01net    Web


Actuellement en ligne : 574 Utilisateurs dont 72 dans Sécurité, virus et assimilés >S'inscrire      >S'identifier      >Recherche      >Aide  
modéré par A.Ouloube, naheulbeuk, bibou0007, totoftotof, IL-MAFIOSO  
01net > Forum de 01net > Sécurité, virus et assimilés > Trojan et spywares
> [résolu] HELP !!! Win32:Vundo@dll [Trj]
Auteur
Message
 
<     1       >
Marie3888
  
   
      ?   @     Posté le 25/05/2008 13:53:18  
Voter pour ce message
Bonjour,
J'ai choppé ce cheval de troie (Win32:Vundo@dll [Trj])je ne sais pas trop comment, à chaque fois qu'avast le détecte je le supprime mais il revient toujours, j'ai essayé beaucoup de logiciels du style hijackthis, malwarebytes etc... mais je ne sais pas comment interpréter les résultats...
Est-ce que quelqu'un peut m'aider à le supprimer définitivement ? Je risque quoi avec ce virus ??
Merci d'avance !
-->Message édité par Marie3888 le 25/06/2008 21:06:57<--
naheulbeuk
  
  :-)
      ?   ^   @     Posté le 25/05/2008 14:20:55  
Voter pour ce message
bonjour, post moi ton rapport hijackthis stp :)
-------
Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
Et son forum : http://www.site-naheulbeuk.com/forum/
Marie3888
  
   
      ?   @     Posté le 25/05/2008 14:27:26  
Voter pour ce message
Voilà !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:59:39, on 25/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Windows\System32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Marie\Desktop\Sanner.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd(...)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd(...)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
O4 - HKLM\..\Run: [dscactivate] c:\dell\dsca.exe 3
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Host Process] C:\Users\Marie\svchost.exe
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Marie\AppData\Local\Temp\eFWnomkJ.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Marie\AppData\Local\Temp\iifecyaB.dll,c
O4 - HKCU\..\Run: [MS Juan] rundll32 "C:\Users\Marie\AppData\Local\Temp\vqfqlmom.dll",run
O4 - HKCU\..\Run: [BM7356d36d] Rundll32.exe "C:\Users\Marie\AppData\Local\Temp\rcbnqbki.dll",s
O4 - HKCU\..\Run: [7065e0f1] rundll32.exe "C:\Users\Marie\AppData\Local\Temp\nhbhdgim.dll",b
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: QuickSet.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 6930 bytes
naheulbeuk
  
  :-)
      ?   ^   @     Posté le 25/05/2008 14:29:01  
Voter pour ce message
Télécharge ComboFix (créé par sUBs) sur ton Bureau

Démarre en mode sans échec : http://forum.telecharger.01net.com/telecharger/virus_et_assimiles/failles_de_(...)


  • Double clique combofix.exe.
  • Tape sur la touche Y (Yes) pour démarrer le scan.
  • ComboFix redémarrera ton PC
  • Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse,et nouveau rapport hijackthis

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    @+ :hello:
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • Marie3888
      
       
          ?   @     Posté le 25/05/2008 14:47:12  
    Voter pour ce message
    ComboFix 08-05-24.1 - Administrateur Marie 25/05/2008 14:36:04.2 - NTFSx86 MINIMAL
    Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.704 [GMT 2:00]
    Endroit: C:\Users\Marie\Desktop\ComboFix.exe
    .

    ((((((((((((((((((((((((((((( Fichiers créés 2008-04-25 to 2008-05-25 ))))))))))))))))))))))))))))))))))))
    .

    Pas de nouveau fichier créé dans cet espace de temps

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-05-25 12:32 --------- d-----w C:\Users\Marie\AppData\Roaming\OpenOffice.org2
    2008-05-25 11:35 --------- d-----w C:\Program Files\DivX
    2008-05-25 11:27 --------- d-----w C:\Program Files\Trend Micro
    2008-05-24 17:08 --------- d-----w C:\Users\Marie\AppData\Roaming\LimeWire
    2008-05-24 15:41 --------- d-----w C:\Program Files\CCleaner
    2008-05-24 15:31 --------- d-----w C:\Users\Marie\AppData\Roaming\Malwarebytes
    2008-05-24 12:20 --------- d-----w C:\Users\ADMINI~1\AppData\Roaming\Malwarebytes
    2008-05-24 12:19 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
    2008-05-24 12:19 --------- d-----w C:\PROGRA~2\Malwarebytes
    2008-05-17 20:21 --------- d-----w C:\Program Files\Windows Mail
    2008-05-15 23:18 50,768 ----a-w C:\Windows\system32\drivers\aswMonFlt.sys
    2008-05-12 21:07 433 ----a-w C:\Users\Marie\733.bat
    2008-05-05 18:46 27,048 ----a-w C:\Windows\system32\drivers\mbamcatchme.sys
    2008-05-05 18:46 15,864 ----a-w C:\Windows\system32\drivers\mbam.sys
    2008-05-04 14:24 --------- d-----w C:\Program Files\Common Files\AVSMedia
    2008-05-04 14:24 --------- d-----w C:\Program Files\AVS4YOU
    2008-04-18 12:11 724,992 ----a-w C:\Windows\iun6002.exe
    2008-04-14 17:05 --------- d-----w C:\Program Files\Common Files\GeoVid
    2008-04-03 17:46 --------- d-----w C:\Program Files\Common Files\Autodesk Shared
    2008-04-03 17:46 --------- d-----w C:\Program Files\Autodesk
    2008-04-03 17:09 --------- d-----w C:\Program Files\Common Files\Roxio Shared
    2008-04-03 17:09 --------- d-----w C:\PROGRA~2\Roxio
    2008-04-03 16:45 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-04-03 16:44 --------- d-----w C:\Program Files\Dell
    2008-04-03 16:44 --------- d-----w C:\PROGRA~2\CyberLink
    2008-04-03 16:41 --------- d-----w C:\Program Files\Common Files\Apple
    2008-03-30 14:52 --------- d-----w C:\PROGRA~2\Messenger Plus!
    2008-03-30 14:50 --------- d-----w C:\Program Files\Messenger Plus! Live
    2008-03-29 20:09 --------- d-----w C:\Users\Marie\AppData\Roaming\Autodesk
    2008-03-29 20:09 --------- d-----w C:\Program Files\AutoCAD Civil 3D 2008
    2008-03-29 20:09 --------- d-----w C:\PROGRA~2\Autodesk
    2008-03-22 12:28 190 ----a-w C:\Users\Marie\AppData\Roaming\wklnhst.dat
    2008-02-29 06:51 19,000 ----a-w C:\Windows\System32\kd1394.dll
    2008-02-29 06:39 40,960 ----a-w C:\Windows\System32\srclient.dll
    2008-02-29 06:39 371,712 ----a-w C:\Windows\System32\srcore.dll
    2008-02-29 06:38 313,856 ----a-w C:\Windows\System32\rstrui.exe
    2008-02-29 06:38 16,384 ----a-w C:\Windows\System32\srdelayed.exe
    2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll
    2008-02-29 06:34 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
    2008-02-29 04:16 2,027,008 ----a-w C:\Windows\System32\win32k.sys
    2008-01-02 11:39 637,928 ----a-w C:\Users\Marie\a.zip
    2008-01-02 11:39 147,456 ----a-w C:\Users\Marie\vbzip10.dll
    2007-11-11 16:15 174 --sha-w C:\Program Files\desktop.ini
    2007-09-27 23:18 76 --sha-r C:\Windows\CT4CET.bin
    .

    ------- Sigcheck -------

    .
    ((((((((((((((((((((((((((((( snapshot@23-05-2008_20.30.41,83 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-05-23 15:13:28 67,584 --s-a-w C:\Windows\bootstat.dat
    + 2008-05-25 12:34:24 67,584 --s-a-w C:\Windows\bootstat.dat
    - 2008-05-23 12:49:27 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-05-25 12:33:10 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
    + 2008-05-25 12:33:10 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
    - 2008-05-23 12:49:21 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-05-25 12:33:10 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
    + 2008-05-25 12:33:10 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
    - 2008-05-23 16:50:40 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2008-05-25 09:55:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2008-05-23 16:50:40 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2008-05-25 09:55:31 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2008-05-23 16:50:40 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2008-05-25 09:55:31 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2008-05-23 12:49:40 7,392 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1240093455-1324593866-3183933502-1000_UserData.bin
    + 2008-05-25 09:54:29 7,428 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1240093455-1324593866-3183933502-1000_UserData.bin
    - 2008-05-23 12:49:40 56,024 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2008-05-25 09:54:28 56,088 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    - 2008-05-23 12:18:00 33,996 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2008-05-25 09:54:19 34,188 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    - 2008-05-23 15:13:33 241,686 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
    + 2008-05-24 19:49:32 242,414 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="C:\Program Files\Windows Sidebar\Sidebar.exe" [11/01/2008 22:00 1232896]
    "WindowsWelcomeCenter"="oobefldr.dll" [02/11/2006 14:34 2159104 C:\Windows\System32\oobefldr.dll]
    "DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [15/03/2007 13:09 460784]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "WAB Migrate"="C:\Program Files\Windows Mail\wab.exe" [02/11/2006 11:45 516096]
    "DPAPIKeyMig"="C:\Windows\system32\dpapimig.exe" [02/11/2006 11:45 407040]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [28/04/2007 02:35 857648]
    "NvSvc"="C:\Windows\system32\nvsvc.dll" [16/05/2007 07:35 86016]
    "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [16/05/2007 07:35 8429568]
    "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [16/05/2007 07:35 81920]
    "NVHotkey"="C:\Windows\system32\nvHotkey.dll" [16/05/2007 07:35 67584]
    "OEM02Mon.exe"="C:\Windows\OEM02Mon.exe" [10/05/2007 11:01 36864]
    "dscactivate"="c:\dell\dsca.exe" [30/07/2007 21:40 16384]
    "ECenter"="C:\Dell\E-Center\EULALauncher.exe" [25/05/2007 08:03 17920]
    "Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [28/09/2007 01:35 1862144]
    "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [03/10/2006 12:37 81920]
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [26/09/2007 14:42 267064]
    "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [29/06/2007 06:24 286720]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [22/02/2008 05:25 144784]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [16/05/2008 01:19 79224]
    "SigmatelSysTrayApp"="C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe" [06/05/2007 18:10 405504]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/01/2008 23:16 39792]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "GrpConv"="grpconv -o" []

    C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 22:57:56 393216]

    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
    Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2007-09-28 01:12:26 50688]
    QuickSet.lnk - C:\Windows\Installer\{7F0C4457-8E64-491B-8D7B-991504365D1E}\NewShortcut2_53A01CC614B04512A2E710D39BF83DC4.exe [2007-09-28 01:16:21 45056]
    VPN Client.lnk - C:\Windows\Installer\{CCBAA1F7-E5E1-48B2-9ED9-A79C6A37CE78}\Icon3E5562ED7.ico [2007-11-13 19:00:29 6144]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{D660D190-3A49-411F-883E-D312D8BBD6CA}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "{04E4A888-E255-4833-A584-7FEE5AB2D03B}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
    "TCP Query User{074B0C32-474A-4F6E-9665-D22FAA4202E4}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
    "UDP Query User{ADBA6C75-A6D5-4C73-97A1-A82C61DD0D67}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire
    "TCP Query User{36586D93-1205-49E1-9E04-93DB05542248}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "UDP Query User{C8B5590C-25B2-486B-95B6-C98AED7DA940}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
    "{A468FF4B-4D72-4FD2-83EA-B955F7D57E63}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
    "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

    S1 aswSP;avast! Self Protection;C:\Windows\system32\drivers\aswSP.sys [16/05/2008 01:20]
    S2 aswFsBlk;aswFsBlk;C:\Windows\system32\DRIVERS\aswFsBlk.sys [16/05/2008 01:16]
    S2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [16/05/2008 01:18]
    S2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [05/08/2006 02:39]
    S3 OEM02Dev;Creative Camera OEM002 Driver;C:\Windows\system32\DRIVERS\OEM02Dev.sys [10/05/2007 11:01]
    S3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;C:\Windows\system32\DRIVERS\OEM02Vfx.sys [06/03/2007 04:45]

    *Newly Created Service* - ECACHE
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-05-25 14:40:20
    Windows 6.0.6000 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    Temps d'accomplissement: 25/05/2008 14:41:13
    ComboFix-quarantined-files.txt 2008-05-25 12:41:09
    ComboFix2.txt 2008-05-23 18:31:14

    Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.
    Le texte du message associé au numéro 0x2379 est introuvable dans le fichier de messages pour Application.

    155 --- E O F --- 2008-05-23 12:25:06
    anais387
      
       
          ?   @     Posté le 25/05/2008 15:13:31  
    Voter pour ce message
    Bonjour ;
    moi aussi je suis infectée par le même virus et je n'arrive pas à m'en débarrasser voici mon rapport hijackthis :


    EDITION MODERATEUR : Règle du forum à respecter :

    Crée toi ton propre sujet ! :o

    Veuillez lire l'article suivant :
    http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/a_(...)

    Merci d'en prendre connaissance.
    -->Message édité par Mérillym le 25/05/2008 16:26:29<--
    Marie3888
      
       
          ?   @     Posté le 25/05/2008 16:54:54  
    Voter pour ce message
    youhou ??
    quelqu'un peut m'aider ??
    Mérillym
      Modérateur/Helper
       
          ?   @     Posté le 25/05/2008 16:59:21  
    Voter pour ce message
    :hello: Bonjour,

    Pour rappel, les helpers sont bénévoles et ont une vie privée. De plus, nous sommes dimanche :)

    Merci donc d'être patient le temps que Naheulbeuk revienne : il vous a pris en charge, il ne vous laissera pas en plan.

    Cordialement,
    Mérillym.
    -->Message édité par Mérillym le 25/05/2008 16:59:35<--
    -------
    Dossier prévention>à lire
    Si vous vous faites déjà aider sur un autre forum, merci de me le dire !
    naheulbeuk
      
      :-)
          ?   ^   @     Posté le 25/05/2008 17:44:35  
    Voter pour ce message
    re, :)

    Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    Guide d'utilisation : http://mickael.barroux.free.fr/securite/sdfix.php

    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
  • Redémarre ton ordinateur
  • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
  • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
  • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
  • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
  • Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
  • Appuie sur Y pour commencer le processus de nettoyage.
  • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
  • Appuie sur une touche pour redémarrer le PC.
  • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
  • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
  • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
  • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
  • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum.
    N.B.:
    - Le fichier SDFIX_README.htm (dans le dossier SDFix) contient la liste des malwares pris en compte par l'outil.
    - Andy fait plusieurs mises à jour, souvent plus d'une par jour... N'hésitez donc pas à demander de télécharger une nouvelle version lorsque le nettoyage dure et que l'outil ne semble pas tout voir.

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • Marie3888
      
       
          ?   @     Posté le 25/05/2008 17:56:22  
    Voter pour ce message
    okay je m'occupe de ça !
    merci bien !
    Marie3888
      
       
          ?   @     Posté le 25/05/2008 19:20:09  
    Voter pour ce message
    Je ne suis pas arrivée à ouvrir runthis en mode sans échec donc j'ai redémarrer windows normalement et j'ai fait le premier scan qui était écrit, j'ai obtenu ce rapport :


    System Report
    *************

    Run on 25/05/2008 at 18:17

    Microsoft Windows [version 6.0.6000]

    Current user is not an administrator

    Running Processes:

    C:\Windows\system32\Dwm.exe [1232]
    C:\Windows\Explorer.EXE [1428]
    C:\Windows\system32\taskeng.exe [3256]
    C:\Windows\System32\rundll32.exe [3336]
    C:\Windows\System32\rundll32.exe [3372]
    C:\Windows\OEM02Mon.exe [3384]
    C:\Program Files\iTunes\iTunesHelper.exe [3464]
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [3492]
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe [3500]
    C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [3528]
    C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [3540]
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3548]
    C:\Windows\System32\rundll32.exe [3624]
    C:\Program Files\Digital Line Detect\DLG.exe [3712]
    C:\Program Files\Dell\QuickSet\quickset.exe [3724]
    C:\Program Files\OpenOffice.org 2.3\program\soffice.exe [3976]
    C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN [4036]
    C:\Windows\system32\conime.exe [3000]


    Drivers - Running:

    ACPI
    AFD
    aswFsBlk
    aswMonFlt
    aswRdr
    aswSP
    aswTdi
    atapi
    Beep
    bowser
    cdrom
    CLFS
    Compbatt
    crcdisk
    CVPNDRVA
    DfsC
    disk
    DNE
    dsunidrv
    Ecache
    FileInfo
    FltMgr
    HTTP
    i8042prt
    intelide
    kbdclass
    KSecDD
    lltdio
    luafv
    mdmxsdk
    mouclass
    MountMgr
    mpsdrv
    MRxDAV
    mrxsmb
    mrxsmb10
    mrxsmb20
    Msfs
    msisadrv
    Mup
    NativeWifiP
    NDIS
    Ndisuio
    NdisWan
    NetBIOS
    netbt
    Npfs
    nsiproxy
    Null
    partmgr
    pci
    pciide
    PEAUTH
    PSched
    RasAcd
    rdbss
    RDPCDD
    RDPENCDD
    rimmptsk
    rimsptsk
    rismxdp
    rspndr
    secdrv
    Smb
    spldr
    srv
    srv2
    srvnet
    Tcpip
    tcpipreg
    tdx
    TermDD
    VgaSave
    volmgr
    volmgrx
    volsnap
    Wanarpv6
    Wdf01000
    XAudio


    Drivers - Stopped:

    adp94xx
    adpahci
    adpu160m
    adpu320
    agp440
    aic78xx
    aliide
    amdagp
    amdide
    AmdK7
    AmdK8
    arc
    arcsas
    AsyncMac
    bcm4sbxp
    blbdrive
    BrFiltLo
    BrFiltUp
    Brserid
    BrSerWdm
    BrUsbMdm
    BrUsbSer
    BTHMODEM
    catchme
    cdfs
    circlass
    CmBatt
    cmdide
    Crusoe
    CVirtA
    drmkaud
    DSproct
    DXGKrnl
    E1G60
    elxstor
    fastfat
    fdc
    Filetrace
    flpydisk
    gagp30kx
    GEARAspiWDM
    HdAudAddService
    HDAudBus
    HidBth
    HidIr
    HidUsb
    HpCISSs
    HSF_DPV
    HSXHWAZL
    i2omp
    iaStorV
    iirsp
    intelppm
    IpFilterDriver
    IpInIp
    IPMIDRV
    IPNAT
    IRENUM
    isapnp
    iScsiPrt
    iteatapi
    iteraid
    kbdhid
    LSI_FC
    LSI_SAS
    LSI_SCSI
    megasas
    Modem
    monitor
    mouhid
    mpio
    Mraid35x
    msahci
    msdsm
    MSKSSRV
    MSPCLOCK
    MSPQM
    MsRPC
    mssmbios
    MSTEE
    NdisTapi
    nfrd960
    Ntfs
    ntrigdigi
    nvlddmkm
    nvraid
    nvstor
    nv_agp
    NwlnkFlt
    NwlnkFwd
    OEM02Dev
    OEM02Vfx
    ohci1394
    Parport
    Parvdm
    pcmcia
    PptpMiniport
    Processor
    ql2300
    ql40xx
    QWAVEdrv
    Rasl2tp
    RasPppoe
    rdpdr
    RDPWD
    sbp2port
    sdbus
    Serenum
    Serial
    sermouse
    sffdisk
    sffp_mmc
    sffp_sd
    sfloppy
    sisagp
    SiSRaid2
    SiSRaid4
    STHDA
    swenum
    Symc8xx
    Sym_hi
    Sym_u3
    Tcpip6
    TDPIPE
    TDTCP
    tssecsrv
    tunmp
    tunnel
    uagp35
    udfs
    uliagpkx
    uliahci
    UlSata
    ulsata2
    umbus
    usbccgp
    usbcir
    usbehci
    usbhub
    usbohci
    usbprint
    USBSTOR
    usbuhci
    vga
    viaagp
    ViaC7
    viaide
    vsmraid
    WacomPen
    Wanarp
    Wd
    winachsf
    WmiAcpi
    ws2ifsl
    WUDFRd


    Services - Running:

    AeLookupSvc
    Appinfo
    Apple
    aswUpdSv
    AudioEndpointBuilder
    Audiosrv
    avast!
    avast!
    avast!
    BFE
    BITS
    CryptSvc
    CVPND
    DcomLaunch
    Dhcp
    Dnscache
    DPS
    EapHost
    EMDMgmt
    Eventlog
    EventSystem
    FDResPub
    gpsvc
    IKEEXT
    iphlpsvc
    iPod
    KeyIso
    KtmRm
    LanmanServer
    LanmanWorkstation
    lmhosts
    MMCSS
    MpsSvc
    Netman
    netprofm
    NlaSvc
    nsi
    PcaSvc
    PlugPlay
    PolicyAgent
    ProfSvc
    RasMan
    RpcSs
    SamSs
    Schedule
    seclogon
    SENS
    ShellHWDetection
    slsvc
    Spooler
    SSDPSRV
    STacSV
    stisvc
    SysMain
    TabletInputService
    TapiSrv
    TermService
    Themes
    TrkWks
    upnphost
    usnjsvc
    UxSms
    W32Time
    WdiSystemHost
    WebClient
    WerSvc
    WinDefend
    WinHttpAutoProxySvc
    Winmgmt
    Wlansvc
    WPDBusEnum
    wscsvc
    WSearch
    wuauserv
    wudfsvc
    XAudioService


    Services - Stopped:

    ALG
    Browser
    CertPropSvc
    clr_optimization_v2.0.50727_32
    COMSysApp
    DFSR
    dot3svc
    DSBrokerService
    ehRecvr
    ehSched
    ehstart
    fdPHost
    FontCache3.0.0.0
    GoogleDesktopManager
    hidserv
    hkmsvc
    IDriverT
    idsvc
    IPBusEnum
    lltdsvc
    Mcx2Svc
    MSDTC
    MSiSCSI
    msiserver
    napagent
    Netlogon
    NetTcpPortSharing
    ose
    p2pimsvc
    p2psvc
    pla
    PNRPAutoReg
    PNRPsvc
    ProtectedStorage
    QWAVE
    RasAuto
    RemoteAccess
    RemoteRegistry
    RpcLocator
    SCardSvr
    SCPolicySvc
    SDRSVC
    SessionEnv
    SharedAccess
    SLUINotify
    SNMPTRAP
    stllssvr
    swprv
    TBS
    THREADORDER
    TrustedInstaller
    UI0Detect
    vds
    VSS
    wcncsvc
    WcsPlugInService
    WdiServiceHost
    Wecsvc
    wercplsupport
    WinRM
    WLSetupSvc
    wmiApSrv
    WMPNetworkSvc
    WPCSvc


    Files Created/Modified - 60 Days:


    C:\

    25 May 2008 14:35:32 5 407 A.... "C:\Bug.txt"
    25 May 2008 14:35:32 5 407 A.... "C:\Bug.txt"
    25 May 2008 14:41:16 11 903 A.... "C:\ComboFix.txt"
    25 May 2008 18:11:18 1 071 841 280 A.SH. "C:\hiberfil.sys"
    25 May 2008 13:27:28 776 A.... "C:\HijackThis.lnk"
    25 May 2008 18:11:16 1 385 766 912 A.SH. "C:\pagefile.sys"


    C:\Windows\

    25 May 2008 18:11:28 67 584 A.S.. "C:\Windows\bootstat.dat"
    25 May 2008 18:11:28 67 584 A.S.. "C:\Windows\bootstat.dat"
    18 Apr 2008 12:20:00 42 A.... "C:\Windows\IniFile1.ini"
    18 Apr 2008 14:11:54 724 992 A.... "C:\Windows\iun6002.exe"
    25 May 2008 18:04:44 541 596 A.... "C:\Windows\ntbtlog.txt"
    25 May 2008 14:43:00 22 714 A.... "C:\Windows\PFRO.log"
    3 Apr 2008 14:16:48 54 156 A..H. "C:\Windows\QTFont.qfn"
    12 Apr 2008 11:47:56 57 338 A.... "C:\Windows\setupact.log"
    25 May 2008 14:40:20 215 A.... "C:\Windows\system.ini"
    25 May 2008 18:01:54 1 765 695 A.... "C:\Windows\WindowsUpdate.log"
    23 May 2008 14:19:40 15 260 A.... "C:\Windows\Debug\mrt.log"
    23 May 2008 14:19:40 5 222 A.... "C:\Windows\Debug\mrteng.log"
    25 May 2008 18:11:26 0 A.... "C:\Windows\Debug\PASSWD.LOG"
    23 May 2008 14:19:40 15 260 A.... "C:\Windows\Debug\mrt.log"
    23 May 2008 14:19:40 5 222 A.... "C:\Windows\Debug\mrteng.log"
    25 May 2008 18:11:26 0 A.... "C:\Windows\Debug\PASSWD.LOG"
    12 Apr 2008 11:47:12 665 600 A.... "C:\Windows\inf\drvindex.dat"
    12 Apr 2008 11:48:14 51 200 A.... "C:\Windows\inf\infpub.dat"
    12 Apr 2008 11:48:14 86 016 A.... "C:\Windows\inf\infstor.dat"
    12 Apr 2008 11:47:14 86 016 A.... "C:\Windows\inf\infstrng.dat"
    23 May 2008 17:18:12 13 800 A.... "C:\Windows\inf\setupapi.ev1"
    23 May 2008 17:18:14 17 688 A.... "C:\Windows\inf\setupapi.ev2"
    23 May 2008 17:18:14 86 016 A.... "C:\Windows\inf\setupapi.ev3"
    25 May 2008 18:14:36 6 844 180 A.... "C:\Windows\inf\setupapi.app.log"
    23 May 2008 17:18:16 10 987 287 A.... "C:\Windows\inf\setupapi.dev.log"
    25 May 2008 18:11:46 3 856 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0"
    25 May 2008 18:11:46 3 856 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0"
    25 May 2008 18:11:46 3 856 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0"
    16 May 2008 1:24:44 1 152 888 A.... "C:\Windows\System32\aswBoot.exe"
    16 May 2008 1:12:36 95 608 A.... "C:\Windows\System32\AvastSS.scr"
    23 May 2008 15:15:30 2 577 A.... "C:\Windows\System32\config.nt"
    12 Apr 2008 11:50:42 365 328 A.... "C:\Windows\System32\FNTCACHE.DAT"
    9 May 2008 23:35:04 16 863 864 A.... "C:\Windows\System32\mrt.exe"
    17 May 2008 22:20:44 118 A.... "C:\Windows\System32\MRT.INI"
    23 May 2008 17:21:34 103 924 A.... "C:\Windows\System32\perfc009.dat"
    23 May 2008 17:21:34 117 572 A.... "C:\Windows\System32\perfc00C.dat"
    23 May 2008 17:21:34 610 142 A.... "C:\Windows\System32\perfh009.dat"
    23 May 2008 17:21:34 690 832 A.... "C:\Windows\System32\perfh00C.dat"
    23 May 2008 17:21:32 1 512 256 A.... "C:\Windows\System32\PerfStringBackup.INI"
    25 May 2008 18:11:42 6 A..H. "C:\Windows\Tasks\SA.DAT"
    25 May 2008 18:02:10 32 552 A.... "C:\Windows\Tasks\SCHEDLGU.TXT"
    25 May 2008 15:18:56 608 A.... "C:\Windows\TEMP\fwtsqmfile00.sqm"
    25 May 2008 18:02:06 120 A.... "C:\Windows\TEMP\fwtsqmfile01.sqm"
    25 May 2008 14:58:46 12 584 A.... "C:\Windows\TEMP\lpksetup-20080525-145833-0.log"
    25 May 2008 14:58:48 622 A.... "C:\Windows\TEMP\lpksetup-20080525-145845-0.log"
    12 Apr 2008 11:49:00 164 A.... "C:\Windows\winsxs\poqexec.log"
    25 May 2008 14:43:16 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.bak"
    25 May 2008 18:11:32 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
    25 May 2008 14:43:16 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.bak"
    25 May 2008 18:11:32 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
    25 May 2008 13:24:34 192 512 A.... "C:\Windows\erdnt\dss\default"
    25 May 2008 13:22:18 220 A.... "C:\Windows\erdnt\dss\README.txt"
    25 May 2008 13:22:18 90 112 A.... "C:\Windows\erdnt\dss\sam"
    25 May 2008 13:24:16 33 718 272 A.... "C:\Windows\erdnt\dss\software"
    25 May 2008 13:24:34 10 629 120 A.... "C:\Windows\erdnt\dss\system"
    25 May 2008 14:35:54 40 960 A.... "C:\Windows\erdnt\Hiv-backup\BCD"
    25 May 2008 14:35:54 12 365 824 A.... "C:\Windows\erdnt\Hiv-backup\COMPON~1"
    25 May 2008 14:35:54 192 512 A.... "C:\Windows\erdnt\Hiv-backup\DEFAULT"
    25 May 2008 14:35:54 878 A.... "C:\Windows\erdnt\Hiv-backup\ERDNT.CON"
    25 May 2008 14:35:54 1 410 A.... "C:\Windows\erdnt\Hiv-backup\ERDNT.INF"
    25 May 2008 14:35:54 90 112 A.... "C:\Windows\erdnt\Hiv-backup\SAM"
    25 May 2008 14:35:50 20 480 A.... "C:\Windows\erdnt\Hiv-backup\SECURITY"
    25 May 2008 14:35:52 37 879 808 A.... "C:\Windows\erdnt\Hiv-backup\SOFTWARE"
    25 May 2008 14:35:54 15 659 008 A.... "C:\Windows\erdnt\Hiv-backup\SYSTEM"
    23 May 2008 17:19:46 3 953 A.... "C:\Windows\inf\WmiApRpl\WmiApRpl.h"
    25 May 2008 18:01:56 44 219 998 A.... "C:\Windows\Logs\CBS\CBS.log"
    17 May 2008 12:52:36 19 012 A.... "C:\Windows\Logs\DPX\setupact.log"
    17 May 2008 12:52:36 19 012 A.... "C:\Windows\Logs\DPX\setuperr.log"
    17 Apr 2008 0:19:58 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:22:24 2 558 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.mum"
    17 Apr 2008 0:22:24 1 383 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client_1~31bf3856ad364e35~x86~~6.0.20.0.mum"
    17 Apr 2008 0:22:24 1 715 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client~31bf3856ad364e35~x86~~6.0.20.0.mum"
    17 Apr 2008 0:22:24 1 424 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client_0~31bf3856ad364e35~x86~~6.0.20.0.mum"
    17 Apr 2008 0:22:24 2 400 A.... "C:\Windows\servicing\Packages\Package_3_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.mum"
    17 Apr 2008 0:19:56 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client_1~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:19:56 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:19:54 10 930 A.... "C:\Windows\servicing\Packages\Package_for_KB905866_client_0~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:20:06 12 686 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:20:06 12 686 A.... "C:\Windows\servicing\Packages\Package_3_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.cat"
    17 Apr 2008 0:22:24 2 044 A.... "C:\Windows\servicing\Packages\Package_for_KB905866~31bf3856ad364e35~x86~~6.0.20.0.mum"
    16 May 2008 21:26:12 4 097 243 A.... "C:\Windows\System32\CodeIntegrity\bootcat.cache"
    16 May 2008 1:16:06 20 560 A.... "C:\Windows\System32\drivers\aswFsBlk.sys"
    16 May 2008 1:18:00 50 768 A.... "C:\Windows\System32\drivers\aswMonFlt.sys"
    16 May 2008 1:15:30 23 152 A.... "C:\Windows\System32\drivers\aswRdr.sys"
    16 May 2008 1:20:32 78 416 A.... "C:\Windows\System32\drivers\aswSP.sys"
    16 May 2008 1:14:12 42 912 A.... "C:\Windows\System32\drivers\aswTdi.sys"
    5 May 2008 20:46:32 15 864 A.... "C:\Windows\System32\drivers\mbam.sys"
    5 May 2008 20:46:36 27 048 A.... "C:\Windows\System32\drivers\mbamcatchme.sys"
    25 May 2008 18:14:18 8 964 A.... "C:\Windows\System32\spool\spooler.xml"
    25 May 2008 18:12:12 4 096 ..... "C:\Windows\System32\spool\SpoolerETW.etl"
    25 May 2008 18:12:32 0 A.... "C:\Windows\TEMP\_avast4_\Webshlock.txt"
    11 Apr 2008 23:02:40 296 448 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6000.16643_none_57702c844c48b643_gdi32.dll_1f014d57"
    11 Apr 2008 23:00:42 748 478 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16643_none_6293ef27b1163421.manifest"
    11 Apr 2008 23:01:02 24 576 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e_dnscacheugc.exe_aa32623e"
    11 Apr 2008 23:03:46 22 422 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506.manifest"
    11 Apr 2008 23:02:58 2 027 008 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16646_none_b6e7fd209d7b409d_win32k.sys_0d7a6fb3"
    11 Apr 2008 23:03:46 16 384 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506_srdelayed.exe_3676d72d"
    11 Apr 2008 23:01:02 162 816 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e_dnsapi.dll_c81f5791"
    11 Apr 2008 23:03:48 905 400 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725_winresume.exe_85cd1215"
    11 Apr 2008 23:00:42 214 528 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16643_none_95b7d197849b3d3f_dxtrans.dll_814d2aee"
    11 Apr 2008 23:03:46 16 095 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6000.16642_none_9e68737c07b7f5c7.manifest"
    11 Apr 2008 23:02:58 6 543 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16646_none_b6e7fd209d7b409d.manifest"
    11 Apr 2008 23:00:42 418 057 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16643_none_95b7d197849b3d3f.manifest"
    11 Apr 2008 23:01:02 83 968 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e_dnsrslvr.dll_faf65b7a"
    11 Apr 2008 23:03:46 28 672 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_fr-fr_1710104ed9f15557_winload.exe.mui_3bc5b827"
    11 Apr 2008 23:00:42 124 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16643_none_a9bce801f5c7b8c8_advpack.dll_8c6ea088"
    11 Apr 2008 23:03:48 944 184 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725_winload.exe_75835076"
    11 Apr 2008 23:00:42 7 110 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16643_none_a9bce801f5c7b8c8.manifest"
    11 Apr 2008 23:00:42 6 066 176 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16643_none_6293ef27b1163421_ieframe.dll_c6cbe33f"
    11 Apr 2008 23:00:42 195 203 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_6.0.6000.16643_none_1560efcf12c08d46.manifest"
    11 Apr 2008 23:03:48 4 858 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725.manifest"
    11 Apr 2008 23:00:42 840 269 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16643_none_113495242520a5f4.manifest"
    11 Apr 2008 23:03:46 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_fr-fr_1710104ed9f15557_winresume.exe.mui_ff8b5358"
    11 Apr 2008 23:00:42 258 554 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16643_none_b2d49a63d9c1162b.manifest"
    11 Apr 2008 23:03:48 12 523 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6000.16642_none_9e68737c07b7f5c7_driver.stl_8a4e6441"
    11 Apr 2008 23:00:42 1 383 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16643_none_113495242520a5f4_mshtml.tlb_fab8f577"
    11 Apr 2008 23:00:42 27 648 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe_jsproxy.dll_3cc8d651"
    11 Apr 2008 23:03:46 620 088 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6000.16642_none_9e68737c07b7f5c7_ci.dll_070fb998"
    11 Apr 2008 23:03:46 3 414 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_fr-fr_1710104ed9f15557.manifest"
    11 Apr 2008 23:00:42 3 591 680 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16643_none_113495242520a5f4_mshtml.dll_fab8f891"
    11 Apr 2008 23:02:40 5 964 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-gdi32_31bf3856ad364e35_6.0.6000.16643_none_57702c844c48b643.manifest"
    11 Apr 2008 23:00:42 52 888 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe.manifest"
    11 Apr 2008 23:00:42 347 136 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16643_none_95b7d197849b3d3f_dxtmsft.dll_4b67eac6"
    11 Apr 2008 23:00:42 180 736 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16643_none_6293ef27b1163421_ieui.dll_f0fcf806"
    11 Apr 2008 23:01:02 28 223 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6000.16615_none_dff66fbd85366d1e.manifest"
    11 Apr 2008 23:03:46 313 856 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506_rstrui.exe_dfa7225b"
    11 Apr 2008 23:00:42 64 512 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe_wininetplugin.dll_f2ff35f9"
    11 Apr 2008 23:04:20 2 865 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-activexcompat_31bf3856ad364e35_6.0.6000.16652_none_f42f50ff068eb866.manifest"
    11 Apr 2008 23:00:42 1 159 680 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16643_none_b2d49a63d9c1162b_urlmon.dll_95c89473"
    11 Apr 2008 23:00:42 42 229 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_6.0.6000.16643_none_3aa12e8ad99130f2.manifest"
    11 Apr 2008 23:03:46 371 712 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506_srcore.dll_58a927f6"
    11 Apr 2008 23:00:42 826 368 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16643_none_ffda7605a4ca3cbe_wininet.dll_790e2e3a"
    11 Apr 2008 23:03:46 40 960 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6000.16646_none_44d4534db6337506_srclient.dll_f0619fc4"
    11 Apr 2008 21:14:58 13 282 A.... "C:\Windows\winsxs\Catalogs\09f1243f2b6a40c275b43824c3a7e4d84230b7b09356eb3ee8777ec21b39516a.cat"
    11 Apr 2008 21:14:34 15 485 A.... "C:\Windows\winsxs\Catalogs\0a38be760b1400a6fa38369802c2f8524e85a458df6e535e0648563ebf48724b.cat"
    17 May 2008 12:52:20 12 686 A.... "C:\Windows\winsxs\Catalogs\0b8efda56ee9ccb5b7b8351a70a171d33c8e2f725e5b87ba42fb10f7153c5c94.cat"
    11 Apr 2008 21:15:14 14 442 A.... "C:\Windows\winsxs\Catalogs\0d3b124793135f1b08aea423f45bd132566bc90597fbcd96d6e8da5cadcde2a5.cat"
    11 Apr 2008 21:15:08 23 254 A.... "C:\Windows\winsxs\Catalogs\0daf62129e144c2fa3567a3eb1bc7af4abe6a583dbc312b659d260ff62b7f27e.cat"
    17 May 2008 12:52:20 12 686 A.... "C:\Windows\winsxs\Catalogs\11a1663bdd9f24e4710b59cba9ed393d28001f2326dede96b5342a43008b36e9.cat"
    11 Apr 2008 21:15:10 14 442 A.... "C:\Windows\winsxs\Catalogs\16a651d339840701e13bd5dc766fed94ae5f93dd034dc9125e79510869013cad.cat"
    11 Apr 2008 21:14:46 13 282 A.... "C:\Windows\winsxs\Catalogs\16ec92b5a175096614d6027131829cc250d4ed601a3bfdf06eba5f9175f4d26f.cat"
    11 Apr 2008 21:15:02 14 442 A.... "C:\Windows\winsxs\Catalogs\19c98424c36df86feecac32a67cb1c6bfbe93fd34fe3ced057ca3d2c947c3b70.cat"
    11 Apr 2008 21:15:08 23 254 A.... "C:\Windows\winsxs\Catalogs\1fa1d444bbbbe22505dc7e9fc7d569783200f3e23923b545bc336aecdba2cb52.cat"
    18 Apr 2008 12:31:22 8 348 A.... "C:\Windows\winsxs\Catalogs\26340819d2ef86080d9001c6f2737d70fd6602ddf4b86b6c26b326ef81cc3342.cat"
    11 Apr 2008 21:14:36 13 282 A.... "C:\Windows\winsxs\Catalogs\2c07395d5b75b66fa70b3ba5fe53f0e753a50bfdd1de4b1a94779af9a1f30259.cat"
    18 Apr 2008 12:31:20 8 335 A.... "C:\Windows\winsxs\Catalogs\2d3cb7907b1336ea5889a2b731d5e97ad40903a4efd2287c1c117bc30f208f46.cat"
    11 Apr 2008 23:04:06 11 800 A.... "C:\Windows\winsxs\Catalogs\309be9f955d964728f47e20b39e9f43b6547630c9270ea451aaf1e560c1a128c.cat"
    11 Apr 2008 21:14:36 19 742 A.... "C:\Windows\winsxs\Catalogs\344c80eef282b3aff92a92ec12245bad2b1bd121c7193a93ee162ae782dcb487.cat"
    11 Apr 2008 23:04:06 11 800 A.... "C:\Windows\winsxs\Catalogs\36b3466c3a580d1ecdc368e016348dbbe6ca39b6fb7f89384b044ccc28db4438.cat"
    11 Apr 2008 21:14:26 25 530 A.... "C:\Windows\winsxs\Catalogs\3cfab1237beb08aa92f81420439dc14e27ff0d5d5c57d7ffbacff339d43698af.cat"
    11 Apr 2008 21:15:02 14 442 A.... "C:\Windows\winsxs\Catalogs\3dddb41dbf8e44acfcf937f793a0aed0aa75774dea788c8cafce115d753ab848.cat"
    11 Apr 2008 21:14:56 13 282 A.... "C:\Windows\winsxs\Catalogs\4020f77a20cb598fa0fb73dbfd9086e6d36f9b0826d0ae4b135929366867499a.cat"
    11 Apr 2008 21:14:44 23 254 A.... "C:\Windows\winsxs\Catalogs\44dd39e04999013bd501a41bd34021bd633715eb7368d9b72aef40d09813c141.cat"
    11 Apr 2008 21:15:10 23 254 A.... "C:\Windows\winsxs\Catalogs\45786cf46f39658452d5986f886ede4b0a7bc396ac32967d943326cb92ba91af.cat"
    11 Apr 2008 21:14:40 13 282 A.... "C:\Windows\winsxs\Catalogs\46b49f2eabc405d34bdcf9d093fe62526e5b9e73bc55b4c452b07e1750bd5f1e.cat"
    29 Mar 2008 22:32:40 7 436 A.... "C:\Windows\winsxs\Catalogs\4849d54916203321a96dae7bbaa6534bad8527ac43ad476284d52f87f763b384.cat"
    11 Apr 2008 21:14:48 23 254 A.... "C:\Windows\winsxs\Catalogs\4a5e04f94e7ec62f3f7863a7da059b188cac27fa57ee188222cb809df38ddfc1.cat"
    11 Apr 2008 21:15:22 32 373 A.... "C:\Windows\winsxs\Catalogs\4c4b6d94112bead524340b69cf7116dff326829f3f7e2c6cc6a09bf7d84494b6.cat"
    11 Apr 2008 21:13:52 12 686 A.... "C:\Windows\winsxs\Catalogs\4d6701e1e57af3457481e6b86da0d6b45e65f98836de3d3cedbab4081c860318.cat"
    11 Apr 2008 21:13:50 12 686 A.... "C:\Windows\winsxs\Catalogs\4e42f72d5d581514459e085d4a6e13f0ca95f5bb8384d08360ddd987858aa80e.cat"
    11 Apr 2008 21:15:16 14 442 A.... "C:\Windows\winsxs\Catalogs\51c1f2fa90792e9522df5ee944a8cfa72fe266a7153051cc4b0aa27ba446f4f6.cat"
    11 Apr 2008 21:14:40 23 254 A.... "C:\Windows\winsxs\Catalogs\54a65c43e88fca36ff257f15372ed4cb368ca1a38901755ebc55be98eb47b8b8.cat"
    11 Apr 2008 21:14:36 13 282 A.... "C:\Windows\winsxs\Catalogs\6083157ab0f3b8c6d32347aec01eed1fc3dafea0a0399c64b4839ad278c10287.cat"
    11 Apr 2008 21:15:04 23 254 A.... "C:\Windows\winsxs\Catalogs\640cd9ff19d5a79e0d72ecc140d686b440be3bece930ac140e18b840ef57f395.cat"
    11 Apr 2008 21:15:00 23 254 A.... "C:\Windows\winsxs\Catalogs\642d7a50e0d942dda6456c904bdbd0e6371dfc65a67314b7d89f7ba66e93d7b3.cat"
    11 Apr 2008 21:15:18 14 442 A.... "C:\Windows\winsxs\Catalogs\647d3a49b079b9fdbcc3c556d31bcb6b4bf2f4673b47f06053792dc181abac0a.cat"
    11 Apr 2008 21:15:16 23 254 A.... "C:\Windows\winsxs\Catalogs\69140c5d44e14f91b693719e602fc34c0542f9912d994cf66dc589486a9d6413.cat"
    11 Apr 2008 21:11:26 195 028 A.... "C:\Windows\winsxs\Catalogs\6cfbabebde74f297a724888f2bfae182b336e7fd6afc21e6c7eb83728c1404db.cat"
    29 Mar 2008 22:33:02 7 441 A.... "C:\Windows\winsxs\Catalogs\71503c1b988fb27a41668f3ba35468d268daf07e8e79cf7b82a1ef64a8d213a1.cat"
    11 Apr 2008 21:15:06 23 254 A.... "C:\Windows\winsxs\Catalogs\7ea959c131b04a0a779e89334dba0798241049009f1127d0456ee58ee3f4b86b.cat"
    11 Apr 2008 21:14:40 23 254 A.... "C:\Windows\winsxs\Catalogs\870906d6a31614908badc0ded79359604dde79eca63cf016196957d62c69e447.cat"
    29 Mar 2008 22:32:56 7 423 A.... "C:\Windows\winsxs\Catalogs\8b414e757cb8b153bff77dd00a36556aea3adab25ce15f3e8b184ffbf41ba7a2.cat"
    11 Apr 2008 21:13:38 16 661 A.... "C:\Windows\winsxs\Catalogs\90b09ae1ab345f2a5f68615507f924c82d04c27204a9f2a41ba9d45c369763e9.cat"
    18 Apr 2008 12:31:30 8 355 A.... "C:\Windows\winsxs\Catalogs\91ca50cec42075fff02b366323bf3b45d2053b24544bd12b622b65621bd0edd5.cat"
    29 Mar 2008 22:32:28 7 423 A.... "C:\Windows\winsxs\Catalogs\935df4549e21123a2efb986a707f54475380a037519679510e4b4dfc4bdb5767.cat"
    11 Apr 2008 21:14:52 14 442 A.... "C:\Windows\winsxs\Catalogs\982a8e79db93b6500cfe973aeeba64397a736d889420fbc2993597f26c84f798.cat"
    29 Mar 2008 22:33:04 7 447 A.... "C:\Windows\winsxs\Catalogs\989e628160e12c984a435d2bb2a335ad043e006646150c7b1f3bb52dccd842cc.cat"
    11 Apr 2008 21:14:50 23 254 A.... "C:\Windows\winsxs\Catalogs\9f923588da2d6d807411995e6ea998911e5f7e896ad34e9f00c625009befc6a5.cat"
    11 Apr 2008 21:15:12 14 442 A.... "C:\Windows\winsxs\Catalogs\a1d9b147468471bc851b3230a4cbe2f3bd7f7901d0cce92ce2b03d10ee5aa1da.cat"
    18 Apr 2008 12:31:26 8 348 A.... "C:\Windows\winsxs\Catalogs\a2492fa83366394b7c17fa6c9650ce5688b887d0ad0ad79743a3422debf4d997.cat"
    11 Apr 2008 21:14:28 13 282 A.... "C:\Windows\winsxs\Catalogs\a444397ab6f7c1036e4212aeb6ad9bc69788bf2a5de222ad9d730211ffced5b4.cat"
    11 Apr 2008 21:14:36 23 254 A.... "C:\Windows\winsxs\Catalogs\a51a043488a32a63c0a67ce91cb1cb5cea2037d2b903db788732a5458714a96d.cat"
    11 Apr 2008 21:14:56 23 254 A.... "C:\Windows\winsxs\Catalogs\a59e5c23da4b2b18c73df07be076b82a75eb306b6e4f2072080d93a71292cce7.cat"
    18 Apr 2008 12:31:12 8 335 A.... "C:\Windows\winsxs\Catalogs\a951d53950c367acc37622f0dd619a954df5de2c4ec40296e6636605aa33714a.cat"
    29 Mar 2008 22:32:58 7 436 A.... "C:\Windows\winsxs\Catalogs\b080e112e69d2e9c8e71acd39a81f0d469d837625ceb8ed73b5b87da1fd1424c.cat"
    11 Apr 2008 21:14:38 23 254 A.... "C:\Windows\winsxs\Catalogs\b37718775ad4c8de8060410ad666a85031ea73db96f5544f2122ad942692c526.cat"
    18 Apr 2008 12:31:34 8 361 A.... "C:\Windows\winsxs\Catalogs\b3beb16c28db357e654a6b132f59cd48cb95cee949d7b97587f8f02f233f3ce1.cat"
    11 Apr 2008 21:15:14 23 254 A.... "C:\Windows\winsxs\Catalogs\b525175dd1388167b45d780000c2eec9ec020256ec053ad80940b4b6194befac.cat"
    11 Apr 2008 21:14:46 23 254 A.... "C:\Windows\winsxs\Catalogs\b96d116bbbab4a4fa9b80601ac56f12febda1a8f6c2fec48b00c8c2105021842.cat"
    11 Apr 2008 21:14:54 23 254 A.... "C:\Windows\winsxs\Catalogs\bba17d6139ba5353172ab06e859419860166ea984fb8e4fea83ee67e0a9677fb.cat"
    29 Mar 2008 22:32:44 7 441 A.... "C:\Windows\winsxs\Catalogs\bd83dce340498e7c363093c2fc74dfb58e1ec17770453905172c7471fadd9333.cat"
    11 Apr 2008 21:14:28 76 110 A.... "C:\Windows\winsxs\Catalogs\be8463ebd410ea941485c2fa5d79c85ed2615d7b6b2d27455e0af474829a2240.cat"
    11 Apr 2008 21:14:36 14 442 A.... "C:\Windows\winsxs\Catalogs\befd56ee61132028d7e7be3973fb9dae13b365cb50923c64895217b7c61ace49.cat"
    11 Apr 2008 21:13:38 16 661 A.... "C:\Windows\winsxs\Catalogs\bf8fbbcdbddd1bba2b3ce98415e8f3eff9866051126dc2becdcd4041b2377427.cat"
    11 Apr 2008 21:15:18 23 254 A.... "C:\Windows\winsxs\Catalogs\bfb694153e83769ea641c62743ad453e2ad50c96d701306de49cc7a29d82d32e.cat"
    11 Apr 2008 21:15:20 23 254 A.... "C:\Windows\winsxs\Catalogs\ccd0e0fdbce4d06de7135ac41f7a6d3ea4d9f0c8b55425cc5603ab3740ea77db.cat"
    11 Apr 2008 21:11:26 86 404 A.... "C:\Windows\winsxs\Catalogs\ce804b6f80bf97ad8a48f9d3ff2077c224c2ed813b8778ccd8e6f451a0a0e128.cat"
    18 Apr 2008 12:31:32 8 361 A.... "C:\Windows\winsxs\Catalogs\d14225a52543aa5a9605b00dd7574812bf89c605ebc73a9730e1e386bfc965f8.cat"
    29 Mar 2008 22:32:46 7 441 A.... "C:\Windows\winsxs\Catalogs\d5ecf2ab9387e082648bbcccd6eceb9d67b096939150833d0ae3066b3a1a676e.cat"
    11 Apr 2008 21:14:34 23 254 A.... "C:\Windows\winsxs\Catalogs\d637f9f15fa37de1be3333595b75c8cb0137cc4778c37797fece0bf64554dc55.cat"
    11 Apr 2008 21:15:14 14 442 A.... "C:\Windows\winsxs\Catalogs\d942536d751471b9a7be0ff37a7cdf69309caabc768b380e1367338bc62eb148.cat"
    11 Apr 2008 21:15:04 13 282 A.... "C:\Windows\winsxs\Catalogs\da6ce0de0520b36084c50a8ff86031e59459700a86971c4bcbc2c15c1f7f2e7d.cat"
    11 Apr 2008 21:13:22 16 321 A.... "C:\Windows\winsxs\Catalogs\de424b83ea8479f0bb86a02e342efacf56c655e527a36d9748f0369cddca2357.cat"
    11 Apr 2008 21:14:46 14 442 A.... "C:\Windows\winsxs\Catalogs\e68cb33eaa975556253d53d35f745e1f21fc1ba355e92eda628eb46f8d65cb82.cat"
    29 Mar 2008 22:32:52 7 447 A.... "C:\Windows\winsxs\Catalogs\ea23c2347043051e35d7731754b9494bbc1a5f4c767e23e9809936f02340620d.cat"
    29 Mar 2008 22:32:36 7 423 A.... "C:\Windows\winsxs\Catalogs\ef483ae0673e2975dd4224fe26749623c1c702b8b3fded10161417459e1771a7.cat"
    11 Apr 2008 21:14:28 15 485 A.... "C:\Windows\winsxs\Catalogs\f2f86b5c3ce99d9fc922f8884088c43c8db5b6b05294606853ac8a7eaf2355c2.cat"
    11 Apr 2008 21:14:42 14 442 A.... "C:\Windows\winsxs\Catalogs\f5867eca9755dc5efaba7645e2d1c312945bade17e43a61b4fe1fe4b6f7604ed.cat"
    18 Apr 2008 12:31:28 8 355 A.... "C:\Windows\winsxs\Catalogs\f7bf65ca621d8ad32ead1500a08827be239d0f49d83dc20dabf57d2eb17adbd7.cat"
    11 Apr 2008 21:14:52 23 254 A.... "C:\Windows\winsxs\Catalogs\fd107a954159dcc9c343e1c8eabdfd048dec96cf54e80aad2e31a896a2384343.cat"
    11 Apr 2008 21:15:02 23 254 A.... "C:\Windows\winsxs\Catalogs\fdc8a375cbb80252b5eca4a00b44ee3b9579d28d858de4130e20554c2ed72224.cat"
    17 May 2008 22:21:20 856 A.... "C:\Windows\winsxs\FileMaps\_0000000000000000.cdf-ms"
    11 Apr 2008 23:03:46 3 564 A.... "C:\Windows\winsxs\FileMaps\$$.cdf-ms"
    17 May 2008 22:21:20 680 A.... "C:\Windows\winsxs\FileMaps\program_files_ffd0cbfc813cc4f1.cdf-ms"
    11 Apr 2008 23:00:40 2 280 A.... "C:\Windows\winsxs\FileMaps\program_files_internet_explorer_a421d1bfaf856e2b.cdf-ms"
    11 Apr 2008 23:00:42 3 080 A.... "C:\Windows\winsxs\FileMaps\$$_apppatch_1143992cbbbebcab.cdf-ms"
    11 Apr 2008 23:03:46 1 344 A.... "C:\Windows\winsxs\FileMaps\$$_servicing_fc2045b9046cc796.cdf-ms"
    17 May 2008 22:21:20 2 492 A.... "C:\Windows\winsxs\FileMaps\program_files_windows_mail_e07902f329fe05e9.cdf-ms"
    11 Apr 2008 23:03:46 389 884 A.... "C:\Windows\winsxs\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"
    11 Apr 2008 23:00:42 6 108 A.... "C:\Windows\winsxs\FileMaps\$$_system32_migration_927a21df1acd7c18.cdf-ms"
    11 Apr 2008 23:03:46 219 436 A.... "C:\Windows\winsxs\FileMaps\$$_system32_fr-fr_448347788202c03b.cdf-ms"
    11 Apr 2008 23:03:46 1 040 A.... "C:\Windows\winsxs\FileMaps\$$_servicing_fr-fr_626f794e6d096759.cdf-ms"
    11 Apr 2008 21:15:08 714 ..... "C:\Windows\winsxs\Manifests\x86_0a9e243d5c8db04d16aed7e6a5cab156_31bf3856ad364e35_6.0.6000.16646_none_e398ee2747721733.manifest"
    11 Apr 2008 21:14:36 963 ..... "C:\Windows\winsxs\Manifests\x86_527228a8ffd3ab7d965661c36a1ecf66_31bf3856ad364e35_6.0.6000.16609_none_0e1b2af5a8ff319e.manifest"
    11 Apr 2008 21:14:44 714 ..... "C:\Windows\winsxs\Manifests\x86_543a9fd3202c66ad361f8e21d814c64d_31bf3856ad364e35_6.0.6000.20782_none_c7bc27b531f11c7d.manifest"
    16 Apr 2008 8:47:10 2 595 ..... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20815_none_f125abb58774f9cb.manifest"
    11 Apr 2008 21:14:36 721 ..... "C:\Windows\winsxs\Manifests\x86_7e1fb9f861a3aed7e881442bde802218_31bf3856ad364e35_6.0.6000.16646_none_41f16126e1a3af4a.manifest"
    29 Mar 2008 22:32:28 1 868 ..... "C:\Windows\winsxs\Manifests\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_db5f52fb98cb24ad.manifest"
    11 Apr 2008 21:15:20 714 ..... "C:\Windows\winsxs\Manifests\x86_99075f7c91bef1898cbb527eaa511dc3_31bf3856ad364e35_6.0.6000.16646_none_1fd70777f2c79d66.manifest"
    11 Apr 2008 21:15:20 963 ..... "C:\Windows\winsxs\Manifests\x86_df5983291785f780a732be4d444d1594_31bf3856ad364e35_6.0.6000.20734_none_dad6465a01b37dd2.manifest"
    11 Apr 2008 21:11:30 696 ..... "C:\Windows\winsxs\Manifests\x86_ad72cde4b8dfb3899f9027eea73a133e_31bf3856ad364e35_6.0.6000.20777_none_9ca496090fda6bd1.manifest"
    11 Apr 2008 21:11:28 704 ..... "C:\Windows\winsxs\Manifests\x86_75782addc06af7526350c1991d66ae4e_31bf3856ad364e35_6.0.6000.20777_none_ce4e13b50b753892.manifest"
    11 Apr 2008 21:15:02 963 ..... "C:\Windows\winsxs\Manifests\x86_c7ebe49f3d85443bc36ac89bb90ebd46_31bf3856ad364e35_6.0.6000.20734_none_4014e78a0efaf722.manifest"
    16 Apr 2008 8:51:32 2 595 ..... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16674_none_f05a2d326e88eb29.manifest"
    18 Apr 2008 12:31:34 806 ..... "C:\Windows\winsxs\Manifests\x86_policy.8.0.microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.762_none_abac38a907ee8801.manifest"
    16 Apr 2008 9:29:00 2 595 ..... "C:\Windows\winsxs\Manifests\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18054_none_f2560bb06b9f4438.manifest"
    11 Apr 2008 21:15:08 714 ..... "C:\Windows\winsxs\Manifests\x86_fecfb0dd65fac80e84561ffeb00a8167_31bf3856ad364e35_6.0.6000.20782_none_d781968913273d98.manifest"
    11 Apr 2008 21:15:18 714 ..... "C:\Windows\winsxs\Manifests\x86_fb912d4f1885427965a8c2fd19210459_31bf3856ad364e35_6.0.6000.16646_none_092229cbdf1a3524.manifest"
    11 Apr 2008 21:15:16 714 ..... "C:\Windows\winsxs\Manifests\x86_b78c638f0122da2f44d6220ddeedeb1a_31bf3856ad364e35_6.0.6000.20782_none_caa216f7ce9a963c.manifest"
    11 Apr 2008 21:14:38 963 ..... "C:\Windows\winsxs\Manifests\x86_567e185bc7d2c527fdd84278cf6ef286_31bf3856ad364e35_6.0.6000.16609_none_ef0d8f7df3514e18.manifest"
    11 Apr 2008 21:15:02 714 ..... "C:\Windows\winsxs\Manifests\x86_afd019ab41abf40e6fd19b83e7936103_31bf3856ad364e35_6.0.6000.16646_none_0d49334ce1a16866.manifest"
    11 Apr 2008 21:15:16 963 ..... "C:\Windows\winsxs\Manifests\x86_5736fb1534f4d37c26b504dd97d6cde2_31bf3856ad364e35_6.0.6000.16609_none_85e1098d3a34103b.manifest"
    29 Mar 2008 22:32:58 1 238 ..... "C:\Windows\winsxs\Manifests\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.42_none_0e9c2a8d74fd3ce6.manifest"
    11 Apr 2008 21:15:14 719 ..... "C:\Windows\winsxs\Manifests\x86_e2cf1a4637fcc7f09568f4bbd418ac06_31bf3856ad364e35_6.0.6000.16646_none_fcb5ba247da319b8.manifest"
    11 Apr 2008 21:14:52 963 ..... "C:\Windows\winsxs\Manifests\x86_a3befccb8f50f0de8a64c9e3f1c30eab_31bf3856ad364e35_6.0.6000.20734_none_870124cf8db70efc.manifest"
    18 Apr 2008 12:31:32 806 ..... "C:\Windows\winsxs\Manifests\x86_policy.8.0.microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_8dd7dea5d5a7a18a.manifest"
    11 Apr 2008 21:14:42 963 ..... "C:\Windows\winsxs\Manifests\x86_aeec3b7f802d2c1b0017d48704eb557e_31bf3856ad364e35_6.0.6000.20734_none_fee80bbad87b2355.manifest"
    11 Apr 2008 21:14:42 714 ..... "C:\Windows\winsxs\Manifests\x86_24675ecc88a12820942d9acc27f39f5f_31bf3856ad364e35_6.0.6000.20782_none_b699db8bea906172.manifest"
    29 Mar 2008 22:32:44 712 ..... "C:\Windows\winsxs\Manifests\x86_policy.8.0.microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_none_5c4003bc63e949f6.manifest"
    11 Apr 2008 21:15:08 714 ..... "C:\Windows\winsxs\Manifests\x86_e149c465d5092cd2b9e8db73165caf65_31bf3856ad364e35_6.0.6000.16646_none_7cac5e54ad988d85.manifest"
    17 May 2008 12:52:20 704 ..... "C:\Windows\winsxs\Manifests\x86_6a9cfe3c56140ae04bd3e21910e6d711_31bf3856ad364e35_6.0.6001.22159_none_5a5ca6a9faf87416.manifest"
    11 Apr 2008 21:14:52 714 ..... "C:\Windows\winsxs\Manifests\x86_cafacae981ed427ccc359c7a60bb9966_31bf3856ad364e35_6.0.6000.20782_none_fe02e467ad63d36d.manifest"
    11 Apr 2008 21:11:32 700 ..... "C:\Windows\winsxs\Manifests\x86_5041aa100b4e1b271aa4d7860d020b05_31bf3856ad364e35_6.0.6000.20777_none_09152cc2013c7cd5.manifest"
    11 Apr 2008 21:14:38 714 ..... "C:\Windows\winsxs\Manifests\x86_154332cbff8afa832681b4ad83afc904_31bf3856ad364e35_6.0.6000.20782_none_5e9bd97034bc58d4.manifest"
    11 Apr 2008 21:14:48 963 ..... "C:\Windows\winsxs\Manifests\x86_8720fb7dd3b2029f2030732eb32c2799_31bf3856ad364e35_6.0.6000.16609_none_4c638c9e2025fc04.manifest"
    11 Apr 2008 21:14:34 963 ..... "C:\Windows\winsxs\Manifests\x86_b738e3a150de08478420af446389fe20_31bf3856ad364e35_6.0.6000.20734_none_b02219f1abdd1088.manifest"
    11 Apr 2008 21:15:04 714 ..... "C:\Windows\winsxs\Manifests\x86_75934810338688a551d8102f184ff8d9_31bf3856ad364e35_6.0.6000.16646_none_b4b6114b8ae38dfa.manifest"
    11 Apr 2008 21:11:30 699 ..... "C:\Windows\winsxs\Manifests\x86_9760aa497ee965adf3fa06ff0a4f8d10_31bf3856ad364e35_6.0.6000.20777_none_7b19e8ce796457ef.manifest"
    11 Apr 2008 21:11:26 724 ..... "C:\Windows\winsxs\Manifests\x86_617e0d7bf57b0ccfa3902e705eb9d85c_31bf3856ad364e35_6.0.6001.22120_none_d19eb33d52da9a8f.manifest"
    11 Apr 2008 21:15:06 963 ..... "C:\Windows\winsxs\Manifests\x86_056f7e05886f508750953c958de9c61a_31bf3856ad364e35_6.0.6000.16609_none_632ae57c38a3cfb1.manifest"
    11 Apr 2008 21:14:54 714 ..... "C:\Windows\winsxs\Manifests\x86_5d0ec10b77b82e9d922cebc7b592e8a8_31bf3856ad364e35_6.0.6000.20782_none_3a9b75c313530ab3.manifest"
    11 Apr 2008 21:14:26 701 ..... "C:\Windows\winsxs\Manifests\x86_155a226d49590e83a96de70f67f59c0e_31bf3856ad364e35_6.0.6001.22120_none_b01c3147ff6a4f6d.manifest"
    11 Apr 2008 21:14:50 963 ..... "C:\Windows\winsxs\Manifests\x86_904e985bc098e8dd99d2dda07a4f2df3_31bf3856ad364e35_6.0.6000.20734_none_7f07ce72efc01e1a.manifest"
    11 Apr 2008 21:11:26 694 ..... "C:\Windows\winsxs\Manifests\x86_b7e917949a7b82982f66528f58e54a85_31bf3856ad364e35_6.0.6000.20777_none_e1812bf15ba05120.manifest"
    11 Apr 2008 21:14:34 701 ..... "C:\Windows\winsxs\Manifests\x86_a913b88766784c8354c06f770523b59a_31bf3856ad364e35_6.0.6000.16642_none_3916c83206f72831.manifest"
    11 Apr 2008 21:11:26 704 ..... "C:\Windows\winsxs\Manifests\x86_ad37612d8d255f19b1366b06a31c4e73_31bf3856ad364e35_6.0.6001.18023_none_f46e49a98ebe84fb.manifest"
    11 Apr 2008 21:11:32 712 ..... "C:\Windows\winsxs\Manifests\x86_83630a9aa6fcebdf30d2cf0005bdf273_31bf3856ad364e35_6.0.6000.20777_none_ee54cd4cc1c1d8c3.manifest"
    11 Apr 2008 21:14:54 714 ..... "C:\Windows\winsxs\Manifests\x86_b7a8b51ccac625a76e87dea7f834a7ff_31bf3856ad364e35_6.0.6000.20782_none_dcf345f2e6ea78b7.manifest"
    18 Apr 2008 12:31:30 800 ..... "C:\Windows\winsxs\Manifests\x86_policy.8.0.microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_8a14c0566bec5b24.manifest"
    11 Apr 2008 21:15:04 714 ..... "C:\Windows\winsxs\Manifests\x86_8ac1d67aeb60416b9abdaa7292f1e0ac_31bf3856ad364e35_6.0.6000.20782_none_e6b28b3f3d91c7d3.manifest"
    11 Apr 2008 21:14:28 728 ..... "C:\Windows\winsxs\Manifests\x86_047dba8467af20b07a1a5a6c0cdb212f_31bf3856ad364e35_6.0.6001.18027_none_b2dac92fc71fd677.manifest"
    11 Apr 2008 21:14:40 714 ..... "C:\Windows\winsxs\Manifests\x86_05d68a01adb3e6425227f2805002a1e9_31bf3856ad364e35_6.0.6000.16646_none_eed5e69741ad3a7f.manifest"
    11 Apr 2008 21:14:46 721 ..... "C:\Windows\winsxs\Manifests\x86_05806579111f03fede649e61ae5e9220_31bf3856ad364e35_6.0.6000.20782_none_d996b501a8d3d2be.manifest"
    11 Apr 2008 21:14:54 714 ..... "C:\Windows\winsxs\Manifests\x86_09e9068bedca3dadad851bd4e9f6a961_31bf3856ad364e35_6.0.6000.16646_none_1394c9ea1cc66aaa.manifest"
    11 Apr 2008 21:15:02 963 ..... "C:\Windows\winsxs\Manifests\x86_099d2dbaf604bf0ab1c987b0a440f3dd_31bf3856ad364e35_6.0.6000.16609_none_b72d04f83a3b4805.manifest"
    11 Apr 2008 21:14:58 721 ..... "C:\Windows\winsxs\Manifests\x86_0b83068341f64d4d9e5beb36c42d375f_31bf3856ad364e35_6.0.6000.20782_none_5282c13121da80a2.manifest"
    11 Apr 2008 21:14:44 963 ..... "C:\Windows\winsxs\Manifests\x86_0c55d24ce05f13a5c66d073666dc55c5_31bf3856ad364e35_6.0.6000.20734_none_7631de046bd6454b.manifest"
    11 Apr 2008 21:14:26 711 ..... "C:\Windows\winsxs\Manifests\x86_0f4a77d01f263a17ca46a54b7dcd5285_31bf3856ad364e35_6.0.6001.18027_none_009428bad2c0e9f8.manifest"
    11 Apr 2008 21:14:32 727 ..... "C:\Windows\winsxs\Manifests\x86_111ff923fe6a03feb7a0e7519a459f91_31bf3856ad364e35_6.0.6000.16646_none_bfdb9542a5e273c5.manifest"
    11 Apr 2008 21:14:44 714 ..... "C:\Windows\winsxs\Manifests\x86_127302ac96fa4812822284bbcb1f59db_31bf3856ad364e35_6.0.6000.16646_none_d4558454fbddc14c.manifest"
    11 Apr 2008 21:11:34 708 ..... "C:\Windows\winsxs\Manifests\x86_131915d978536b4bdf1d626810ae7943_31bf3856ad364e35_6.0.6000.16643_none_c39e4287c44ab87c.manifest"
    11 Apr 2008 21:15:14 714 ..... "C:\Windows\winsxs\Manifests\x86_130b2d6729730916ce7542b9c15f806c_31bf3856ad364e35_6.0.6000.16646_none_5a4e3a7274665e35.manifest"
    11 Apr 2008 21:15:00 963 ..... "C:\Windows\winsxs\Manifests\x86_14722a90e7c72872da1e1aa7fc7e679d_31bf3856ad364e35_6.0.6000.20734_none_4535b3174cce48d4.manifest"
    11 Apr 2008 21:11:34 700 ..... "C:\Windows\winsxs\Manifests\x86_1546e1f2096b39fea427470251a0d420_31bf3856ad364e35_6.0.6000.20777_none_fab6f34e547559de.manifest"
    11 Apr 2008 21:14:38 714 ..... "C:\Windows\winsxs\Manifests\x86_178a3bc6c44b16698cb1579878b8f5ff_31bf3856ad364e35_6.0.6000.16646_none_576ae17a75fc9813.manifest"
    11 Apr 2008 21:15:08 963 ..... "C:\Windows\winsxs\Manifests\x86_182e5893f6b2920856af474dcb5367b4_31bf3856ad364e35_6.0.6000.16609_none_055a24e0d3c6ac80.manifest"
    17 May 2008 12:52:20 704 ..... "C:\Windows\winsxs\Manifests\x86_19b04d04db00cdc1359e1338b87b3908_31bf3856ad364e35_6.0.6001.18054_none_88a2c5b180eab889.manifest"
    11 Apr 2008 21:14:56 721 ..... "C:\Windows\winsxs\Manifests\x86_1a27a2490633947c1752679c306d42a2_31bf3856ad364e35_6.0.6000.16646_none_206b76c312613da6.manifest"
    11 Apr 2008 21:11:32 700 ..... "C:\Windows\winsxs\Manifests\x86_1ecd9795cfde29c9c396b3d0c70fe93d_31bf3856ad364e35_6.0.6000.16643_none_19dc28f7b0ffa774.manifest"
    11 Apr 2008 21:14:48 714 ..... "C:\Windows\winsxs\Manifests\x86_1e09ec1e2597ad97eda999c23d6d6d5b_31bf3856ad364e35_6.0.6000.20782_none_a61ce04246ca08f3.manifest"
    11 Apr 2008 21:15:02 714 ..... "C:\Windows\winsxs\Manifests\x86_233248f583b24b96cf104ef3327def17_31bf3856ad364e35_6.0.6000.20782_none_4dd7589a2e394ee4.manifest"
    11 Apr 2008 21:15:16 714 ..... "C:\Windows\winsxs\Manifests\x86_230d6ec2df09704e0139ae77545dc011_31bf3856ad364e35_6.0.6000.16646_none_e2b47fd2592094d4.manifest"
    11 Apr 2008 21:11:34 695 ..... "C:\Windows\winsxs\Manifests\x86_24eb02abe54dbc5edd3b7881e37ff9ee_31bf3856ad364e35_6.0.6000.20777_none_e5649ea009ab109a.manifest"
    11 Apr 2008 21:14:40 714 ..... "C:\Windows\winsxs\Manifests\x86_2816a54f9ba829c1ee8ff84ddc19daac_31bf3856ad364e35_6.0.6000.20782_none_c5c625a640443256.manifest"
    11 Apr 2008 21:11:34 708 ..... "C:\Windows\winsxs\Manifests\x86_2b50e7b8686172d5454a1a68210dd91f_31bf3856ad364e35_6.0.6000.16643_none_173692feef67fad2.manifest"
    11 Apr 2008 21:13:38 693 ..... "C:\Windows\winsxs\Manifests\x86_2b011bfe892a45084416caed814751b4_31bf3856ad364e35_6.0.6001.18023_none_66fd8a82bb573c3c.manifest"
    11 Apr 2008 21:15:14 963 ..... "C:\Windows\winsxs\Manifests\x86_2b436dfa5bf844934e56580e8da95773_31bf3856ad364e35_6.0.6000.20734_none_0e98e576bc5331f0.manifest"
    11 Apr 2008 21:11:26 726 ..... "C:\Windows\winsxs\Manifests\x86_2cd01c4058b7c9a39e361df0b17279be_31bf3856ad364e35_6.0.6001.22120_none_3d41ad0f6a20d859.manifest"
    11 Apr 2008 21:11:28 714 ..... "C:\Windows\winsxs\Manifests\x86_2c9085f2f7c48dff849277575f00089f_31bf3856ad364e35_6.0.6000.20777_none_88fe5227b9201630.manifest"
    11 Apr 2008 21:14:36 721 ..... "C:\Windows\winsxs\Manifests\x86_2cf6dfdaa57e43243a7652ffdedea23e_31bf3856ad364e35_6.0.6000.20782_none_7c2f224816fd1ff0.manifest"
    17 May 2008 12:52:20 704 ..... "C:\Windows\winsxs\Manifests\x86_2c1687ebb319e565a401222577f4882e_31bf3856ad364e35_6.0.6000.20815_none_fd103de187617e7f.manifest"
    11 Apr 2008 21:14:54 963 ..... "C:\Windows\winsxs\Manifests\x86_2d0584d753e42bbe238f8a093abba929_31bf3856ad364e35_6.0.6000.16609_none_6d1dd0db3ecf3a6b.manifest"
    11 Apr 2008 21:14:28 706 ..... "C:\Windows\winsxs\Manifests\x86_2f4a8715822bc77ac3cb57ffde2ea3fc_31bf3856ad364e35_6.0.6001.22125_none_84f4caf0c4469316.manifest"
    11 Apr 2008 23:04:06 701 ..... "C:\Windows\winsxs\Manifests\x86_2f2d7fdfd1adb5a9efb5aa906a3df702_31bf3856ad364e35_6.0.6001.22136_none_8ef1eb2205ae335a.manifest"
    11 Apr 2008 21:11:34 695 ..... "C:\Windows\winsxs\Manifests\x86_32a10bd9dc557a0c7adbf0546dc111b1_31bf3856ad364e35_6.0.6000.20777_none_cecf728e637f1016.manifest"
    11 Apr 2008 21:15:14 719 ..... "C:\Windows\winsxs\Manifests\x86_3b21165520f3c9b707309056307e0096_31bf3856ad364e35_6.0.6000.20782_none_3773975c55713177.manifest"
    11 Apr 2008 21:14:46 714 ..... "C:\Windows\winsxs\Manifests\x86_3d05fb0f1ac5684d0fcb70d8ba7cbc3f_31bf3856ad364e35_6.0.6000.20782_none_e30bc6b0bd51d1ef.manifest"
    11 Apr 2008 21:14:52 714 ..... "C:\Windows\winsxs\Manifests\x86_3dc951e829fd149a0910fe05b56d4b4c_31bf3856ad364e35_6.0.6000.16646_none_e8d4d690b1f12186.manifest"
    11 Apr 2008 21:15:02 714 ..... "C:\Windows\winsxs\Manifests\x86_3f67d6d4fc9f15473417ee19c9699c90_31bf3856ad364e35_6.0.6000.20782_none_17d4584c07171aae.manifest"
    11 Apr 2008 21:15:16 963 ..... "C:\Windows\winsxs\Manifests\x86_3f81913969a668a202fb070bef83af3b_31bf3856ad364e35_6.0.6000.20734_none_17c8906a06220183.manifest"
    11 Apr 2008 21:14:36 714 ..... "C:\Windows\winsxs\Manifests\x86_40d4bc77a70651b80d116c0bd42510ec_31bf3856ad364e35_6.0.6000.16646_none_f14b135624ad3168.manifest"
    11 Apr 2008 21:15:02 714 ..... "C:\Windows\winsxs\Manifests\x86_46e376c8ea8550df4743fcae46edb936_31bf3856ad364e35_6.0.6000.20782_none_070581b1c08049da.manifest"
    11 Apr 2008 21:15:10 714 ..... "C:\Windows\winsxs\Manifests\x86_464f3e56f15f50c07c74da865c94a788_31bf3856ad364e35_6.0.6000.16646_none_044c5d8b2196cf42.manifest"
    11 Apr 2008 21:11:34 726 ..... "C:\Windows\winsxs\Manifests\x86_494144dd19b4d22cc8ea46b9ebc5daa7_31bf3856ad364e35_6.0.6000.20777_none_c41c86028841da8b.manifest"
    11 Apr 2008 21:11:34 708 ..... "C:\Windows\winsxs\Manifests\x86_4a788757800a55db00326eb7abed7833_31bf3856ad364e35_6.0.6000.20777_none_36152a982a5925ea.manifest"
    11 Apr 2008 21:15:04 714 ..... "C:\Windows\winsxs\Manifests\x86_4aca2792a5edf0224fedbc8022f29205_31bf3856ad364e35_6.0.6000.20782_none_69936ead0818efee.manifest"
    11 Apr 2008 21:14:58 714 ..... "C:\Windows\winsxs\Manifests\x86_4b7e75f8854bad3a7f2eba331ea04f1c_31bf3856ad364e35_6.0.6000.16646_none_cfa2e22f07232a88.manifest"
    11 Apr 2008 21:15:00 721 ..... "C:\Windows\winsxs\Manifests\x86_4c2cbe855da6c6a9b586e3ab8568164e_31bf3856ad364e35_6.0.6000.16646_none_c47fdc0ff225c45c.manifest"
    11 Apr 2008 21:11:26 704 ..... "C:\Windows\winsxs\Manifests\x86_50046bcbbc704e47418b3653d0fc6613_31bf3856ad364e35_6.0.6001.22120_none_57e2e1216dad17d0.manifest"
    11 Apr 2008 21:11:30 707 ..... "C:\Windows\winsxs\Manifests\x86_52e8f1342054bd9b2843007fdf0ec720_31bf3856ad364e35_6.0.6000.16643_none_1e872542ce33fc5a.manifest"
    11 Apr 2008 21:13:50 694 ..... "C:\Windows\winsxs\Manifests\x86_54ed5ec529fa2daf578a2ffbde37ccd4_31bf3856ad364e35_6.0.6001.22125_none_b6d81dd444c0ab33.manifest"
    11 Apr 2008 21:15:06 721 ..... "C:\Windows\winsxs\Manifests\x86_581c0fdd24493758c86b07509bb5467e_31bf3856ad364e35_6.0.6000.20782_none_165a19a365cb7320.manifest"
    11 Apr 2008 21:11:26 712 ..... "C:\Windows\winsxs\Manifests\x86_5b303ab3ed9c8698c713d176531452ba_31bf3856ad364e35_6.0.6001.18023_none_2348311b86db52bc.manifest"
    11 Apr 2008 21:15:14 714 ..... "C:\Windows\winsxs\Manifests\x86_5e7c42b60c557d23388b101988a9a46a_31bf3856ad364e35_6.0.6000.20782_none_fda971a4ebff5e91.manifest"
    11 Apr 2008 21:15:12 963 ..... "C:\Windows\winsxs\Manifests\x86_62017f6b7c434432b96a22d635617870_31bf3856ad364e35_6.0.6000.16609_none_9dc36991227729f8.manifest"
    11 Apr 2008 21:13:22 698 ..... "C:\Windows\winsxs\Manifests\x86_634306107e5383092982848105b6e394_31bf3856ad364e35_6.0.6000.20740_none_1ba814db547b83d5.manifest"
    11 Apr 2008 21:11:34 708 ..... "C:\Windows\winsxs\Manifests\x86_6679381e495f520a8ab0173b771c808f_31bf3856ad364e35_6.0.6000.20777_none_1d49952b6f4cd945.manifest"
    11 Apr 2008 21:14:28 748 ..... "C:\Windows\winsxs\Manifests\x86_6604c3c68ba8428897c3a2f95937f917_31bf3856ad364e35_6.0.6000.16646_none_189503c2506692f3.manifest"
    11 Apr 2008 21:14:40 721 ..... "C:\Windows\winsxs\Manifests\x86_68851f0739f6099a2f7e0249e5db7153_31bf3856ad364e35_6.0.6000.20782_none_a122573713b5dfa9.manifest"
    11 Apr 2008 21:15:04 714 ..... "C:\Windows\winsxs\Manifests\x86_69746c6ec5b59e667352f87491d36217_31bf3856ad364e35_6.0.6000.16646_none_487b99bd7473ad0c.manifest"
    11 Apr 2008 21:11:34 706 ..... "C:\Windows\winsxs\Manifests\x86_6c4ef2bd9d2938658ec3979b94ac4b6e_31bf3856ad364e35_6.0.6000.20777_none_5907555b4dac07d0.manifest"
    11 Apr 2008 21:14:48 714 ..... "C:\Windows\winsxs\Manifests\x86_6c766e209663c2b778951900f4d3ff28_31bf3856ad364e35_6.0.6000.16646_none_c51097838758b627.manifest"
    11 Apr 2008 21:11:28 724 ..... "C:\Windows\winsxs\Manifests\x86_6faa1572591bc99b1e85fc8993a0fc14_31bf3856ad364e35_6.0.6000.16643_none_198f23e8640b99e8.manifest"
    11 Apr 2008 21:14:52 963 ..... "C:\Windows\winsxs\Manifests\x86_6f0c6cd6601b03d8a9b5383d8f83ab31_31bf3856ad364e35_6.0.6000.16609_none_7a5174740889c8c2.manifest"
    11 Apr 2008 21:15:14 963 ..... "C:\Windows\winsxs\Manifests\x86_73f7c651b8f612e05f50d7a169b78df1_31bf3856ad364e35_6.0.6000.16609_none_d40e7d8dcfa21dd7.manifest"
    11 Apr 2008 21:15:06 963 ..... "C:\Windows\winsxs\Manifests\x86_7a13a9cd2d1f622c16a2ee94677e14b6_31bf3856ad364e35_6.0.6000.20734_none_d5e05719d320b1fb.manifest"
    11 Apr 2008 21:13:40 693 ..... "C:\Windows\winsxs\Manifests\x86_803c5217e659d2f25d709d9a1bbddb72_31bf3856ad364e35_6.0.6000.16643_none_8053c7e6b04d0a6c.manifest"
    11 Apr 2008 21:14:34 963 ..... "C:\Windows\winsxs\Manifests\x86_855653ce2b4d9181de3b35f06da1585e_31bf3856ad364e35_6.0.6000.16609_none_6757e70f71bd6595.manifest"
    11 Apr 2008 21:14:36 714 ..... "C:\Windows\winsxs\Manifests\x86_860093994dd6b4ea714e7a55a9d7c933_31bf3856ad364e35_6.0.6000.20782_none_620f767378f77664.manifest"
    11 Apr 2008 21:14:42 963 ..... "C:\Windows\winsxs\Manifests\x86_8654064be7088c75c4a785217f0379d4_31bf3856ad364e35_6.0.6000.16609_none_707031bd98b4b15c.manifest"
    11 Apr 2008 21:11:32 699 ..... "C:\Windows\winsxs\Manifests\x86_8992ab28c787754dfd845e280daa9f7a_31bf3856ad364e35_6.0.6000.16643_none_ae4cdec7448f4eba.manifest"
    11 Apr 2008 21:15:00 963 ..... "C:\Windows\winsxs\Manifests\x86_8ac2a3d6d42d1e427952f63426f3b5da_31bf3856ad364e35_6.0.6000.16609_none_ed23016788e3b1a6.manifest"
    11 Apr 2008 21:14:34 728 ..... "C:\Windows\winsxs\Manifests\x86_8b31ba0356439409b4cd1ab1f2cb6e9f_31bf3856ad364e35_6.0.6000.20782_none_5b73dc3bc6d954ed.manifest"
    11 Apr 2008 21:14:46 963 ..... "C:\Windows\winsxs\Manifests\x86_8b4f34d0ac9220a964bfa6221430cad9_31bf3856ad364e35_6.0.6000.16609_none_216b1fa6b85486cb.manifest"
    11 Apr 2008 21:15:04 963 ..... "C:\Windows\winsxs\Manifests\x86_8bdb6852ee6279bf9f3c0b7793504c80_31bf3856ad364e35_6.0.6000.16609_none_72a162da96e473d1.manifest"
    11 Apr 2008 21:11:30 711 ..... "C:\Windows\winsxs\Manifests\x86_8d5ce8f5d1b4df0c15abf8345226f6fa_31bf3856ad364e35_6.0.6000.20777_none_3ca4148a9f684cd2.manifest"
    11 Apr 2008 21:14:50 714 ..... "C:\Windows\winsxs\Manifests\x86_8e0b07c6f4746c08226c00b43d97b929_31bf3856ad364e35_6.0.6000.20782_none_21db9986ccef6ca3.manifest"
    11 Apr 2008 21:11:32 702 ..... "C:\Windows\winsxs\Manifests\x86_8facab4de2581792bc2a9a31dfae633e_31bf3856ad364e35_6.0.6000.16643_none_b28c761df9e17ce2.manifest"
    11 Apr 2008 21:15:16 714 ..... "C:\Windows\winsxs\Manifests\x86_9670d9ee6f03545693a9b4ded3fc60b9_31bf3856ad364e35_6.0.6000.20782_none_c60537bcf124e8e4.manifest"
    11 Apr 2008 21:14:28 748 ..... "C:\Windows\winsxs\Manifests\x86_99a6a86c4c54b4b4beebfe03f3d417c5_31bf3856ad364e35_6.0.6000.20782_none_87c4e24f6e0f3c94.manifest"
    11 Apr 2008 21:14:56 963 ..... "C:\Windows\winsxs\Manifests\x86_9a56505b5c82b7de1564837e7a0471ea_31bf3856ad364e35_6.0.6000.16609_none_8d9fb493f6af9875.manifest"
    11 Apr 2008 21:11:26 724 ..... "C:\Windows\winsxs\Manifests\x86_9c4136b06148c14342488289f07a1998_31bf3856ad364e35_6.0.6001.18023_no