Se connecter avec
S'enregistrer | Connectez-vous

cheval de troie win 32TRATBHO RESOLU

Dernière réponse : dans Sécurité

Bonjour,

Lorsque j'allume mon ordinateur, AVAST m'indique la présence d'un virus cheval de troie win 32 en m'invitant à la mettre en quarantaine, ce que je fais, mais il revient à chaque fois.

Je vous remercie par avance si vous pouvez essayer de m'apporter une réponse pour y remédier.

Je joins un rapport HIJACK

:hello: 

Merci beaucoup

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:05, on 2008-03-30
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6AAD9645-CF32-486F-BB7A-3B7919C38552} - C:\WINDOWS\system32\awvtq.dll (file missing)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BMebf07f68] Rundll32.exe "C:\WINDOWS\system32\dmnpejui.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d7f7718abf04f26bb570bfe3e386e2f
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d7f7718abf04f26bb570bfe3e386e2f
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall....
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scan...
O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.orange.fr/al/presentation/pc/resources/ac...
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-f5ba36e5fd109d38.spaces.live.com/PhotoUpload...
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: byxutuv - byxutuv.dll (file missing)
O20 - Winlogon Notify: gebcyvs - gebcyvs.dll (file missing)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

--
End of file - 10385 bytes
Lassé par la pub ? Créez un compte

:hello: 

Tu es infecté(e) par "Vundo". Supprime tous les cracks de ton PC s'ils sont présents car sinon ils relanceront l'infection.

Télécharge Vundofix (par Atribune) sur ton Bureau.

  • Double-clique VundoFix.exe afin de le lancer
  • Clique sur le bouton Scan for Vundo
  • Lorsque le scan est complété, clique sur le bouton Remove Vundo
  • Une invite te demandera si tu veux supprimer les fichiers, clique YES
  • Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
  • Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK
  • Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse

    Note:
    Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-dessus, à partir de "clique sur le bouton Scan for Vundo".

    N.B : Il se peut que vundofix ne détecte rien, dans ce cas-là pas de rapport nécessaire, dis-moi juste qu'il n'a rien trouvé.

    Egwene a dit :
    :hello: 

    Tu es infecté(e) par "Vundo". Supprime tous les cracks de ton PC s'ils sont présents car sinon ils relanceront l'infection.

    Télécharge Vundofix (par Atribune) sur ton Bureau.

  • Double-clique VundoFix.exe afin de le lancer
  • Clique sur le bouton Scan for Vundo
  • Lorsque le scan est complété, clique sur le bouton Remove Vundo
  • Une invite te demandera si tu veux supprimer les fichiers, clique YES
  • Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
  • Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK
  • Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse

    Note:
    Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-dessus, à partir de "clique sur le bouton Scan for Vundo".

    N.B : Il se peut que vundofix ne détecte rien, dans ce cas-là pas de rapport nécessaire, dis-moi juste qu'il n'a rien trouvé.

    :hello: 

    Bien sûr qu'on peut l'ôter ;) 

    1) Affiche les fichiers et dossiers cachés …
    Pour ce faire, tu vas dans un dossier, par ex. "Mes Images".
    Ensuite, clique sur > Outils > Options des dossiers ...
    clique sur l' onglet « Affichage » et ...
    coche ---> Afficher les fichiers et dossiers cachés
    décoche > Masquer les extensions des fichiers dont le type est connu
    décoche > Masquer les fichiers protégés du système d' exploitation (recommandé).
    « Appliquer » et « OK ».

    2) Désactive toute protection résidente ( antivirus…) !
    Déconnecte-toi d’internet, ferme tous les programmes en cours et laisse combofix travailler : ne fais donc pas autre chose en même temps !


    Télécharge Combofix de sUBs
    Sauvegarde le sur ton bureau et pas ailleurs !
    Redémarre en mode sans échecs : aide ici >>>
    http://forum.telecharger.01net.com/telecharger/virus_et...
    /!\ Ne jamais redémarrer en mode sans échec via msconfig ! /!\

    Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport. Il se trouve ici : C:\Combofix.txt

    3) Copie/colle un nouveau rapport HiJackThis avec.

    ;) 

    je te remercie pour ces précieux conseils.

    :sol: 

    Voilà déjà le rapport de combofix :

    ComboFix 08-03-25.4 - Christelle MARTIN 2008-03-30 18:29:17.2 - FAT32x86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.292 [GMT 2:00]
    Endroit: C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\Christelle MARTIN\Application Data\inst.exe
    C:\WINDOWS\cookies.ini
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\cdrmjpkh.dll
    C:\WINDOWS\system32\dnvvdsuj.dll
    C:\WINDOWS\system32\fhxnbjvm.dll
    C:\WINDOWS\system32\gebcyvs.dll
    C:\WINDOWS\system32\glrwdhjp.dll
    C:\WINDOWS\system32\gwciiama.dll
    C:\WINDOWS\system32\hdfbmkvv.dll
    C:\WINDOWS\system32\hggfcyw.dll
    C:\WINDOWS\system32\hnrpkwgu.dll
    C:\WINDOWS\system32\huhhsnsn.dll
    C:\WINDOWS\system32\hvskfopt.dll
    C:\WINDOWS\system32\ijkmp.ini
    C:\WINDOWS\system32\ijkmp.ini2
    C:\WINDOWS\system32\ktovpaie.dll
    C:\WINDOWS\system32\lcefhakr.dll
    C:\WINDOWS\system32\lulgjnnl.dll
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\mljkiii.dll
    C:\WINDOWS\system32\pmkji.dll
    C:\WINDOWS\system32\snaxbtwc.dll
    C:\WINDOWS\system32\veleiuex.dll
    C:\WINDOWS\system32\vkdfqtby.dll
    C:\WINDOWS\system32\vvkmbfdh.ini
    C:\WINDOWS\system32\ytoymror.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-30 ))))))))))))))))))))))))))))))))))))
    .

    2008-03-30 18:28 . 2008-03-30 18:28 <REP> d-------- C:\ComboFix(2)
    2008-03-30 15:29 . 2008-03-30 15:29 <REP> d-------- C:\VundoFix Backups
    2008-03-26 19:05 . 2008-03-26 19:05 <REP> d-------- C:\Program Files\Navilog1
    2008-03-25 07:55 . 2008-03-25 07:55 <REP> d--hs---- C:\FOUND.000
    2008-03-24 14:18 . 2008-03-26 12:52 1,575,156 ---hs---- C:\WINDOWS\system32\evhahdhl.ini
    2008-03-20 18:42 . 2008-03-24 14:19 1,550,429 ---hs---- C:\WINDOWS\system32\celhqvpp.ini
    2008-03-19 18:43 . 2008-03-19 18:43 1,537,356 ---hs---- C:\WINDOWS\system32\siikrjyw.ini
    2008-03-18 13:01 . 2008-03-19 18:44 1,538,894 ---hs---- C:\WINDOWS\system32\wfwdajlh.ini
    2008-03-18 07:44 . 2008-03-18 07:44 1,158 --a------ C:\WINDOWS\mozver.dat
    2008-03-16 20:49 . 2008-03-16 20:49 <REP> d-------- C:\Documents and Settings\Christelle MARTIN\Application Data\Grisoft
    2008-03-16 20:49 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-16 09:42 . 2008-03-17 12:39 1,373,734 ---hs---- C:\WINDOWS\system32\rnlurplg.ini
    2008-03-14 22:44 . 2008-03-16 09:39 1,321,019 ---hs---- C:\WINDOWS\system32\uumalmkk.ini
    2008-03-14 22:19 . 2008-03-14 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
    2008-03-14 22:18 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
    2008-03-14 22:18 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
    2008-03-14 22:18 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
    2008-03-14 22:18 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
    2008-03-14 22:18 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
    2008-03-14 07:59 . 2008-03-14 21:44 1,343,514 ---hs---- C:\WINDOWS\system32\edsiinjf.ini
    2008-03-13 19:50 . 2008-03-13 19:50 <REP> d-------- C:\Program Files\Trend Micro
    2008-03-13 07:56 . 2008-03-14 07:56 1,350,056 ---hs---- C:\WINDOWS\system32\lxeaeoqr.ini
    2008-03-13 07:47 . 2008-03-13 07:47 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-03-12 13:11 . 2008-03-12 13:11 <REP> d-------- C:\Program Files\AxBx
    2008-03-12 07:53 . 2008-03-13 07:54 1,344,035 ---hs---- C:\WINDOWS\system32\ptqvqhog.ini
    2008-03-11 22:58 . 2008-03-11 22:58 <REP> d-------- C:\Program Files\Fichiers communs\Panda Software
    2008-03-11 07:34 . 2008-03-12 07:48 1,315,360 ---hs---- C:\WINDOWS\system32\kjncpqfc.ini
    2008-03-10 21:00 . 2008-03-10 21:00 100 --a------ C:\WINDOWS\wininit.ini
    2008-02-18 19:59 . 2008-02-18 19:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
    2008-02-01 11:17 . 2008-02-01 11:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-17 20:22 127,034 ------r C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
    2008-01-11 04:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2007-12-19 21:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2007-12-18 08:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
    2007-12-08 04:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2007-12-06 10:03 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
    2007-12-06 10:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2007-12-06 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2007-12-06 03:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
    2007-12-04 17:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
    2007-12-04 17:41 550,912 ------w C:\WINDOWS\system32\oleaut32.dll
    2007-12-04 12:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-12-04 11:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    2007-12-04 00:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    2007-12-04 00:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
    2007-08-08 17:45 47,360 ----a-w C:\Documents and Settings\Christelle MARTIN\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-03-26_21.55.10.18 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-11-17 18:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    + 2004-11-17 17:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    - 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    + 2004-10-14 08:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    - 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    + 2004-10-14 08:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    - 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    + 2004-10-14 08:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    - 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    + 2004-10-14 08:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    - 2004-10-28 02:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    + 2004-10-28 01:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    - 2004-10-28 02:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    + 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    - 2004-10-28 02:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    + 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    - 2004-09-29 23:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    + 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    - 2004-10-14 19:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    + 2004-10-14 18:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    - 2004-10-14 19:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    + 2004-10-14 18:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    - 2004-10-14 19:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    + 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    - 2004-10-14 19:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    + 2004-10-14 18:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    - 2004-10-13 17:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    + 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    - 2004-12-07 20:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    + 2004-12-07 19:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    - 2005-04-22 06:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    + 2005-04-22 05:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    - 2005-05-17 01:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    + 2005-05-17 00:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    - 2005-03-02 19:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    + 2005-03-02 18:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    - 2005-03-02 19:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    + 2005-03-02 18:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    - 2005-03-02 19:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    + 2005-03-02 18:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    - 2005-03-02 19:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    + 2005-03-02 18:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    - 2005-03-02 19:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    + 2005-03-02 18:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    - 2005-03-02 19:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    + 2005-03-02 18:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    - 2005-03-02 19:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    + 2005-03-02 18:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    - 2005-03-02 19:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    + 2005-03-02 18:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    - 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    + 2005-02-24 17:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    - 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    + 2005-02-24 17:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    - 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    + 2005-02-24 17:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    - 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    + 2005-02-24 17:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    - 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    + 2005-02-24 17:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    - 2005-07-08 17:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    + 2005-07-08 16:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    - 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    + 2005-07-07 17:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    - 2005-04-28 20:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    + 2005-04-28 19:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    - 2005-04-28 20:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    + 2005-04-28 19:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    - 2005-04-28 20:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    + 2005-04-28 19:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    - 2005-04-28 20:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    + 2005-04-28 19:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    - 2005-05-27 00:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    + 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    - 2005-05-27 03:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    + 2005-05-27 02:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    - 2005-05-27 03:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    + 2005-05-27 02:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    - 2005-05-27 03:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    + 2005-05-27 02:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    - 2005-06-11 01:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    + 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    - 2005-05-11 03:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    + 2005-05-11 02:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    - 2005-02-25 04:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    + 2005-02-25 03:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    - 2005-06-15 18:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    + 2005-06-15 17:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    - 2005-06-10 05:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    + 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    - 2006-02-15 01:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    + 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    - 2005-09-01 02:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    + 2005-09-01 01:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    - 2005-09-23 04:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    + 2005-09-23 03:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    - 2005-09-03 01:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    + 2005-09-03 00:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    - 2005-09-27 01:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    + 2005-09-27 00:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    - 2005-09-01 02:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    + 2005-09-01 01:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    - 2005-09-26 16:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    + 2005-09-26 15:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    - 2005-09-10 02:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    + 2005-09-10 01:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    - 2005-09-09 15:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    + 2005-09-09 14:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    - 2005-06-29 02:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    + 2005-06-29 01:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    - 2005-06-29 02:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    + 2005-06-29 01:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    - 2005-07-26 05:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    + 2005-07-26 04:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    - 2005-07-26 05:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    + 2005-07-26 04:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    - 2005-07-26 05:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    + 2005-07-26 04:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    - 2005-07-26 05:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    + 2005-07-26 04:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    - 2005-07-26 05:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    + 2005-07-26 04:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    - 2005-07-26 05:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    + 2005-07-26 04:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    - 2005-07-26 05:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    + 2005-07-26 04:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    - 2005-07-26 05:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    + 2005-07-26 04:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    - 2005-07-26 05:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    + 2005-07-26 04:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    - 2005-07-26 05:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    + 2005-07-26 04:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    - 2005-07-26 00:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    + 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    - 2005-07-26 05:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    + 2005-07-26 04:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    - 2005-07-26 05:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    + 2005-07-26 04:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    - 2005-07-26 05:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    + 2005-07-26 04:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    - 2005-07-26 05:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    + 2005-07-26 04:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    - 2005-07-26 05:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    + 2005-07-26 04:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    - 2005-07-26 05:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    + 2005-07-26 04:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    - 2005-07-26 05:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    + 2005-07-26 04:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    - 2005-07-26 05:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    + 2005-07-26 04:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    - 2005-07-26 05:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    + 2005-07-26 04:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    - 2005-07-26 05:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    + 2005-07-26 04:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    - 2005-07-26 05:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    + 2005-07-26 04:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    - 2005-07-25 18:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    + 2005-07-25 17:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    - 2005-08-30 05:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    + 2005-08-30 04:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    - 2006-03-24 05:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    + 2006-03-24 04:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    - 2005-08-22 19:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    + 2005-08-22 18:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    - 2005-08-20 00:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    + 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    - 2005-08-23 04:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    + 2005-08-23 03:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    - 2005-08-22 17:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    + 2005-08-22 16:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    - 2005-10-17 22:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    + 2005-10-17 21:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    - 2005-10-17 22:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    + 2005-10-17 21:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    - 2006-03-17 05:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    + 2006-03-17 04:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    - 2006-03-22 02:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    + 2006-03-22 01:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    - 2006-03-17 02:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    + 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    - 2005-10-20 23:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    + 2005-10-20 22:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    - 2005-10-13 00:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    + 2005-10-12 23:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    - 2006-06-22 11:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    + 2006-06-22 10:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    - 2006-03-23 06:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    + 2006-03-23 05:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    - 2006-01-04 05:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    + 2006-01-04 04:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    - 2006-03-01 20:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    + 2006-03-01 19:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    - 2006-03-01 20:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    + 2006-03-01 19:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    - 2006-03-01 20:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    + 2006-03-01 19:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    - 2006-03-01 20:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    + 2006-03-01 19:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    - 2006-03-01 20:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    + 2006-03-01 19:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    - 2006-03-01 20:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    + 2006-03-01 19:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    - 2006-05-19 15:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    + 2006-05-19 14:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    - 2006-05-19 15:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    + 2006-05-19 14:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    - 2006-05-19 15:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    + 2006-05-19 14:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    - 2006-05-05 11:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    + 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    - 2006-05-05 11:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    + 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    - 2006-02-21 08:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    + 2006-02-21 07:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    - 2006-02-21 04:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    + 2006-02-21 03:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    - 2006-02-21 04:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    + 2006-02-21 03:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    - 2006-02-21 08:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    + 2006-02-21 07:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    - 2006-02-21 08:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    + 2006-02-21 07:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    - 2006-02-21 08:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    + 2006-02-21 07:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    - 2006-02-21 08:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    + 2006-02-21 07:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    - 2006-01-19 20:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    + 2006-01-19 19:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    - 2006-07-14 16:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    + 2006-07-14 15:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    - 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    + 2005-10-12 22:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    - 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    + 2005-10-12 22:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    - 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    + 2005-10-12 22:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    - 2005-10-12 23:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    + 2005-10-12 22:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    - 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    + 2005-10-12 22:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    - 2006-03-17 02:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    + 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    - 2006-05-18 06:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    + 2006-05-18 05:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    - 2006-07-05 11:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    + 2006-07-05 10:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    - 2006-04-20 13:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    + 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    - 2006-11-27 16:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    + 2006-11-27 15:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    - 2006-11-27 16:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    + 2006-11-27 15:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    - 2006-06-01 20:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    + 2006-06-01 19:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    - 2006-06-01 20:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    + 2006-06-01 19:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    - 2006-07-13 12:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    + 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    - 2006-10-12 14:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    + 2006-10-12 13:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    - 2006-10-12 14:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    + 2006-10-12 13:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    - 2006-10-12 12:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    + 2006-10-12 11:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    - 2006-10-16 12:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    + 2006-10-16 11:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    - 2006-07-21 09:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    + 2006-07-21 08:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    - 2006-06-26 18:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    + 2006-06-26 17:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    - 2006-06-26 18:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    + 2006-06-26 17:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    - 2006-06-22 06:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    + 2006-06-22 05:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    - 2006-06-22 06:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    + 2006-06-22 05:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.ex

    Je ne pense as que le rapport HJACK ait été noté, alors, par précaution je le mets à nouveau

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:39:41, on 30/03/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Program Files\Alwil Software\Avast4\setup\avast.setup

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {6AAD9645-CF32-486F-BB7A-3B7919C38552} - C:\WINDOWS\system32\awvtq.dll (file missing)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [BMebf07f68] Rundll32.exe "C:\WINDOWS\system32\dmnpejui.dll",s
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d7f7718abf04f26bb570bfe3e386e2f
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d7f7718abf04f26bb570bfe3e386e2f
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall....
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scan...
    O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.orange.fr/al/presentation/pc/resources/ac...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-f5ba36e5fd109d38.spaces.live.com/PhotoUpload...
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O20 - Winlogon Notify: byxutuv - byxutuv.dll (file missing)
    O20 - Winlogon Notify: gebcyvs - gebcyvs.dll (file missing)
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

    --
    End of file - 10383 bytes


    Par contre, je ne pense pas que le cheval de troie soit parti car j'ai fait un nouveau scan AVAST lequel m'a confirmé que le virus ait encore présent

    Re,

    Le rapport combofix est incomplet, poste-moi la suite dans un autre message, en plusieurs fois si nécessaire.

    Oui, toujours normal que le virus soit présent, mais il a déjà été sévèrement attaqué ;) 

    ok désolée, je te le renvoie

    C un coriace alors !!! :sol: 

    ComboFix 08-03-25.4 - Christelle MARTIN 2008-03-30 18:29:17.2 - FAT32x86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.292 [GMT 2:00]
    Endroit: C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\Christelle MARTIN\Application Data\inst.exe
    C:\WINDOWS\cookies.ini
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\cdrmjpkh.dll
    C:\WINDOWS\system32\dnvvdsuj.dll
    C:\WINDOWS\system32\fhxnbjvm.dll
    C:\WINDOWS\system32\gebcyvs.dll
    C:\WINDOWS\system32\glrwdhjp.dll
    C:\WINDOWS\system32\gwciiama.dll
    C:\WINDOWS\system32\hdfbmkvv.dll
    C:\WINDOWS\system32\hggfcyw.dll
    C:\WINDOWS\system32\hnrpkwgu.dll
    C:\WINDOWS\system32\huhhsnsn.dll
    C:\WINDOWS\system32\hvskfopt.dll
    C:\WINDOWS\system32\ijkmp.ini
    C:\WINDOWS\system32\ijkmp.ini2
    C:\WINDOWS\system32\ktovpaie.dll
    C:\WINDOWS\system32\lcefhakr.dll
    C:\WINDOWS\system32\lulgjnnl.dll
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\mljkiii.dll
    C:\WINDOWS\system32\pmkji.dll
    C:\WINDOWS\system32\snaxbtwc.dll
    C:\WINDOWS\system32\veleiuex.dll
    C:\WINDOWS\system32\vkdfqtby.dll
    C:\WINDOWS\system32\vvkmbfdh.ini
    C:\WINDOWS\system32\ytoymror.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-30 ))))))))))))))))))))))))))))))))))))
    .

    2008-03-30 18:28 . 2008-03-30 18:28 <REP> d-------- C:\ComboFix(2)
    2008-03-30 15:29 . 2008-03-30 15:29 <REP> d-------- C:\VundoFix Backups
    2008-03-26 19:05 . 2008-03-26 19:05 <REP> d-------- C:\Program Files\Navilog1
    2008-03-25 07:55 . 2008-03-25 07:55 <REP> d--hs---- C:\FOUND.000
    2008-03-24 14:18 . 2008-03-26 12:52 1,575,156 ---hs---- C:\WINDOWS\system32\evhahdhl.ini
    2008-03-20 18:42 . 2008-03-24 14:19 1,550,429 ---hs---- C:\WINDOWS\system32\celhqvpp.ini
    2008-03-19 18:43 . 2008-03-19 18:43 1,537,356 ---hs---- C:\WINDOWS\system32\siikrjyw.ini
    2008-03-18 13:01 . 2008-03-19 18:44 1,538,894 ---hs---- C:\WINDOWS\system32\wfwdajlh.ini
    2008-03-18 07:44 . 2008-03-18 07:44 1,158 --a------ C:\WINDOWS\mozver.dat
    2008-03-16 20:49 . 2008-03-16 20:49 <REP> d-------- C:\Documents and Settings\Christelle MARTIN\Application Data\Grisoft
    2008-03-16 20:49 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-16 09:42 . 2008-03-17 12:39 1,373,734 ---hs---- C:\WINDOWS\system32\rnlurplg.ini
    2008-03-14 22:44 . 2008-03-16 09:39 1,321,019 ---hs---- C:\WINDOWS\system32\uumalmkk.ini
    2008-03-14 22:19 . 2008-03-14 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
    2008-03-14 22:18 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
    2008-03-14 22:18 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
    2008-03-14 22:18 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
    2008-03-14 22:18 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
    2008-03-14 22:18 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
    2008-03-14 07:59 . 2008-03-14 21:44 1,343,514 ---hs---- C:\WINDOWS\system32\edsiinjf.ini
    2008-03-13 19:50 . 2008-03-13 19:50 <REP> d-------- C:\Program Files\Trend Micro
    2008-03-13 07:56 . 2008-03-14 07:56 1,350,056 ---hs---- C:\WINDOWS\system32\lxeaeoqr.ini
    2008-03-13 07:47 . 2008-03-13 07:47 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-03-12 13:11 . 2008-03-12 13:11 <REP> d-------- C:\Program Files\AxBx
    2008-03-12 07:53 . 2008-03-13 07:54 1,344,035 ---hs---- C:\WINDOWS\system32\ptqvqhog.ini
    2008-03-11 22:58 . 2008-03-11 22:58 <REP> d-------- C:\Program Files\Fichiers communs\Panda Software
    2008-03-11 07:34 . 2008-03-12 07:48 1,315,360 ---hs---- C:\WINDOWS\system32\kjncpqfc.ini
    2008-03-10 21:00 . 2008-03-10 21:00 100 --a------ C:\WINDOWS\wininit.ini
    2008-02-18 19:59 . 2008-02-18 19:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
    2008-02-01 11:17 . 2008-02-01 11:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-17 20:22 127,034 ------r C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
    2008-01-11 04:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2007-12-19 21:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2007-12-18 08:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
    2007-12-08 04:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2007-12-06 10:03 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
    2007-12-06 10:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2007-12-06 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2007-12-06 03:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
    2007-12-04 17:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
    2007-12-04 17:41 550,912 ------w C:\WINDOWS\system32\oleaut32.dll
    2007-12-04 12:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-12-04 11:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    2007-12-04 00:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    2007-12-04 00:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
    2007-08-08 17:45 47,360 ----a-w C:\Documents and Settings\Christelle MARTIN\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-03-26_21.55.10.18 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-11-17 18:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    + 2004-11-17 17:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    - 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    + 2004-10-14 08:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    - 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    + 2004-10-14 08:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    - 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    + 2004-10-14 08:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    - 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    + 2004-10-14 08:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    - 2004-10-28 02:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    + 2004-10-28 01:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    - 2004-10-28 02:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    + 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    - 2004-10-28 02:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    + 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    - 2004-09-29 23:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    + 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    - 2004-10-14 19:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    + 2004-10-14 18:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    - 2004-10-14 19:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    + 2004-10-14 18:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    - 2004-10-14 19:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    + 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    - 2004-10-14 19:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    + 2004-10-14 18:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    - 2004-10-13 17:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    + 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    - 2004-12-07 20:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    + 2004-12-07 19:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    - 2005-04-22 06:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    + 2005-04-22 05:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    - 2005-05-17 01:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    + 2005-05-17 00:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    - 2005-03-02 19:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    + 2005-03-02 18:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    - 2005-03-02 19:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    + 2005-03-02 18:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    - 2005-03-02 19:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    + 2005-03-02 18:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    - 2005-03-02 19:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    + 2005-03-02 18:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    - 2005-03-02 19:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    + 2005-03-02 18:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    - 2005-03-02 19:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    + 2005-03-02 18:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    - 2005-03-02 19:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    + 2005-03-02 18:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    - 2005-03-02 19:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    + 2005-03-02 18:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    - 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    + 2005-02-24 17:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    - 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    + 2005-02-24 17:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    - 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    + 2005-02-24 17:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    - 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    + 2005-02-24 17:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    - 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    + 2005-02-24 17:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    - 2005-07-08 17:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    + 2005-07-08 16:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    - 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    + 2005-07-07 17:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    - 2005-04-28 20:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    + 2005-04-28 19:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    - 2005-04-28 20:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    + 2005-04-28 19:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    - 2005-04-28 20:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    + 2005-04-28 19:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    - 2005-04-28 20:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    + 2005-04-28 19:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    - 2005-05-27 00:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    + 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    - 2005-05-27 03:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    + 2005-05-27 02:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    - 2005-05-27 03:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    + 2005-05-27 02:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    - 2005-05-27 03:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    + 2005-05-27 02:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    - 2005-06-11 01:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    + 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    - 2005-05-11 03:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    + 2005-05-11 02:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    - 2005-02-25 04:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    + 2005-02-25 03:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    - 2005-06-15 18:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    + 2005-06-15 17:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    - 2005-06-10 05:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    + 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    - 2006-02-15 01:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    + 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    - 2005-09-01 02:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    + 2005-09-01 01:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    - 2005-09-23 04:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    + 2005-09-23 03:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    - 2005-09-03 01:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    + 2005-09-03 00:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    - 2005-09-27 01:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    + 2005-09-27 00:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    - 2005-09-01 02:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    + 2005-09-01 01:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    - 2005-09-26 16:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    + 2005-09-26 15:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    - 2005-09-10 02:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    + 2005-09-10 01:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    - 2005-09-09 15:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    + 2005-09-09 14:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    - 2005-06-29 02:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    + 2005-06-29 01:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    - 2005-06-29 02:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    + 2005-06-29 01:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    - 2005-07-26 05:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    + 2005-07-26 04:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    - 2005-07-26 05:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    + 2005-07-26 04:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    - 2005-07-26 05:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    + 2005-07-26 04:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    - 2005-07-26 05:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    + 2005-07-26 04:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    - 2005-07-26 05:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    + 2005-07-26 04:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    - 2005-07-26 05:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    + 2005-07-26 04:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    - 2005-07-26 05:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    + 2005-07-26 04:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    - 2005-07-26 05:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    + 2005-07-26 04:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    - 2005-07-26 05:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    + 2005-07-26 04:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    - 2005-07-26 05:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    + 2005-07-26 04:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    - 2005-07-26 00:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    + 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    - 2005-07-26 05:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    + 2005-07-26 04:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    - 2005-07-26 05:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    + 2005-07-26 04:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    - 2005-07-26 05:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    + 2005-07-26 04:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    - 2005-07-26 05:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    + 2005-07-26 04:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    - 2005-07-26 05:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    + 2005-07-26 04:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    - 2005-07-26 05:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    + 2005-07-26 04:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    - 2005-07-26 05:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    + 2005-07-26 04:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    - 2005-07-26 05:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    + 2005-07-26 04:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    - 2005-07-26 05:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    + 2005-07-26 04:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    - 2005-07-26 05:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    + 2005-07-26 04:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    - 2005-07-26 05:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    + 2005-07-26 04:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    - 2005-07-25 18:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    + 2005-07-25 17:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    - 2005-08-30 05:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    + 2005-08-30 04:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    - 2006-03-24 05:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    + 2006-03-24 04:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    - 2005-08-22 19:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    + 2005-08-22 18:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    - 2005-08-20 00:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    + 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    - 2005-08-23 04:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    + 2005-08-23 03:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    - 2005-08-22 17:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    + 2005-08-22 16:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    - 2005-10-17 22:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    + 2005-10-17 21:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    - 2005-10-17 22:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    + 2005-10-17 21:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    - 2006-03-17 05:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    + 2006-03-17 04:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    - 2006-03-22 02:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    + 2006-03-22 01:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    - 2006-03-17 02:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    + 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    - 2005-10-20 23:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    + 2005-10-20 22:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    - 2005-10-13 00:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    + 2005-10-12 23:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    - 2006-06-22 11:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    + 2006-06-22 10:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    - 2006-03-23 06:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    + 2006-03-23 05:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    - 2006-01-04 05:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    + 2006-01-04 04:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    - 2006-03-01 20:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    + 2006-03-01 19:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    - 2006-03-01 20:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    + 2006-03-01 19:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    - 2006-03-01 20:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    + 2006-03-01 19:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    - 2006-03-01 20:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    + 2006-03-01 19:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    - 2006-03-01 20:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    + 2006-03-01 19:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    - 2006-03-01 20:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    + 2006-03-01 19:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    - 2006-05-19 15:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    + 2006-05-19 14:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    - 2006-05-19 15:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    + 2006-05-19 14:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    - 2006-05-19 15:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    + 2006-05-19 14:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    - 2006-05-05 11:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    + 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    - 2006-05-05 11:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    + 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    - 2006-02-21 08:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    + 2006-02-21 07:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    - 2006-02-21 04:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    + 2006-02-21 03:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    - 2006-02-21 04:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    + 2006-02-21 03:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    - 2006-02-21 08:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    + 2006-02-21 07:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    - 2006-02-21 08:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    + 2006-02-21 07:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    - 2006-02-21 08:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    + 2006-02-21 07:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    - 2006-02-21 08:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    + 2006-02-21 07:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    - 2006-01-19 20:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    + 2006-01-19 19:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    - 2006-07-14 16:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    + 2006-07-14 15:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    - 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    + 2005-10-12 22:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    - 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    + 2005-10-12 22:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    - 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    + 2005-10-12 22:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    - 2005-10-12 23:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    + 2005-10-12 22:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    - 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    + 2005-10-12 22:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    - 2006-03-17 02:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    + 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    - 2006-05-18 06:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    + 2006-05-18 05:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    - 2006-07-05 11:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    + 2006-07-05 10:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    - 2006-04-20 13:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    + 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    - 2006-11-27 16:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    + 2006-11-27 15:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    - 2006-11-27 16:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    + 2006-11-27 15:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    - 2006-06-01 20:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    + 2006-06-01 19:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    - 2006-06-01 20:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    + 2006-06-01 19:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    - 2006-07-13 12:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    + 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    - 2006-10-12 14:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    + 2006-10-12 13:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    - 2006-10-12 14:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    + 2006-10-12 13:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    - 2006-10-12 12:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    + 2006-10-12 11:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    - 2006-10-16 12:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    + 2006-10-16 11:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    - 2006-07-21 09:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    + 2006-07-21 08:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    - 2006-06-26 18:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    + 2006-06-26 17:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    - 2006-06-26 18:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    + 2006-06-26 17:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    - 2006-06-22 06:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    + 2006-06-22 05:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    - 2006-06-22 06:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    + 2006-06-22 05:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
    + 2005-10-12 23:15:28 727,77

    Je vais te l'envoyer en plusieurs fois, je suis désolée, il me semble que l'ensemble du rapport ne soit pas inscrit. Il est vrai qu'il est bavard.

    ComboFix 08-03-25.4 - Christelle MARTIN 2008-03-30 18:29:17.2 - FAT32x86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.292 [GMT 2:00]
    Endroit: C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\Christelle MARTIN\Application Data\inst.exe
    C:\WINDOWS\cookies.ini
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\cdrmjpkh.dll
    C:\WINDOWS\system32\dnvvdsuj.dll
    C:\WINDOWS\system32\fhxnbjvm.dll
    C:\WINDOWS\system32\gebcyvs.dll
    C:\WINDOWS\system32\glrwdhjp.dll
    C:\WINDOWS\system32\gwciiama.dll
    C:\WINDOWS\system32\hdfbmkvv.dll
    C:\WINDOWS\system32\hggfcyw.dll
    C:\WINDOWS\system32\hnrpkwgu.dll
    C:\WINDOWS\system32\huhhsnsn.dll
    C:\WINDOWS\system32\hvskfopt.dll
    C:\WINDOWS\system32\ijkmp.ini
    C:\WINDOWS\system32\ijkmp.ini2
    C:\WINDOWS\system32\ktovpaie.dll
    C:\WINDOWS\system32\lcefhakr.dll
    C:\WINDOWS\system32\lulgjnnl.dll
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\mljkiii.dll
    C:\WINDOWS\system32\pmkji.dll
    C:\WINDOWS\system32\snaxbtwc.dll
    C:\WINDOWS\system32\veleiuex.dll
    C:\WINDOWS\system32\vkdfqtby.dll
    C:\WINDOWS\system32\vvkmbfdh.ini
    C:\WINDOWS\system32\ytoymror.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-30 ))))))))))))))))))))))))))))))))))))
    .

    2008-03-30 18:28 . 2008-03-30 18:28 <REP> d-------- C:\ComboFix(2)
    2008-03-30 15:29 . 2008-03-30 15:29 <REP> d-------- C:\VundoFix Backups
    2008-03-26 19:05 . 2008-03-26 19:05 <REP> d-------- C:\Program Files\Navilog1
    2008-03-25 07:55 . 2008-03-25 07:55 <REP> d--hs---- C:\FOUND.000
    2008-03-24 14:18 . 2008-03-26 12:52 1,575,156 ---hs---- C:\WINDOWS\system32\evhahdhl.ini
    2008-03-20 18:42 . 2008-03-24 14:19 1,550,429 ---hs---- C:\WINDOWS\system32\celhqvpp.ini
    2008-03-19 18:43 . 2008-03-19 18:43 1,537,356 ---hs---- C:\WINDOWS\system32\siikrjyw.ini
    2008-03-18 13:01 . 2008-03-19 18:44 1,538,894 ---hs---- C:\WINDOWS\system32\wfwdajlh.ini
    2008-03-18 07:44 . 2008-03-18 07:44 1,158 --a------ C:\WINDOWS\mozver.dat
    2008-03-16 20:49 . 2008-03-16 20:49 <REP> d-------- C:\Documents and Settings\Christelle MARTIN\Application Data\Grisoft
    2008-03-16 20:49 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-16 09:42 . 2008-03-17 12:39 1,373,734 ---hs---- C:\WINDOWS\system32\rnlurplg.ini
    2008-03-14 22:44 . 2008-03-16 09:39 1,321,019 ---hs---- C:\WINDOWS\system32\uumalmkk.ini
    2008-03-14 22:19 . 2008-03-14 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
    2008-03-14 22:18 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
    2008-03-14 22:18 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
    2008-03-14 22:18 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
    2008-03-14 22:18 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
    2008-03-14 22:18 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
    2008-03-14 07:59 . 2008-03-14 21:44 1,343,514 ---hs---- C:\WINDOWS\system32\edsiinjf.ini
    2008-03-13 19:50 . 2008-03-13 19:50 <REP> d-------- C:\Program Files\Trend Micro
    2008-03-13 07:56 . 2008-03-14 07:56 1,350,056 ---hs---- C:\WINDOWS\system32\lxeaeoqr.ini
    2008-03-13 07:47 . 2008-03-13 07:47 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-03-12 13:11 . 2008-03-12 13:11 <REP> d-------- C:\Program Files\AxBx
    2008-03-12 07:53 . 2008-03-13 07:54 1,344,035 ---hs---- C:\WINDOWS\system32\ptqvqhog.ini
    2008-03-11 22:58 . 2008-03-11 22:58 <REP> d-------- C:\Program Files\Fichiers communs\Panda Software
    2008-03-11 07:34 . 2008-03-12 07:48 1,315,360 ---hs---- C:\WINDOWS\system32\kjncpqfc.ini
    2008-03-10 21:00 . 2008-03-10 21:00 100 --a------ C:\WINDOWS\wininit.ini
    2008-02-18 19:59 . 2008-02-18 19:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
    2008-02-01 11:17 . 2008-02-01 11:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-17 20:22 127,034 ------r C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
    2008-01-11 04:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2007-12-19 21:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2007-12-18 08:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
    2007-12-08 04:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2007-12-06 10:03 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
    2007-12-06 10:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2007-12-06 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2007-12-06 03:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
    2007-12-04 17:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
    2007-12-04 17:41 550,912 ------w C:\WINDOWS\system32\oleaut32.dll
    2007-12-04 12:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-12-04 11:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    2007-12-04 00:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    2007-12-04 00:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
    2007-08-08 17:45 47,360 ----a-w C:\Documents and Settings\Christelle MARTIN\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-03-26_21.55.10.18 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-11-17 18:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    + 2004-11-17 17:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    - 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    + 2004-10-14 08:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    - 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    + 2004-10-14 08:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    - 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    + 2004-10-14 08:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    - 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    + 2004-10-14 08:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    - 2004-10-28 02:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    + 2004-10-28 01:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    - 2004-10-28 02:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    + 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    - 2004-10-28 02:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    + 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    - 2004-09-29 23:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    + 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    - 2004-10-14 19:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    + 2004-10-14 18:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    - 2004-10-14 19:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    + 2004-10-14 18:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    - 2004-10-14 19:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    + 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    - 2004-10-14 19:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    + 2004-10-14 18:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    - 2004-10-13 17:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    + 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    - 2004-12-07 20:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    + 2004-12-07 19:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    - 2005-04-22 06:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    + 2005-04-22 05:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    - 2005-05-17 01:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    + 2005-05-17 00:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    - 2005-03-02 19:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    + 2005-03-02 18:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    - 2005-03-02 19:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    + 2005-03-02 18:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    - 2005-03-02 19:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    + 2005-03-02 18:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    - 2005-03-02 19:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    + 2005-03-02 18:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    - 2005-03-02 19:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    + 2005-03-02 18:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    - 2005-03-02 19:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    + 2005-03-02 18:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    - 2005-03-02 19:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    + 2005-03-02 18:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    - 2005-03-02 19:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    + 2005-03-02 18:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    - 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    + 2005-02-24 17:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    - 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    + 2005-02-24 17:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    - 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    + 2005-02-24 17:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    - 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    + 2005-02-24 17:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    - 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    + 2005-02-24 17:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    - 2005-07-08 17:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    + 2005-07-08 16:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    - 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    + 2005-07-07 17:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    - 2005-04-28 20:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    + 2005-04-28 19:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    - 2005-04-28 20:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    + 2005-04-28 19:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    - 2005-04-28 20:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    + 2005-04-28 19:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    - 2005-04-28 20:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    + 2005-04-28 19:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    - 2005-05-27 00:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    + 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    - 2005-05-27 03:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    + 2005-05-27 02:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    - 2005-05-27 03:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    + 2005-05-27 02:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    - 2005-05-27 03:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    + 2005-05-27 02:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    - 2005-06-11 01:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe

    ComboFix 08-03-25.4 - Christelle MARTIN 2008-03-30 18:29:17.2 - FAT32x86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.292 [GMT 2:00]
    Endroit: C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\Documents and Settings\Christelle MARTIN\Application Data\inst.exe
    C:\WINDOWS\cookies.ini
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\cdrmjpkh.dll
    C:\WINDOWS\system32\dnvvdsuj.dll
    C:\WINDOWS\system32\fhxnbjvm.dll
    C:\WINDOWS\system32\gebcyvs.dll
    C:\WINDOWS\system32\glrwdhjp.dll
    C:\WINDOWS\system32\gwciiama.dll
    C:\WINDOWS\system32\hdfbmkvv.dll
    C:\WINDOWS\system32\hggfcyw.dll
    C:\WINDOWS\system32\hnrpkwgu.dll
    C:\WINDOWS\system32\huhhsnsn.dll
    C:\WINDOWS\system32\hvskfopt.dll
    C:\WINDOWS\system32\ijkmp.ini
    C:\WINDOWS\system32\ijkmp.ini2
    C:\WINDOWS\system32\ktovpaie.dll
    C:\WINDOWS\system32\lcefhakr.dll
    C:\WINDOWS\system32\lulgjnnl.dll
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\mljkiii.dll
    C:\WINDOWS\system32\pmkji.dll
    C:\WINDOWS\system32\snaxbtwc.dll
    C:\WINDOWS\system32\veleiuex.dll
    C:\WINDOWS\system32\vkdfqtby.dll
    C:\WINDOWS\system32\vvkmbfdh.ini
    C:\WINDOWS\system32\ytoymror.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-30 ))))))))))))))))))))))))))))))))))))
    .

    2008-03-30 18:28 . 2008-03-30 18:28 <REP> d-------- C:\ComboFix(2)
    2008-03-30 15:29 . 2008-03-30 15:29 <REP> d-------- C:\VundoFix Backups
    2008-03-26 19:05 . 2008-03-26 19:05 <REP> d-------- C:\Program Files\Navilog1
    2008-03-25 07:55 . 2008-03-25 07:55 <REP> d--hs---- C:\FOUND.000
    2008-03-24 14:18 . 2008-03-26 12:52 1,575,156 ---hs---- C:\WINDOWS\system32\evhahdhl.ini
    2008-03-20 18:42 . 2008-03-24 14:19 1,550,429 ---hs---- C:\WINDOWS\system32\celhqvpp.ini
    2008-03-19 18:43 . 2008-03-19 18:43 1,537,356 ---hs---- C:\WINDOWS\system32\siikrjyw.ini
    2008-03-18 13:01 . 2008-03-19 18:44 1,538,894 ---hs---- C:\WINDOWS\system32\wfwdajlh.ini
    2008-03-18 07:44 . 2008-03-18 07:44 1,158 --a------ C:\WINDOWS\mozver.dat
    2008-03-16 20:49 . 2008-03-16 20:49 <REP> d-------- C:\Documents and Settings\Christelle MARTIN\Application Data\Grisoft
    2008-03-16 20:49 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-16 09:42 . 2008-03-17 12:39 1,373,734 ---hs---- C:\WINDOWS\system32\rnlurplg.ini
    2008-03-14 22:44 . 2008-03-16 09:39 1,321,019 ---hs---- C:\WINDOWS\system32\uumalmkk.ini
    2008-03-14 22:19 . 2008-03-14 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
    2008-03-14 22:18 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
    2008-03-14 22:18 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
    2008-03-14 22:18 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
    2008-03-14 22:18 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
    2008-03-14 22:18 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
    2008-03-14 07:59 . 2008-03-14 21:44 1,343,514 ---hs---- C:\WINDOWS\system32\edsiinjf.ini
    2008-03-13 19:50 . 2008-03-13 19:50 <REP> d-------- C:\Program Files\Trend Micro
    2008-03-13 07:56 . 2008-03-14 07:56 1,350,056 ---hs---- C:\WINDOWS\system32\lxeaeoqr.ini
    2008-03-13 07:47 . 2008-03-13 07:47 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-03-12 13:11 . 2008-03-12 13:11 <REP> d-------- C:\Program Files\AxBx
    2008-03-12 07:53 . 2008-03-13 07:54 1,344,035 ---hs---- C:\WINDOWS\system32\ptqvqhog.ini
    2008-03-11 22:58 . 2008-03-11 22:58 <REP> d-------- C:\Program Files\Fichiers communs\Panda Software
    2008-03-11 07:34 . 2008-03-12 07:48 1,315,360 ---hs---- C:\WINDOWS\system32\kjncpqfc.ini
    2008-03-10 21:00 . 2008-03-10 21:00 100 --a------ C:\WINDOWS\wininit.ini
    2008-02-18 19:59 . 2008-02-18 19:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
    2008-02-01 11:17 . 2008-02-01 11:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-17 20:22 127,034 ------r C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
    2008-01-11 04:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2007-12-19 21:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2007-12-18 08:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
    2007-12-08 04:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2007-12-06 10:03 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
    2007-12-06 10:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2007-12-06 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2007-12-06 03:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
    2007-12-04 17:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
    2007-12-04 17:41 550,912 ------w C:\WINDOWS\system32\oleaut32.dll
    2007-12-04 12:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-12-04 11:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    2007-12-04 00:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    2007-12-04 00:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
    2007-08-08 17:45 47,360 ----a-w C:\Documents and Settings\Christelle MARTIN\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-03-26_21.55.10.18 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2004-11-17 18:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    + 2004-11-17 17:41:20 354,304 ------w C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
    - 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    + 2004-10-14 08:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
    - 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    + 2004-10-14 08:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
    - 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    + 2004-10-14 08:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
    - 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    + 2004-10-14 08:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
    - 2004-10-28 02:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    + 2004-10-28 01:29:48 728,576 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
    - 2004-10-28 02:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    + 2004-10-28 01:15:16 448,128 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
    - 2004-10-28 02:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    + 2004-10-28 01:14:56 174,592 ------w C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
    - 2004-09-29 23:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    + 2004-09-29 22:31:18 134,912 ------w C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
    - 2004-10-14 19:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    + 2004-10-14 18:35:06 8,192 ------w C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
    - 2004-10-14 19:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    + 2004-10-14 18:36:20 172,032 ------w C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
    - 2004-10-14 19:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    + 2004-10-14 18:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
    - 2004-10-14 19:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    + 2004-10-14 18:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
    - 2004-10-13 17:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    + 2004-10-13 16:21:24 1,694,208 ------w C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
    - 2004-10-14 10:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    + 2004-10-14 09:35:08 8,192 ------w C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
    - 2004-10-14 10:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    + 2004-10-14 09:36:22 172,032 ------w C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
    - 2004-10-14 10:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    + 2004-10-14 09:36:20 21,504 ------w C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
    - 2004-10-14 10:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    + 2004-10-14 09:35:12 666,624 ------w C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
    - 2004-12-07 20:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    + 2004-12-07 19:32:32 96,768 ------w C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
    - 2005-04-22 06:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    + 2005-04-22 05:20:20 57,344 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
    - 2005-05-17 01:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    + 2005-05-17 00:44:44 19,456 ------w C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
    - 2005-03-02 19:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    + 2005-03-02 18:20:32 62,464 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
    - 2005-03-02 19:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    + 2005-03-02 18:13:14 2,137,600 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
    - 2005-03-02 19:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    + 2005-03-02 18:13:12 2,059,008 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
    - 2005-03-02 19:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    + 2005-03-02 18:13:16 2,017,280 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
    - 2005-03-02 19:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    + 2005-03-02 18:13:24 2,181,632 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
    - 2005-03-02 19:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    + 2005-03-02 18:20:32 578,048 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
    - 2005-03-02 19:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    + 2005-03-02 18:13:08 1,836,416 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
    - 2005-03-02 19:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    + 2005-03-02 18:20:32 291,840 ------w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
    - 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    + 2005-02-24 17:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
    - 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    + 2005-02-24 17:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
    - 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    + 2005-02-24 17:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
    - 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    + 2005-02-24 17:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
    - 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    + 2005-02-24 17:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
    - 2004-11-30 13:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    + 2004-11-30 12:46:52 8,192 ------w C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
    - 2004-11-30 19:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    + 2004-11-30 18:22:42 172,032 ------w C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
    - 2004-11-30 19:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    + 2004-11-30 18:22:42 21,504 ------w C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
    - 2004-11-30 13:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    + 2004-11-30 12:46:52 666,624 ------w C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
    - 2005-07-08 17:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    + 2005-07-08 16:30:34 249,344 ------w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
    - 2005-07-07 18:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    + 2005-07-07 17:27:08 30,720 ------w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
    - 2005-04-28 20:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    + 2005-04-28 19:36:10 1,286,144 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
    - 2005-04-28 20:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    + 2005-04-28 19:36:10 75,264 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
    - 2005-04-28 20:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    + 2005-04-28 19:36:10 37,376 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
    - 2005-04-28 20:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    + 2005-04-28 19:36:10 396,288 ------w C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
    - 2005-05-27 00:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    + 2005-05-26 23:26:50 10,752 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
    - 2005-05-27 03:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    + 2005-05-27 02:11:04 41,472 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
    - 2005-05-27 03:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    + 2005-05-27 02:11:04 155,136 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
    - 2005-05-27 03:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    + 2005-05-27 02:11:04 137,216 ------w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
    - 2005-06-11 01:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    + 2005-06-11 00:17:14 57,856 ------w C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
    - 2005-05-11 03:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    + 2005-05-11 02:33:20 78,336 ------w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
    - 2005-02-25 04:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    + 2005-02-25 03:35:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
    - 2005-06-15 18:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    + 2005-06-15 17:48:50 297,984 ------w C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
    - 2005-06-10 05:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    + 2005-06-10 04:06:02 139,528 ------w C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
    - 2005-06-29 15:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    + 2005-06-29 14:54:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
    - 2006-02-15 01:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    + 2006-02-15 00:30:08 142,464 ------w C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll
    - 2005-09-01 02:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    + 2005-09-01 01:46:30 19,968 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
    - 2005-09-23 04:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    + 2005-09-23 03:26:14 8,508,928 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll
    - 2005-09-03 01:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    + 2005-09-03 00:08:22 474,624 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll
    - 2005-09-27 01:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    + 2005-09-27 00:47:42 23,552 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\spru040c.dll
    - 2005-09-01 02:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    + 2005-09-01 01:46:32 292,352 ------w C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe
    - 2005-09-26 16:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    + 2005-09-26 15:36:24 30,720 ------w C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll
    - 2005-09-10 02:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    + 2005-09-10 01:53:06 2,068,480 ------w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
    - 2005-09-09 15:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    + 2005-09-09 14:26:26 30,720 ------w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
    - 2005-06-29 02:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    + 2005-06-29 01:54:24 254,976 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
    - 2005-06-29 02:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    + 2005-06-29 01:54:24 73,728 ------w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
    - 2005-07-26 05:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    + 2005-07-26 04:29:18 225,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll
    - 2005-07-26 05:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    + 2005-07-26 04:29:20 625,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll
    - 2005-07-26 05:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    + 2005-07-26 04:29:20 110,080 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll
    - 2005-07-26 05:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    + 2005-07-26 04:29:22 498,688 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll
    - 2005-07-26 05:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    + 2005-07-26 04:29:22 60,416 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll
    - 2005-07-26 05:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    + 2005-07-26 04:29:22 195,072 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll
    - 2005-07-26 05:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    + 2005-07-26 04:29:24 97,792 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll
    - 2005-07-26 05:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    + 2005-07-26 04:29:26 1,267,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll
    - 2005-07-26 05:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    + 2005-07-26 04:29:28 540,160 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll
    - 2005-07-26 05:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    + 2005-07-26 04:29:28 243,200 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
    - 2005-07-26 00:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    + 2005-07-25 23:42:36 8,704 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe
    - 2005-07-26 05:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    + 2005-07-26 04:29:30 425,472 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll
    - 2005-07-26 05:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    + 2005-07-26 04:29:32 945,152 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll
    - 2005-07-26 05:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    + 2005-07-26 04:29:32 161,280 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll
    - 2005-07-26 05:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    + 2005-07-26 04:29:32 66,560 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll
    - 2005-07-26 05:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    + 2005-07-26 04:29:32 91,136 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll
    - 2005-07-26 05:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    + 2005-07-26 04:29:38 1,285,632 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll
    - 2005-07-26 05:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    + 2005-07-26 04:29:38 75,264 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll
    - 2005-07-26 05:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    + 2005-07-26 04:29:38 37,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll
    - 2005-07-26 05:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    + 2005-07-26 04:29:40 398,336 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
    - 2005-07-26 05:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    + 2005-07-26 04:29:40 101,376 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll
    - 2005-07-26 05:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    + 2005-07-26 04:29:40 11,776 ------w C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe
    - 2005-07-25 18:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    + 2005-07-25 17:21:18 30,720 ------w C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll
    - 2005-08-30 05:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    + 2005-08-30 04:16:04 1,293,824 ------w C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll
    - 2006-03-24 05:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    + 2006-03-24 04:49:06 49,152 ------w C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB904942\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB904942\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB904942\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB904942\update\updspapi.dll
    - 2005-08-22 19:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    + 2005-08-22 18:26:28 197,632 ------w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
    - 2005-02-25 04:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    + 2005-02-25 03:35:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
    - 2005-02-25 04:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    + 2005-02-25 03:35:24 213,216 ------w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
    - 2005-08-20 00:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    + 2005-08-19 23:50:32 30,720 ------w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
    - 2005-02-25 04:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    + 2005-02-25 03:35:24 22,240 ------w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
    - 2005-02-25 04:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    + 2005-02-25 03:35:24 730,336 ------w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
    - 2005-02-25 04:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    + 2005-02-25 03:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
    - 2005-08-23 04:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    + 2005-08-23 03:41:24 124,928 ------w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
    - 2005-02-24 19:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    + 2005-02-24 18:35:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
    - 2005-02-24 19:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    + 2005-02-24 18:35:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
    - 2005-08-22 17:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    + 2005-08-22 16:01:30 30,720 ------w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
    - 2005-02-24 19:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    + 2005-02-24 18:35:26 22,240 ------w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
    - 2005-02-24 19:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    + 2005-02-24 18:35:26 730,336 ------w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
    - 2005-02-24 19:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    + 2005-02-24 18:35:26 395,488 ------w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
    - 2005-10-17 22:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    + 2005-10-17 21:26:30 80,896 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
    - 2005-10-17 22:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    + 2005-10-17 21:26:30 117,760 ------w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
    - 2006-03-17 05:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    + 2006-03-17 04:49:26 8,510,976 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll
    - 2006-03-22 02:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    + 2006-03-22 01:51:44 25,088 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\spru040c.dll
    - 2006-03-17 02:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    + 2006-03-17 01:05:36 28,672 ------w C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll
    - 2005-10-20 23:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    + 2005-10-20 22:32:18 1,097,728 ------w C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
    - 2005-10-13 00:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    + 2005-10-12 23:15:44 394,976 ------w C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll
    - 2006-06-22 11:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    + 2006-06-22 10:38:26 180,736 ------w C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll
    - 2006-03-23 06:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    + 2006-03-23 05:53:24 143,360 ------w C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll
    - 2006-01-04 05:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    + 2006-01-04 04:19:20 68,096 ------w C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll
    - 2006-03-01 20:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    + 2006-03-01 19:42:12 426,496 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll
    - 2006-03-01 20:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    + 2006-03-01 19:42:12 956,416 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll
    - 2006-03-01 20:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    + 2006-03-01 19:42:12 161,280 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll
    - 2006-03-01 20:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    + 2006-03-01 19:42:12 66,560 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll
    - 2006-03-01 20:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    + 2006-03-01 19:42:12 91,136 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll
    - 2006-03-01 20:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    + 2006-03-01 19:42:12 11,776 ------w C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll
    - 2006-05-19 15:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    + 2006-05-19 14:16:50 112,640 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll
    - 2006-05-19 15:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    + 2006-05-19 14:16:52 147,456 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll
    - 2006-05-19 15:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    + 2006-05-19 14:16:52 95,744 ------w C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll
    - 2006-05-05 11:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    + 2006-05-05 10:16:40 454,400 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
    - 2006-05-05 11:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    + 2006-05-05 10:22:52 174,592 ------w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
    - 2006-02-21 08:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    + 2006-02-21 07:22:00 16,896 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltlib.dll
    - 2006-02-21 04:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    + 2006-02-21 03:37:42 23,040 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmc.exe
    - 2006-02-21 04:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    + 2006-02-21 03:37:40 128,768 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\fltmgr.sys
    - 2006-02-21 08:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    + 2006-02-21 07:18:10 2,138,624 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlmp.exe
    - 2006-02-21 08:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    + 2006-02-21 07:18:18 2,060,160 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrnlpa.exe
    - 2006-02-21 08:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    + 2006-02-21 07:18:26 2,017,792 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntkrpamp.exe
    - 2006-02-21 08:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    + 2006-02-21 07:18:32 2,183,168 ------w C:\WINDOWS\$hf_mig$\KB914882\SP2QFE\ntoskrnl.exe
    - 2005-10-13 00:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    + 2005-10-12 23:15:24 15,072 ------w C:\WINDOWS\$hf_mig$\KB914882\spmsg.dll
    - 2005-10-13 00:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    + 2005-10-12 23:15:24 216,800 ------w C:\WINDOWS\$hf_mig$\KB914882\spuninst.exe
    - 2005-10-13 00:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    + 2005-10-12 23:15:24 22,752 ------w C:\WINDOWS\$hf_mig$\KB914882\update\spcustom.dll
    - 2005-10-13 00:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    + 2005-10-12 23:15:26 727,776 ------w C:\WINDOWS\$hf_mig$\KB914882\update\update.exe
    - 2006-01-19 20:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    + 2006-01-19 19:29:26 394,976 ------w C:\WINDOWS\$hf_mig$\KB914882\update\updspapi.dll
    - 2006-07-14 16:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    + 2006-07-14 15:52:22 121,856 ------w C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll
    - 2005-10-12 23:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    + 2005-10-12 22:12:26 14,048 ------w C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll
    - 2005-10-12 23:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    + 2005-10-12 22:12:26 213,216 ------w C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe
    - 2005-10-12 23:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    + 2005-10-12 22:12:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll
    - 2005-10-12 23:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    + 2005-10-12 22:12:28 716,000 ------w C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
    - 2005-10-12 23:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    + 2005-10-12 22:12:34 371,424 ------w C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll
    - 2006-03-17 02:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    + 2006-03-17 01:08:10 262,656 ------w C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll
    - 2006-05-18 06:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    + 2006-05-18 05:49:56 450,560 ------w C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll
    - 2006-07-05 11:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    + 2006-07-05 10:58:14 1,050,112 ------w C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll
    - 2006-04-20 13:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    + 2006-04-20 12:18:36 360,576 ------w C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll
    - 2006-11-27 16:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    + 2006-11-27 15:18:34 539,136 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll
    - 2006-11-27 16:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    + 2006-11-27 15:18:34 433,664 ------w C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll
    - 2006-06-01 20:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    + 2006-06-01 19:46:26 163,840 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll
    - 2006-06-01 20:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    + 2006-06-01 19:46:26 27,648 ------w C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll
    - 2006-07-13 12:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    + 2006-07-13 11:43:08 202,496 ------w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
    - 2006-10-12 14:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    + 2006-10-12 13:55:58 42,496 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll
    - 2006-10-12 14:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    + 2006-10-12 13:55:58 57,344 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll
    - 2006-10-12 12:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    + 2006-10-12 11:54:08 256,512 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe
    - 2006-10-16 12:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    + 2006-10-16 11:19:10 265,216 ------w C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\spru040c.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll
    - 2006-07-21 09:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    + 2006-07-21 08:29:04 72,704 ------w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
    - 2005-10-13 00:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    + 2005-10-12 23:18:46 15,072 ------w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
    - 2005-10-13 00:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    + 2005-10-12 23:18:46 216,800 ------w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
    - 2005-10-13 00:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    + 2005-10-12 23:18:46 22,752 ------w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
    - 2005-10-13 00:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    + 2005-10-12 23:18:46 727,776 ------w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
    - 2005-10-13 00:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    + 2005-10-12 23:18:50 394,976 ------w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
    - 2006-06-26 18:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    + 2006-06-26 17:47:08 147,456 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll
    - 2006-06-26 18:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    + 2006-06-26 17:47:08 7,680 ------w C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
    - 2005-10-13 00:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    + 2005-10-12 23:15:46 394,976 ------w C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll
    - 2006-06-22 06:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    + 2006-06-22 05:22:12 69,120 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll
    - 2006-06-22 06:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    + 2006-06-22 05:22:12 1,440,768 ------w C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll
    - 2005-10-13 00:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    + 2005-10-12 23:15:26 15,072 ------w C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll
    - 2005-10-13 00:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    + 2005-10-12 23:15:26 216,800 ------w C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe
    - 2005-10-13 00:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    + 2005-10-12 23:15:26 22,752 ------w C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll
    - 2005-10-13 00:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
    + 2005-10-12 23:15:28 727,776 ------w C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
    - 2005-10-1

    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6AAD9645-CF32-486F-BB7A-3B7919C38552}]
    C:\WINDOWS\system32\awvtq.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
    "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-01-30 13:11 3497984]
    "ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" [2007-04-13 19:26 598920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
    "Control Center"="C:\Program Files\ASUS\WLAN Card Utilities\Center.exe" [2006-03-21 15:50 1678336]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-25 19:55 286720]
    "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 16:33 563984]
    "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 16:37 2178832]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]
    "BMebf07f68"="C:\WINDOWS\system32\dmnpejui.dll" [ ]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-01-17 22:22:43 67128]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
    "UIHost"="LogonUI.EXE"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byxutuv]
    byxutuv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gebcyvs]
    gebcyvs.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\eMule\\emule.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=

    S3 ASNDIS5;ASNDIS5 Protocol Driver;C:\WINDOWS\system32\ASNDIS5.SYS [2002-09-09 19:54]
    S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 10:45]
    S3 ZD1211BU(ASUS);ASUS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ASUS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2006-06-14 18:16]

    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2008-03-30 15:41:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
    - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-03-30 18:32:31
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    --------------------- DLLs a chargé sous des processus courants ---------------------

    PROCESS: C:\WINDOWS\system32\winlogon.exe
    -> C:\WINDOWS\system32\tsd32.dll
    .
    Temps d'accomplissement: 2008-03-30 18:33:02
    ComboFix-quarantined-files.txt 2008-03-30 16:32:58
    .
    2008-03-15 19:08:48 --- E O F ---

    Re,

    Désactive toute protection résidente ( antivirus…) !

    Copie le texte se situant dans le cadre ci-dessous, sans le mot citation :

    Citation :
    File::
    C:\FOUND.000
    C:\WINDOWS\system32\evhahdhl.ini
    C:\WINDOWS\system32\celhqvpp.ini
    C:\WINDOWS\system32\siikrjyw.ini
    C:\WINDOWS\system32\wfwdajlh.ini
    C:\WINDOWS\system32\rnlurplg.ini
    C:\WINDOWS\system32\uumalmkk.ini
    C:\WINDOWS\system32\edsiinjf.ini
    C:\WINDOWS\system32\lxeaeoqr.ini
    C:\WINDOWS\system32\ptqvqhog.ini
    C:\WINDOWS\system32\kjncpqfc.ini

    Registry::
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6AAD9645-CF32-486F-BB7A-3B7919C38552}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "BMebf07f68"=-
    [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byxutuv]
    [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gebcyvs]


    Ouvre le Bloc-Notes puis colle le texte copié.
    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
    Sauvegarde ce fichier sous le nom de CFScript.txt.

    Glisse maintenant le fichier ComboFix-Do.txt dans Combofix.exe comme ci-dessous :



    Cela va relancer Combofix, tape sur 1 puis valide. Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un nouveau rapport Hijackthis.
    S'il n'y a pas de redémarrage, poste quand même les rapports.

    Bonne nuit, à demain :hello: 

    :hello: 

    Je te remercie pour toute ton aide.

    Voilà donc le nouveau rapport combo :

    ComboFix 08-03-25.4 - Christelle MARTIN 2008-03-31 10:11:35.5 - FAT32x86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.294 [GMT 2:00]
    Endroit: C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Christelle MARTIN\Bureau\CFScript.txt..txt

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

    FILE ::
    C:\FOUND.000
    C:\WINDOWS\system32\celhqvpp.ini
    C:\WINDOWS\system32\edsiinjf.ini
    C:\WINDOWS\system32\evhahdhl.ini
    C:\WINDOWS\system32\kjncpqfc.ini
    C:\WINDOWS\system32\lxeaeoqr.ini
    C:\WINDOWS\system32\ptqvqhog.ini
    C:\WINDOWS\system32\rnlurplg.ini
    C:\WINDOWS\system32\siikrjyw.ini
    C:\WINDOWS\system32\uumalmkk.ini
    C:\WINDOWS\system32\wfwdajlh.ini
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\WINDOWS\system32\celhqvpp.ini
    C:\WINDOWS\system32\edsiinjf.ini
    C:\WINDOWS\system32\evhahdhl.ini
    C:\WINDOWS\system32\kjncpqfc.ini
    C:\WINDOWS\system32\lxeaeoqr.ini
    C:\WINDOWS\system32\ptqvqhog.ini
    C:\WINDOWS\system32\rnlurplg.ini
    C:\WINDOWS\system32\siikrjyw.ini
    C:\WINDOWS\system32\uumalmkk.ini
    C:\WINDOWS\system32\wfwdajlh.ini

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))))))))
    .

    2008-03-30 20:35 . 2008-03-30 20:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
    2008-03-30 18:28 . 2008-03-30 18:28 <REP> d-------- C:\ComboFix(2)
    2008-03-30 15:29 . 2008-03-30 15:29 <REP> d-------- C:\VundoFix Backups
    2008-03-26 19:05 . 2008-03-26 19:05 <REP> d-------- C:\Program Files\Navilog1
    2008-03-25 07:55 . 2008-03-25 07:55 <REP> d--hs---- C:\FOUND.000
    2008-03-18 07:44 . 2008-03-18 07:44 1,158 --a------ C:\WINDOWS\mozver.dat
    2008-03-16 20:49 . 2008-03-16 20:49 <REP> d-------- C:\Documents and Settings\Christelle MARTIN\Application Data\Grisoft
    2008-03-16 20:49 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-14 22:19 . 2008-03-14 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TEMP
    2008-03-14 22:18 . 2006-05-25 14:52 162,304 --a------ C:\WINDOWS\system32\ztvunrar36.dll
    2008-03-14 22:18 . 2003-02-02 19:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll
    2008-03-14 22:18 . 2005-08-26 00:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll
    2008-03-14 22:18 . 2002-03-06 00:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll
    2008-03-14 22:18 . 2006-06-19 12:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll
    2008-03-13 19:50 . 2008-03-13 19:50 <REP> d-------- C:\Program Files\Trend Micro
    2008-03-13 07:47 . 2008-03-13 07:47 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-03-12 13:11 . 2008-03-12 13:11 <REP> d-------- C:\Program Files\AxBx
    2008-03-11 22:58 . 2008-03-11 22:58 <REP> d-------- C:\Program Files\Fichiers communs\Panda Software
    2008-03-10 21:00 . 2008-03-10 21:00 100 --a------ C:\WINDOWS\wininit.ini
    2008-02-18 19:59 . 2008-02-18 19:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Logishrd
    2008-02-01 11:17 . 2008-02-01 11:17 587,264 --a------ C:\WINDOWS\WLXPGSS.SCR

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-01-17 20:22 127,034 ------r C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
    2008-01-11 04:36 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    2007-12-19 21:53 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    2007-12-18 08:51 179,584 ----a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
    2007-12-08 04:08 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2007-12-06 10:03 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
    2007-12-06 10:02 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2007-12-06 10:00 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2007-12-06 03:59 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
    2007-12-04 17:41 550,912 ----a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
    2007-12-04 17:41 550,912 ------w C:\WINDOWS\system32\oleaut32.dll
    2007-12-04 12:04 837,496 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-12-04 11:54 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    2007-12-04 00:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    2007-12-04 00:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    2007-12-04 00:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll
    2007-08-08 17:45 47,360 ----a-w C:\Documents and Settings\Christelle MARTIN\Application Data\pcouffin.sys
    .

    ((((((((((((((((((((((((((((( snapshot_2008-03-30_18.32.52.14 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-03-31 06:56:28 3,404 ----a-w C:\WINDOWS\SoftwareDistribution\EventCache\{10F51192-67A2-44B4-BFBC-B90CFB08503A}.bin
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
    "Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2008-01-30 13:11 3497984]
    "ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" [2007-04-13 19:26 598920]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
    "Control Center"="C:\Program Files\ASUS\WLAN Card Utilities\Center.exe" [2006-03-21 15:50 1678336]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-25 19:55 286720]
    "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 16:33 563984]
    "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 16:37 2178832]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

    C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-01-17 22:22:43 67128]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
    "UIHost"="LogonUI.EXE"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\eMule\\emule.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=

    S3 ASNDIS5;ASNDIS5 Protocol Driver;C:\WINDOWS\system32\ASNDIS5.SYS [2002-09-09 19:54]
    S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 10:45]
    S3 ZD1211BU(ASUS);ASUS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ASUS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2006-06-14 18:16]

    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2008-03-30 20:41:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
    - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-03-31 10:14:08
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    --------------------- DLLs a chargé sous des processus courants ---------------------

    PROCESS: C:\WINDOWS\system32\winlogon.exe
    -> C:\WINDOWS\system32\tsd32.dll
    .
    Temps d'accomplissement: 2008-03-31 10:14:37
    ComboFix-quarantined-files.txt 2008-03-31 08:14:34
    ComboFix2.txt 2008-03-30 16:33:04
    .
    2008-03-15 19:08:48 --- E O F ---

    Je joins un nouveau rapport HIJACK en espérant que le virus soit enfin parti

    :bounce: 

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:20:23, on 31/03/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d7f7718abf04f26bb570bfe3e386e2f
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d7f7718abf04f26bb570bfe3e386e2f
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall....
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scan...
    O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.orange.fr/al/presentation/pc/resources/ac...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-f5ba36e5fd109d38.spaces.live.com/PhotoUpload...
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

    --
    End of file - 9979 bytes

    Re,

    Désinstalle avast, redémarre et supprime ~~>C:\Program Files\Alwil Software

    Télécharge ccleaner (>>tuto à lire !<<), tu download «the latest version » puis installe le en décochant - Ajouter la Barre d'Outils Yahoo! CCleaner
    Puis lance le nettoyage, puis fais chercher des erreurs et sauvegardes si tu le souhaites.

    Télécharge et installe Antivir. (tuto)
    Pourquoi changer ? Avast vs Antivir
    Vérifie qu’il soit bien à jour ! Fais une analyse complète en mode sans échec, sauvegarde le rapport et poste le moi.

    ;) 

    Re,

    Je te remercie pour tes précieux conseils et te remercie de trouver le nouveau rapport :



    AntiVir PersonalEdition Classic
    Report file date: lundi 31 mars 2008 19:36

    Scanning for 1172454 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Username: Christelle MARTIN
    Computer name: NOM-DF21257DBA2

    Version information:
    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 12:16:30
    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 11:23:52
    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 14:32:48
    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 11:35:22
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:16
    ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 17:08:40
    ANTIVIR2.VDF : 7.0.3.85 434176 Bytes 27/03/2008 17:08:40
    ANTIVIR3.VDF : 7.0.3.98 60416 Bytes 31/03/2008 17:20:04
    AVEWIN32.DLL : 7.6.0.78 3408384 Bytes 31/03/2008 17:08:40
    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:28
    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 06:39:18
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
    AVPACK32.DLL : 7.6.0.3 360488 Bytes 31/03/2008 17:08:40
    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 06:17:08
    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 11:26:34
    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 06:10:20
    NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:44
    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 11:38:14
    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 11:50:38
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 08:37:22

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: off
    Scan boot sector.................: on
    Boot sectors.....................: E:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: lundi 31 mars 2008 19:36

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'guard.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    14 processes with 14 modules were scanned

    Start scanning boot sectors:
    Boot sector 'C:\'
    [NOTE] No virus was found!
    Boot sector 'D:\'
    [NOTE] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '25' files ).


    Starting the file scan:

    Begin scan in 'C:\'
    C:\PAGEFILE.SYS
    [WARNING] The file could not be opened!
    C:\Program Files\Navilog1\Backupnavi\ckdlfauuxs.exe
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    [INFO] The file was moved to '48552e4c.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042785.exe
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    [INFO] The file was moved to '48212e27.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042859.dll
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48212e2f.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042860.dll
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48212e34.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042863.dll
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48212e39.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042886.dll
    [DETECTION] Is the Trojan horse TR/Trash.Gen
    [INFO] The file was moved to '48212e40.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP204\A0042894.exe
    [DETECTION] Contains detection pattern of the dropper DR/Tool.Reboot.F.71
    [INFO] The file was moved to '48212e44.qua'!
    C:\System Volume Information\_restore{D0147FB1-E309-49CF-8424-1FC1E253C3F2}\RP213\A0045673.exe
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    [INFO] The file was moved to '48212ebc.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\cdrmjpkh.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48632ef7.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\dnvvdsuj.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48672f04.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\hggfcyw.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48582f01.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\hnrpkwgu.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48632f0b.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\hvskfopt.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48642f16.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\ktovpaie.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48602f18.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\veleiuex.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '485d2f0d.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\vkdfqtby.dll.vir
    [DETECTION] Is the Trojan horse TR/Vundo.Gen
    [INFO] The file was moved to '48552f17.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\gebcyvs.dll.vir
    [DETECTION] Is the Trojan horse TR/Trash.Gen
    [INFO] The file was moved to '48532f14.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\system32\pmkji.dll.vir
    [DETECTION] Is the Trojan horse TR/Trash.Gen
    [INFO] The file was moved to '485c2f20.qua'!
    Begin scan in 'D:\'
    Begin scan in 'E:\'
    Search path E:\ could not be opened!
    Le périphérique n'est pas prêt.



    End of the scan: lundi 31 mars 2008 20:34
    Used time: 58:18 min

    The scan has been done completely.

    3316 Scanning directories
    119663 Files were scanned
    18 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    18 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    119645 Files not concerned
    6391 Archives were scanned
    1 Warnings
    0 Notes


    J'espère qu'il n'y a plus de vilaine bête sur mon ordi.

    Merci encore pour toute ton aide

    :lol: 

    Re,

    Dernière vérification :p 

    Télécharge MalwareByte's Anti-Malware sur ton Bureau.
    Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

    Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
    AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM

    ;) 

    :hello: 

    Je te renvoie le nouveau rapport malware :

    Malwarebytes' Anti-Malware 1.09
    Version de la base de données: 574

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 57891
    Temps écoulé: 1 hour(s), 28 minute(s), 8 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 5
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)


    Merci par avance

    Bon début de journée


    Je te remercie vivement pour tes précieux conseils.

    Je te poste un nouveau rapport :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:20:04, on 01/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM\tbShar.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d7f7718abf04f26bb570bfe3e386e2f
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d7f7718abf04f26bb570bfe3e386e2f
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall....
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scan...
    O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.orange.fr/al/presentation/pc/resources/ac...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-f5ba36e5fd109d38.spaces.live.com/PhotoUpload...
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

    --
    End of file - 9790 bytes


    Merci encore

    Bonne soirée

    Re,

    1) Tu as plusieurs barre d'outils (toolbars), en as-tu besoin ?
    Plusieurs barre d'outils peuvent ralentir l'ordinateur ou occasionner des plantages du navigateur.
    Je te conseille de faire du ménage pour désinstaller les barres d'outils dont tu ne te sers pas à partir d'ajout/suppression de programmes du panneau de configuration.
    Pour plus d'informations, voir l'article Les Toolbars, c'est pas obligatoire!

    Donc désinstalle via ajout/suppression de programmes du panneau de configuration :
    -Windows Live Toolbar
    -Yahoo! Toolbar avec bloqueur de fenêtres pop-up
    -Toolbar: &Google
    -Share Accelerator MM Toolbar


    2) Relance HijackThis, clique sur "do a system scan only", coche ces lignes puis clique sur "Fix Checked" et referme HijackThis :

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')


    3) Redémarre le PC et poste-moi un dernier rapport hijackthis.

    Toujours des soucis ?

    ;) 





















    Coucou, :hello: 

    Je te joins un nouveau rapport :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:53:31, on 02/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall....
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scan...
    O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photos.orange.fr/al/presentation/pc/resources/ac...
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-f5ba36e5fd109d38.spaces.live.com/PhotoUpload...
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

    --
    End of file - 6912 bytes


    Ecoutes, je te remercie car cela va plus vite.

    Par contre, je n'a plus msn, est ce que je peux le réinstaller ou as conseiller ?

    Merci encore pour ton intervention

    Bonne soirée

    :hello: 

    Normalement msn est toujours installé, regarde dans tes programmes. Sinon réinstalle-le ;) 

    C’est OK, tu n’es plus infecté(e) :p 

    1) Télécharge ToolsCleaner sur ton bureau.
    http://www.commentcamarche.net/telecharger/toolscleaner...

    Ce programme va te faire désinstaller tous les outils que je t’ai faits utiliser.

  • Clique sur Recherche et laisse le scan agir ...
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2) Télécharge et installe Ccleaner :
    http://www.01net.com/telecharger/windows/Utilitaire/net...
  • Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Clique sur l'onglet "Nettoyeur" puis sur "Lancer le Nettoyage".
  • Ensuite clique sur l'onglet Registre, clique sur "Chercher des erreurs" puis sur "Réparer les erreurs sélectionnées". Il est inutile de faire des sauvegardes des clés. Répète l'opération autant de fois qu'il le faut jusqu'à qu'il ne trouve plus d'erreurs.
  • Tutorial ici : http://www.infos-du-net.com/forum/272336-7-ccleaner-und...
    3)
  • Désactive ta restauration systeme

  • Réactive ta restauration systeme

  • Tutorial ici : http://www.infos-du-net.com/forum/272480-11-desactiver-...
    ********************************************************************************

    Ajoute maintenant [Résolu] au titre. Pour cela :
    * Clique, dans ton premier message, sur le bouton "Editer"
    * Rajoute la mention [Résolu] au titre
    * Clique ensuite sur "Valider votre message"

    Ce serait sympa de rapporter ton infection sur > Malware-Complaints < pour faire condamner ses auteurs

    - Règles du forum <- ici
    - Poster un message <- ici ( par Malekal )

    Pour t'enregistrer clique sur le bouton register ( en haut )
    Si tu as plus de 13 ans choisis " I Agree to these terms and am over or exactly 13 years of age "
    Si tu as moins de 13 ans choisis " I Agree to these terms and am under 13 years of age "

    Tu auras une liste par type d'infection
    Si ton infection n'est pas dans la liste crée un message dans Autres infections

    a+ et bon surf :hello: 


    Quelques liens intéressants :

    http://mickael.barroux.free.fr/securite/
    http://www.malekal.com/
    http://www.infos-du-net.com/forum/275481-11-dossier-pre...

    :hello: 

    Je te remercie vivement pour toute ton aide.

    Je te joins le dernier rapport :

    -->- Recherche:

    C:\Combofix: trouvé !
    C:\Vundofix backups: trouvé !
    C:\Qoobox: trouvé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\HijackThis.lnk: trouvé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe: trouvé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\HJTInstall.exe: trouvé !
    C:\Program Files\Navilog1: trouvé !
    C:\Program Files\Trend Micro\HijackThis: trouvé !
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

    ---------------------------------
    -->- Suppression:

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\HijackThis.lnk: supprimé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\ComboFix.exe: supprimé !
    C:\Documents and Settings\Christelle MARTIN\Bureau\HJTInstall.exe: supprimé !
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
    C:\Combofix: supprimé !
    C:\Vundofix backups: supprimé !
    C:\Qoobox: supprimé !
    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
    C:\Program Files\Navilog1: supprimé !
    C:\Program Files\Trend Micro\HijackThis: supprimé !


    Merci encore

    Bonne fin de semaine

    Bon week end

    Re,

    De rien ce fut un plaisir !

    Rapporte ton infection sur malware complain si ce n'est pas fait, c'est important ;) 

    Merci de consulter ce dossier (en pdf) pour en connaître davantage sur les risques du Net.



    Si tu trouves ce document intéressant, n'hésite pas à le transmettre à tes contacts.

    Bonne continuation :hello: 
    Lassé par la pub ? Créez un compte
    Tom's guide dans le monde