01net    Web


Actuellement en ligne : 1183 Utilisateurs dont 83 dans Sécurité, virus et assimilés >S'inscrire      >S'identifier      >Recherche      >Aide  
modéré par A.Ouloube, naheulbeuk, Mérillym, bibou0007, Malekal_morte, IL-MAFIOSO  
01net > Forum de 01net > Sécurité, virus et assimilés > Trojan et spywares
> [résolu] Virtumonde
Passionné(e) d'internet, de logiciels, de forums ? 01net recrute...
Auteur
Message
 
<     1       >
jorjxmackie
  
   
      ?   @     Posté le 16/05/2008 09:27:20  
Voter pour ce message
Bonjour,
cela fait deux trois jours que j'essais de suprimer virtumonde de mon pc.
spybot S&D le trouve l'efface et il est toujours là
vundo fix, rien
virtumondedobegone, rien

je suis sous XP SP3, antivirus : nod 32

combo fix en mode sans echec me donne ceci:
EDITION MODERATEUR : Règle du forum à respecter :

Pas de rapport avant qu'il n'en soit demandé un ! :o

Veuillez lire l'article suivant :
http://forum.telecharger.01net.com/telecharger/securite_virus_et_assimiles/a_(...)

Merci d'en prendre connaissance.

-->Message édité par jorjxmackie le 16/05/2008 22:35:35<--
naheulbeuk
  
  :-)
      ?   ^   @     Posté le 16/05/2008 09:28:59  
Voter pour ce message
bonjour,

Télécharge HijackThis

Guide d'utilisation : http://mickael.barroux.free.fr/securite/hijackthis.php

Clique alors sur "Do a system scan and save a logfile"
Le scan se fait très rapidement, puis un bloc-note apparaît
(le "logfile")
Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
le texte est alors séléctionné, retourne dans "Edition" toujours
en laissant le texte séléctionné, et clique sur copier.
Colle le contenu ici dans ta prochaine réponse !

;)
-------
Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
Et son forum : http://www.site-naheulbeuk.com/forum/
jorjxmackie
  
   
      ?   @     Posté le 16/05/2008 09:31:30  
Voter pour ce message
Merci de me repondre si vite donc voici mon rapport hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:22:57, on 16/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Program Files\BIBLauncher.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WinZip\WZQKPICK.EXE
D:\Program Files\docs\Wrapper.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
D:\Program Files\docs\jre\bin\java.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\sevyves\Bureau\Scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: {8b4c40b2-53a0-26bb-2614-7fef3e5d6342} - {2436d5e3-fef7-4162-bb62-0a352b04c4b8} - C:\WINDOWS\system32\wcegwvjn.dll
O2 - BHO: (no name) - {3ad90b32-b6f4-4fe2-a0bb-2033d27e0986} - (no file)
O2 - BHO: (no name) - {4D99251A-2555-4AA0-9D24-63FCFCAF3835} - C:\WINDOWS\system32\jkkIYroP.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {555A4205-9756-446F-9012-5275EA7ED334} - C:\WINDOWS\system32\geBuUooP.dll (file missing)
O2 - BHO: (no name) - {6C0423B0-A242-4E5D-B829-6EA6A4C05942} - C:\WINDOWS\system32\urqQHXrO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {8AEBB600-6187-40EB-9ABE-526AC3F6734F} - C:\WINDOWS\system32\khfFYOFx.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {92D248B5-BF20-4C5B-9F6D-B87C7D3D6A07} - C:\WINDOWS\system32\geBspmjk.dll (file missing)
O2 - BHO: (no name) - {9AEB5D79-7862-4A07-8481-40B0A6FE59D4} - (no file)
O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [609fd76f] rundll32.exe "C:\WINDOWS\system32\xehyaegu.dll",b
O4 - HKLM\..\Run: [BM63ace4f3] Rundll32.exe "C:\WINDOWS\system32\gltcclbq.dll",s
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BIBLauncher] D:\Program Files\BIBLauncher.exe
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\Winsos\WINSOS.EXE" MINI
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://D:\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/m(...)
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetecti(...)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Alias Documentation Server (aliasdocserver) - Unknown owner - D:\Program Files\docs\Wrapper.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 8551 bytes
naheulbeuk
  
  :-)
      ?   ^   @     Posté le 16/05/2008 10:51:51  
Voter pour ce message
Télécharge ComboFix (créé par sUBs) sur ton Bureau

Démarre en mode sans échec : http://forum.telecharger.01net.com/telecharger/virus_et_assimiles/failles_de_(...)


  • Double clique combofix.exe.
  • Tape sur la touche Y (Yes) pour démarrer le scan.
  • ComboFix redémarrera ton PC
  • Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse,et nouveau rapport hijackthis

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    • jorjxmackie
      
       
          ?   @     Posté le 16/05/2008 12:07:10  
    Voter pour ce message
    bien voila c'est fait donc :

    pour combo fix


    ComboFix 08-05-12.1 - sevyves 2008-05-16 11:49:22.2 - NTFSx86 MINIMAL
    Endroit: C:\Documents and Settings\sevyves\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\ugeayhex.ini

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-04-16 to 2008-05-16 ))))))))))))))))))))))))))))))))))))
    .

    2008-05-15 21:19 . 2008-05-15 21:19 0 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
    2008-05-15 19:04 . 2008-05-15 19:08 <REP> d-------- C:\WINDOWS\BDOSCAN8
    2008-05-15 13:44 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
    2008-05-15 13:44 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
    2008-05-15 13:44 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
    2008-05-15 13:44 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
    2008-05-15 13:44 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
    2008-05-15 13:44 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
    2008-05-15 13:44 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
    2008-05-15 13:44 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
    2008-05-15 13:44 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
    2008-05-15 13:01 . 2008-05-15 13:01 <REP> d-------- C:\WINDOWS\system32\fr
    2008-05-15 13:01 . 2008-05-15 13:01 <REP> d-------- C:\WINDOWS\system32\bits
    2008-05-15 13:01 . 2008-05-15 13:01 <REP> d-------- C:\WINDOWS\l2schemas
    2008-05-15 12:58 . 2008-05-15 12:58 <REP> d-------- C:\WINDOWS\ServicePackFiles
    2008-05-15 12:50 . 2008-05-15 12:50 <REP> d-------- C:\WINDOWS\EHome
    2008-05-15 12:34 . 2008-04-14 04:33 4,274,816 --------- C:\WINDOWS\system32\nv4_disp.dll
    2008-05-15 12:33 . 2004-08-03 22:41 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
    2008-05-15 12:32 . 2008-04-14 04:33 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll
    2008-05-15 11:28 . 2008-05-15 11:28 <REP> d-------- C:\VundoFix Backups
    2008-05-15 10:41 . 2008-05-15 10:41 134,656 --a------ C:\WINDOWS\system32\wcegwvjn.dll
    2008-05-15 10:38 . 2008-05-15 10:38 115,200 --a------ C:\WINDOWS\system32\xehyaegu.dll
    2008-05-15 10:32 . 2008-05-15 10:32 125,440 --a------ C:\WINDOWS\system32\gltcclbq.dll
    2008-05-15 09:56 . 2004-08-05 14:00 1,086,058 -ra------ C:\WINDOWS\SET30.tmp
    2008-05-15 09:56 . 2004-08-05 14:00 1,014,836 -ra------ C:\WINDOWS\SET2D.tmp
    2008-05-15 09:56 . 2004-08-05 14:00 14,043 -ra------ C:\WINDOWS\SET3C.tmp
    2008-05-15 09:35 . 2004-08-05 14:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
    2008-05-15 09:33 . 2008-05-15 10:15 749 -rah----- C:\WINDOWS\WindowsShell.Manifest
    2008-05-15 09:33 . 2008-05-15 10:15 749 -rah----- C:\WINDOWS\system32\wuaucpl.cpl.manifest
    2008-05-15 09:33 . 2008-05-15 10:15 749 -rah----- C:\WINDOWS\system32\sapi.cpl.manifest
    2008-05-15 09:33 . 2008-05-15 10:15 749 -rah----- C:\WINDOWS\system32\ncpa.cpl.manifest
    2008-05-15 09:33 . 2008-05-15 10:16 488 -rah----- C:\WINDOWS\system32\logonui.exe.manifest
    2008-05-15 09:16 . 2004-08-05 14:00 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
    2008-05-15 09:16 . 2004-08-05 14:00 13,312 --a------ C:\WINDOWS\system32\irclass.dll
    2008-05-15 09:15 . 2004-08-05 14:00 1,086,058 -ra------ C:\WINDOWS\SETA7.tmp
    2008-05-15 09:15 . 2004-08-05 14:00 1,014,836 --a--c--- C:\WINDOWS\system32\dllcache\SP2.CAT
    2008-05-15 09:15 . 2004-08-05 14:00 1,014,836 -ra------ C:\WINDOWS\SETA4.tmp
    2008-05-15 09:15 . 2004-08-05 14:00 809,394 --a--c--- C:\WINDOWS\system32\dllcache\NT5IIS.CAT
    2008-05-15 09:15 . 2004-08-05 14:00 399,670 --a--c--- C:\WINDOWS\system32\dllcache\MAPIMIG.CAT
    2008-05-15 09:15 . 2004-08-05 14:00 37,509 --a--c--- C:\WINDOWS\system32\dllcache\MW770.CAT
    2008-05-15 09:15 . 2004-08-05 14:00 14,043 -ra------ C:\WINDOWS\SETB3.tmp
    2008-05-15 09:15 . 2004-08-05 14:00 13,497 --a--c--- C:\WINDOWS\system32\dllcache\HPCRDP.CAT
    2008-05-15 09:15 . 2004-08-05 14:00 8,599 --a--c--- C:\WINDOWS\system32\dllcache\IASNT4.CAT
    2008-05-15 09:15 . 2001-12-04 18:17 7,046 --a--c--- C:\WINDOWS\system32\dllcache\OEMBIOS.CAT
    2008-05-15 00:14 . 2008-05-15 00:14 114,688 --------- C:\WINDOWS\system32\qycvjugf.dll
    2008-05-15 00:11 . 2008-05-15 00:11 133,120 --a------ C:\WINDOWS\system32\uxxypjjo.dll
    2008-05-15 00:05 . 2008-05-15 00:05 126,464 --a------ C:\WINDOWS\system32\etaymxen.dll
    2008-05-14 19:07 . 2008-05-14 19:07 115,224 --a------ C:\img2-001.raw
    2008-05-14 19:07 . 2008-04-13 20:46 19,200 --a------ C:\WINDOWS\system32\drivers\wstcodec.sys
    2008-05-14 19:07 . 2008-04-13 20:39 5,504 --a------ C:\WINDOWS\system32\drivers\mstee.sys
    2008-05-14 19:06 . 2008-04-14 04:34 92,160 --a------ C:\WINDOWS\system32\kswdmcap.ax
    2008-05-14 19:06 . 2008-04-13 20:46 85,248 --a------ C:\WINDOWS\system32\drivers\nabtsfec.sys
    2008-05-14 19:06 . 2008-04-14 04:34 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax
    2008-05-14 19:06 . 2008-04-14 04:33 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll
    2008-05-14 19:06 . 2008-04-14 04:34 28,672 --a------ C:\WINDOWS\system32\vidcap.ax
    2008-05-14 19:06 . 2008-04-13 20:46 17,024 --a------ C:\WINDOWS\system32\drivers\ccdecode.sys
    2008-05-14 19:05 . 2008-04-14 04:34 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax
    2008-05-14 19:03 . 2008-05-14 19:03 <REP> d-------- C:\Program Files\Fichiers communs\snpstd3
    2008-05-14 13:06 . 2008-05-14 13:06 58,368 --a------ C:\WINDOWS\system32\iifgGWon.dll
    2008-05-14 13:05 . 2008-05-14 13:05 58,368 --a------ C:\WINDOWS\system32\xxyaBSIB.dll.vir
    2008-05-14 13:05 . 2008-05-14 13:05 58,368 --a------ C:\WINDOWS\system32\ssqRIBTJ.dll
    2008-05-14 12:59 . 2008-05-14 12:59 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\Nero
    2008-05-14 12:58 . 2008-05-15 21:37 69 --a------ C:\WINDOWS\NeroDigital.ini
    2008-05-14 12:56 . 2008-05-14 12:58 <REP> d-------- C:\Program Files\Nero
    2008-05-14 12:56 . 2008-05-14 12:56 <REP> d-------- C:\Program Files\Fichiers communs\Nero
    2008-05-14 12:56 . 2008-05-14 12:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nero
    2008-05-14 12:56 . 2006-03-17 11:45 1,757,184 --a------ C:\WINDOWS\system32\imagX7.dll
    2008-05-14 12:56 . 2006-03-17 11:45 802,816 --a------ C:\WINDOWS\system32\imagXRA7.dll
    2008-05-14 12:56 . 2006-03-17 11:45 497,296 --a------ C:\WINDOWS\system32\imagXpr7.dll
    2008-05-14 12:56 . 2006-03-17 14:49 368,640 --a------ C:\WINDOWS\system32\TwnLib4.dll
    2008-05-14 12:56 . 2006-03-17 11:45 258,048 --a------ C:\WINDOWS\system32\imagXR7.dll
    2008-05-13 23:32 . 2008-05-13 23:32 <REP> d-------- C:\flexlm
    2008-05-13 23:18 . 2008-05-13 23:18 <REP> d-------- C:\WINDOWS\system32\RNBOSENT
    2008-05-13 23:18 . 2008-05-13 23:18 <REP> d-------- C:\Documents and Settings\sevyves\WINDOWS
    2008-05-13 23:18 . 2001-06-21 21:39 73,728 --a------ C:\WINDOWS\system32\drivers\SENTINEL.SYS
    2008-05-13 23:18 . 2001-06-21 21:39 49,664 --a------ C:\WINDOWS\system32\SNTI386.DLL
    2008-05-13 23:18 . 2001-06-21 21:39 20,032 -ra------ C:\WINDOWS\system32\drivers\SNTNLUSB.SYS
    2008-05-13 23:18 . 2001-06-21 21:39 18,432 --a------ C:\WINDOWS\system32\RNBOVDD.DLL
    2008-05-13 23:18 . 2001-06-21 21:39 9,949 --a------ C:\WINDOWS\system32\SENTINEL.HLP
    2008-05-13 23:18 . 2008-04-27 17:26 3,072 --a------ C:\WINDOWS\system32\config.hsp
    2008-05-13 23:16 . 2008-05-13 23:16 <REP> d--h----- C:\Program Files\Zero G Registry
    2008-05-13 23:16 . 2008-05-13 23:17 <REP> d-------- C:\Program Files\Fichiers communs\AliasWavefront Shared
    2008-05-13 23:16 . 2008-05-13 23:16 <REP> d--h----- C:\Documents and Settings\sevyves\InstallAnywhere
    2008-05-13 21:54 . 2000-10-19 14:05 25,088 --a------ C:\WINDOWS\system32\msxml3a.dll
    2008-05-12 13:33 . 2008-05-14 13:48 <REP> d-------- C:\WINDOWS\SxsCaPendDel
    2008-05-12 09:17 . 2008-05-12 09:17 244 --ah----- C:\sqmnoopt03.sqm
    2008-05-12 09:17 . 2008-05-12 09:17 232 --ah----- C:\sqmdata03.sqm
    2008-05-12 01:05 . 2008-05-12 01:05 244 --ah----- C:\sqmnoopt02.sqm
    2008-05-12 01:05 . 2008-05-12 01:05 232 --ah----- C:\sqmdata02.sqm
    2008-05-11 20:18 . 2008-05-11 20:18 244 --ah----- C:\sqmnoopt01.sqm
    2008-05-11 20:18 . 2008-05-11 20:18 232 --ah----- C:\sqmdata01.sqm
    2008-05-09 18:03 . 2008-05-09 18:03 <REP> d-------- C:\Program Files\Fichiers communs\Control Panels
    2008-05-08 14:42 . 2008-05-08 14:45 <REP> d-------- C:\Program Files\TVRemi
    2008-05-05 21:55 . 2008-05-05 21:55 28,150 --a------ C:\Documents and Settings\sevyves\Application Data\Valeurs séparées par une virgule (Windows).ADR
    2008-05-02 10:30 . 2008-05-15 14:10 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TrackMania
    2008-05-01 19:26 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
    2008-05-01 14:52 . 2008-05-01 14:52 <REP> d-------- C:\Program Files\Webteh
    2008-05-01 14:52 . 2008-05-01 14:53 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\BSplayer PRO
    2008-05-01 13:17 . 2008-04-13 20:45 60,032 --a------ C:\WINDOWS\system32\drivers\usbaudio.sys
    2008-04-30 19:20 . 2008-04-30 19:20 45 --ah----- C:\WINDOWS\dsez0621.dat
    2008-04-30 18:58 . 2008-05-15 22:27 <REP> d-------- C:\Program Files\Mozilla Thunderbird
    2008-04-30 18:58 . 2008-04-30 18:59 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\Thunderbird
    2008-04-30 18:47 . 2008-04-13 20:45 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
    2008-04-30 18:47 . 2006-08-01 15:02 49,152 -ra------ C:\WINDOWS\system32\ChCfg.exe
    2008-04-30 18:47 . 2008-04-13 20:45 6,272 --a------ C:\WINDOWS\system32\drivers\splitter.sys
    2008-04-30 18:46 . 2008-04-30 18:46 <REP> d-------- C:\Program Files\Realtek Sound Manager
    2008-04-30 18:46 . 2008-04-30 18:46 <REP> d-------- C:\Program Files\Realtek AC97
    2008-04-30 18:46 . 2008-04-30 18:46 <REP> d-------- C:\Program Files\AvRack
    2008-04-30 18:37 . 2008-04-30 18:37 <REP> d-------- C:\WINDOWS\OPTIONS
    2008-04-30 18:37 . 2008-04-30 18:37 <REP> d-------- C:\Program Files\Realtek
    2008-04-30 18:37 . 2008-04-30 18:37 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\InstallShield
    2008-04-30 18:37 . 2008-02-25 20:54 105,088 --a------ C:\WINDOWS\system32\drivers\Rtnicxp.sys
    2008-04-30 18:17 . 2008-04-30 18:17 <REP> d-------- C:\Program Files\ma-config.com
    2008-04-30 18:17 . 2008-04-30 18:17 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\ma-config.com
    2008-04-29 23:52 . 2004-08-04 00:54 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
    2008-04-29 23:52 . 2001-08-23 17:47 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
    2008-04-29 23:47 . 2008-04-29 23:47 <REP> d--h----- C:\Documents and Settings\All Users\Application Data\CanonBJ
    2008-04-29 23:47 . 2005-05-06 21:00 140,288 --a------ C:\WINDOWS\system32\CNMLM7I.DLL
    2008-04-29 23:47 . 2005-05-06 21:00 8,704 --a------ C:\WINDOWS\system32\CNMVS7I.DLL
    2008-04-29 23:45 . 2008-04-29 23:45 <REP> d--h----- C:\WINDOWS\system32\CanonMP Uninstaller Information
    2008-04-29 23:45 . 2008-04-29 23:45 <REP> d--h----- C:\CanonMP
    2008-04-29 23:32 . 2008-04-29 23:32 <REP> d-------- C:\Program Files\Canon
    2008-04-29 21:09 . 2008-04-29 21:09 <REP> d-------- C:\Documents and Settings\sevyves\Application Data\ATI
    2008-04-29 21:09 . 2008-04-29 21:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ATI
    2008-04-29 21:07 . 2008-04-29 21:07 0 --a------ C:\WINDOWS\ativpsrm.bin

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-05-16 09:40 --------- d-----w C:\Documents and Settings\sevyves\Application Data\uTorrent
    2008-05-14 17:03 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-05-13 21:11 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
    2008-04-29 19:00 --------- d-----w C:\Program Files\ATI Technologies
    2008-04-27 17:04 --------- d-----w C:\Documents and Settings\sevyves\Application Data\vlc
    2008-04-27 17:00 --------- d-----w C:\Program Files\VideoLAN
    2008-04-27 15:56 --------- d-----w C:\Program Files\AMD
    2008-04-27 15:51 --------- d-----w C:\Program Files\uTorrent
    2008-04-27 15:37 --------- d-----w C:\Program Files\Windows Journal Viewer
    2008-04-27 15:37 --------- d-----w C:\Program Files\HighMAT CD Writing Wizard
    2008-04-27 15:36 --------- d-----w C:\Program Files\Windows Media Connect
    2008-04-27 15:26 --------- d-----w C:\Program Files\microsoft frontpage
    2008-04-27 15:24 --------- d-----w C:\Program Files\Services en ligne
    2008-04-14 02:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin
    2008-04-14 02:37 332,800 ----a-w C:\WINDOWS\system32\netsetup.exe
    2008-04-14 02:33 98,816 ----a-w C:\WINDOWS\system32\psbase.dll
    2008-04-14 02:32 764,416 ----a-w C:\WINDOWS\system32\winntbbu.dll
    2008-04-14 02:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll
    2008-04-14 02:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll
    2008-04-14 02:10 73,600 ----a-w C:\WINDOWS\system32\drivers\sr.sys
    2008-04-14 02:09 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys
    2008-04-14 02:09 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys
    2008-04-14 02:09 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys
    2008-04-14 02:09 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys
    2008-04-14 02:08 2,191,104 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
    2008-04-14 02:07 2,067,968 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
    2008-04-14 02:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll
    2008-04-14 02:05 800,256 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys
    2008-04-14 02:05 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys
    2008-04-14 02:05 154,496 ----a-w C:\WINDOWS\system32\drivers\dmio.sys
    2008-04-14 02:04 93,184 ------w C:\WINDOWS\system32\msxml6r.dll
    2008-04-14 02:04 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys
    2008-04-14 02:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll
    2008-04-14 02:03 40,576 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys
    2008-04-14 02:02 50,688 ----a-w C:\WINDOWS\system32\inetres.dll
    2008-04-14 02:02 40,960 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys
    2008-04-14 02:00 66,048 ----a-w C:\WINDOWS\system32\drivers\serial.sys
    2008-04-14 02:00 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dll
    2008-04-14 02:00 54,144 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys
    2008-04-14 01:59 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys
    2008-04-14 01:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll
    2008-04-14 01:58 273,664 ------w C:\WINDOWS\system32\drivers\bthport.sys
    2008-04-14 01:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys
    2008-04-14 01:58 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.dll
    2008-04-14 01:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll
    2008-04-14 01:57 58,752 ----a-w C:\WINDOWS\system32\drivers\redbook.sys
    2008-04-14 01:57 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys
    2008-04-14 01:56 53,376 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys
    2008-04-14 01:55 40,064 ----a-w C:\WINDOWS\system32\drivers\processr.sys
    2008-04-14 01:54 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys
    2008-04-14 01:54 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys
    2008-04-14 01:54 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll
    2008-04-14 01:53 30,336 ----a-w C:\WINDOWS\system32\drivers\modem.sys
    2008-04-14 01:53 23,680 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys
    2008-04-14 01:52 188,672 ----a-w C:\WINDOWS\system32\drivers\acpi.sys
    2008-04-13 19:28 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys
    2008-04-13 19:21 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys
    2008-04-13 19:20 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys
    2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    2008-04-13 19:20 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys
    2008-04-13 19:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys
    2008-04-13 19:19 51,328 ----a-w C:\WINDOWS\system32\drivers\rasl2tp.sys
    2008-04-13 19:19 48,384 ----a-w C:\WINDOWS\system32\drivers\raspptp.sys
    2008-04-13 19:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys
    2008-04-13 19:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    2008-04-13 19:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys
    2008-04-13 19:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys
    2008-04-13 19:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys
    2008-04-13 19:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys
    2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
    2008-04-13 19:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys
    2008-04-13 19:15 574,976 ----a-w C:\WINDOWS\system32\drivers\ntfs.sys
    2008-04-13 19:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys
    2008-04-13 19:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys
    2008-04-13 19:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys
    2008-04-13 19:00 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    2008-04-13 19:00 19,072 ----a-w C:\WINDOWS\system32\drivers\tdi.sys
    2008-04-13 18:57 41,472 ----a-w C:\WINDOWS\system32\drivers\raspppoe.sys
    2008-04-13 18:57 40,576 ----a-w C:\WINDOWS\system32\drivers\ndproxy.sys
    2008-04-13 18:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys
    2008-04-13 18:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys
    2008-04-13 18:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys
    2008-04-13 18:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys
    2008-04-13 18:57 10,112 ----a-w C:\WINDOWS\system32\drivers\ndistapi.sys
    2008-04-13 18:56 88,320 ----a-w C:\WINDOWS\system32\drivers\nwlnkipx.sys
    2008-04-13 18:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys
    2008-04-13 18:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys
    2008-04-13 18:56 34,688 ----a-w C:\WINDOWS\system32\drivers\netbios.sys
    2008-04-13 18:56 30,592 ----a-w C:\WINDOWS\system32\drivers\rndismp.sys
    2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
    2008-04-13 18:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys
    2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
    2008-04-13 18:56 12,288 ----a-w C:\WINDOWS\system32\drivers\tunmp.sys
    2008-04-13 18:55 202,624 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
    2008-04-13 18:55 14,592 ----a-w C:\WINDOWS\system32\drivers\ndisuio.sys
    2008-04-13 18:54 11,264 ----a-w C:\WINDOWS\system32\drivers\irenum.sys
    2008-04-13 18:53 71,552 ----a-w C:\WINDOWS\system32\drivers\bridge.sys
    2008-04-13 18:53 40,320 ----a-w C:\WINDOWS\system32\drivers\nmnt.sys
    2008-04-13 18:53 36,608 ----a-w C:\WINDOWS\system32\drivers\ip6fw.sys
    2008-04-13 18:53 264,832 ----a-w C:\WINDOWS\system32\drivers\http.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-05-15_12.12.08.65 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-04-14 02:33:18 39,424 ------w C:\WINDOWS\AppPatch\acadproc.dll
    - 2004-08-05 12:00:00 1,852,416 ----a-w C:\WINDOWS\AppPatch\AcGenral.dll
    + 2008-04-14 02:33:18 1,852,928 ----a-w C:\WINDOWS\AppPatch\acgenral.dll
    - 2004-08-05 12:00:00 450,048 ----a-w C:\WINDOWS\AppPatch\AcLayers.dll
    + 2008-04-14 02:33:18 451,072 ----a-w C:\WINDOWS\AppPatch\aclayers.dll
    - 2004-08-05 12:00:00 137,728 ----a-w C:\WINDOWS\AppPatch\AcLua.dll
    + 2008-04-14 02:33:18 141,312 ----a-w C:\WINDOWS\AppPatch\aclua.dll
    - 2004-08-05 12:00:00 244,736 ----a-w C:\WINDOWS\AppPatch\AcSpecfc.dll
    + 2008-04-14 02:33:18 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
    - 2004-08-05 12:00:00 116,224 ----a-w C:\WINDOWS\AppPatch\AcXtrnal.dll
    + 2008-04-14 02:33:18 116,224 ----a-w C:\WINDOWS\AppPatch\acxtrnal.dll
    + 2008-05-15 17:07:08 45,056 ----a-w C:\WINDOWS\BDOSCAN8\avxdisk.dll
    + 2008-05-15 17:07:08 10,240 ----a-w C:\WINDOWS\BDOSCAN8\avxs.dll
    + 2008-05-15 17:07:09 27,136 ----a-w C:\WINDOWS\BDOSCAN8\avxt.dll
    + 2008-05-15 17:07:10 181,760 ----a-w C:\WINDOWS\BDOSCAN8\bdcore.dll
    + 2006-05-24 23:21:00 118,784 ----a-w C:\WINDOWS\BDOSCAN8\bdupd.dll
    + 2006-05-24 23:21:14 53,248 ----a-w C:\WINDOWS\BDOSCAN8\ipsupd.dll
    + 2008-05-15 17:07:10 142,848 ----a-w C:\WINDOWS\BDOSCAN8\libfn.dll
    + 2008-05-15 17:07:09 86,016 ----a-w C:\WINDOWS\BDOSCAN8\librtvr.dll
    + 2006-05-24 23:22:06 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
    - 2008-05-15 10:03:55 2,048 --s-a-w C:\WINDOWS\bootstat.dat
    + 2008-05-16 09:43:20 2,048 --s-a-w C:\WINDOWS\bootstat.dat
    + 2006-05-24 23:21:00 118,784 ----a-w C:\WINDOWS\Downloaded Program Files\bdupd.dll
    + 2006-05-24 23:21:14 53,248 ----a-w C:\WINDOWS\Downloaded Program Files\ipsupd.dll
    - 2004-08-05 12:00:00 1,036,288 ----a-w C:\WINDOWS\explorer.exe
    + 2008-04-14 02:34:03 1,037,824 ----a-w C:\WINDOWS\explorer.exe
    - 2004-08-05 12:00:00 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
    + 2008-04-14 02:33:41 34,816 ----a-w C:\WINDOWS\Help\sniffpol.dll
    - 2004-08-05 12:00:00 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
    + 2008-04-14 02:33:46 33,280 ----a-w C:\WINDOWS\Help\sstub.dll
    - 2004-08-05 12:00:00 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
    + 2008-04-14 02:33:46 279,040 ----a-w C:\WINDOWS\Help\tshoot.dll
    - 2004-08-05 12:00:00 10,752 ----a-w C:\WINDOWS\hh.exe
    + 2008-04-14 02:34:06 10,752 ----a-w C:\WINDOWS\hh.exe
    - 2004-08-05 12:00:00 61,440 -c--a-w C:\WINDOWS\ie7\admparse.dll
    + 2008-04-14 02:33:18 61,440 -c----w C:\WINDOWS\ie7\admparse.dll
    - 2004-08-05 12:00:00 101,888 -c--a-w C:\WINDOWS\ie7\advpack.dll
    + 2008-04-14 02:33:18 101,888 -c----w C:\WINDOWS\ie7\advpack.dll
    - 2008-02-16 09:02:34 357,888 -c--a-w C:\WINDOWS\ie7\dxtmsft.dll
    + 2008-04-14 02:33:23 357,888 -c----w C:\WINDOWS\ie7\dxtmsft.dll
    - 2008-02-16 09:02:35 205,312 -c--a-w C:\WINDOWS\ie7\dxtrans.dll
    + 2008-04-14 02:33:23 205,312 -c----w C:\WINDOWS\ie7\dxtrans.dll
    - 2008-02-16 09:02:35 55,808 -c--a-w C:\WINDOWS\ie7\extmgr.dll
    + 2008-04-14 02:33:24 55,808 -c----w C:\WINDOWS\ie7\extmgr.dll
    - 2004-08-05 12:00:00 38,912 -c--a-w C:\WINDOWS\ie7\hmmapi.dll
    + 2008-04-14 02:33:26 38,912 -c----w C:\WINDOWS\ie7\hmmapi.dll
    - 2004-08-05 12:00:00 34,304 -c--a-w C:\WINDOWS\ie7\ie4uinit.exe
    + 2008-04-14 02:34:06 34,304 -c----w C:\WINDOWS\ie7\ie4uinit.exe
    - 2004-08-05 12:00:00 139,264 -c--a-w C:\WINDOWS\ie7\ieakeng.dll
    + 2008-04-14 02:33:26 143,360 -c----w C:\WINDOWS\ie7\ieakeng.dll
    - 2004-08-05 12:00:00 221,696 -c--a-w C:\WINDOWS\ie7\ieaksie.dll
    + 2008-04-14 02:33:26 221,184 -c----w C:\WINDOWS\ie7\ieaksie.dll
    - 2004-08-05 12:00:00 323,584 -c--a-w C:\WINDOWS\ie7\iedkcs32.dll
    + 2008-04-14 02:33:26 323,584 -c----w C:\WINDOWS\ie7\iedkcs32.dll
    - 2008-02-15 09:23:37 18,432 -c--a-w C:\WINDOWS\ie7\iedw.exe
    + 2008-04-14 02:34:06 18,432 -c----w C:\WINDOWS\ie7\iedw.exe
    - 2008-02-16 09:02:35 251,392 -c--a-w C:\WINDOWS\ie7\iepeers.dll
    + 2008-04-14 02:33:26 251,904 -c----w C:\WINDOWS\ie7\iepeers.dll
    - 2004-08-05 12:00:00 49,152 -c--a-w C:\WINDOWS\ie7\iernonce.dll
    + 2008-04-14 02:33:26 49,152 -c----w C:\WINDOWS\ie7\iernonce.dll
    - 2004-08-05 12:00:00 63,488 -c--a-w C:\WINDOWS\ie7\iesetup.dll
    + 2008-04-14 02:33:26 63,488 -c----w C:\WINDOWS\ie7\iesetup.dll
    - 2004-08-05 12:00:00 93,184 -c--a-w C:\WINDOWS\ie7\iexplore.exe
    + 2008-04-14 02:34:06 93,184 -c----w C:\WINDOWS\ie7\iexplore.exe
    - 2004-08-05 12:00:00 35,840 -c--a-w C:\WINDOWS\ie7\imgutil.dll
    + 2008-04-14 02:33:26 35,840 -c----w C:\WINDOWS\ie7\imgutil.dll
    - 2008-02-16 09:02:35 96,768 -c--a-w C:\WINDOWS\ie7\inseng.dll
    + 2008-04-14 02:33:27 96,768 -c----w C:\WINDOWS\ie7\inseng.dll
    - 2008-02-16 09:02:35 16,384 -c--a-w C:\WINDOWS\ie7\jsproxy.dll
    + 2008-04-14 02:33:27 15,872 -c----w C:\WINDOWS\ie7\jsproxy.dll
    - 2004-08-05 12:00:00 22,528 -c--a-w C:\WINDOWS\ie7\licmgr10.dll
    + 2008-04-14 02:33:28 22,528 -c----w C:\WINDOWS\ie7\licmgr10.dll
    - 2004-08-05 12:00:00 29,184 -c--a-w C:\WINDOWS\ie7\mshta.exe
    + 2008-04-14 02:34:12 29,184 -c----w C:\WINDOWS\ie7\mshta.exe
    - 2008-02-16 22:32:38 3,080,704 -c--a-w C:\WINDOWS\ie7\mshtml.dll
    + 2008-04-14 02:33:31 3,066,880 -c----w C:\WINDOWS\ie7\mshtml.dll
    - 2008-02-16 09:02:36 449,024 -c--a-w C:\WINDOWS\ie7\mshtmled.dll
    + 2008-04-14 02:33:31 449,024 -c----w C:\WINDOWS\ie7\mshtmled.dll
    - 2004-08-05 12:00:00 57,344 -c--a-w C:\WINDOWS\ie7\mshtmler.dll
    + 2008-04-14 01:56:24 57,344 -c----w C:\WINDOWS\ie7\mshtmler.dll
    - 2008-02-16 09:02:37 146,432 -c--a-w C:\WINDOWS\ie7\msrating.dll
    + 2008-04-14 02:33:32 146,432 -c----w C:\WINDOWS\ie7\msrating.dll
    - 2008-02-16 09:02:37 532,480 -c--a-w C:\WINDOWS\ie7\mstime.dll
    + 2008-04-14 02:33:33 532,480 -c----w C:\WINDOWS\ie7\mstime.dll
    - 2004-08-05 12:00:00 97,280 -c--a-w C:\WINDOWS\ie7\occache.dll
    + 2008-04-14 02:33:38 97,280 -c----w C:\WINDOWS\ie7\occache.dll
    - 2008-02-16 09:02:37 39,424 -c--a-w C:\WINDOWS\ie7\pngfilt.dll
    + 2008-04-14 02:33:38 39,424 -c----w C:\WINDOWS\ie7\pngfilt.dll
    - 2004-08-05 12:00:00 37,888 -c--a-w C:\WINDOWS\ie7\url.dll
    + 2008-04-14 02:33:48 37,888 -c----w C:\WINDOWS\ie7\url.dll
    - 2008-02-16 09:02:39 617,984 -c--a-w C:\WINDOWS\ie7\urlmon.dll
    + 2008-04-14 02:33:48 621,568 -c----w C:\WINDOWS\ie7\urlmon.dll
    - 2007-06-26 13:56:54 851,968 -c--a-w C:\WINDOWS\ie7\vgx.dll
    + 2008-04-14 02:33:48 851,968 -c----w C:\WINDOWS\ie7\vgx.dll
    - 2004-08-05 12:00:00 281,600 -c--a-w C:\WINDOWS\ie7\webcheck.dll
    + 2008-04-14 02:33:48 281,600 -c----w C:\WINDOWS\ie7\webcheck.dll
    - 2008-02-16 09:02:39 663,552 -c--a-w C:\WINDOWS\ie7\wininet.dll
    + 2008-04-14 02:33:48 670,208 -c----w C:\WINDOWS\ie7\wininet.dll
    - 2007-12-07 02:08:32 124,928 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
    + 2007-08-13 16:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
    + 2007-08-13 16:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll.000
    - 2007-12-19 22:53:23 347,136 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-08-13 16:35:46 346,624 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-08-13 16:35:46 346,624 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll.000
    - 2007-12-07 02:08:32 214,528 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-08-13 16:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-08-13 16:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll.000
    - 2007-12-07 02:08:32 133,120 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-08-13 16:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-08-13 16:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll.000
    - 2007-12-06 11:02:31 70,656 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-08-13 16:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-08-13 16:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe.000
    - 2007-12-07 02:08:32 153,088 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-08-13 16:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-08-13 16:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll.000
    - 2007-12-07 02:08:32 230,400 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-08-13 16:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-08-13 16:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll.000
    - 2007-12-06 04:59:51 161,792 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-08-13 15:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-08-13 15:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll.000
    - 2007-12-07 02:08:32 384,512 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-08-13 16:39:50 382,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-08-13 16:39:50 382,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll.000
    - 2007-12-07 02:08:33 44,544 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-08-13 16:39:10 43,008 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-08-13 16:39:10 43,008 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll.000
    - 2007-12-06 11:00:58 13,824 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-08-13 16:39:10 13,312 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
    - 2007-12-06 11:03:16 625,664 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-08-13 16:43:56 622,080 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-08-13 16:43:56 622,080 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe.000
    - 2007-12-07 02:08:33 27,648 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-08-13 16:54:10 27,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-08-13 16:54:10 27,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll.000
    - 2007-12-08 08:38:36 3,592,192 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-08-13 16:54:12 3,578,368 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-08-13 16:54:12 3,578,368 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll.000
    - 2007-12-07 02:08:34 478,208 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-08-13 16:54:10 475,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-08-13 16:54:10 475,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll.000
    - 2007-12-07 02:08:34 193,024 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
    + 2007-08-13 16:44:26 192,000 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
    + 2007-08-13 16:44:26 192,000 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll.000
    - 2007-12-07 02:08:34 671,232 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
    + 2007-08-13 16:54:10 670,720 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
    + 2007-08-13 16:54:10 670,720 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll.000
    - 2007-12-07 02:08:34 102,912 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
    + 2007-08-13 16:44:06 101,376 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
    + 2007-08-13 16:44:06 101,376 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll.000
    - 2008-01-11 05:36:55 44,544 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
    + 2007-08-13 16:36:12 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
    + 2007-08-13 16:36:12 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll.000
    + 2007-03-06 01:34:31 22,752 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spcustom.dll
    + 2007-03-06 01:34:33 15,072 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:34:56 727,776 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\update.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\updspapi.dll
    - 2007-12-07 02:08:34 105,984 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
    + 2007-08-13 16:44:30 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
    + 2007-08-13 16:44:30 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll.000
    - 2007-12-07 02:08:34 1,159,680 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-08-13 16:54:10 1,162,240 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-08-13 16:54:10 1,162,240 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll.000
    - 2007-12-07 02:08:34 233,472 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-08-13 16:54:10 231,424 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-08-13 16:54:10 231,424 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll.000
    - 2007-12-07 02:08:34 824,832 -c--a-w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
    + 2007-08-13 16:54:10 818,688 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
    + 2007-08-13 16:54:10 818,688 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll.000
    - 2004-08-05 12:00:00 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
    + 2008-04-14 02:33:30 220,160 ----a-w C:\WINDOWS\ime\mscandui.dll
    - 2004-08-05 12:00:00 130,048 ----a-w C:\WINDOWS\ime\SOFTKBD.DLL
    + 2008-04-14 02:33:41 130,048 ----a-w C:\WINDOWS\ime\softkbd.dll
    - 2004-08-05 12:00:00 62,976 ----a-w C:\WINDOWS\ime\SPGRMR.dll
    + 2008-04-13 16:43:18 62,976 ----a-w C:\WINDOWS\ime\spgrmr.dll
    - 2004-08-05 12:00:00 272,384 ----a-w C:\WINDOWS\ime\SPTIP.dll
    + 2008-04-14 02:33:46 272,384 ----a-w C:\WINDOWS\ime\sptip.dll
    - 2008-04-27 16:35:37 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
    + 2008-05-15 11:13:30 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
    + 2008-01-18 15:13:09 2,247 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscdsbl.bat
    + 2007-12-12 10:33:51 18,917 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscinst.vbs
    + 2007-10-30 10:06:46 13,801 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscuinst.vbs
    + 2008-04-14 02:33:06 25,600 ------w C:\WINDOWS\Installer\tsclientmsitrans\tscupdc.dll
    - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
    + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentanm.dll
    - 2004-08-05 12:00:00 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
    + 2008-04-14 02:33:18 214,016 ----a-w C:\WINDOWS\msagent\agentctl.dll
    - 2004-08-05 12:00:00 41,984 ----a-w C:\WINDOWS\msagent\agentdp2.dll
    + 2008-04-14 02:33:18 42,496 ----a-w C:\WINDOWS\msagent\agentdp2.dll
    - 2004-08-05 12:00:00 58,880 ----a-w C:\WINDOWS\msagent\agentdpv.dll
    + 2008-04-14 02:33:18 57,344 ----a-w C:\WINDOWS\msagent\agentdpv.dll
    - 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
    + 2008-04-14 02:33:18 49,152 ----a-w C:\WINDOWS\msagent\agentmpx.dll
    - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
    + 2008-04-14 02:33:18 24,064 ----a-w C:\WINDOWS\msagent\agentpsh.dll
    - 2004-08-05 12:00:00 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
    + 2008-04-14 02:33:18 44,032 ----a-w C:\WINDOWS\msagent\agentsr.dll
    - 2004-08-05 12:00:00 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
    + 2008-04-14 02:33:53 256,512 ----a-w C:\WINDOWS\msagent\agentsvr.exe
    - 2004-08-05 12:00:00 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
    + 2008-04-14 02:33:19 24,064 ----a-w C:\WINDOWS\msagent\agtintl.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0405.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
    + 2007-04-02 18:25:59 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0406.dll
    - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
    + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt0407.dll
    - 2004-08-05 12:00:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
    + 2007-04-02 18:26:00 22,016 ----a-w C:\WINDOWS\msagent\intl\agt0408.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
    + 2008-04-13 17:32:28 19,968 ----a-w C:\WINDOWS\msagent\intl\agt0409.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
    + 2007-04-02 18:26:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt040b.dll
    - 2004-08-05 12:00:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
    + 2007-04-02 18:26:00 21,504 ----a-w C:\WINDOWS\msagent\intl\agt040c.dll
    - 2004-08-05 12:00:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
    + 2007-04-02 18:26:00 19,968 ----a-w C:\WINDOWS\msagent\intl\agt040e.dll
    - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
    + 2007-04-02 18:26:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0410.dll
    - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
    + 2007-04-02 18:26:01 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0413.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0414.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
    + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0415.dll
    - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
    + 2007-04-02 18:26:01 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0416.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt0419.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041d.dll
    - 2004-08-05 12:00:00 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
    + 2007-04-02 18:26:01 19,456 ----a-w C:\WINDOWS\msagent\intl\agt041f.dll
    - 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
    + 2007-04-02 18:26:02 20,992 ----a-w C:\WINDOWS\msagent\intl\agt0816.dll
    - 2004-08-05 12:00:00 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
    + 2007-04-02 18:26:02 20,480 ----a-w C:\WINDOWS\msagent\intl\agt0c0a.dll
    - 2004-08-05 12:00:00 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
    + 2008-04-14 02:33:32 39,936 ----a-w C:\WINDOWS\msagent\mslwvtts.dll
    - 2006-06-02 19:32:20 33,792 ----a-w C:\WINDOWS\network diagnostic\custsat.dll
    + 2008-04-14 02:33:22 33,792 ----a-w C:\WINDOWS\network diagnostic\custsat.dll
    - 2006-10-10 12:44:50 557,568 ----a-w C:\WINDOWS\network diagnostic\xpnetdiag.exe
    + 2008-04-13 18:53:32 558,080 ----a-w C:\WINDOWS\network diagnostic\xpnetdiag.exe
    - 2004-08-05 12:00:00 70,656 ----a-w C:\WINDOWS\notepad.exe
    + 2008-04-14 02:34:15 70,656 ----a-w C:\WINDOWS\notepad.exe
    - 2004-08-05 12:00:00 768,512 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
    + 2008-04-14 02:34:06 769,024 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe
    - 2004-08-05 12:00:00 743,936 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe
    + 2008-04-14 02:34:06 744,448 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe
    - 2004-08-05 12:00:00 18,944 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe
    + 2008-04-14 02:34:06 18,432 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\hscupd.exe
    - 2004-08-05 12:00:00 160,768 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
    + 2008-04-14 02:34:12 172,544 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
    - 2004-08-05 12:00:00 381,952 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
    + 2008-04-14 02:33:32 382,464 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
    - 2004-08-05 12:00:00 102,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
    + 2008-04-14 02:33:38 102,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
    - 2004-08-05 12:00:00 38,912 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
    + 2008-04-14 02:33:38 38,400 ----a-w C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
    - 2008-04-28 17:39:19 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
    + 2008-05-15 11:04:43 76,507 ----a-w C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
    - 2008-04-28 17:39:19 2,398 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
    + 2008-05-15 11:04:43 2,704 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
    - 2004-08-05 12:00:00 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe
    + 2008-04-14 02:34:26 151,040 ----a-w C:\WINDOWS\pchealth\UploadLB\Binaries\uploadm.exe
    - 2004-08-05 12:00:00 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
    + 2008-04-14 02:33:46 151,552 ----a-w C:\WINDOWS\PeerNet\sqldb20.dll
    - 2004-08-05 12:00:00 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
    + 2008-04-14 02:33:46 462,848 ----a-w C:\WINDOWS\PeerNet\sqlqp20.dll
    - 2004-08-05 12:00:00 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
    + 2008-04-14 02:33:46 110,592 ----a-w C:\WINDOWS\PeerNet\sqlse20.dll
    - 2004-08-05 12:00:00 153,088 ----a-w C:\WINDOWS\regedit.exe
    + 2008-04-14 02:34:19 153,088 ----a-w C:\WINDOWS\regedit.exe
    + 2008-04-13 18:46:18 53,376 ------w C:\WINDOWS\ServicePackFiles\i386\1394bus.sys
    + 2008-04-13 18:40:50 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\4mmdat.sys
    + 2008-04-13 18:46:20 48,128 ------w C:\WINDOWS\ServicePackFiles\i386\61883.sys
    + 2008-04-14 02:33:18 100,352 ------w C:\WINDOWS\ServicePackFiles\i386\6to4svc.dll
    + 2008-04-14 02:33:18 136,192 ------w C:\WINDOWS\ServicePackFiles\i386\aaclient.dll
    + 2004-08-03 20:32:22 231,552 ------w C:\WINDOWS\ServicePackFiles\i386\ac97ali.sys
    + 2004-08-03 20:32:32 84,480 ------w C:\WINDOWS\ServicePackFiles\i386\ac97via.sys
    + 2008-04-14 02:33:18 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\acadproc.dll
    + 2008-04-14 02:33:53 190,464 ------w C:\WINDOWS\ServicePackFiles\i386\accwiz.exe
    + 2008-04-14 02:33:18 1,852,928 ------w C:\WINDOWS\ServicePackFiles\i386\acgenral.dll
    + 2008-04-14 02:33:18 451,072 ------w C:\WINDOWS\ServicePackFiles\i386\aclayers.dll
    + 2008-04-14 02:33:18 141,312 ------w C:\WINDOWS\ServicePackFiles\i386\aclua.dll
    + 2008-04-14 02:33:18 120,320 ------w C:\WINDOWS\ServicePackFiles\i386\aclui.dll
    + 2008-04-14 01:52:42 188,672 ------w C:\WINDOWS\ServicePackFiles\i386\acpi.sys
    + 2008-04-14 02:33:18 245,248 ------w C:\WINDOWS\ServicePackFiles\i386\acspecfc.dll
    + 2008-04-14 02:33:18 193,536 ------w C:\WINDOWS\ServicePackFiles\i386\activeds.dll
    + 2008-04-14 02:33:53 4,096 ------w C:\WINDOWS\ServicePackFiles\i386\actmovie.exe
    + 2008-04-14 02:33:18 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\actxprxy.dll
    + 2008-04-14 02:33:18 116,224 ------w C:\WINDOWS\ServicePackFiles\i386\acxtrnal.dll
    + 2008-04-14 02:33:18 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\admin.dll
    + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\admin.exe
    + 2004-08-03 20:32:24 10,880 ------w C:\WINDOWS\ServicePackFiles\i386\admjoy.sys
    + 2008-04-14 02:33:18 61,440 ------w C:\WINDOWS\ServicePackFiles\i386\admparse.dll
    + 2008-04-14 02:33:18 175,616 ------w C:\WINDOWS\ServicePackFiles\i386\adsldp.dll
    + 2008-04-14 02:33:18 143,360 ------w C:\WINDOWS\ServicePackFiles\i386\adsldpc.dll
    + 2008-04-14 02:33:18 68,096 ------w C:\WINDOWS\ServicePackFiles\i386\adsmsext.dll
    + 2008-04-14 02:33:18 263,680 ------w C:\WINDOWS\ServicePackFiles\i386\adsnt.dll
    + 2008-04-14 02:33:18 4,255 ------w C:\WINDOWS\ServicePackFiles\i386\adv01nt5.dll
    + 2008-04-14 02:33:18 3,967 ------w C:\WINDOWS\ServicePackFiles\i386\adv02nt5.dll
    + 2008-04-14 02:33:18 3,615 ------w C:\WINDOWS\ServicePackFiles\i386\adv05nt5.dll
    + 2008-04-14 02:33:18 3,647 ------w C:\WINDOWS\ServicePackFiles\i386\adv07nt5.dll
    + 2008-04-14 02:33:18 3,135 ------w C:\WINDOWS\ServicePackFiles\i386\adv08nt5.dll
    + 2008-04-14 02:33:18 3,711 ------w C:\WINDOWS\ServicePackFiles\i386\adv09nt5.dll
    + 2008-04-14 02:33:18 3,775 ------w C:\WINDOWS\ServicePackFiles\i386\adv11nt5.dll
    + 2008-04-14 02:33:18 685,568 ------w C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
    + 2008-04-14 02:33:18 101,888 ------w C:\WINDOWS\ServicePackFiles\i386\advpack.dll
    + 2008-04-13 16:39:23 142,592 ------w C:\WINDOWS\ServicePackFiles\i386\aec.sys
    + 2008-04-13 19:19:23 138,112 ------w C:\WINDOWS\ServicePackFiles\i386\afd.sys
    + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentanm.dll
    + 2008-04-14 02:33:18 214,016 ------w C:\WINDOWS\ServicePackFiles\i386\agentctl.dll
    + 2008-04-14 02:33:18 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\agentdp2.dll
    + 2008-04-14 02:33:18 57,344 ------w C:\WINDOWS\ServicePackFiles\i386\agentdpv.dll
    + 2008-04-14 02:33:18 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\agentmpx.dll
    + 2008-04-14 02:33:18 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agentpsh.dll
    + 2008-04-14 02:33:18 44,032 ------w C:\WINDOWS\ServicePackFiles\i386\agentsr.dll
    + 2008-04-14 02:33:53 256,512 ------w C:\WINDOWS\ServicePackFiles\i386\agentsvr.exe
    + 2008-04-13 18:36:38 42,368 ------w C:\WINDOWS\ServicePackFiles\i386\agp440.sys
    + 2008-04-13 18:36:39 44,928 ------w C:\WINDOWS\ServicePackFiles\i386\agpcpq.sys
    + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0401.dll
    + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0404.dll
    + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0405.dll
    + 2007-04-02 18:25:59 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0406.dll
    + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt0407.dll
    + 2007-04-02 18:26:00 22,016 ------w C:\WINDOWS\ServicePackFiles\i386\agt0408.dll
    + 2008-04-13 17:32:28 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt0409.dll
    + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040b.dll
    + 2007-04-02 18:26:00 21,504 ------w C:\WINDOWS\ServicePackFiles\i386\agt040c.dll
    + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt040d.dll
    + 2007-04-02 18:26:00 19,968 ------w C:\WINDOWS\ServicePackFiles\i386\agt040e.dll
    + 2007-04-02 18:26:00 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0410.dll
    + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0411.dll
    + 2007-04-02 18:26:00 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0412.dll
    + 2007-04-02 18:26:01 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0413.dll
    + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0414.dll
    + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0415.dll
    + 2007-04-02 18:26:01 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0416.dll
    + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0419.dll
    + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041d.dll
    + 2007-04-02 18:26:01 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt041f.dll
    + 2007-04-02 18:26:02 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\agt0804.dll
    + 2007-04-02 18:26:02 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\agt0816.dll
    + 2007-04-02 18:26:02 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\agt0c0a.dll
    + 2008-04-14 02:33:19 24,064 ------w C:\WINDOWS\ServicePackFiles\i386\agtintl.dll
    + 2008-04-14 02:33:53 98,304 ------w C:\WINDOWS\ServicePackFiles\i386\ahui.exe
    + 2008-04-14 02:33:53 44,544 ------w C:\WINDOWS\ServicePackFiles\i386\alg.exe
    + 2008-04-13 18:36:38 42,752 ------w C:\WINDOWS\ServicePackFiles\i386\alim1541.sys
    + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\alrsvc.dll
    + 2008-04-13 18:36:39 43,008 ------w C:\WINDOWS\ServicePackFiles\i386\amdagp.sys
    + 2008-04-14 01:54:28 41,472 ------w C:\WINDOWS\ServicePackFiles\i386\amdk6.sys
    + 2008-04-14 01:54:29 41,856 ------w C:\WINDOWS\ServicePackFiles\i386\amdk7.sys
    + 2008-04-14 02:33:19 70,656 ------w C:\WINDOWS\ServicePackFiles\i386\amstream.dll
    + 2004-08-03 20:31:20 36,224 ------w C:\WINDOWS\ServicePackFiles\i386\an983.sys
    + 2008-04-14 02:33:19 125,952 ------w C:\WINDOWS\ServicePackFiles\i386\apphelp.dll
    + 2008-04-14 02:33:19 334,336 ------w C:\WINDOWS\ServicePackFiles\i386\aqueue.dll
    + 2008-04-13 18:51:25 60,800 ------w C:\WINDOWS\ServicePackFiles\i386\arp1394.sys
    + 2008-04-14 02:33:19 65,024 ------w C:\WINDOWS\ServicePackFiles\i386\asycfilt.dll
    + 2008-04-13 18:57:27 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys
    + 2008-04-14 02:33:53 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\at.exe
    + 2008-04-13 18:40:30 96,512 ------w C:\WINDOWS\ServicePackFiles\i386\atapi.sys
    + 2004-08-03 20:29:30 56,623 ------w C:\WINDOWS\ServicePackFiles\i386\ati1btxx.sys
    + 2004-08-03 20:29:30 11,615 ------w C:\WINDOWS\ServicePackFiles\i386\ati1mdxx.sys
    + 2004-08-03 20:29:30 12,047 ------w C:\WINDOWS\ServicePackFiles\i386\ati1pdxx.sys
    + 2004-08-03 20:29:32 30,671 ------w C:\WINDOWS\ServicePackFiles\i386\ati1raxx.sys
    + 2004-08-03 20:29:32 63,663 ------w C:\WINDOWS\ServicePackFiles\i386\ati1rvxx.sys
    + 2004-08-03 20:29:32 26,367 ------w C:\WINDOWS\ServicePackFiles\i386\ati1snxx.sys
    + 2004-08-03 20:29:32 21,343 ------w C:\WINDOWS\ServicePackFiles\i386\ati1ttxx.sys
    + 2004-08-03 20:29:32 36,463 ------w C:\WINDOWS\ServicePackFiles\i386\ati1tuxx.sys
    + 2004-08-03 20:29:32 29,455 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xbxx.sys
    + 2004-08-03 20:29:32 34,735 ------w C:\WINDOWS\ServicePackFiles\i386\ati1xsxx.sys
    + 2008-04-14 02:33:19 229,376 ------w C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
    + 2008-04-14 02:33:19 377,984 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
    + 2008-04-14 02:33:19 201,728 ------w C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
    + 2004-08-03 22:38:42 327,168 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
    + 2004-08-03 22:38:44 701,440 ------w C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
    + 2008-04-14 02:33:19 870,784 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
    + 2008-04-14 02:33:19 1,057,760 ------w C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll
    + 2008-04-14 02:33:19 1,888,992 ------w C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
    + 2004-08-03 20:29:28 57,856 ------w C:\WINDOWS\ServicePackFiles\i386\atinbtxx.sys
    + 2004-08-03 20:29:30 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinmdxx.sys
    + 2004-08-03 20:29:30 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\atinpdxx.sys
    + 2004-08-03 20:29:30 52,224 ------w C:\WINDOWS\ServicePackFiles\i386\atinraxx.sys
    + 2004-08-03 20:29:32 104,960 ------w C:\WINDOWS\ServicePackFiles\i386\atinrvxx.sys
    + 2004-08-03 20:29:32 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\atinsnxx.sys
    + 2004-08-03 20:29:32 13,824 ------w C:\WINDOWS\ServicePackFiles\i386\atinttxx.sys
    + 2004-08-03 20:29:32 73,216 ------w C:\WINDOWS\ServicePackFiles\i386\atintuxx.sys
    + 2004-08-03 20:29:32 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\atinxbxx.sys
    + 2004-08-03 20:29:32 63,488 ------w C:\WINDOWS\ServicePackFiles\i386\atinxsxx.sys
    + 2008-04-14 02:33:19 32,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativtmxx.dll
    + 2008-04-14 02:33:19 516,768 ------w C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
    + 2008-04-14 02:33:19 58,880 ------w C:\WINDOWS\ServicePackFiles\i386\atl.dll
    + 2008-04-14 02:33:53 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\atmadm.exe
    + 2008-04-13 18:51:25 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\atmarpc.sys
    + 2008-04-14 02:31:00 285,696 ------w C:\WINDOWS\ServicePackFiles\i386\atmfd.dll
    + 2008-04-13 18:51:30 55,808 ------w C:\WINDOWS\ServicePackFiles\i386\atmlane.sys
    + 2008-04-14 02:33:19 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\atmlib.dll
    + 2008-04-14 02:33:53 12,288 ------w C:\WINDOWS\ServicePackFiles\i386\attrib.exe
    + 2008-04-14 02:33:19 21,183 ------w C:\WINDOWS\ServicePackFiles\i386\atv01nt5.dll
    + 2008-04-14 02:33:19 11,359 ------w C:\WINDOWS\ServicePackFiles\i386\atv02nt5.dll
    + 2008-04-14 02:33:19 25,471 ------w C:\WINDOWS\ServicePackFiles\i386\atv04nt5.dll
    + 2008-04-14 02:33:19 14,143 ------w C:\WINDOWS\ServicePackFiles\i386\atv06nt5.dll
    + 2008-04-14 02:33:19 17,279 ------w C:\WINDOWS\ServicePackFiles\i386\atv10nt5.dll
    + 2008-04-14 02:33:19 42,496 ------w C:\WINDOWS\ServicePackFiles\i386\audiosrv.dll
    + 2008-04-14 02:33:53 14,336 ------w C:\WINDOWS\ServicePackFiles\i386\auditusr.exe
    + 2008-04-14 02:33:19 20,540 ------w C:\WINDOWS\ServicePackFiles\i386\author.dll
    + 2008-04-14 02:33:53 16,439 ------w C:\WINDOWS\ServicePackFiles\i386\author.exe
    + 2008-04-14 02:33:19 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\authz.dll
    + 2008-04-14 02:33:53 625,152 ------w C:\WINDOWS\ServicePackFiles\i386\autochk.exe
    + 2008-04-14 02:33:53 638,976 ------w C:\WINDOWS\ServicePackFiles\i386\autoconv.exe
    + 2008-04-14 02:33:54 616,960 ------w C:\WINDOWS\ServicePackFiles\i386\autofmt.exe
    + 2008-04-14 02:33:54 11,264 ------w C:\WINDOWS\ServicePackFiles\i386\autolfn.exe
    + 2008-04-13 18:46:20 38,912 ------w C:\WINDOWS\ServicePackFiles\i386\avc.sys
    + 2008-04-13 18:46:07 13,696 ------w C:\WINDOWS\ServicePackFiles\i386\avcstrm.sys
    + 2008-04-14 02:33:19 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\avifil32.dll
    + 2008-04-14 02:33:19 233,472 ------w C:\WINDOWS\ServicePackFiles\i386\azroles.dll
    + 2008-04-14 02:33:19 52,736 ------w C:\WINDOWS\ServicePackFiles\i386\basesrv.dll
    + 2008-04-14 02:33:19 29,184 ------w C:\WINDOWS\ServicePackFiles\i386\batmeter.dll
    + 2008-04-14 02:33:19 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\batt.dll
    + 2008-04-13 18:36:32 14,208 ------w C:\WINDOWS\ServicePackFiles\i386\battc.sys
    + 2008-04-13 18:46:21 11,776 ------w C:\WINDOWS\ServicePackFiles\i386\bdasup.sys
    + 2008-04-14 02:33:19 17,408 ------w C:\WINDOWS\ServicePackFiles\i386\bidispl.dll
    + 2008-04-14 02:33:19 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx2.dll
    + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx3.dll
    + 2008-04-14 02:33:19 7,168 ------w C:\WINDOWS\ServicePackFiles\i386\bitsprx4.dll
    + 2008-04-14 02:33:55 71,680 ------w C:\WINDOWS\ServicePackFiles\i386\blastcln.exe
    + 2008-04-13 18:53:23 71,552 ------w C:\WINDOWS\ServicePackFiles\i386\bridge.sys
    + 2008-04-14 01:57:48 70,144 ------w C:\WINDOWS\ServicePackFiles\i386\browselc.dll
    + 2008-04-14 02:33:20 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\browser.dll
    + 2008-04-14 02:33:20 1,025,024 ------w C:\WINDOWS\ServicePackFiles\i386\browseui.dll
    + 2008-04-14 02:33:20 78,336 ------w C:\WINDOWS\ServicePackFiles\i386\browsewm.dll
    + 2008-04-14 02:33:20 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\bthci.dll
    + 2008-04-13 18:46:33 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\bthenum.sys
    + 2008-04-13 18:46:33 37,888 ------w C:\WINDOWS\ServicePackFiles\i386\bthmodem.sys
    + 2008-04-13 18:51:34 101,120 ------w C:\WINDOWS\ServicePackFiles\i386\bthpan.sys
    + 2008-04-14 01:58:00 273,664 ------w C:\WINDOWS\ServicePackFiles\i386\bthport.sys
    + 2008-04-13 18:46:31 36,480 ------w C:\WINDOWS\ServicePackFiles\i386\bthprint.sys
    + 2008-04-14 02:33:20 30,208 ------w C:\WINDOWS\ServicePackFiles\i386\bthserv.dll
    + 2008-04-13 18:46:29 18,944 ------w C:\WINDOWS\ServicePackFiles\i386\bthusb.sys
    + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\btpanui.dll
    + 2008-04-14 02:33:20 218,112 ------w C:\WINDOWS\ServicePackFiles\i386\c_g18030.dll
    + 2008-04-14 02:33:20 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\cabinet.dll
    + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\cabview.dll
    + 2008-04-14 02:33:55 20,992 ------w C:\WINDOWS\ServicePackFiles\i386\cacls.exe
    + 2008-04-14 02:33:20 385,024 ------w C:\WINDOWS\ServicePackFiles\i386\callcont.dll
    + 2008-04-14 02:33:20 121,856 ------w C:\WINDOWS\ServicePackFiles\i386\camext30.dll
    + 2008-04-14 02:33:20 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\camocx.dll
    + 2008-04-14 02:33:20 153,600 ------w C:\WINDOWS\ServicePackFiles\i386\capesnpn.dll
    + 2008-04-14 02:33:20 226,304 ------w C:\WINDOWS\ServicePackFiles\i386\catsrv.dll
    + 2008-04-14 02:33:20 85,504 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvps.dll
    + 2008-04-14 02:33:20 625,664 ------w C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll
    + 2008-04-13 18:46:23 17,024 ------w C:\WINDOWS\ServicePackFiles\i386\ccdecode.sys
    + 2008-04-13 19:14:21 63,744 ------w C:\WINDOWS\ServicePackFiles\i386\cdfs.sys
    + 2008-04-14 02:33:20 152,064 ------w C:\WINDOWS\ServicePackFiles\i386\cdfview.dll
    + 2008-04-14 02:33:20 66,560 ------w C:\WINDOWS\ServicePackFiles\i386\cdm.dll
    + 2008-04-14 02:33:20 2,091,520 ------w C:\WINDOWS\ServicePackFiles\i386\cdosys.dll
    + 2008-04-13 18:40:46 62,976 ------w C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
    + 2008-04-14 02:33:20 200,192 ------w C:\WINDOWS\ServicePackFiles\i386\certcli.dll
    + 2008-04-14 02:33:20 467,968 ------w C:\WINDOWS\ServicePackFiles\i386\certmgr.dll
    + 2008-04-14 02:33:20 39,424 ------w C:\WINDOWS\ServicePackFiles\i386\cfgbkend.dll
    + 2008-04-14 02:31:03 16,896 ------w C:\WINDOWS\ServicePackFiles\i386\cfgmgr32.dll
    + 2008-04-14 02:33:56 188,480 ------w C:\WINDOWS\ServicePackFiles\i386\cfgwiz.exe
    + 2008-04-14 02:33:20 15,423 ------w C:\WINDOWS\ServicePackFiles\i386\ch7xxnt5.dll
    + 2008-04-13 18:40:58 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\changer.sys
    + 2008-04-14 02:33:20 148,480 ------w C:\WINDOWS\ServicePackFiles\i386\cic.dll
    + 2008-04-14 02:33:20 1,359,360 ------w C:\WINDOWS\ServicePackFiles\i386\cimwin32.dll
    + 2008-04-14 02:33:20 69,120 ------w C:\WINDOWS\ServicePackFiles\i386\ciodm.dll
    + 2008-04-14 02:33:57 5,632 ------w C:\WINDOWS\ServicePackFiles\i386\cisvc.exe
    + 2008-04-13 19:16:22 49,536 ------w C:\WINDOWS\ServicePackFiles\i386\classpnp.sys
    + 2008-04-14 02:33:21 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll
    + 2008-04-14 02:33:21 498,688 ------w C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll
    + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cleanmgr.exe
    + 2008-04-14 02:33:21 77,824 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.dll
    + 2008-04-14 02:33:57 20,480 ------w C:\WINDOWS\ServicePackFiles\i386\cliconfg.exe
    + 2008-04-14 02:33:57 104,448 ------w C:\WINDOWS\ServicePackFiles\i386\clipbrd.exe
    + 2008-04-14 02:33:57 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe
    + 2008-04-14 02:33:21 58,368 ------w C:\WINDOWS\ServicePackFiles\i386\clusapi.dll
    + 2008-04-13 18:36:37 13,952 ------w C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys
    + 2008-04-14 02:33:21 15,872 ------w C:\WINDOWS\ServicePackFiles\i386\cmcfg32.dll
    + 2008-04-14 02:33:57 401,408 ------w C:\WINDOWS\ServicePackFiles\i386\cmd.exe
    + 2008-04-14 02:33:21 353,280 ------w C:\WINDOWS\ServicePackFiles\i386\cmdial32.dll
    + 2008-04-14 02:33:57 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\cmdl32.exe
    + 2008-04-14 02:33:57 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\cmmon32.exe
    + 2008-04-14 02:33:21 191,488 ------w C:\WINDOWS\ServicePackFiles\i386\cmprops.dll
    + 2008-04-14 02:33:21 13,312 ------w C:\WINDOWS\ServicePackFiles\i386\cmsetacl.dll
    + 2008-04-14 02:33:57 65,536 ------w C:\WINDOWS\ServicePackFiles\i386\cmstp.exe
    + 2008-04-14 02:33:21 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\cmutil.dll
    + 2008-04-14 02:33:21 50,688 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon.dll
    + 2008-04-14 02:33:21 83,968 ------w C:\WINDOWS\ServicePackFiles\i386\cnbjmon2.dll
    + 2008-04-13 16:44:16 17,920 ------w C:\WINDOWS\ServicePackFiles\i386\cobramsg.dll
    + 2008-04-14 02:33:21 60,416 ------w C:\WINDOWS\ServicePackFiles\i386\colbact.dll
    + 2008-04-14 02:33:21 28,160 ------w C:\WINDOWS\ServicePackFiles\i386\comaddin.dll
    + 2008-04-14 02:33:21 195,072 ------w C:\WINDOWS\ServicePackFiles\i386\comadmin.dll
    + 2008-04-14 02:33:21 617,472 ------w C:\WINDOWS\ServicePackFiles\i386\comctl32.dll
    + 2008-04-14 02:33:21 281,600 ------w C:\WINDOWS\ServicePackFiles\i386\comdlg32.dll
    + 2008-04-14 02:33:21 253,440 ------w C:\WINDOWS\ServicePackFiles\i386\compatui.dll
    + 2008-04-13 18:36:37 10,240 ------w C:\WINDOWS\ServicePackFiles\i386\compbatt.sys
    + 2008-04-14 02:33:21 230,912 ------w C:\WINDOWS\ServicePackFiles\i386\compstui.dll
    + 2008-04-14 02:33:21 97,792 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.dll
    + 2008-04-14 02:33:57 9,728 ------w C:\WINDOWS\ServicePackFiles\i386\comrepl.exe
    + 2008-04-14 02:33:57 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\comrereg.exe
    + 2008-04-14 02:33:21 851,968 ------w C:\WINDOWS\ServicePackFiles\i386\comres.dll
    + 2008-04-14 02:33:21 274,944 ------w C:\WINDOWS\ServicePackFiles\i386\comsetup.dll
    + 2008-04-14 02:33:21 167,424 ------w C:\WINDOWS\ServicePackFiles\i386\comsnap.dll
    + 2008-04-14 02:33:21 1,267,200 ------w C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll
    + 2008-04-14 02:33:21 539,648 ------w C:\WINDOWS\ServicePackFiles\i386\comuid.dll
    + 2008-04-14 02:33:58 1,044,480 ------w C:\WINDOWS\ServicePackFiles\i386\conf.exe
    + 2008-04-14 02:33:21 45,056 ------w C:\WINDOWS\ServicePackFiles\i386\confmrsl.dll
    + 2008-04-14 02:33:21 358,400 ------w C:\WINDOWS\ServicePackFiles\i386\confmsp.dll
    + 2008-04-14 02:33:59 27,648 ------w C:\WINDOWS\ServicePackFiles\i386\conime.exe
    + 2008-04-14 02:33:21 35,328 ------w C:\WINDOWS\ServicePackFiles\i386\corpol.dll
    + 2008-04-14 02:33:21 12,800 ------w C:\WINDOWS\ServicePackFiles\i386\credssp.dll
    + 2008-04-14 02:33:21 165,888 ------w C:\WINDOWS\ServicePackFiles\i386\credui.dll
    + 2008-04-14 02:02:47 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\crusoe.sys
    + 2008-04-14 02:33:21 606,208 ------w C:\WINDOWS\ServicePackFiles\i386\crypt32.dll
    + 2008-04-14 02:33:21 75,776 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdlg.dll
    + 2008-04-14 02:33:21 33,280 ------w C:\WINDOWS\ServicePackFiles\i386\cryptdll.dll
    + 2008-04-14 02:33:21 54,784 ------w C:\WINDOWS\ServicePackFiles\i386\cryptext.dll
    + 2008-04-14 02:33:21 64,512 ------w C:\WINDOWS\ServicePackFiles\i386\cryptnet.dll
    + 2008-04-14 02:33:21 62,464 ------w C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
    + 2008-04-14 02:33:21 530,432 ------w C:\WINDOWS\ServicePackFiles\i386\cryptui.dll
    + 2008-04-14 02:33:21 102,912 ------w C:\WINDOWS\ServicePackFiles\i386\cscdll.dll
    + 2008-04-14 02:33:59 139,264 ------w C:\WINDOWS\ServicePackFiles\i386\cscript.exe
    + 2008-04-14 02:33:21 337,920 ------w C:\WINDOWS\ServicePackFiles\i386\cscui.dll
    + 2008-04-14 02:33:22 32,256 ------w C:\WINDOWS\ServicePackFiles\i386\csrsrv.dll
    + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\csrss.exe
    + 2008-04-14 02:33:59 15,360 ------w C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe
    + 2008-04-14 02:33:22 252,416 ------w C:\WINDOWS\ServicePackFiles\i386\ctmasetp.dll
    + 2008-04-14 02:33:22 33,792 ------w C:\WINDOWS\ServicePackFiles\i386\custsat.dll
    + 2004-08-03 20:32:26 48,640 ------w C:\WINDOWS\ServicePackFiles\i386\cwrwdm.sys
    + 2008-04-14 02:33:22 1,179,648 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8.dll
    + 2008-04-14 02:33:22 8,192 ------w C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll
    + 2008-04-14 02:33:22 1,689,088 ------w C:\WINDOWS\ServicePackFiles\i386\d3d9.dll
    + 2008-04-14 02:33:22 824,320 ------w C:\WINDOWS\ServicePackFiles\i386\d3dim700.dll
    + 2008-04-14 02:33:22 1,056,768 ------w C:\WINDOWS\ServicePackFiles\i386\danim.dll
    + 2008-03-25 04:50:25 554,008 ------w C:\WINDOWS\ServicePackFiles\i386\dao360.dll
    + 2008-04-14 02:33:22 55,296 ------w C:\WINDOWS\ServicePackFiles\i386\dataclen.dll
    + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\datime.dll
    + 2008-04-14 02:33:22 25,600 ------w C:\WINDOWS\ServicePackFiles\i386\davclnt.dll
    + 2008-04-14 02:33:22 640,000 ------w C:\WINDOWS\ServicePackFiles\i386\dbghelp.dll
    + 2008-04-14 02:33:22 24,576 ------w C:\WINDOWS\ServicePackFiles\i386\dbmsrpcn.dll
    + 2008-04-14 02:33:22 110,592 ------w C:\WINDOWS\ServicePackFiles\i386\dbnetlib.dll
    + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dbnmpntw.dll
    + 2008-04-14 02:50:20 1,804 ------w C:\WINDOWS\ServicePackFiles\i386\dcache.bin
    + 2008-04-14 02:33:22 40,960 ------w C:\WINDOWS\ServicePackFiles\i386\dcap32.dll
    + 2008-04-14 02:33:22 8,704 ------w C:\WINDOWS\ServicePackFiles\i386\dciman32.dll
    + 2008-04-14 02:33:59 6,144 ------w C:\WINDOWS\ServicePackFiles\i386\dcomcnfg.exe
    + 2008-04-14 02:33:59 31,744 ------w C:\WINDOWS\ServicePackFiles\i386\ddeshare.exe
    + 2008-04-14 02:33:22 279,552 ------w C:\WINDOWS\ServicePackFiles\i386\ddraw.dll
    + 2008-04-14 02:33:22 27,136 ------w C:\WINDOWS\ServicePackFiles\i386\ddrawex.dll
    + 2008-04-14 02:33:59 25,088 ------w C:\WINDOWS\ServicePackFiles\i386\defrag.exe
    + 2008-04-14 02:33:22 59,904 ------w C:\WINDOWS\ServicePackFiles\i386\devenum.dll
    + 2008-04-14 02:33:22 290,816 ------w C:\WINDOWS\ServicePackFiles\i386\devmgr.dll
    + 2008-04-14 02:33:59 82,944 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgfat.exe
    + 2008-04-14 02:33:59 105,472 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgntfs.exe
    + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgsnap.dll
    + 2008-04-14 02:33:22 124,416 ------w C:\WINDOWS\ServicePackFiles\i386\dfrgui.dll
    + 2008-04-14 02:33:22 28,672 ------w C:\WINDOWS\ServicePackFiles\i386\dfsshlex.dll
    + 2008-04-14 02:33:22 115,200 ------w C:\WINDOWS\ServicePackFiles\i386\dgnet.dll
    + 2008-04-14 02:33:22 127,488 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll
    + 2008-04-14 02:33:22 411,136 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpmon.dll
    + 2008-04-14 02:33:22 49,152 ------w C:\WINDOWS\ServicePackFiles\i386\dhcpqec.dll
    + 2008-04-14 02:33:59 548,352 ------w C:\WINDOWS\ServicePackFiles\i386\dialer.exe
    + 2008-04-14 02:34:00 87,040 ------w C:\WINDOWS\ServicePackFiles\i386\diantz.exe
    + 2004-08-05 12:00:00 887,784 ------w C:\WINDOWS\ServicePackFiles\i386\digcore.exe
    + 2008-04-14 02:33:22 68,608 ------w C:\WINDOWS\ServicePackFiles\i386\digest.dll
    + 2008-04-14 02:33:22 19,456 ------w C:\WINDOWS\ServicePackFiles\i386\dimsntfy.dll
    + 2008-04-14 02:33:22 39,936 ------w C:\WINDOWS\ServicePackFiles\i386\dimsroam.dll
    + 2008-04-14 02:33:22 165,376 ------w C:\WINDOWS\ServicePackFiles\i386\dinput.dll
    + 2008-04-14 02:33:22 187,904 ------w C:\WINDOWS\ServicePackFiles\i386\dinput8.dll
    + 2008-04-14 02:33:22 86,528 ------w C:\WINDOWS\Serv
    jorjxmackie
      
       
          ?   @     Posté le 16/05/2008 12:08:07  
    Voter pour ce message
    et pour le nouveau hijack

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:07:13, on 16/05/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\WINDOWS\vsnpstd3.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\Rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\BIBLauncher.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    D:\Program Files\docs\Wrapper.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    D:\Program Files\docs\jre\bin\java.exe
    C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\sevyves\Bureau\Scanner.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: {8b4c40b2-53a0-26bb-2614-7fef3e5d6342} - {2436d5e3-fef7-4162-bb62-0a352b04c4b8} - C:\WINDOWS\system32\wcegwvjn.dll
    O2 - BHO: (no name) - {3ad90b32-b6f4-4fe2-a0bb-2033d27e0986} - (no file)
    O2 - BHO: (no name) - {4D99251A-2555-4AA0-9D24-63FCFCAF3835} - C:\WINDOWS\system32\jkkIYroP.dll (file missing)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {555A4205-9756-446F-9012-5275EA7ED334} - C:\WINDOWS\system32\geBuUooP.dll (file missing)
    O2 - BHO: (no name) - {6C0423B0-A242-4E5D-B829-6EA6A4C05942} - C:\WINDOWS\system32\urqQHXrO.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {8AEBB600-6187-40EB-9ABE-526AC3F6734F} - C:\WINDOWS\system32\khfFYOFx.dll (file missing)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {92D248B5-BF20-4C5B-9F6D-B87C7D3D6A07} - C:\WINDOWS\system32\geBspmjk.dll (file missing)
    O2 - BHO: (no name) - {9AEB5D79-7862-4A07-8481-40B0A6FE59D4} - (no file)
    O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [609fd76f] rundll32.exe "C:\WINDOWS\system32\xehyaegu.dll",b
    O4 - HKLM\..\Run: [BM63ace4f3] Rundll32.exe "C:\WINDOWS\system32\gltcclbq.dll",s
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [BIBLauncher] D:\Program Files\BIBLauncher.exe
    O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\Winsos\WINSOS.EXE" MINI
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://D:\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/m(...)
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetecti(...)
    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Alias Documentation Server (aliasdocserver) - Unknown owner - D:\Program Files\docs\Wrapper.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
    O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

    --
    End of file - 8626 bytes
    naheulbeuk
      
      :-)
          ?   ^   @     Posté le 16/05/2008 12:40:28  
    Voter pour ce message
    re,

    Passe un coup de MalwareBytes et supprime tout ce qu'il trouve !
    Aide : http://mickael.barroux.free.fr/securite/malwarebytes.php
    Post moi le rapport généré à la fin dans ta prochaine réponse :)

    ;)
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    jorjxmackie
      
       
          ?   @     Posté le 16/05/2008 15:24:30  
    Voter pour ce message
    salut ,j'ai enfin le rapport de malwarebytes :

    Malwarebytes' Anti-Malware 1.12
    Version de la base de données: 755

    Type de recherche: Examen complet (C:\|D:\|E:\|)
    Eléments examinés: 554202
    Temps écoulé: 2 hour(s), 15 minute(s), 56 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 1
    Clé(s) du Registre infectée(s): 5
    Valeur(s) du Registre infectée(s): 2
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 5

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    C:\WINDOWS\system32\xehyaegu.dll (Trojan.Vundo) -> Unloaded module successfully.

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\609fd76f (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BM63ace4f3 (Trojan.Agent) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\WINDOWS\system32\xehyaegu.dll (Trojan.Vundo) -> Delete on reboot.
    C:\WINDOWS\system32\ugeayhex.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\gltcclbq.dll (Trojan.Agent) -> Delete on reboot.
    C:\WINDOWS\system32\iifgGWon.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ssqRIBTJ.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    naheulbeuk
      
      :-)
          ?   ^   @     Posté le 16/05/2008 15:29:57  
    Voter pour ce message
    post moi un nouveau rapport hijackthis stp :p
    -------
    Visitez mon site sur la sécurité informatique : http://www.site-naheulbeuk.com
    Et son forum : http://www.site-naheulbeuk.com/forum/
    jorjxmackie