfl;NEC WMC USB_BJ1 Modem Filter;C:\WINDOWS\system32\DRI​VERS\archmdfl.sys [2005-08-30 13:17]
 S3 archmdm;NEC WMC USB_BJ1 Modem Drivers;C:\WINDOWS\system32\DR​IVERS\archmdm.sys [2005-08-30 13:17]
 S3 archobex;NEC WMC USB_BJ1 OBEX Interface Drivers (WDM);C:\WINDOWS\system32\DRIV​ERS\archobex.sys [2005-08-30 13:17]
 S3 SE2Fbus;Sony Ericsson Device 047 Driver driver (WDM);C:\WINDOWS\system32\DRIV​ERS\SE2Fbus.sys [2006-11-10 10:55]
 S3 SE2Fmdfl;Sony Ericsson Device 047 USB WMC Modem Filter;C:\WINDOWS\system32\DRI​VERS\SE2Fmdfl.sys [2006-11-10 10:55]
 S3 SE2Fmdm;Sony Ericsson Device 047 USB WMC Modem Driver;C:\WINDOWS\system32\DRI​VERS\SE2Fmdm.sys [2006-11-10 10:55]
 S3 SE2Fmgmt;Sony Ericsson Device 047 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIV​ERS\SE2Fmgmt.sys [2006-11-10 10:55]
 S3 se2Fnd5;Sony Ericsson Device 047 USB Ethernet Emulation SEMC47 (NDIS);C:\WINDOWS\system32\DRI​VERS\se2Fnd5.sys [2006-11-10 10:55]
 S3 SE2Fobex;Sony Ericsson Device 047 USB WMC OBEX Interface;C:\WINDOWS\system32\​DRIVERS\SE2Fobex.sys [2006-11-10 10:55]
 S3 se2Funic;Sony Ericsson Device 047 USB Ethernet Emulation SEMC47 (WDM);C:\WINDOWS\system32\DRIV​ERS\se2Funic.sys [2006-11-10 10:55]
 S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVER​S\usbscan.sys [2008-04-13 20:45]
 .
 Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
 "2008-07-24 04:30:00 C:\WINDOWS\Tasks\HDReg.job"
 - c:\Apps\HDReg\HDRegRem.exe
 .
 - - - - ORPHANS REMOVED - - - -

 HKLM-Run-Adobe Photo Downloader - C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe


 .
 ------- Supplementary Scan -------
 .
 R0 -: HKCU-Main,SearchMigratedDefaul​tURL = hxxp://www.google.com/search?q​={searchTerms}&sourceid=ie7&rl​s=com.microsoft:en-US&ie=utf8&​oe=utf8
 R0 -: HKLM-Main,Start Page = hxxp://www.ustart.org
 O8 -: Crawler Search - tbr:iemenu
 O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\​EXCEL.EXE/3000
 O18 -: Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA0​51CFBBF} -

 O16 -: {1B4988D6-1723-11D4-A48B-00E02​917C902} - hxxp://sig.cg18.fr/ggAxFr.cab
 C:\WINDOWS\Downloaded Program Files\ggAxFrEn.INF
 C:\WINDOWS\Downloaded Program Files\GGAXCTL.OCX

 O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF​06D9A1B} - hxxp://game09.zylom.com/active​x/zylomgamesplayer.cab
 C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf
 C:\WINDOWS\Downloaded Program Files\zylomgamesplayer.dll


 ******************************​******************************​**************

 catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
 Rootkit scan 2008-07-24 19:03:31
 Windows 5.1.2600 Service Pack 3 NTFS

 Balayage processus cach‚s ...

 Balayage cach‚ autostart entries ...

 Balayage des fichiers cach‚s ...

 Scan termin‚ avec succŠs
 Les fichiers cach‚s: 0

 ******************************​******************************​**************
 .
 --------------------- DLLs a charg‚ sous des processus courants ---------------------

 PROCESS: C:\WINDOWS\system32\winlogon.e​xe
 -> C:\Apps\Softex\OmniPass\opxpgi​na.dll
 .
 ------------------------ Other Running Processes ------------------------
 .
 C:\WINDOWS\system32\ati2evxx.e​xe
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
 C:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 C:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\APPS\Softex\OmniPass\OmniSe​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\rnamfler\naofsvc.exe
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\system32\PAStiSvc.e​xe
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 C:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\APPS\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\system32\ati2evxx.e​xe
 C:\WINDOWS\system32\wscntfy.ex​e
 C:\Program Files\rnamfler\radprcmp.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\WINDOWS\system32\msiexec.ex​e
 C:\Program Files\Hercules\WiFi Station\WiFiStation.exe
 .
 ******************************​******************************​**************
 .
 Temps d'accomplissement: 2008-07-24 19:07:26 - machine was rebooted
 ComboFix-quarantined-files.txt​  2008-07-24 17:07:16
 ComboFix2.txt  2008-03-28 14:36:04
 ComboFix3.txt  2008-03-27 18:20:36
 ComboFix4.txt  2008-03-24 23:10:52
 ComboFix5.txt  2008-03-24 22:49:34

 Pre-Run: 9,450,713,088 octets libres
 Post-Run: 9,423,052,800 octets libres

 7202 --- E O F --- 2008-07-18 00:02:10

n°413189
chef.manu
Posté le 27-07-2008 à 02:04:52  answer
Prévenir les modérateurs en cas d'abus
 

Voici un nouveau rapport hijackthis:

 Logfile of Trend Micro HijackThis v2.0.2
 Scan saved at 02:04:42, on 27/07/2008
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.16674)
 Boot mode: Normal

 Running processes:
 C:\WINDOWS\System32\smss.exe
 C:\WINDOWS\system32\csrss.exe
 C:\WINDOWS\system32\winlogon.e​xe
 C:\WINDOWS\system32\services.e​xe
 C:\WINDOWS\system32\lsass.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\System32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\system32\spoolsv.ex​e
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\Program Files\MioNet\MioNetManager.exe​
 C:\Apps\Softex\OmniPass\Omnise​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\rnamfler\naofsvc.exe
 C:\Program Files\SPAMfighter\sfus.exe
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\System32\PAStiSvc.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\Apps\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\System32\alg.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\Program Files\rnamfler\naomf.exe
 C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe
 C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 C:\Program Files\DAEMON Tools\daemon.exe
 C:\Program Files\Microsoft IntelliType Pro\itype.exe
 C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe
 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
 C:\APPS\Powercinema\PCMService​.exe
 c:\program files\rnamfler\radprcmp.exe
 C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 C:\WINDOWS\SOUNDMAN.EXE
 C:\Program Files\QuickTime\qttask.exe
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe
 C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe
 C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
 C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe
 C:\Program Files\SPAMfighter\SFAgent.exe
 C:\WINDOWS\system32\ctfmon.exe​
 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\Program Files\Hercules\WiFi Station\WifiStation.exe
 C:\WINDOWS\explorer.exe
 C:\Program Files\Fichiers communs\Real\Update_OB\RealOne​MessageCenter.exe
 C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe
 C:\Program Files\Crazy Browser\Crazy Browser.exe
 C:\Program Files\Trend Micro\HijackThis\HijackThis.ex​e
 C:\WINDOWS\system32\wbem\wmipr​vse.exe

 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support [...] TbId=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://www.ustart.org
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Toolbar,LinksFolderName = Liens
 R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695E​CA05670} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7​D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\​AcroIEHelper.dll
 O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7​942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1​D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExt​ensions.dll
 O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF​1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5​E23E045} - (no file)
 O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-51647​60863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF105​77473F7} - c:\program files\google\googletoolbar1.dl​l
 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B​5AD205D} - C:\Program Files\Google\GoogleToolbarNoti​fier\2.0.301.7164\swg.dll
 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-00902​7A5CD4F} - c:\program files\google\googletoolbar1.dl​l
 O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-00902​71D4F88} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638​F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O4 - HKLM\..\Run: [wrna3ls] C:\Program Files\rnamfler\naomf.exe
 O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe /autorun
 O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
 O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe"
 O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
 O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
 O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" -start
 O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
 O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\Index​Search.exe
 O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMServic​e.exe"
 O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" -Embedding -boot
 O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
 O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe"  -osboot
 O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" /s
 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe"
 O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
 O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe"
 O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe"​ update delay 60
 O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe"
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe​
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​
 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE RÉSEAU')
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SYSTEM')
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'Default user')
 O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 O4 - Global Startup: VPro500.lnk = C:\WINDOWS\VPro500.exe
 O4 - Global Startup: WiFi Station.lnk = ?
 O8 - Extra context menu item: Crawler Search - tbr:iemenu
 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Off​ice12\EXCEL.EXE/3000
 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C5​71A8263} - C:\PROGRA~1\MICROS~2\Office12\​REFIEBAR.DLL
 O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F​0318AFE} - C:\WINDOWS\system32\Shdocvw.dl​l
 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.d​ll
 O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\​IE\offline\fr.htm
 O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5​CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
 O16 - DPF: {17492023-C23A-453E-A040-C7C58​0BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
 O16 - DPF: {1B4988D6-1723-11D4-A48B-00E02​917C902} (Contrôle ActiveX GEOMAP GIS) - http://sig.cg18.fr/ggAxFr.cab
 O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED​824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD8​4642501} (Checkers Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4​f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelpe​r.dll
 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05C​B959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w [...] NPUpld.cab
 O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492​C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsof [...] 6964465037
 O16 - DPF: {5C051655-FCD5-4969-9182-770EA​5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {5D6F45B3-9043-443D-A792-11544​7494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/ [...] E_UNO1.cab
 O16 - DPF: {62789780-B744-11D0-986B-00609​731A21D} (Autodesk MapGuide ActiveX Control) - http://sig.cg18.fr/mgaxctrl.cab
 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-22031​3175592} (MSN Games - Installer) - http://messenger.zone.msn.com/ [...] b56649.cab
 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF​06D9A1B} - http://game09.zylom.com/active [...] player.cab
 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46​475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/ [...] b56907.cab
 O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA9​77D5643} (ZoneChess Object) - http://messenger.zone.msn.com/ [...] b57176.cab
 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB62​48B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemSe​rvices.dll
 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA0​51CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.e​xe
 O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.e​xe
 O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\Ko​dakCCS.exe
 O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe​
 O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omnise​rv.exe
 O23 - Service: RdnaoFlSvc - Unknown owner - C:\Program Files\rnamfler\naofsvc.exe
 O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
 O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
 O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.e​xe
 O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

 --
 End of file - 15567 bytes

n°413190
chef.manu
Posté le 27-07-2008 à 02:07:52  answer
Prévenir les modérateurs en cas d'abus
 

Merci beaucoup pour ton aide précieuse. Mon PC est un peu plus rapide mais j'ai toujours PC Cleaner détecté par spyware terminator.

 A trés bientôt/

n°413191
jlpjlp
Posté le 01-08-2008 à 19:29:37  answer
Prévenir les modérateurs en cas d'abus
 



 Ferme tous tes navigateurs (donc copie ou imprime les instructions avant)

 Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :




 File::
 C:\Program Files\rnamfler\naomf.exe
 c:\program files\rnamfler\radprcmp.exe
 C:\Program Files\rnamfler
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe


 Registry::
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "wrna3ls"=-
 "SweetIM"=-




 Enregistre ce fichier sous le nom CFscript


 Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

 Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

 Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

 Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

 Ne touche à rien tant que le scan n'est pas terminé.

 Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

 Remets aussi un rapport Hijackthis


 Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt



 __________________

 scan avec super antispyware et colle le rapport:

 http://www.malekal.com/tutoria [...] yware.html

n°413192
chef.manu
Posté le 02-08-2008 à 17:50:33  answer
Prévenir les modérateurs en cas d'abus
 

Voici le nouveau rapport Combofix

 ComboFix 08-08-01.04 - Manu 2008-08-02 17:21:42.7 - NTFSx86
 Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.88 [GMT 2:00]
 Endroit: D:\Documents and Settings\Manu\Bureau\ComboFix.​exe
 Command switches used :: D:\Documents and Settings\Manu\Bureau\CFscript
 * Création d'un nouveau point de restauration

 FILE ::
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\rnamfler
 C:\Program Files\rnamfler\naomf.exe
 c:\program files\rnamfler\radprcmp.exe
 .
 The following files were disabled during the run:
 C:\Program Files\rnamfler\radprlib.dll
 C:\Program Files\rnamfler\radhslib.dll


 ((((((((((((((((((((((((((((((​((((((   Autres suppressions   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .

 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\rnamfler\naomf.exe
 c:\program files\rnamfler\radprcmp.exe

 .
 ((((((((((((((((((((((((((((((​(((((((((   Drivers/Services   ))))))))))))))))))))))))))))))​)))))))))))))))))))
 .

 -------\Legacy_RdnaoFlSvc
 -------\Service_RdnaoFlSvc


 (((((((((((((((((((((((((((((   Fichiers cr‚‚s 2008-07-02 to 2008-08-02  ))))))))))))))))))))))))))))))​))))))
 .

 2008-07-23 15:38 . 2008-07-20 20:21 38,472 --a------ C:\WINDOWS\system32\drivers\mb​amswissarmy.sys

 .
 ((((((((((((((((((((((((((((((​((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .
 2008-08-02 15:27 --------- d-----w C:\Program Files\SPAMfighter
 2008-08-02 15:26 --------- d--h--r C:\Program Files\rnamfler
 2008-08-02 14:48 --------- d-----w D:\Documents and Settings\Manu\Application Data\Spyware Terminator
 2008-08-02 14:48 --------- d-----w C:\Program Files\Spyware Terminator
 2008-08-02 14:34 --------- d-----w D:\Documents and Settings\All Users\Application Data\Spyware Terminator
 2008-07-23 13:38 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
 2008-07-20 18:21 17,144 ----a-w C:\WINDOWS\system32\drivers\mb​am.sys
 2008-07-18 00:02 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help
 2008-07-16 13:33 77,824 ----a-w C:\WINDOWS\uinst001.exe
 2008-07-02 18:07 --------- d-----w C:\Program Files\Crazy Browser
 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tc​pip.sys
 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\af​d.sys
 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tc​pip6.sys
 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bt​hport.sys
 2008-06-14 10:12 --------- d-----w C:\Program Files\Zylom Games
 2008-06-10 12:11 --------- d-----w D:\Documents and Settings\Manu\Application Data\TaoUSign
 2008-05-18 09:28 921,632 ----a-w C:\SPC610NC.DAT
 2007-09-25 11:26 774,144 ----a-w C:\Program Files\RngInterstitial.dll
 .

 (((((((((((((((((((((((((((((   snapshot_2008-07-24_19.06.39.8​9   ))))))))))))))))))))))))))))))​)))))))))))
 .
 - 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut1_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut1_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut10_2D73ED7BCF5749BA​9891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut10_2D73ED7BCF5749BA​9891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 14,366 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut2_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 14,366 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut2_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut5_86F3D0BB3537401DB​B67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:44 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut5_86F3D0BB3537401DB​B67D4F0DA976EAC_1.exe
 - 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut51_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:45 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut51_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 - 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut52_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:45 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut52_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 - 2008-07-24 17:00:44 32,768 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Cookies\index.dat
 + 2008-08-02 15:27:49 32,768 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Cookies\index.dat
 - 2008-07-24 17:00:44 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Historique\History.IE5\index.dat
 + 2008-08-02 15:27:49 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Historique\History.IE5\index.dat
 - 2008-07-24 17:00:44 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
 + 2008-08-02 15:27:49 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
 .
 ((((((((((((((((((((((((((((((​(((   Point de chargement Reg   ))))))))))))))))))))))))))))))​)))))))))))))))))))
 .
 .
 REGEDIT4
 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "ctfmon.exe"="C:\WINDOWS\syste​m32\ctfmon.exe" [2008-04-14 04:33 15360]
 "swg"="C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​" [2007-06-09 00:58 68856]
 "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "ControlCenter2.0"="C:\Program​ Files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42 933888]
 "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
 "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe" [2007-08-24 07:00 33648]
 "DetectorApp"="C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 06:15 102400]
 "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-11-09 00:00 128920]
 "itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2006-07-08 01:14 576320]
 "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" [2003-10-16 14:59 69632]
 "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2006-07-08 01:15 600896]
 "IndexSearch"="C:\Program Files\ScanSoft\PaperPort\Index​Search.exe" [2005-03-17 20:30 40960]
 "PCMService"="c:\APPS\Powercin​ema\PCMService.exe" [2006-02-23 12:08 147456]
 "PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe" [2005-03-17 20:17 57393]
 "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" [2003-10-14 11:22 155648]
 "SetDefPrt"="C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe" [2005-01-26 18:02 49152]
 "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-15 09:30 98304]
 "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe" [2007-09-22 17:21 185632]
 "VirtualCloneDrive"="C:\Progra​m Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" [2006-04-29 15:21 94208]
 "SunJavaUpdateSched"="C:\Progr​am Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
 "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 18:52 266497]
 "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
 "SpywareTerminator"="C:\Progra​m Files\Spyware Terminator\SpywareTerminatorSh​ield.exe" [2008-05-25 23:33 1817600]
 "SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe"​ [2008-05-14 15:23 321160]
 "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe" [BU]
 "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]

n°413193
chef.manu
Posté le 02-08-2008 à 17:50:43  answer
Prévenir les modérateurs en cas d'abus
 

Voici le nouveau rapport Combofix

 ComboFix 08-08-01.04 - Manu 2008-08-02 17:21:42.7 - NTFSx86
 Microsoft Windows XP Édition familiale  5.1.2600.3.1252.1.1036.18.88 [GMT 2:00]
 Endroit: D:\Documents and Settings\Manu\Bureau\ComboFix.​exe
 Command switches used :: D:\Documents and Settings\Manu\Bureau\CFscript
 * Création d'un nouveau point de restauration

 FILE ::
 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\rnamfler
 C:\Program Files\rnamfler\naomf.exe
 c:\program files\rnamfler\radprcmp.exe
 .
 The following files were disabled during the run:
 C:\Program Files\rnamfler\radprlib.dll
 C:\Program Files\rnamfler\radhslib.dll


 ((((((((((((((((((((((((((((((​((((((   Autres suppressions   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .

 C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 C:\Program Files\rnamfler\naomf.exe
 c:\program files\rnamfler\radprcmp.exe

 .
 ((((((((((((((((((((((((((((((​(((((((((   Drivers/Services   ))))))))))))))))))))))))))))))​)))))))))))))))))))
 .

 -------\Legacy_RdnaoFlSvc
 -------\Service_RdnaoFlSvc


 (((((((((((((((((((((((((((((   Fichiers cr‚‚s 2008-07-02 to 2008-08-02  ))))))))))))))))))))))))))))))​))))))
 .

 2008-07-23 15:38 . 2008-07-20 20:21 38,472 --a------ C:\WINDOWS\system32\drivers\mb​amswissarmy.sys

 .
 ((((((((((((((((((((((((((((((​((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))​))))))))))))))))))
 .
 2008-08-02 15:27 --------- d-----w C:\Program Files\SPAMfighter
 2008-08-02 15:26 --------- d--h--r C:\Program Files\rnamfler
 2008-08-02 14:48 --------- d-----w D:\Documents and Settings\Manu\Application Data\Spyware Terminator
 2008-08-02 14:48 --------- d-----w C:\Program Files\Spyware Terminator
 2008-08-02 14:34 --------- d-----w D:\Documents and Settings\All Users\Application Data\Spyware Terminator
 2008-07-23 13:38 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
 2008-07-20 18:21 17,144 ----a-w C:\WINDOWS\system32\drivers\mb​am.sys
 2008-07-18 00:02 --------- d-----w D:\Documents and Settings\All Users\Application Data\Microsoft Help
 2008-07-16 13:33 77,824 ----a-w C:\WINDOWS\uinst001.exe
 2008-07-02 18:07 --------- d-----w C:\Program Files\Crazy Browser
 2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tc​pip.sys
 2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\af​d.sys
 2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tc​pip6.sys
 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\drivers\bt​hport.sys
 2008-06-14 10:12 --------- d-----w C:\Program Files\Zylom Games
 2008-06-10 12:11 --------- d-----w D:\Documents and Settings\Manu\Application Data\TaoUSign
 2008-05-18 09:28 921,632 ----a-w C:\SPC610NC.DAT
 2007-09-25 11:26 774,144 ----a-w C:\Program Files\RngInterstitial.dll
 .

 (((((((((((((((((((((((((((((   snapshot_2008-07-24_19.06.39.8​9   ))))))))))))))))))))))))))))))​)))))))))))
 .
 - 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut1_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut1_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut10_2D73ED7BCF5749BA​9891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 45,056 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut10_2D73ED7BCF5749BA​9891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 14,366 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut2_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 + 2008-07-30 14:01:44 14,366 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut2_2D73ED7BCF5749BA9​891E131D7FE5FBF.exe
 - 2008-06-25 13:28:24 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut5_86F3D0BB3537401DB​B67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:44 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut5_86F3D0BB3537401DB​B67D4F0DA976EAC_1.exe
 - 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut51_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:45 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut51_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 - 2008-06-25 13:28:25 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut52_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 + 2008-07-30 14:01:45 4,710 ----a-r C:\WINDOWS\Installer\{18B72572​-C7FD-4586-8258-B59E2A06760A}\​NewShortcut52_86F3D0BB3537401D​BB67D4F0DA976EAC_1.exe
 - 2008-07-24 17:00:44 32,768 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Cookies\index.dat
 + 2008-08-02 15:27:49 32,768 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Cookies\index.dat
 - 2008-07-24 17:00:44 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Historique\History.IE5\index.dat
 + 2008-08-02 15:27:49 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Historique\History.IE5\index.dat
 - 2008-07-24 17:00:44 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
 + 2008-08-02 15:27:49 49,152 ----a-w C:\WINDOWS\system32\config\sys​temprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
 .
 ((((((((((((((((((((((((((((((​(((   Point de chargement Reg   ))))))))))))))))))))))))))))))​)))))))))))))))))))
 .
 .
 REGEDIT4
 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "ctfmon.exe"="C:\WINDOWS\syste​m32\ctfmon.exe" [2008-04-14 04:33 15360]
 "swg"="C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​" [2007-06-09 00:58 68856]
 "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 "ControlCenter2.0"="C:\Program​ Files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42 933888]
 "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 21:05 344064]
 "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe" [2007-08-24 07:00 33648]
 "DetectorApp"="C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 06:15 102400]
 "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-11-09 00:00 128920]
 "itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe" [2006-07-08 01:14 576320]
 "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" [2003-10-16 14:59 69632]
 "IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2006-07-08 01:15 600896]
 "IndexSearch"="C:\Program Files\ScanSoft\PaperPort\Index​Search.exe" [2005-03-17 20:30 40960]
 "PCMService"="c:\APPS\Powercin​ema\PCMService.exe" [2006-02-23 12:08 147456]
 "PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe" [2005-03-17 20:17 57393]
 "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" [2003-10-14 11:22 155648]
 "SetDefPrt"="C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe" [2005-01-26 18:02 49152]
 "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-15 09:30 98304]
 "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe" [2007-09-22 17:21 185632]
 "VirtualCloneDrive"="C:\Progra​m Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" [2006-04-29 15:21 94208]
 "SunJavaUpdateSched"="C:\Progr​am Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
 "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 18:52 266497]
 "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
 "SpywareTerminator"="C:\Progra​m Files\Spyware Terminator\SpywareTerminatorSh​ield.exe" [2008-05-25 23:33 1817600]
 "SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe"​ [2008-05-14 15:23 321160]
 "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe" [BU]
 "SoundMan"="SOUNDMAN.EXE" [2005-10-24 14:45 90112 C:\WINDOWS\soundman.exe]

n°413194
chef.manu
Posté le 02-08-2008 à 17:52:09  answer
Prévenir les modérateurs en cas d'abus
 

Et voici la suite et fin du rapport Combofix

 [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
 "CTFMON.EXE"="C:\WINDOWS\syste​m32\CTFMON.EXE" [2008-04-14 04:33 15360]

 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina]
 2006-01-30 08:53 49152 C:\APPS\Softex\OmniPass\OPXPGi​na.dll

 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
 "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​Vio\Dvacm.acm
 "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​MPEG\ulmp3acm.acm
 "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\​MPEG\mpegacm.acm

 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
 Notification Packages REG_MULTI_SZ    scecli scecli scecli scecli

 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
 "DisableMonitoring"=dword:0000​0001

 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
 "%ProgramFiles%\\AOL 9.0\\aol.exe"=
 "%ProgramFiles%\\UBISOFT\\Spli​nter Cell Pandora Tomorrow\\logo_ubi.exe"=
 "%ProgramFiles%\\UBISOFT\\Spli​nter Cell Pandora Tomorrow\\pandora.exe"=
 "%windir%\\system32\\sessmgr.e​xe"=
 "C:\\Program Files\\AOL 9.0\\waol.exe"=
 "C:\\Program Files\\Messenger\\msmsgs.exe"=​
 "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"​=
 "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=​
 "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"​=
 "C:\\WINDOWS\\pchealth\\helpct​r\\binaries\\HelpCtr.exe"=
 "C:\\Program Files\\LimeWire\\LimeWire.exe"​=
 "C:\\Program Files\\Real\\RealPlayer\\realp​lay.exe"=
 "C:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kod​ak Software Updater.exe"=
 "C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=​
 "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
 "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=​
 "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"​=

 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
 "1700:TCP"= 1700:TCP:MioNet Remote Drive Access
 "1641:TCP"= 1641:TCP:MioNet Remote Drive Verification
 "1700:UDP"= 1700:UDP:Windows Media Format SDK (iexplore.exe)
 "1701:UDP"= 1701:UDP:Windows Media Format SDK (iexplore.exe)
 "7654:TCP"= 7654:TCP:eMule_TCP
 "7664:UDP"= 7664:UDP:eMule_UDP

 R1 kbfilter;Keyboard Filter Driver;C:\WINDOWS\system32\dri​vers\kbfilter.sys [2003-03-27 14:55]
 R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\​sp_rsdrv2.sys [2008-05-25 23:33]
 R2 MioNet;MioNet Service;C:\Program Files\MioNet\MioNetManager.exe​ [2005-07-15 22:38]
 R2 SPAMfighter Update Service;SPAMfighter Update Service;C:\Program Files\SPAMfighter\sfus.exe [2008-05-14 15:24]
 R3 SPC610NC;Philips SPC500NC Webcam;C:\WINDOWS\system32\DRI​VERS\SPC610NC.SYS [2005-10-13 16:41]
 R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVER​S\USBSTOR.SYS [2008-04-13 20:45]
 S3 archbus;NEC WMC USB_BJ1 Composite Device driver (WDM);C:\WINDOWS\system32\DRIV​ERS\archbus.sys [2005-08-30 13:17]
 S3 archmdfl;NEC WMC USB_BJ1 Modem Filter;C:\WINDOWS\system32\DRI​VERS\archmdfl.sys [2005-08-30 13:17]
 S3 archmdm;NEC WMC USB_BJ1 Modem Drivers;C:\WINDOWS\system32\DR​IVERS\archmdm.sys [2005-08-30 13:17]
 S3 archobex;NEC WMC USB_BJ1 OBEX Interface Drivers (WDM);C:\WINDOWS\system32\DRIV​ERS\archobex.sys [2005-08-30 13:17]
 S3 SE2Fbus;Sony Ericsson Device 047 Driver driver (WDM);C:\WINDOWS\system32\DRIV​ERS\SE2Fbus.sys [2006-11-10 10:55]
 S3 SE2Fmdfl;Sony Ericsson Device 047 USB WMC Modem Filter;C:\WINDOWS\system32\DRI​VERS\SE2Fmdfl.sys [2006-11-10 10:55]
 S3 SE2Fmdm;Sony Ericsson Device 047 USB WMC Modem Driver;C:\WINDOWS\system32\DRI​VERS\SE2Fmdm.sys [2006-11-10 10:55]
 S3 SE2Fmgmt;Sony Ericsson Device 047 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIV​ERS\SE2Fmgmt.sys [2006-11-10 10:55]
 S3 se2Fnd5;Sony Ericsson Device 047 USB Ethernet Emulation SEMC47 (NDIS);C:\WINDOWS\system32\DRI​VERS\se2Fnd5.sys [2006-11-10 10:55]
 S3 SE2Fobex;Sony Ericsson Device 047 USB WMC OBEX Interface;C:\WINDOWS\system32\​DRIVERS\SE2Fobex.sys [2006-11-10 10:55]
 S3 se2Funic;Sony Ericsson Device 047 USB Ethernet Emulation SEMC47 (WDM);C:\WINDOWS\system32\DRIV​ERS\se2Funic.sys [2006-11-10 10:55]
 S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVER​S\usbscan.sys [2008-04-13 20:45]
 .
 Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

 2008-08-02 C:\WINDOWS\Tasks\HDReg.job
 - c:\Apps\HDReg\HDRegRem.exe [2003-07-15 10:14]
 .
 ******************************​******************************​**************

 catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
 Rootkit scan 2008-08-02 17:28:28
 Windows 5.1.2600 Service Pack 3 NTFS

 Balayage processus cach‚s ...

 Balayage cach‚ autostart entries ...

 Balayage des fichiers cach‚s ...

 Scan termin‚ avec succŠs
 Les fichiers cach‚s: 0

 ******************************​******************************​**************
 .
 --------------------- DLLs a charg‚ sous des processus courants ---------------------

 PROCESS: C:\WINDOWS\system32\winlogon.e​xe
 -> C:\Apps\Softex\OmniPass\opxpgi​na.dll
 .
 ------------------------ Other Running Processes ------------------------
 .
 C:\WINDOWS\system32\ati2evxx.e​xe
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe
 C:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 C:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\APPS\Softex\OmniPass\OmniSe​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\system32\PAStiSvc.e​xe
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 C:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\APPS\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\system32\ati2evxx.e​xe
 C:\WINDOWS\system32\msiexec.ex​e
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\Program Files\Hercules\WiFi Station\WiFiStation.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcMo​n.exe
 .
 ******************************​******************************​**************
 .
 Temps d'accomplissement: 2008-08-02 17:34:47 - machine was rebooted [Manu]
 ComboFix-quarantined-files.txt​  2008-08-02 15:34:36
 ComboFix5.txt  2008-08-02 15:00:32

 Pre-Run: 9,692,323,840 octets libres
 Post-Run: 9,669,799,936 octets libres

 211 --- E O F --- 2008-07-18 00:02:10

n°413195
chef.manu
Posté le 02-08-2008 à 17:56:37  answer
Prévenir les modérateurs en cas d'abus
 

voici le rapport Hijackthis
 Attention, j'ai posté 2 fois la première partie du rapport Combofix

 Logfile of Trend Micro HijackThis v2.0.2
 Scan saved at 17:53:18, on 02/08/2008
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.16674)
 Boot mode: Normal

 Running processes:
 C:\WINDOWS\System32\smss.exe
 C:\WINDOWS\system32\winlogon.e​xe
 C:\WINDOWS\system32\services.e​xe
 C:\WINDOWS\system32\lsass.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\WINDOWS\System32\svchost.ex​e
 C:\WINDOWS\system32\spoolsv.ex​e
 C:\WINDOWS\system32\brss01a.ex​e
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 C:\Program Files\MioNet\MioNetManager.exe​
 C:\Apps\Softex\OmniPass\Omnise​rv.exe
 C:\Program Files\MioNet\jvm\bin\MioNet.ex​e
 C:\Program Files\SPAMfighter\sfus.exe
 C:\Program Files\Spyware Terminator\sp_rsser.exe
 C:\WINDOWS\System32\PAStiSvc.e​xe
 C:\WINDOWS\system32\svchost.ex​e
 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
 c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 C:\Apps\Softex\OmniPass\OPXPAp​p.exe
 C:\WINDOWS\system32\Ati2evxx.e​xe
 C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe
 C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe
 C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 C:\Program Files\DAEMON Tools\daemon.exe
 C:\Program Files\Microsoft IntelliType Pro\itype.exe
 C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe
 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
 C:\APPS\Powercinema\PCMService​.exe
 C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 C:\WINDOWS\SOUNDMAN.EXE
 C:\Program Files\QuickTime\qttask.exe
 C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe
 C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe
 C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe
 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
 C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe
 C:\Program Files\SPAMfighter\SFAgent.exe
 C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe
 C:\WINDOWS\system32\ctfmon.exe​
 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 C:\WINDOWS\VPro500.exe
 C:\Program Files\Hercules\WiFi Station\WifiStation.exe
 C:\WINDOWS\explorer.exe
 C:\Program Files\Crazy Browser\Crazy Browser.exe
 C:\Program Files\Trend Micro\HijackThis\HijackThis.ex​e

 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support [...] TbId=60327
 R1 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKLM\Software\Microsoft\Intern​et Explorer\Main,Start Page = http://www.ustart.org
 R0 - HKCU\Software\Microsoft\Intern​et Explorer\Toolbar,LinksFolderName = Liens
 R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695E​CA05670} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7​D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\​AcroIEHelper.dll
 O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435F​F3D0411} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7​942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1​D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExt​ensions.dll
 O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF​1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5​E23E045} - (no file)
 O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-51647​60863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF105​77473F7} - c:\program files\google\googletoolbar1.dl​l
 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B​5AD205D} - C:\Program Files\Google\GoogleToolbarNoti​fier\2.0.301.7164\swg.dll
 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-00902​7A5CD4F} - c:\program files\google\googletoolbar1.dl​l
 O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-00902​71D4F88} - C:\Program Files\Yahoo!\Companion\Install​s\cpn\yt.dll
 O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638​F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\b​rctrcen.exe /autorun
 O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
 O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.​exe"
 O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
 O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
 O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
 O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateSe​rvice\issch.exe" -start
 O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
 O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\Index​Search.exe
 O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMServic​e.exe"
 O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd4​0nt.exe
 O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupda​te.exe" -Embedding -boot
 O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
 O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvP​t.exe
 O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsch​ed.exe"  -osboot
 O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDae​mon.exe" /s
 O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jus​ched.exe"
 O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
 O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
 O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorSh​ield.exe"
 O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe"​ update delay 60
 O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.e​xe"
 O4 - HKLM\..\Run: [wrna3ls] C:\Program Files\rnamfler\naomf.exe
 O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\Swee​tIM.exe
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe​
 O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNoti​fier\GoogleToolbarNotifier.exe​
 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE LOCAL')
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SERVICE RÉSEAU')
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'SYSTEM')
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE​ (User 'Default user')
 O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWn​d.exe
 O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
 O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
 O4 - Global Startup: VPro500.lnk = C:\WINDOWS\VPro500.exe
 O4 - Global Startup: WiFi Station.lnk = ?
 O8 - Extra context menu item: Crawler Search - tbr:iemenu
 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Off​ice12\EXCEL.EXE/3000
 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401​C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv​.dll
 O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663E​E0C6C49} - C:\PROGRA~1\MICROS~2\Office12\​ONBttnIE.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C5​71A8263} - C:\PROGRA~1\MICROS~2\Office12\​REFIEBAR.DLL
 O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F​0318AFE} - C:\WINDOWS\system32\Shdocvw.dl​l
 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB​36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.​dll
 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba3​8496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04​F795683} - C:\Program Files\Messenger\msmsgs.exe
 O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.d​ll
 O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\​IE\offline\fr.htm
 O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5​CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
 O16 - DPF: {17492023-C23A-453E-A040-C7C58​0BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
 O16 - DPF: {1B4988D6-1723-11D4-A48B-00E02​917C902} (Contrôle ActiveX GEOMAP GIS) - http://sig.cg18.fr/ggAxFr.cab
 O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED​824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://go.microsoft.com/fwlink/?LinkId=82580
 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD8​4642501} (Checkers Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4​f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelpe​r.dll
 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05C​B959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w [...] NPUpld.cab
 O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492​C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsof [...] 6964465037
 O16 - DPF: {5C051655-FCD5-4969-9182-770EA​5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/ [...] b56986.cab
 O16 - DPF: {5D6F45B3-9043-443D-A792-11544​7494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/ [...] E_UNO1.cab
 O16 - DPF: {62789780-B744-11D0-986B-00609​731A21D} (Autodesk MapGuide ActiveX Control) - http://sig.cg18.fr/mgaxctrl.cab
 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-22031​3175592} (MSN Games - Installer) - http://messenger.zone.msn.com/ [...] b56649.cab
 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF​06D9A1B} - http://game09.zylom.com/active [...] player.cab
 O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46​475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/ [...] b56907.cab
 O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA9​77D5643} (ZoneChess Object) - http://messenger.zone.msn.com/ [...] b57176.cab
 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB62​48B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemSe​rvices.dll
 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA0​51CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ct​br.dll (file missing)
 O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
 O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
 O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\A​OLacsd.exe
 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.e​xe
 O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.e​xe
 O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLCapSvc.exe
 O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\​CLSched.exe
 O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLM​L_NTService\CLMLServer.exe
 O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.e​xe
 O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\Ko​dakCCS.exe
 O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe​
 O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omnise​rv.exe
 O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
 O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
 O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.e​xe
 O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
 O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

 --
 End of file - 15045 bytes

n°413196
chef.manu
Posté le 02-08-2008 à 18:38:37  answer
Prévenir les modérateurs en cas d'abus
 

Et enfin le rapport SUPERAntispyware

 SUPERAntiSpyware Scan Log
 http://www.superantispyware.com

 Generated 08/02/2008 at 06:23 PM

 Application Version : 4.15.1000

 Core Rules Database Version : 3524
 Trace Rules Database Version: 1514

 Scan type       : Quick Scan
 Total Scan Time : 00:15:18

 Memory items scanned      : 617
 Memory threats detected   : 1
 Registry items scanned    : 504
 Registry threats detected : 0
 File items scanned        : 8776
 File threats detected     : 84

 Trojan.Dropper/Multi-MBAD
  C:\WINDOWS\VPRO500.EXE
  C:\WINDOWS\VPRO500.EXE
  D:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\BROTHER\BRLOG\BRCOLLECTDI​R\VPRO500.LNK
  D:\DOCUMENTS AND SETTINGS\ALL USERS\MENU DéMARRER\PROGRAMMES\DéMARRAGE\​VPRO500.LNK
  C:\WINDOWS\Prefetch\VPRO500.EX​E-355EA43D.pf

 Adware.Tracking Cookie
  D:\Documents and Settings\Manu\Cookies\manu@www​.googleadservices[4].txt
  D:\Documents and Settings\Manu\Cookies\manu@ads​.quartermedia[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.porn[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@ad2​.doublepimp[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​9.discount24[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@str​eamsex[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@ad.​zanox[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@tra​cker.affistats[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@ads​erver.aol[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@cdi​scount[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@fr.​sitestat[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@dis​count24werbung.quarterserver[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@599​.stats.misstrends[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@vid​eo.pornorama[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@fil​es.streamsex[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.trafficholder[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@xit​i[3].txt
  D:\Documents and Settings\Manu\Cookies\manu@por​norama[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.googleadservices[3].txt
  D:\Documents and Settings\Manu\Cookies\manu@web​a.cdiscount[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@sex​tv1[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.etracker[3].txt
  D:\Documents and Settings\Manu\Cookies\manu@ads​.allotraffic[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@sma​rtadserver[3].txt
  D:\Documents and Settings\Manu\Cookies\manu@adt​ech[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@fr.​sitestat[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.pornorama[2].txt
  D:\Documents and Settings\Manu\Cookies\manu@dis​count24.quarterserver[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@por​n[1].txt
  D:\Documents and Settings\Manu\Cookies\manu@www​.streamsex[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@sta​ts.canalblog[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@ecn​ext.advertserve[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@mai​sondevalerie.112.2o7[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@red​cats.122.2o7[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@web​population.112.2o7[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@sea​rchmobile.solution.weborama[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.etracker[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@tri​pod[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@adt​ech[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@web​orama[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@bla​ncheporte.solution.weborama[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@ads​.canalblog[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@adv​ertstream[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@fl0​1.ct2.comclick[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@sma​rtadserver[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@sma​rtadserver[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@tra​cking.lsfinteractive[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@ad.​zanox[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@eas​.apm.emediate[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@ad.​zanox[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@sma​rtadserver[4].txt
  D:\Documents and Settings\Nous\Cookies\nous@web​a.cdiscount[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@tra​cking.publicidees[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@pre​cisionclick[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@biz​rate[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@sta​ts.searchtrack[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@aol​fr.122.2o7[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@cli​ckintext[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@ad.​cibleclick[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@win​dowsmedia[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[5].txt
  D:\Documents and Settings\Nous\Cookies\nous@cdi​scount[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[6].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[3].txt
  D:\Documents and Settings\Nous\Cookies\nous@www​.googleadservices[4].txt
  D:\Documents and Settings\Nous\Cookies\nous@you​rmedia[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@tra​cking.veille-referencement[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@ser​ver.lon.liveperson[3].txt
  D:\Documents and Settings\Nous\Cookies\nous@ser​ver.lon.liveperson[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@ads​.highmetrics[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@ads​.highmetrics[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@fr.​classic.clickintext[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@neo​counter.neoworx-blog-tools[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@nes​tle.solution.weborama[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@rot​ator.its.adjuggler[2].txt
  D:\Documents and Settings\Nous\Cookies\nous@xit​i[1].txt
  D:\Documents and Settings\Nous\Cookies\nous@you​rmedia[1].txt

 Trojan.Unclassified/ALTVXVM
  C:\SDFIX\BACKUPS\ALTVXVM.DLL

 Page :
1

Aller à :
Ajouter une réponse
  


  


  Impossible de supprimer pc cleaner

 

Sujets relatifs
supprimer virus et spywaresImpossible d'accéder à C: [Résolu]
[résolu] Trojans Vundo & Monder impossible à supprimerVIRUS HACKTOOL IMPOSSIBLE A ENLEVER [ RESOLU ]
impossible de démarrer dd en raw[RESOLU]Impossible de se connecter sur internet: virus, spy?
Vundo impossible à éradiquer ?Impossible d'accéder à certains sites web [Résolu]
Impossible de lancer HijackThisMalware Protector et antivirus XP2008 impossible à suprimer
Trojan.FakeAlert, Ultimate Cleaner, etc ...[résolu] 
Plus de sujets relatifs à : Impossible de supprimer pc cleaner

Les 5 sujets de discussion précédents Nombre de réponses Dernier message
prinateur lent 1 22-07-2008 à 13:41:29
script??? 0 21-07-2008 à 16:04:50
messages d'ereur 1 21-07-2008 à 23:43:15
Virus Win32:Kd Crypt [crypt] 11 22-07-2008 à 12:44:15
warning!spyware detected on your computer+antivirus xp 2008 2 28-07-2008 à 17:08:35

Recevez toute
l’actu du forum !