[Réglé] comment retirer Alpha Antivirus ? • page 4

[c2lart]

pendant que le pc redémarre, juste une question:
Mais qu'est-ce qui te motive à faire toutes ces manip... moi il y a déjà longtemps que j'aurais jeté l'éponge sans des gars comme toi !

[danakil]

Tout est dans mon avatar ...
Etre et durer
Je ne baisserai jamais mon froque face à une vermine ...
J'y passerai le temps qu'il faut mais j'aurai la solution ...

Je compte évidemment sur ceux comme toi pour ne pas lâcher le bout de gras

[c2lart]

ok alors on devrait pouvoir faire du bon boulot !

[c2lart]

ComboFix 09-09-22.03 - Céline 23/09/2009 23:35:40.2.2 - NTFSx86
Microsoft® Windows Vista™ Edition Familiale Basique 6.0.6001.1.1252.33.1036.18.1015.214 [GMT 2:00]
Lancé depuis: C:UsersCélineDesktopComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:WindowsSystem32msNAoladdon.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-08-23 au 2009-09-23 ))))))))))))))))))))))))))))))))))))
.

2009-09-23 21:45:45 . 2009-09-23 21:45:45 0 d-----w- C:UsersPublicAppDataLocal emp
2009-09-23 21:45:45 . 2009-09-23 21:45:45 0 d-----w- C:UsersDefaultAppDataLocal emp
2009-09-23 21:45:44 . 2009-09-23 21:45:44 0 d-----w- C:UsersCLINE~2AppDataLocal emp
2009-09-23 20:33:22 . 2009-09-23 20:33:24 0 d-----w- C:GenProc
2009-09-23 10:46:29 . 2009-09-10 12:54:06 38224 ----a-w- C:windowssystem32driversmbamswissarmy.sys
2009-09-23 10:46:27 . 2009-09-23 10:46:35 0 d-----w- C:Program FilesMalwarebytes' Anti-Malware
2009-09-23 10:46:27 . 2009-09-23 10:46:27 0 d-----w- C:ProgramDataMalwarebytes
2009-09-23 10:46:27 . 2009-09-10 12:53:50 19160 ----a-w- C:windowssystem32driversmbam.sys
2009-09-23 10:24:22 . 2009-09-23 10:24:23 0 d-----w- C:Program FilesCCleaner
2009-09-22 17:30:02 . 2009-09-22 17:30:02 0 d-----w- C:Program FilesCommon FilesUninstall
2009-09-22 17:29:13 . 2009-09-22 17:29:49 0 d-----w- C:Program FilesAlphaAV
2009-09-14 18:59:12 . 2009-09-14 18:59:12 0 d-----w- C:ProgramDataWindowsSearch
2009-09-09 15:40:19 . 2009-08-14 17:07:56 897608 ----a-w- C:windowssystem32drivers cpip.sys
2009-09-09 15:40:18 . 2009-08-14 16:29:41 104960 ----a-w- C:windowssystem32
etiohlp.dll
2009-09-09 15:40:17 . 2009-08-14 14:16:55 9728 ----a-w- C:windowssystem32TCPSVCS.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:55 17920 ----a-w- C:windowssystem32ROUTE.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:52 11264 ----a-w- C:windowssystem32MRINFO.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:51 27136 ----a-w- C:windowssystem32NETSTAT.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:50 19968 ----a-w- C:windowssystem32ARP.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:49 8704 ----a-w- C:windowssystem32HOSTNAME.EXE
2009-09-09 15:40:17 . 2009-08-14 14:16:49 10240 ----a-w- C:windowssystem32finger.exe
2009-09-09 15:40:16 . 2009-08-14 16:29:41 17920 ----a-w- C:windowssystem32
etevent.dll
2009-09-09 15:39:10 . 2009-07-11 19:32:52 302592 ----a-w- C:windowssystem32wlansec.dll
2009-09-09 15:39:10 . 2009-07-11 19:32:52 293376 ----a-w- C:windowssystem32wlanmsm.dll
2009-09-09 15:39:10 . 2009-07-11 19:29:04 127488 ----a-w- C:windowssystem32L2SecHC.dll
2009-09-09 15:39:09 . 2009-07-11 19:32:52 513024 ----a-w- C:windowssystem32wlansvc.dll
2009-09-09 15:39:02 . 2009-06-10 12:11:26 2868224 ----a-w- C:windowssystem32mf.dll
2009-09-03 14:16:17 . 2009-08-28 12:39:07 28672 ----a-w- C:windowssystem32Apphlpdm.dll
2009-09-03 14:16:12 . 2009-08-28 10:15:30 4240384 ----a-w- C:windowssystem32GameUXLegacyGDFs.dll
2009-08-27 10:58:02 . 2009-06-22 10:22:01 2048 ----a-w- C:windowssystem32 zres.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-23 21:29:28 . 2008-09-26 10:21:02 9588 ----a-w- C:windowsthservsdp.dat
2009-09-23 16:58:19 . 2008-09-26 12:37:52 0 d-----w- C:ProgramDataGoogle Updater
2009-09-23 10:47:13 . 2008-04-16 14:18:01 713542 ----a-w- C:windowssystem32perfh00C.dat
2009-09-23 10:47:13 . 2008-04-16 14:18:01 143542 ----a-w- C:windowssystem32perfc00C.dat
2009-09-23 09:40:55 . 2009-05-04 18:49:16 0 d-----w- C:Program FilesDivX
2009-09-12 07:18:07 . 2009-05-25 16:13:36 0 d-----w- C:Program FilesMicrosoft Silverlight
2009-09-12 07:12:59 . 2006-11-02 11:18:33 0 d-----w- C:Program FilesWindows Mail
2009-09-01 12:22:52 . 2008-09-27 18:09:35 0 d-----w- C:Program FilesCommon FilesAdobe
2009-08-17 16:10:20 . 2009-02-18 14:58:33 1279456 ----a-w- C:windowssystem32aswBoot.exe
2009-08-17 16:05:52 . 2009-02-18 14:58:52 114768 ----a-w- C:windowssystem32driversaswSP.sys
2009-08-17 16:05:37 . 2009-02-18 14:58:52 20560 ----a-w- C:windowssystem32driversaswFsBlk.sys
2009-08-17 16:05:24 . 2009-02-18 14:58:33 53328 ----a-w- C:windowssystem32driversaswMonFlt.sys
2009-08-17 16:04:40 . 2009-02-18 14:58:56 51376 ----a-w- C:windowssystem32driversaswTdi.sys
2009-08-17 16:04:29 . 2009-02-18 14:58:57 23152 ----a-w- C:windowssystem32driversaswRdr.sys
2009-08-17 16:02:50 . 2009-02-18 14:58:53 97480 ----a-w- C:windowssystem32AvastSS.scr
2009-07-18 16:06:20 . 2009-07-29 10:49:06 827904 ----a-w- C:windowssystem32wininet.dll
2009-07-18 16:01:48 . 2009-07-29 10:49:03 78336 ----a-w- C:windowssystem32ieencode.dll
2009-07-18 09:46:14 . 2009-07-29 10:49:04 26624 ----a-w- C:windowssystem32ieUnatt.exe
2009-07-17 14:35:11 . 2009-08-12 06:50:11 71680 ----a-w- C:windowssystem32atl.dll
2009-07-14 13:00:17 . 2009-08-12 06:49:41 313344 ----a-w- C:windowssystem32wmpdxm.dll
2009-07-14 12:59:28 . 2009-08-12 06:49:38 4096 ----a-w- C:windowssystem32dxmasf.dll
2009-07-14 12:58:44 . 2009-08-12 06:49:39 7680 ----a-w- C:windowssystem32spwmp.dll
2009-07-14 10:59:56 . 2009-08-12 06:49:35 8147456 ----a-w- C:windowssystem32wmploc.DLL
2008-06-25 12:19:34 . 2008-06-25 12:19:33 8192 --sha-w- C:windowsUsersDefaultNTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-09-23_21.09.59 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-21 01:58:36 . 2009-09-23 21:33:20 49086 C:windowsSystem32WDIShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:02:52 . 2009-09-23 21:33:22 95674 C:windowsSystem32WDIBootPerformanceDiagnostics_SystemData.bin
+ 2008-09-26 12:09:25 . 2009-09-23 21:33:24 13058 C:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3743685926-3696750326-698254772-1004_UserData.bin
+ 2008-04-17 16:30:21 . 2009-09-23 21:34:17 32768 C:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
- 2008-04-17 16:30:21 . 2009-09-23 20:58:39 32768 C:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
+ 2008-04-17 16:30:21 . 2009-09-23 21:34:17 65536 C:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
- 2008-04-17 16:30:21 . 2009-09-23 20:58:39 65536 C:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2008-04-17 16:30:21 . 2009-09-23 21:34:17 49152 C:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
- 2008-04-17 16:30:21 . 2009-09-23 20:58:39 49152 C:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
+ 2009-09-23 21:30:26 . 2009-09-23 21:30:26 2048 C:windowsServiceProfilesLocalServiceAppDataLocallastalive1.dat
- 2009-09-23 20:14:44 . 2009-09-23 20:35:04 2048 C:windowsServiceProfilesLocalServiceAppDataLocallastalive1.dat
+ 2009-09-23 21:30:26 . 2009-09-23 21:30:26 2048 C:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat
- 2009-09-23 20:14:44 . 2009-09-23 20:35:04 2048 C:windowsServiceProfilesLocalServiceAppDataLocallastalive0.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"Sidebar"="C:Program FilesWindows Sidebarsidebar.exe" [2008-01-21 02:32:56 1233920]
"WMPNSCFG"="C:Program FilesWindows Media PlayerWMPNSCFG.exe" [2008-01-21 02:35:20 202240]
"swg"="C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe" [2008-09-26 12:37:55 39408]

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunOnce]
"Shockwave Updater"="C:windowssystem32AdobeShockwave 11SwHelper_1150595.exe" [2009-03-19 15:55:14 460216]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Windows Defender"="C:Program FilesWindows DefenderMSASCui.exe" [2008-01-21 02:33:00 1008184]
"IgfxTray"="C:Windowssystem32igfxtray.exe" [2008-05-22 16:13:32 141848]
"HotKeysCmds"="C:Windowssystem32hkcmd.exe" [2008-05-22 16:13:12 166424]
"Persistence"="C:Windowssystem32igfxpers.exe" [2008-05-22 16:13:24 133656]
"SoundMAXPnP"="C:Program FilesAnalog DevicesCoresmax4pnp.exe" [2007-02-21 14:14:24 1183744]
"IAAnotif"="C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe" [2008-04-18 13:53:58 178712]
"PDF Complete"="C:Program FilesPDF Completepdfsty.exe" [2007-05-08 15:38:44 331552]
"SynTPEnh"="C:Program FilesSynapticsSynTPSynTPEnh.exe" [2008-03-27 19:05:58 1045800]
"hpWirelessAssistant"="C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe" [2008-04-15 21:51:00 488752]
"HP Health Check Scheduler"="c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe" [2008-04-15 20:42:16 70912]
"WatchDog"="C:Program FilesInterVideoDVD CheckDVDCheck.exe" [2008-04-21 18:21:12 197904]
"SunJavaUpdateSched"="C:Program FilesJavajre1.6.0_01injusched.exe" [2007-03-14 10:43:44 83608]
"HP Software Update"="c:Program FilesHpHP Software UpdateHPWuSchd2.exe" [2005-02-17 06:11:42 49152]
"avast!"="C:PROGRA~1ALWILS~1Avast4ashDisp.exe" [2009-08-17 16:07:23 81000]
"Adobe Reader Speed Launcher"="C:Program FilesAdobeReader 9.0ReaderReader_sl.exe" [2009-02-27 15:10:28 35696]
"Malwarebytes Anti-Malware (reboot)"="C:Program FilesMalwarebytes' Anti-Malwarembam.exe" [2009-09-10 12:53:56 1312080]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
"MySpaceIM"="C:Program FilesMySpaceIMMySpaceIM.exe" [2008-12-12 18:46:08 9555968]

C:ProgramDataMicrosoftWindowsStart MenuProgramsStartup
BTTray.lnk - C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe [2008-4-17 727592]
DVD Check.lnk - C:Program FilesInterVideoDVD CheckDVDCheck.exe [2008-6-25 197904]
Microsoft Office.lnk - C:Program FilesMicrosoft OfficeOfficeOSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversiondrivers32]
"mixer2"=wdmaud.drv

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSafeBootMinimalWinDefend]
@="Service"

[HKLM~servicessharedaccessparametersfirewallpolicyFirewallRules]
"{B09BBB83-3D8E-499D-BBFC-CDFC7FF2EBDD}"= UDP:C:Program FilesMcAfeeManaged VirusScanAgentmyAgtSvc.exe:Managed Services Agent
"{AF4CE51A-DDEC-4739-857B-8A0A0185B4F0}"= TCP:C:Program FilesMcAfeeManaged VirusScanAgentmyAgtSvc.exe:Managed Services Agent
"{2C9B5C64-64A3-4952-90C0-D710A66D69A3}"= C:Program FilesWindows LiveSyncWindowsLiveSync.exe:Windows Live Sync
"TCP Query User{2396460F-F6B5-462F-85A5-165DB3D97B52}C:\program files\gigatribe\gigatribe.exe"= UDP:C:program filesgigatribegigatribe.exe:gigatribe
"UDP Query User{22A94101-7233-49CB-80D4-8F36AC785718}C:\program files\gigatribe\gigatribe.exe"= TCP:C:program filesgigatribegigatribe.exe:gigatribe
"TCP Query User{6B13C24A-4CEA-4E13-BA00-E3979E5E00FF}C:\program files\emule\emule.exe"= UDP:C:program filesemuleemule.exe:eMule
"UDP Query User{C2AC89FD-73A9-421B-BC6D-59CB26C445AD}C:\program files\emule\emule.exe"= TCP:C:program filesemuleemule.exe:eMule
"TCP Query User{786406CC-1519-4838-8483-1B82A62DAC3F}C:\program files\emule\emule.exe"= UDP:C:program filesemuleemule.exe:eMule
"UDP Query User{4394499F-958B-45BA-A0B0-E4CAE7E153F9}C:\program files\emule\emule.exe"= TCP:C:program filesemuleemule.exe:eMule
"TCP Query User{934EBDAC-CCC0-40D3-A759-D11F71CF04A3}C:\program files\limewire\limewire.exe"= UDP:C:program fileslimewirelimewire.exe:LimeWire
"UDP Query User{7F116F4A-6EFF-4B23-9E8B-4471C4F65598}C:\program files\limewire\limewire.exe"= TCP:C:program fileslimewirelimewire.exe:LimeWire
"{2B7458DC-4062-4F2A-AF6C-74959435CCB1}"= C:Program FilesMySpaceIMMySpaceIM.exe:MySpaceIM
"TCP Query User{37E0FA5C-9486-4193-82D4-C16836B3A648}C:\program files\internet explorer\iexplore.exe"= UDP:C:program filesinternet exploreriexplore.exe:Internet Explorer
"UDP Query User{764306EF-7F24-429D-B416-4535D4DDBA12}C:\program files\internet explorer\iexplore.exe"= TCP:C:program filesinternet exploreriexplore.exe:Internet Explorer

R1 aswSP;avast! Self Protection;C:WindowsSystem32driversaswSP.sys [18/02/2009 16:58:52 114768]
R2 aswFsBlk;aswFsBlk;C:WindowsSystem32driversaswFsBlk.sys [18/02/2009 16:58:52 20560]
R2 aswMonFlt;aswMonFlt;C:WindowsSystem32driversaswMonFlt.sys [18/02/2009 16:58:33 53328]
R2 AVWEBCAM;AV WebCam, WDM Video Capture;C:WindowsSystem32driversavwebcam.sys [09/03/2009 17:13:53 215552]
R2 pdfcDispatcher;PDF Document Manager;C:Program FilesPDF Completepdfsvc.exe [25/06/2008 14:26:49 540448]
R3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ;C:WindowsSystem32driversNETw5v32.sys [28/04/2008 08:29:26 3658752]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:WindowsSystem32drivers57nd60x.sys [21/01/2008 04:32:44 179712]
S3 PAC207;SoC PC-Camera;C:WindowsSystem32driversPFC027.SYS [05/12/2006 12:34:42 507136]
S3 RoxMediaDB10;RoxMediaDB10;C:Program FilesCommon FilesRoxio Shared10.0SharedCOMRoxMediaDB10.exe [08/04/2008 14:12:50 1112560]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionsvchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
bthsvcs REG_MULTI_SZ BthServ
.
Contenu du dossier 'Tâches planifiées'

2009-09-23 C:windowsTasksAlphaAV.job
- C:Program FilesAlphaAVAlpha Antivirus.exe [2009-09-22 17:29:46 . 2009-09-22 17:29:49]

2009-09-23 C:windowsTasksGoogle Software Updater.job
- C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe [2008-09-26 12:37:50 . 2009-03-24 08:46:49]

2009-09-23 C:windowsTasksUser_Feed_Synchronization-{F1C4F774-FC6F-4918-8B9E-112246F23226}.job
- C:windowssystem32msfeedssync.exe [2008-01-21 02:34:39 . 2008-01-21 02:34:39]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
IE: Envoyer au périphérique &Bluetooth... - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie.htm
IE: Envoyer l'&image au périphérique Bluetooth... - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie_ctx.htm
.

[danakil]

Reprend cette procédure :
Télécharge GenProc de Narco~4 & JC1 sur ton Bureau et pas ailleurs.

> Double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre.

Nota : pour les Vista : Double-clics est remplacé par --> Clic droit sur l'exécutable > Exécuter en tant qu'administrateur.

Avant de lancer GenProc.exe > désactive l'Anti-Virus et déconnecte physiquement l'ADSL.

Quelques soient les messages d'alerte dans la fenêtre bleue >> valide les ! et ne touche à rien, le scan se déroulera au maximun une dizaine de minute.

> Poste le rapport que tu obtiendras.

Maintenant je débranche car je suis un peu game over ... On reprend cela demain si tu le veux bien . Merci !

[c2lart]

merci à toi et à demain

[c2lart]

et bien c'est reparti !
comme Genproc ne veut pas fonctionner et que le rogue a repris la main sur le pc, je repasse par mon autre machine.
Voici le dernier rapport Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:14:37, on 24/09/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:windowssystem32Dwm.exe
C:windowssystem32 askeng.exe
C:windowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Windowssystem32igfxsrvc.exe
C:Program FilesAnalog DevicesCoresmax4pnp.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesPDF Completepdfsty.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
C:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
C:Program FilesJavajre1.6.0_01injusched.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesAdobeReader 9.0Reader eader_sl.exe
C:windowssystem32wuauclt.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesHewlett-PackardHP wireless AssistantWiFiMsg.EXE
C:Program FilesWIDCOMMBluetooth SoftwareBtStackServer.exe
C:Program FilesHewlett-PackardSharedHpqToaster.exe
C:Program FilesInternet Explorerieuser.exe
C:Program FilesInternet Exploreriexplore.exe
C:UsersCélineDesktopsniffle.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... ll&pf=cmnb
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_01inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: (no name) - {A77D3539-581D-450C-9E44-A84C415A6172} - C:WindowsSystem32msnaoladdon.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.3.4501.1418swg.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exe
O4 - HKLM..Run: [SoundMAXPnP] C:Program FilesAnalog DevicesCoresmax4pnp.exe
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [PDF Complete] "C:Program FilesPDF Completepdfsty.exe"
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [hpWirelessAssistant] C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
O4 - HKLM..Run: [HP Health Check Scheduler] c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
O4 - HKLM..Run: [WatchDog] C:Program FilesInterVideoDVD CheckDVDCheck.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_01injusched.exe"
O4 - HKLM..Run: [HP Software Update] c:Program FilesHpHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Malwarebytes Anti-Malware (reboot)] "C:Program FilesMalwarebytes' Anti-Malwarembam.exe" /runcleanupscript
O4 - HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 - HKCU..Run: [WMPNSCFG] C:Program FilesWindows Media PlayerWMPNSCFG.exe
O4 - HKCU..Run: [swg] "C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
O4 - HKCU..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..RunOnce: [Shockwave Updater] C:windowssystem32AdobeShockwave 11SwHelper_1150595.exe -Update -1150595 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30618)" -"http://www.ballerarcade.com/playgames/711/mission-at-dawn.html"
O4 - HKUSS-1-5-18..Run: [MySpaceIM] C:Program FilesMySpaceIMMySpaceIM.exe (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [MySpaceIM] C:Program FilesMySpaceIMMySpaceIM.exe (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:Program FilesInterVideoDVD CheckDVDCheck.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie.htm
O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_01inssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_01inssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwaretsendto_ie.htm
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-U ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:windowssystem32AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:Windowssystem32agrsmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardSharedhpqWmiEx.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:Program FilesCommon FilesInterVideoRegMgriviRegMgr.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:Program FilesPDF Completepdfsvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:Program FilesCommon FilesRoxio Shared10.0SharedCOMRoxMediaDB10.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:Program FilesCommon FilesSureThing Sharedstllssvr.exe

--
End of file - 8972 bytes

[danakil]

Ce rapport HijackThis ne présente aucune infection.

Tu as toujours tes messages d'alerte?

Pour GenProc, le soucis vient d'ailleurs. Poste moi un nouveau rapport de ComboFix afin que je vérifie un petit truc.

[c2lart]

ok

[c2lart]

Malware est entrain de travailler je le stoppe ou veux-tu tout de même le rapport

[c2lart]

Voici le rapport MBAM et Combofix ne veut pas se lancer, j'ai une fenêtre d'erreur

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2848
Windows 6.0.6001 Service Pack 1

24/09/2009 10:30:41
mbam-log-2009-09-24 (10-30-41).txt

Type de recherche: Examen rapide
Eléments examinés: 87102
Temps écoulé: 10 minute(s), 23 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{a77d3539-581d-450c-9e44-a84c415a6172} (Trojan.BHO.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{a77d3539-581d-450c-9e44-a84c415a6172} (Trojan.BHO.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{a77d3539-581d-450c-9e44-a84c415a6172} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:WindowsSystem32msnaoladdon.dll (Trojan.BHO.H) -> Quarantined and deleted successfully.
C:UsersCélineAppDataLocalTempdrv11979839.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

[c2lart]

le pc s'est éteint tout seul et j'ai due le redémarrer... GRRRRRRRRRRR !!!!!

[danakil]

L'infection réapparaît en permanence ...

Jète Combofix qui est sur le Bureau à la poubelle et fais comme ceci :

Télécharge ComboFix de sUBs sur ton Bureau et pas ailleurs.
Lorsque tu auras la fenêtre d'enregistrement du fichier à télécharger > change son nom en ABCD.exe et valide
Lance ensuite ABCD.exe ...

Je repasse ce soir car maintenant je vais au taff.

[c2lart]

ok merci

[c2lart]

Voici le rapport ComboFix

ComboFix 09-09-23.02 - Céline 24/09/2009 10:56.3.2 - NTFSx86
Microsoft® Windows Vista™ Edition Familiale Basique 6.0.6001.1.1252.33.1036.18.1015.222 [GMT 2:00]
Lancé depuis: c:usersCélineDesktopABCD.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:windowsSystem32msNAoladdon.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-08-24 au 2009-09-24 ))))))))))))))))))))))))))))))))))))
.

2009-09-24 09:06 . 2009-09-24 09:06 -------- d-----w- c:usersPublicAppDataLocal emp
2009-09-24 09:06 . 2009-09-24 09:06 -------- d-----w- c:usersDefaultAppDataLocal emp
2009-09-24 09:06 . 2009-09-24 09:06 -------- d-----w- c:usersCLINE~2AppDataLocal emp
2009-09-23 20:33 . 2009-09-23 22:20 -------- d-----w- C:GenProc
2009-09-23 10:46 . 2009-09-10 12:54 38224 ----a-w- c:windowssystem32driversmbamswissarmy.sys
2009-09-23 10:46 . 2009-09-23 10:46 -------- d-----w- c:program filesMalwarebytes' Anti-Malware
2009-09-23 10:46 . 2009-09-23 10:46 -------- d-----w- c:programdataMalwarebytes
2009-09-23 10:46 . 2009-09-10 12:53 19160 ----a-w- c:windowssystem32driversmbam.sys
2009-09-23 10:24 . 2009-09-23 10:24 -------- d-----w- c:program filesCCleaner
2009-09-22 17:30 . 2009-09-22 17:30 -------- d-----w- c:program filesCommon FilesUninstall
2009-09-22 17:29 . 2009-09-22 17:29 -------- d-----w- c:program filesAlphaAV
2009-09-14 18:59 . 2009-09-14 18:59 -------- d-----w- c:programdataWindowsSearch
2009-09-09 15:40 . 2009-08-14 17:07 897608 ----a-w- c:windowssystem32drivers cpip.sys
2009-09-09 15:40 . 2009-08-14 16:29 104960 ----a-w- c:windowssystem32
etiohlp.dll
2009-09-09 15:40 . 2009-08-14 14:16 9728 ----a-w- c:windowssystem32TCPSVCS.EXE
2009-09-09 15:40 . 2009-08-14 14:16 17920 ----a-w- c:windowssystem32ROUTE.EXE
2009-09-09 15:40 . 2009-08-14 14:16 11264 ----a-w- c:windowssystem32MRINFO.EXE
2009-09-09 15:40 . 2009-08-14 14:16 27136 ----a-w- c:windowssystem32NETSTAT.EXE
2009-09-09 15:40 . 2009-08-14 14:16 19968 ----a-w- c:windowssystem32ARP.EXE
2009-09-09 15:40 . 2009-08-14 14:16 8704 ----a-w- c:windowssystem32HOSTNAME.EXE
2009-09-09 15:40 . 2009-08-14 14:16 10240 ----a-w- c:windowssystem32finger.exe
2009-09-09 15:40 . 2009-08-14 16:29 17920 ----a-w- c:windowssystem32
etevent.dll
2009-09-09 15:39 . 2009-07-11 19:32 302592 ----a-w- c:windowssystem32wlansec.dll
2009-09-09 15:39 . 2009-07-11 19:32 293376 ----a-w- c:windowssystem32wlanmsm.dll
2009-09-09 15:39 . 2009-07-11 19:29 127488 ----a-w- c:windowssystem32L2SecHC.dll
2009-09-09 15:39 . 2009-07-11 19:32 513024 ----a-w- c:windowssystem32wlansvc.dll
2009-09-09 15:39 . 2009-06-10 12:11 2868224 ----a-w- c:windowssystem32mf.dll
2009-09-03 14:16 . 2009-08-28 12:39 28672 ----a-w- c:windowssystem32Apphlpdm.dll
2009-09-03 14:16 . 2009-08-28 10:15 4240384 ----a-w- c:windowssystem32GameUXLegacyGDFs.dll
2009-08-27 10:58 . 2009-06-22 10:22 2048 ----a-w- c:windowssystem32 zres.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-24 08:33 . 2008-09-26 10:21 9588 ----a-w- c:windowsthservsdp.dat
2009-09-23 16:58 . 2008-09-26 12:37 -------- d-----w- c:programdataGoogle Updater
2009-09-23 10:47 . 2008-04-16 14:18 713542 ----a-w- c:windowssystem32perfh00C.dat
2009-09-23 10:47 . 2008-04-16 14:18 143542 ----a-w- c:windowssystem32perfc00C.dat
2009-09-23 09:40 . 2009-05-04 18:49 -------- d-----w- c:program filesDivX
2009-09-12 07:18 . 2009-05-25 16:13 -------- d-----w- c:program filesMicrosoft Silverlight
2009-09-12 07:12 . 2006-11-02 11:18 -------- d-----w- c:program filesWindows Mail
2009-09-01 12:22 . 2008-09-27 18:09 -------- d-----w- c:program filesCommon FilesAdobe
2009-08-17 16:10 . 2009-02-18 14:58 1279456 ----a-w- c:windowssystem32aswBoot.exe
2009-08-17 16:05 . 2009-02-18 14:58 114768 ----a-w- c:windowssystem32driversaswSP.sys
2009-08-17 16:05 . 2009-02-18 14:58 20560 ----a-w- c:windowssystem32driversaswFsBlk.sys
2009-08-17 16:05 . 2009-02-18 14:58 53328 ----a-w- c:windowssystem32driversaswMonFlt.sys
2009-08-17 16:04 . 2009-02-18 14:58 51376 ----a-w- c:windowssystem32driversaswTdi.sys
2009-08-17 16:04 . 2009-02-18 14:58 23152 ----a-w- c:windowssystem32driversaswRdr.sys
2009-08-17 16:02 . 2009-02-18 14:58 97480 ----a-w- c:windowssystem32AvastSS.scr
2009-07-18 16:06 . 2009-07-29 10:49 827904 ----a-w- c:windowssystem32wininet.dll
2009-07-18 16:01 . 2009-07-29 10:49 78336 ----a-w- c:windowssystem32ieencode.dll
2009-07-18 09:46 . 2009-07-29 10:49 26624 ----a-w- c:windowssystem32ieUnatt.exe
2009-07-17 14:35 . 2009-08-12 06:50 71680 ----a-w- c:windowssystem32atl.dll
2009-07-14 13:00 . 2009-08-12 06:49 313344 ----a-w- c:windowssystem32wmpdxm.dll
2009-07-14 12:59 . 2009-08-12 06:49 4096 ----a-w- c:windowssystem32dxmasf.dll
2009-07-14 12:58 . 2009-08-12 06:49 7680 ----a-w- c:windowssystem32spwmp.dll
2009-07-14 10:59 . 2009-08-12 06:49 8147456 ----a-w- c:windowssystem32wmploc.DLL
2008-06-25 12:19 . 2008-06-25 12:19 8192 --sha-w- c:windowsUsersDefaultNTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-09-23_21.09.59 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-21 02:32 . 2008-01-21 02:32 16896 c:windowswinsxsx86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68baceWSDPrint.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 39936 c:windowswinsxsx86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688dWpdUsb.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 60928 c:windowswinsxsx86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688dWpdMtpUS.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 66560 c:windowswinsxsx86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688dWpdMtpIP.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 33280 c:windowswinsxsx86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688dWpdConns.dll
+ 2008-09-26 12:33 . 2008-05-27 04:59 18904 c:windowswinsxsx86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_7.0.6002.18005_none_8ae0ca49e0ec3b69StructuredQuerySchemaTrivial.bin
+ 2008-01-21 02:32 . 2008-01-21 02:32 23552 c:windowswinsxsx86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2usbuhci.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 15872 c:windowswinsxsx86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2hcrstco.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 73216 c:windowswinsxsx86_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_cce3e0020b941ebbusbccgp.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 89088 c:windowswinsxsx86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1fwiafbdrv.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 35328 c:windowswinsxsx86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1fusbscan.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 14848 c:windowswinsxsx86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1fscsiscan.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 13312 c:windowswinsxsx86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15sffdisk.sys
+ 2006-11-02 12:33 . 2006-11-02 12:33 11368 c:windowswinsxsx86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411MsMpLics.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 58936 c:windowswinsxsx86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411MpRtPlug.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 90680 c:windowswinsxsx86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411MpOAV.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 16488 c:windowswinsxsx86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411MpAsDesc.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 17920 c:windowswinsxsx86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5wfapigp.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 64000 c:windowswinsxsx86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5mpsdrv.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 87552 c:windowswinsxsx86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5icfupgd.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 16896 c:windowswinsxsx86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6002.18005_none_6862e2e7643773d9SharedReg12.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 16896 c:windowswinsxsx86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6002.18005_none_8199f0814373a5b3sbscmp20_mscorwks.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 16896 c:windowswinsxsx86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6002.18005_none_54ad0b7a61344e8csbscmp20_mscorlib.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 16896 c:windowswinsxsx86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6002.18005_none_76f179ae021db881sbscmp10.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 20024 c:windowswinsxsx86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8viaide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 17976 c:windowswinsxsx86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8intelide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 19000 c:windowswinsxsx86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8cmdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 17976 c:windowswinsxsx86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8amdide.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 17464 c:windowswinsxsx86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8aliide.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 91136 c:windowswinsxsx86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11cWmiPerfClass.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 19968 c:windowswinsxsx86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3fmofcomp.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 77824 c:windowswinsxsx86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9daWinMgmt.exe
+ 2009-09-09 15:39 . 2009-04-11 06:28 68096 c:windowswinsxsx86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84wlanhlp.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 64512 c:windowswinsxsx86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84wlanapi.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 15181 c:windowswinsxsx86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84gatherWirelessInfo.vbs
+ 2006-11-02 08:48 . 2006-11-02 09:46 41984 c:windowswinsxsx86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3cwabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45 66048 c:windowswinsxsx86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469aewabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46 33280 c:windowswinsxsx86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469aewabfind.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 32768 c:windowswinsxsx86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4cwups2.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 43008 c:windowswinsxsx86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4cwuauclt.exe
+ 2006-11-02 12:33 . 2006-11-02 12:33 12800 c:windowswinsxsx86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753wiatrace.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 32768 c:windowswinsxsx86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753wiarpc.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 23040 c:windowswinsxsx86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464fwups.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 80384 c:windowswinsxsx86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464fwudriver.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 13312 c:windowswinsxsx86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1WsmRes.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 54784 c:windowswinsxsx86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1WsmProv.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 30720 c:windowswinsxsx86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1WSManHTTPConfig.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 69120 c:windowswinsxsx86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769avsstrace.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 19968 c:windowswinsxsx86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769aeventcls.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 19968 c:windowswinsxsx86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785vdsldr.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 37888 c:windowswinsxsx86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785vds_ps.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 34816 c:windowswinsxsx86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805uicom.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 15360 c:windowswinsxsx86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805serialui.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 22528 c:windowswinsxsx86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604
etiougc.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 49664 c:windowswinsxsx86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604
etiomig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 17920 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffROUTE.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 27136 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffNETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 11264 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffMRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 10240 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedfffinger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44 19968 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffARP.EXE
+ 2009-08-12 06:50 . 2009-04-11 06:28 53248 c:windowswinsxsx86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18005_none_31d980c8c2ca01c9 sgqec.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 68096 c:windowswinsxsx86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14aTabSvc.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 14848 c:windowswinsxsx86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975srdelayed.exe
+ 2008-01-21 02:35 . 2008-01-21 02:35 40960 c:windowswinsxsx86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975srclient.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 28160 c:windowswinsxsx86_microsoft-windows-spp-main_31bf3856ad364e35_6.0.6002.18005_none_e6326fcda9fe9b59sxproxy.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 99328 c:windowswinsxsx86_microsoft-windows-speechengine_31bf3856ad364e35_6.0.6002.18005_none_f0a9964297040c1cspsrx.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 43520 c:windowswinsxsx86_microsoft-windows-speechcommon_31bf3856ad364e35_6.0.6002.18005_none_d7edc1a2cfccb087SCGMigPlugin.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 16384 c:windowswinsxsx86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6002.18005_none_1df5691748ee6b08SpeechUXPS.DLL
+ 2006-11-02 08:43 . 2006-11-02 09:46 66560 c:windowswinsxsx86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3aeSCardDlg.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 11776 c:windowswinsxsx86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622sbunattend.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34 66048 c:windowswinsxsx86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622sbdrop.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 62976 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3windeploy.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 47616 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3wdsutil.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 94720 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3sysprep.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 54272 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3spprgrss.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 42496 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3oobeldr.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 31232 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3diagER.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 52736 c:windowswinsxsx86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3audit.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 36864 c:windowswinsxsx86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7wshcon.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 32768 c:windowswinsxsx86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7dispex.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 88064 c:windowswinsxsx86_microsoft-windows-scanprofiles_31bf3856ad364e35_6.0.6002.18005_none_4952ad655043b399wiascanprofiles.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 98816 c:windowswinsxsx86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18sdshext.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 14848 c:windowswinsxsx86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6002.18005_none_5669453d850ccabcwshrm.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 47616 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmutil.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 14336 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmstplua.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 84992 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmstp.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 26112 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmpbk32.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 56320 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmmigr.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 32768 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmlua.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 72704 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmdl32.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 31232 c:windowswinsxsx86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583bcmcfg32.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 39424 c:windowswinsxsx86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec asphone.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 62464 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065wanarp.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 22016 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065 asser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 32768 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065 asmxs.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 81408 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065 ascfg.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 49664 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065
dproxy.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 20992 c:windowswinsxsx86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065
distapi.sys
+ 2006-11-02 08:57 . 2006-11-02 09:46 13824 c:windowswinsxsx86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2fwshqos.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 33280 c:windowswinsxsx86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f raffic.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 15360 c:windowswinsxsx86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2fpacerprf.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 29184 c:windowswinsxsx86_microsoft-windows-profsvc_31bf3856ad364e35_6.0.6002.18005_none_fd9cd0792fced6f5profprov.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 24064 c:windowswinsxsx86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659wbhstipm.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 22528 c:windowswinsxsx86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659wbhst_pm.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 15872 c:windowswinsxsx86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659w3tp.dll
+ 2006-11-02 08:33 . 2006-11-02 09:46 53248 c:windowswinsxsx86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1fhotplug.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 42496 c:windowswinsxsx86_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.0.6002.18005_none_15c2137e1ca283f9dmocx.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 46592 c:windowswinsxsx86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5cpdhui.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 66048 c:windowswinsxsx86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504WinCollabElev.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 20480 c:windowswinsxsx86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504WinCollabDecorator.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 56320 c:windowswinsxsx86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504WinCollabContacts.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 39424 c:windowswinsxsx86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058ewpnpinst.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 96256 c:windowswinsxsx86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829PlaMig.dll
+ 2006-11-02 09:15 . 2006-11-02 09:45 61440 c:windowswinsxsx86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6002.18005_none_f1eef3487a8e01f0
tprint.exe
+ 2006-11-02 08:35 . 2006-11-02 09:46 35840 c:windowswinsxsx86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4perfproc.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 28672 c:windowswinsxsx86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4perfos.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 19968 c:windowswinsxsx86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4perfnet.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 39424 c:windowswinsxsx86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4perfctrs.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 37888 c:windowswinsxsx86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6002.18005_none_3b5eb3c56e0bcf3eprintcom.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 39936 c:windowswinsxsx86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4 ypeperf.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 37376 c:windowswinsxsx86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4 elog.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 17408 c:windowswinsxsx86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4diskperf.exe
+ 2006-11-02 09:15 . 2006-11-02 09:45 60416 c:windowswinsxsx86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638printui.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 64512 c:windowswinsxsx86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638findnetprinters.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8win87em.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 12704 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WFWNET.DRV
+ 2008-01-21 02:34 . 2008-01-21 02:34 41984 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8vdmredir.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 47840 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8USER.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 13888 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8TOOLHELP.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8pmspl.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 24064 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8OLESVR.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8olecli.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 14848 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8
tvdmd.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTIO804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35536 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTIO412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 35776 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTIO411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTIO404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 33952 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTIO.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTDOS804.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29274 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTDOS412.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29370 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTDOS411.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 29146 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTDOS404.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 27866 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8NTDOS.SYS
+ 2006-11-02 07:10 . 2006-11-02 07:10 68992 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8MMSYSTEM.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 39274 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8mem.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 92320 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8krnl386.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 42537 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8KEYBOARD.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 42809 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8KEY01.SYS
+ 2006-11-02 07:09 . 2006-11-02 07:09 14710 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8KB16.COM
+ 2006-11-02 07:09 . 2006-11-02 07:09 19694 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8GRAPHICS.COM
+ 2008-01-21 02:34 . 2008-01-21 02:34 56320 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8graftabl.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 24576 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8GDI.EXE
+ 2006-11-02 07:09 . 2006-11-02 07:09 12642 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8edlin.exe
+ 2006-11-02 07:09 . 2006-09-18 21:43 69886 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8edit.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 28112 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8DRWATSON.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 53536 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8dosx.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 20634 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8debug.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 39424 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8DDEML.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 27200 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8ctl3dv2.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 27097 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8country.sys
+ 2006-11-02 07:10 . 2006-11-02 07:10 32816 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8COMMDLG.DLL
+ 2006-11-02 07:09 . 2006-11-02 07:09 50648 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8COMMAND.COM
+ 2006-11-02 07:10 . 2006-11-02 07:10 10544 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8COMM.drv
+ 2006-11-02 07:09 . 2006-11-02 07:09 12498 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8append.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 15360 c:windowswinsxsx86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473ridgeunattend.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 61952 c:windowswinsxsx86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473ridgemigplugin.dll
+ 2006-11-02 08:56 . 2006-11-02 09:46 24064 c:windowswinsxsx86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6002.18005_none_09d569e703376473rdgcfg.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 21504 c:windowswinsxsx86_microsoft-windows-netbt_31bf3856ad364e35_6.0.6002.18005_none_6250416df465f2b1
etbtugc.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 17408 c:windowswinsxsx86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6002.18005_none_d31a09b83321829fiashost.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 18944 c:windowswinsxsx86_microsoft-windows-n..ion_service_runtime_31bf3856ad364e35_6.0.6002.18005_none_faec53b03fa80e64ias.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 69632 c:windowswinsxsx86_microsoft-windows-n..essprotection-agent_31bf3856ad364e35_6.0.6002.18005_none_0883ae29eaa2c24fQCLIPROV.DLL
+ 2008-01-21 02:34 . 2008-01-21 02:34 61440 c:windowswinsxsx86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6002.18005_none_45f9f0dde92709b8winipsec.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 13824 c:windowswinsxsx86_microsoft-windows-msmq-admin_31bf3856ad364e35_6.0.6002.18005_none_b9397aaa3a8e3002mqcertui.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 58880 c:windowswinsxsx86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008msobjs.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 41472 c:windowswinsxsx86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6002.18005_none_c92df35a758f4008auditpol.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 54272 c:windowswinsxsx86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820usmt2xtr.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 87552 c:windowswinsxsx86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6002.18005_none_5a9350bed861c820MXEAgent.dll
+ 2009-09-09 15:39 . 2009-04-11 06:27 53248 c:windowswinsxsx86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18005_none_9e4aa84809e375cf rinstaller.exe
+ 2009-09-09 15:39 . 2009-04-11 06:28 98816 c:windowswinsxsx86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18005_none_9e4aa84809e375cfmfps.dll
+ 2009-09-09 15:39 . 2009-04-11 06:27 24576 c:windowswinsxsx86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18005_none_9e4aa84809e375cfmfpmp.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 87552 c:windowswinsxsx86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6002.18005_none_eb13e63d87485b7fmsoert2.dll
+ 2006-11-02 07:28 . 2006-11-02 07:28 39424 c:windowswinsxsx86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6002.18005_none_eb13e63d87485b7fACCTRES.dll
+ 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:windowswinsxsx86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18005_none_7b9ca37655ae6fb5INETRES.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 81408 c:windowswinsxsx86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6002.18005_none_f343a6944cd6fe47oeimport.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 24064 c:windowswinsxsx86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6002.18005_none_f343a6944cd6fe47DirectDB.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 98304 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27TapiMigPlugin.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 31232 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27TableTextServiceMig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 72704 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27SxsMigPlugin.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 89088 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27
lscoremig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 59904 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27msdtcstp.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 22528 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27imtcmig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 31744 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27imscmig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 35328 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27imjpmig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 87552 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27icfupgd.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 87552 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27CscMig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 55808 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27commig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 56320 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27cmmigr.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 73216 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27BthMigPlugin.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 61952 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27ridgemigplugin.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 60928 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27itsmig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 89088 c:windowswinsxsx86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27adammigrate.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 10752 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298wamregps.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 26624 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298 sca.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 59392 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298iissyspr.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 30720 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298iisrstas.exe
+ 2008-01-21 02:35 . 2008-01-21 02:35 14848 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298iisreset.exe
+ 2008-01-21 02:35 . 2008-01-21 02:35 89088 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298iisreg.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 27136 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298ahadmin.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 51712 c:windowswinsxsx86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6002.18005_none_12d4ebd0b1f42298admwprox.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 32256 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2wamreg.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 19968 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2iscomlog.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 55296 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2isatq.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 16384 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2infoadmn.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 13824 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2inetinfo.exe
+ 2008-01-21 02:35 . 2008-01-21 02:35 20480 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2iisadmin.dll
+ 2008-01-21 02:35 . 2008-01-21 02:35 75776 c:windowswinsxsx86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6002.18005_none_3b1d70e11f14ecf2coadmin.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 23552 c:windowswinsxsx86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18005_none_d195813326668869w3dt.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 12800 c:windowswinsxsx86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.0.6002.18005_none_d195813326668869hwebcore.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 69120 c:windowswinsxsx86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14baiesetup.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 44544 c:windowswinsxsx86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14baiernonce.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 70656 c:windowswinsxsx86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6002.18005_none_c7bc2e305b9b14baie4uinit.exe
+ 2006-11-02 08:36 . 2006-11-02 09:46 16384 c:windowswinsxsx86_microsoft-windows-ie-runoncessetup_31bf3856ad364e35_6.0.6002.18005_none_8ada417dc83b84b1iessetup.dll
+ 2006-11-02 08:49 . 2006-11-02 09:45 26624 c:windowswinsxsx86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_314d791517204c15ieUnatt.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 12800 c:windowswinsxsx86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_6.0.6002.18005_none_fe396815d7e3cf11msfeedssync.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 72704 c:windowswinsxsx86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6002.18005_none_b01d9ad903e7b4d8admparse.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 32256 c:windowswinsxsx86_microsoft-windows-icm-base_31bf3856ad364e35_6.0.6002.18005_none_24b3636086850491WcsPlugInService.dll
+ 2009-06-11 11:19 . 2009-04-11 06:28 64512 c:windowswinsxsx86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18005_none_03d46c899ef4dd32WininetPlugin.dll
+ 2009-06-11 11:19 . 2009-04-11 06:28 27648 c:windowswinsxsx86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18005_none_03d46c899ef4dd32jsproxy.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 18944 c:windowswinsxsx86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18005_none_1732cf8206b3dc2f zupd.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 23040 c:windowswinsxsx86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18005_none_13ce8bde797c36f2 unnel.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 15360 c:windowswinsxsx86_microsoft-windows-i..oexistencemigration_31bf3856ad364e35_6.0.6002.18005_none_13ce8bde797c36f2TUNMP.SYS
+ 2008-01-21 02:35 . 2008-01-21 02:35 12288 c:windowswinsxsx86_microsoft-windows-i..httptracingbinaries_31bf3856ad364e35_6.0.6002.18005_none_3172619518138603iisetw.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 58368 c:windowswinsxsx86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.0.6002.18005_none_fd148db3f8a0d120IMTCDIC.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 22016 c:windowswinsxsx86_microsoft-windows-hid-user_31bf3856ad364e35_6.0.6002.18005_none_d897c17984907383hid.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 23552 c:windowswinsxsx86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898lpk.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 72704 c:windowswinsxsx86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898fontsub.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 10240 c:windowswinsxsx86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898dciman32.dll
+ 2009-07-16 16:52 . 2009-04-11 06:28 34304 c:windowswinsxsx86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18005_none_abbe918457a82898atmlib.dll
+ 2006-11-02 08:32 . 2006-11-02 09:44 20480 c:windowswinsxsx86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.0.6002.18005_none_02b21d8f327e1d66comp.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 56320 c:windowswinsxsx86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6002.18005_none_22622b2203060735wermgr.exe
+ 2008-01-21 02:33 . 2008-01-21 02:33 30208 c:windowswinsxsx86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6002.18005_none_22622b2203060735werdiagcontroller.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 62976 c:windowswinsxsx86_microsoft-windows-errorreportingconsole_31bf3856ad364e35_6.0.6002.18005_none_57f8aa83200752e7wercplsupport.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 57344 c:windowswinsxsx86_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.0.6002.18005_none_8c3560ecfb3fdb56eapsvc.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 41472 c:windowswinsxsx86_microsoft-windows-e..-protocol-host-peer_31bf3856ad364e35_6.0.6002.18005_none_65ff0438c08bf3b7eappprxy.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 12198 c:windowswinsxsx86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746gatherWiredInfo.vbs
+ 2008-01-21 02:34 . 2008-01-21 02:34 45568 c:windowswinsxsx86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746dot3dlg.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 45056 c:windowswinsxsx86_microsoft-windows-dot3svc_31bf3856ad364e35_6.0.6002.18005_none_6d5787d470a61746dot3api.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 25088 c:windowswinsxsx86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18005_none_e3cdf5e97f7b2eb7dnscacheugc.exe
+ 2006-11-02 09:03 . 2006-11-02 09:46 11264 c:windowswinsxsx86_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.0.6002.18005_none_c438e5b15de80145d3d8thk.dll
+ 2006-11-02 08:56 . 2006-11-02 09:46 10240 c:windowswinsxsx86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6002.18005_none_d945a2ac2bb19ac6dhcpcmonitor.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 81920 c:windowswinsxsx86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6002.18005_none_8f8f0d20ba53c683dwmredir.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 39936 c:windowswinsxsx86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6002.18005_none_e1fa5d993d1f2640dwmapi.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 22528 c:windowswinsxsx86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.18005_none_6770865eab1bf87fmsyuv.dll
+ 2006-11-02 08:55 . 2006-11-02 09:46 49664 c:windowswinsxsx86_microsoft-windows-d..olorspaceconverters_31bf3856ad364e35_6.0.6002.18005_none_6770865eab1bf87fiyuv_32.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 11776 c:windowswinsxsx86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb369c52cd10padrs804.dll
+ 2006-11-02 08:38 . 2006-11-02 09:46 11264 c:windowswinsxsx86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6002.18005_none_3c77bb369c52cd10padrs404.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 14336 c:windowswinsxsx86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.0.6002.18005_none_ef1cb7f16f3c7508IMJPDADM.EXE
+ 2008-01-21 02:34 . 2008-01-21 02:34 35328 c:windowswinsxsx86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.0.6002.18005_none_1051bfce8308a832imjpmig.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 17408 c:windowswinsxsx86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6002.18005_none_78ed24422a0dc451cfgmgr32.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 12800 c:windowswinsxsx86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6002.18005_none_273dbf533b731283fs_rec.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 17408 c:windowswinsxsx86_microsoft-windows-convert_31bf3856ad364e35_6.0.6002.18005_none_9ec0c3c7a573ff4bconvert.exe
+ 2006-11-02 08:31 . 2006-11-02 09:46 31232 c:windowswinsxsx86_microsoft-windows-convert_31bf3856ad364e35_6.0.6002.18005_none_9ec0c3c7a573ff4bcnvfat.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 38912 c:windowswinsxsx86_microsoft-windows-com-dtc-client_31bf3856ad364e35_6.0.6002.18005_none_4ede66c2b66f93f3xolehlp.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46 41984 c:windowswinsxsx86_microsoft-windows-certutil_31bf3856ad364e35_6.0.6002.18005_none_b77080f9307e5e18certenc.dll
+ 2006-11-02 08:45 . 2006-11-02 09:46 14848 c:windowswinsxsx86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6002.18005_none_1948307cbc8d5ac3
etrap.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 52736 c:windowswinsxsx86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6002.18005_none_1948307cbc8d5ac3expand.exe
+ 2008-01-21 02:34 . 2008-01-21 02:34 46592 c:windowswinsxsx86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6002.18005_none_6b24103689ec6965setbcdlocale.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 28160 c:windowswinsxsx86_microsoft-windows-azman_31bf3856ad364e35_6.0.6002.18005_none_58429241afdb27e5AzSqlExt.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 20992 c:windowswinsxsx86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6dswave.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 84480 c:windowswinsxsx86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6dmscript.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 38400 c:windowswinsxsx86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6dmloader.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 62976 c:windowswinsxsx86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6dmcompos.dll
+ 2006-11-02 12:33 . 2006-11-02 12:33 30208 c:windowswinsxsx86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6dmband.dll
+ 2006-11-02 08:39 . 2006-11-02 09:45 14336 c:windowswinsxsx86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defdpcaui.exe
+ 2006-11-02 08:39 . 2006-11-02 09:46 38912 c:windowswinsxsx86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6002.18005_none_96b5a00fa593defdacppage.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 13824 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_7cc3af8dde4f2233apilogen.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 24064 c:windowswinsxsx86_microsoft-windows-a..lity-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_7cc3af8dde4f2233amxread.dll
+ 2006-11-02 08:29 . 2006-11-02 09:45 20992 c:windowswinsxsx86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_d6fc7cca49dba20fsdbinst.exe
+ 2006-11-02 08:29 . 2006-11-02 09:46 24576 c:windowswinsxsx86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6002.18005_none_d6fc7cca49dba20faelupsvc.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 52792 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6volmgr.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 56888 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6VIAAGP.SYS
+ 2008-01-21 02:32 . 2008-01-21 02:32 60984 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6ULIAGPKX.SYS
+ 2008-01-21 02:32 . 2008-01-21 02:32 15288 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6swenum.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 22632 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6streamci.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 55864 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6SISAGP.SYS
+ 2008-01-21 02:32 . 2008-01-21 02:32 31288 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6mssmbios.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 16440 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6msisadrv.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 49720 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6isapnp.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 57400 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6AMDAGP.SYS
+ 2008-01-21 02:32 . 2008-01-21 02:32 56376 c:windowswinsxsx86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6AGP440.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 35384 c:windowswinsxsx86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7cakbdclass.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 54784 c:windowswinsxsx86_keyboard.inf_31bf3856ad364e35_6.0.6002.18005_none_9939e6e4d61ab7cai8042prt.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 25472 c:windowswinsxsx86_input.inf_31bf3856ad364e35_6.0.6002.18005_none_225b12d31d3f7b27hidparse.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 21504 c:windowswinsxsx86_input.inf_31bf3856ad364e35_6.0.6002.18005_none_225b12d31d3f7b27hidir.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 13568 c:windowswinsxsx86_brmfcsto.inf_31bf3856ad364e35_6.0.6002.18005_none_25dcd6df44d8819bBrFiltLo.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 11264 c:windowswinsxsx86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94wmiacpi.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 20792 c:windowswinsxsx86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94compbatt.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 28216 c:windowswinsxsx86_acpi.inf_31bf3856ad364e35_6.0.6002.18005_none_24743d0fcb299a94attc.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 53376 c:windowswinsxsx86_1394.inf_31bf3856ad364e35_6.0.6002.18005_none_fd1acfab0309bd5e1394bus.sys
+ 2008-01-21 01:58 . 2009-09-24 08:12 49110 c:windowsSystem32WDIShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:02 . 2009-09-24 08:43 95690 c:windowsSystem32WDIBootPerformanceDiagnostics_SystemData.bin
+ 2008-09-26 12:09 . 2009-09-24 08:43 13074 c:windowsSystem32WDI{86432a0b-3c7d-4ddf-a89c-172faa90485d}S-1-5-21-3743685926-3696750326-698254772-1004_UserData.bin
+ 2008-04-17 16:30 . 2009-09-24 08:41 32768 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
- 2008-04-17 16:30 . 2009-09-23 20:58 32768 c:windowsSystem32configsystemprofileAppDataRoamingMicrosoftWindowsCookiesindex.dat
+ 2008-04-17 16:30 . 2009-09-24 08:41 65536 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
- 2008-04-17 16:30 . 2009-09-23 20:58 65536 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2008-04-17 16:30 . 2009-09-24 08:41 49152 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
- 2008-04-17 16:30 . 2009-09-23 20:58 49152 c:windowsSystem32configsystemprofileAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
- 2008-09-29 11:41 . 2009-06-08 16:31 16384 c:windowsServiceProfilesLocalServiceAppDataRoamingMicrosoftWindowsCookiesindex.dat
+ 2008-09-29 11:41 . 2009-09-23 21:56 16384 c:windowsServiceProfilesLocalServiceAppDataRoamingMicrosoftWindowsCookiesindex.dat
+ 2008-09-29 11:41 . 2009-09-23 21:56 32768 c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
- 2008-09-29 11:41 . 2009-06-08 16:31 32768 c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5index.dat
+ 2008-09-29 11:41 . 2009-09-23 21:56 16384 c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
- 2008-09-29 11:41 . 2009-06-08 16:31 16384 c:windowsServiceProfilesLocalServiceAppDataLocalMicrosoftWindowsHistoryHistory.IE5index.dat
+ 2008-01-21 02:32 . 2008-01-21 02:32 5632 c:windowswinsxsx86_wdmaudio.inf_31bf3856ad364e35_6.0.6002.18005_none_6252d21f1747740ddrmkaud.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 5888 c:windowswinsxsx86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2usbd.sys
+ 2008-01-21 02:32 . 2008-01-21 02:32 8704 c:windowswinsxsx86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2hccoin.dll
+ 2008-01-21 02:32 . 2008-01-21 02:32 9216 c:windowswinsxsx86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1fserscan.sys
+ 2008-01-21 02:34 . 2008-01-21 02:34 6656 c:windowswinsxsx86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.0.6002.18005_none_f5822ffe8bc8ab63CertEnrollCtrl.exe
+ 2006-11-02 07:15 . 2006-11-02 07:15 2048 c:windowswinsxsx86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3fWmiApRes.dll
+ 2006-11-02 07:14 . 2006-11-02 07:14 6144 c:windowswinsxsx86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3fWinMgmtR.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 1536 c:windowswinsxsx86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1WsmCl.dll
+ 2006-11-02 08:58 . 2006-11-02 09:45 9728 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffTCPSVCS.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 8704 c:windowswinsxsx86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedffHOSTNAME.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:39 3072 c:windowswinsxsx86_microsoft-windows-t..-platform-libraries_31bf3856ad364e35_6.0.6002.18005_none_ec5c63f1986ff65eicmp.dll
+ 2006-11-02 08:45 . 2006-11-02 09:46 9728 c:windowswinsxsx86_microsoft-windows-smbserver_31bf3856ad364e35_6.0.6002.18005_none_fae06204e7fd48ddsscore.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 9728 c:windowswinsxsx86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18dwscproxystub.dll
+ 2008-01-21 02:34 . 2008-01-21 02:34 8192 c:windowswinsxsx86_microsoft-windows-riched32_31bf3856ad364e35_6.0.6002.18005_none_9eec2ce27fbd701c iched32.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 7680 c:windowswinsxsx86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829plasrv.exe
+ 2006-11-02 07:10 . 2006-11-02 07:10 8960 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WOWEXEC.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2864 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WOWDEB.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2112 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WINSPOOL.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 2864 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WINSOCK.DLL
+ 2006-11-02 07:10 . 2006-11-02 07:10 5120 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WINNLS.DLL
+ 2006-11-02 08:35 . 2006-11-02 08:35 6656 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8win.com
+ 2006-11-02 07:10 . 2006-11-02 07:10 9216 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8WIFEMAN.DLL
+ 2006-11-02 07:10 . 2006-11-02 07:10 2176 c:windowswinsxsx86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8vga.drv
+ 2006-11-02 06:25 . 2006-09-18 21:43 9008 c:windows