Aller au contenu

rapasse

Membres
  • Compteur de contenus

    60
  • Inscription

  • Dernière visite

Tout ce qui a été posté par rapasse

  1. Bonjour, Voilà les rapports: Results of screen317's Security Check version 0.99.7 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: BitDefender Internet Security 2010 Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware HijackThis 2.0.2 CCleaner Java 6 Update 22 Adobe Flash Player 10.1.102.64 Adobe Reader 9.4.2 - Français Out of date Adobe Reader installed! Mozilla Firefox (3.6.15) ```````````````````````````````` Process Check: objlist.exe by Laurent BitDefender BitDefender 2010 vsserv.exe Fichiers communs BitDefender BitDefender Communicator xcommsvr.exe Fichiers communs BitDefender BitDefender Update Service livesrv.exe BitDefender BitDefender 2010 bdagent.exe BitDefender BitDefender 2010 seccenter.exe ``````````End of Log```````````` Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 6020 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 11/03/2011 18:19:07 mbam-log-2011-03-11 (18-19-07).txt Type d'examen: Examen rapide Elément(s) analysé(s): 175868 Temps écoulé: 28 minute(s), 51 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) Bonne journée
  2. Bonsoir, Mon ordi est de plus en plus lent... Je vous poste un log HijackThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:53:03, on 07/03/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\WINDOWS\system32\IProsetMonitor.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\WINDOWS\system32\SearchIndexer.exe C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. Antivirus Software – BitDefender - Virus Protection Security Now! - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Intel® Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Intel® PROSet Monitoring Service - Intel Corporation - C:\WINDOWS\system32\IProsetMonitor.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe -- End of file - 9548 bytes Merci bonne soirée
  3. Bonjour, Plus rien à était trouvé, l'ordi se comporte beaucoup mieux Je te remercie pour ton aide. Tu pourrais jeter un œil à mon ordi? Faut je crée un nouveau topic ? Bon dimanche
  4. Bonjour, Dsl pour cette petite absence. Le scan bitdenfer impossible de le lancer les lise à jour ne se font pas cela me dit échec je fait quand même ? JE fait avec mon antivurs ? Voilà le repport OTL: All processes killed ========== OTL ========== Prefs.js: firefox@bandoo.com:5.0 removed from extensions.enabledItems Prefs.js: "http://www.searchqu.com/web?src=ffb&q=" removed from keyword.URL C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully. C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org\components folder moved successfully. C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org folder moved successfully. C:\Program Files\mozilla firefox\extensions folder moved successfully. Folder C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\YSearchProtection deleted successfully. C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Messenger (Yahoo!) deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Search Protection deleted successfully. File C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\GD\\http deleted successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: boul ->Temp folder emptied: 500632 bytes ->Temporary Internet Files folder emptied: 33456922 bytes ->FireFox cache emptied: 52386367 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 33212 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 34680 bytes RecycleBin emptied: 773 bytes Total Files Cleaned = 82,00 mb [EMPTYFLASH] User: All Users User: boul ->Flash cache emptied: 0 bytes User: Default User: Default User User: Public Total Flash Files Cleaned = 0,00 mb C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.20.6 log created on 02162011_124326 Files\Folders moved on Reboot... Registry entries deleted on Reboot...
  5. Bonsoir, Voilà le rapport Extras: OTL Extras logfile created on: 15/02/2011 18:16:55 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\boul\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 66,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 285,09 Gb Total Space | 207,84 Gb Free Space | 72,90% Space Free | Partition Type: NTFS Computer Name: PC-DE-BOUL | User Name: boul | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 1 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1A3A503C-7FF3-4079-9A89-DC6C656B906B}" = lport=2869 | protocol=6 | dir=in | app=system | "{33066938-EBA8-42C6-AC2C-4010C49460BF}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{4B9A4F88-9A36-47A1-88AA-DF51AE5F9C1C}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{546734A0-ABAC-4FE7-9278-42F37C6816CA}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{77F6D700-62A9-48F8-928F-B23375A9DF12}" = rport=427 | protocol=17 | dir=in | svc=hpslpsvc | app=c:\windows\system32\svchost.exe | "{D1C8D115-A680-4E4C-8749-36E5A049476D}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{E44E6AA0-4F5A-4212-9FAA-04043FA80152}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{F07AA002-DF03-4099-A19F-B8AA4429598D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{12B378AA-CFC0-452E-995E-96E0432B5A37}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | "{2603FE38-5577-43BA-A179-F6391AC3317F}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | "{271911D5-FE78-4AE6-A5F0-2D3344BA6C2F}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | "{2B3D583A-20F0-4066-8496-5AFE6EB6F347}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{8956B9B8-DCF2-4891-9B41-A4815C9BE986}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | "{A45EA53C-B7C9-4EF0-98E0-FA0FB13B1FD6}" = dir=in | app=d:\setup\hpznui01.exe | "{F3F35290-48D7-4F17-B936-CC4AC41C054E}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | "{FB6890A7-6CEA-4BF5-B643-DEFE02F098DC}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | "TCP Query User{6E645905-43C9-46BE-96C5-E4D0CC85F61B}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "TCP Query User{A490E4F1-CE49-424E-929C-A37919768000}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | "UDP Query User{307A5714-5936-4F95-A29B-8800A6B5977A}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | "UDP Query User{D7C69741-3EEF-432D-95DB-BFC405FB0DF3}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{014E482A-0C27-47E3-BA82-307E9DCA2F47}" = HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7 "{0214A441-A4AB-43A8-8DEF-2F73C5364673}" = Microsoft Works "{05D08C4D-58A2-438B-A419-EE994E64E15D}" = B110 "{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Barre d'outils Bing "{09F56A49-A7B1-4AAB-95B9-D13094254AD1}" = Windows Live UX Platform Language Pack "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0ED40D2A-7131-4FE7-941E-5C329336F712}" = HDReg France "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack "{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}" = DeviceDiscovery "{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}" = HPProductAssistant "{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{28518520-F25C-48C3-A224-861F331602F4}" = Setup My PC "{2FB9EA69-51D4-4913-9AD5-762C034DE811}" = Status "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{3559CDE0-11FC-4D7B-A65C-D646035B1036}" = Nero 8 Essentials "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform "{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance "{565E7B0E-B76B-4EAD-9753-F1E72A5CF12E}" = HPAppStudio "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI "{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger "{60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C}" = 32 Bit HP CIO Components Installer "{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger "{709817E4-5439-4206-8738-796B34B623BD}" = MetaBoli "{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E4B1BE8-DCF3-4B90-A726-B28107442623}" = SolutionCenter "{8EE94FD8-5F52-4463-A340-185D16328158}" = WebReg "{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007 "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 "{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 "{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95120000-00AF-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (French) "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{95140000-007A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources "{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}" = HPSSupply "{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.2 - Français "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter "{BB3447F6-9553-4AA9-960E-0DB5310C5779}" = GPBaseService2 "{BBFB2E59-B0DB-42C8-8F4D-CF4E85471667}" = Toolbox "{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CA786CFF-1D31-4804-B436-F3405B14357F}" = Packard Bell Updator "{CAE4213F-F797-439D-BD9E-79B71D115BE3}" = HPPhotoGadget "{CD31E63D-47FD-491C-8117-CF201D0AFAB5}" = TrayApp "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D360FA88-17C8-4F14-B67F-13AAF9607B12}" = MarketResearch "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{DBC3FDEC-D5F4-439C-9A18-EF454A74E3DE}_is1" = NOD32 FiX "{DBEA1034-5882-4A88-8033-81C4EF0CFA29}" = Google Toolbar for Internet Explorer "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E517094C-06B6-419F-8FFD-EF4F57972130}" = QuickTransfer "{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F4EA67C9-6748-4C1E-9AFF-04149AC75D95}" = Packard Bell ImageWriter "{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety "{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0 "{F80BD4BC-06B8-488E-A62E-C4755013DD71}" = Network "{F88E2E04-7EF5-488C-8E38-C94EB808458E}" = PS_AIO_07_B110_SW_Min "{FA0FF682-CC70-4C57-93CD-E276F3E7537E}" = BufferChm "{FCFBA290-CB48-4AF1-A241-2685AEDEDD66}" = Windows Live Family Safety "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0 "Bandoo" = Bandoo "CCleaner" = CCleaner "EasyBits Magic Desktop" = EasyBits Magic Desktop "Google Chrome" = Google Chrome "Google Desktop" = Google Desktop "HDMI" = Intel® Graphics Media Accelerator Driver "HP Imaging Device Functions" = HP Imaging Device Functions 14.0 "HP Smart Web Printing" = HP Smart Web Printing 4.60 "HP Solution Center & Imaging Support Tools" = HP Solution Center 14.0 "HPExtendedCapabilities" = HP Customer Participation Program 14.0 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA "Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6) "NOD32" = NOD32 Antivirus System "PROPLUS" = Microsoft Office Professional Plus 2007 "Shop for HP Supplies" = Shop for HP Supplies "SynTPDeinstKey" = Synaptics Pointing Device Driver "WinLiveSuite" = Windows Live "Works9SE" = Microsoft Works 9.0 SE "Yahoo! Companion" = Yahoo! Toolbar "Yahoo! Messenger" = Yahoo! Messenger "Yahoo! Search Defender" = Yahoo! Search Protection "Yahoo! Software Update" = Yahoo! Software Update ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 25/01/2011 17:01:58 | Computer Name = PC-de-boul | Source = Application Error | ID = 1000 Description = Application défaillante wmiprvse.exe, version 6.0.6002.18005, horodatage 0x49e01c05, module défaillant ntdll.dll, version 6.0.6002.18005, horodatage 0x49e03821, code d’exception 0xc0000374, décalage d’erreur 0x000afaf8, ID du processus 0x320, heure de début de l’application 0x01cbbcd30c48cc90. Error - 25/01/2011 17:02:16 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 25/01/2011 22:22:04 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 26/01/2011 18:34:25 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 28/01/2011 18:04:44 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 29/01/2011 12:46:07 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 30/01/2011 09:18:45 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 31/01/2011 15:53:47 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 01/02/2011 06:24:32 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = Error - 01/02/2011 15:17:09 | Computer Name = PC-de-boul | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 13/02/2011 13:16:14 | Computer Name = PC-de-boul | Source = Dhcp | ID = 1002 Description = Le bail de l'adresse IP 192.168.0.11 pour la carte réseau dont l'adresse réseau est 0017C474747F a été refusé par le serveur DHCP 192.168.2.1 (celui-ci a envoyé un message DHCPNACK). Error - 13/02/2011 13:22:52 | Computer Name = PC-de-boul | Source = Dhcp | ID = 1002 Description = Le bail de l'adresse IP 192.168.2.27 pour la carte réseau dont l'adresse réseau est 0017C474747F a été refusé par le serveur DHCP 192.168.0.254 (celui-ci a envoyé un message DHCPNACK). Error - 13/02/2011 14:50:35 | Computer Name = PC-de-boul | Source = Service Control Manager | ID = 7030 Description = Error - 13/02/2011 14:58:08 | Computer Name = PC-de-boul | Source = Service Control Manager | ID = 7030 Description = Error - 13/02/2011 15:20:13 | Computer Name = PC-de-boul | Source = Service Control Manager | ID = 7000 Description = Error - 14/02/2011 17:57:32 | Computer Name = PC-de-boul | Source = Service Control Manager | ID = 7000 Description = Error - 15/02/2011 11:05:24 | Computer Name = PC-de-boul | Source = Service Control Manager | ID = 7000 Description = Error - 15/02/2011 11:52:57 | Computer Name = PC-de-boul | Source = Dhcp | ID = 1002 Description = Le bail de l'adresse IP 192.168.0.11 pour la carte réseau dont l'adresse réseau est 0017C474747F a été refusé par le serveur DHCP 192.168.2.1 (celui-ci a envoyé un message DHCPNACK). Error - 15/02/2011 11:57:00 | Computer Name = PC-de-boul | Source = Dhcp | ID = 1002 Description = Le bail de l'adresse IP 192.168.2.23 pour la carte réseau dont l'adresse réseau est 0017C474747F a été refusé par le serveur DHCP 192.168.2.1 (celui-ci a envoyé un message DHCPNACK). Error - 15/02/2011 13:10:11 | Computer Name = PC-de-boul | Source = Dhcp | ID = 1002 Description = Le bail de l'adresse IP 192.168.2.23 pour la carte réseau dont l'adresse réseau est 0017C474747F a été refusé par le serveur DHCP 192.168.0.254 (celui-ci a envoyé un message DHCPNACK). < End of report > Voilà l'autre rapport OTL: OTL logfile created on: 15/02/2011 18:16:55 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\boul\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19019) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 66,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 285,09 Gb Total Space | 207,84 Gb Free Space | 72,90% Space Free | Partition Type: NTFS Computer Name: PC-DE-BOUL | User Name: boul | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/02/15 18:11:31 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\boul\Desktop\OTL.exe PRC - [2010/09/22 12:03:38 | 000,249,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe PRC - [2009/10/30 14:06:59 | 000,949,376 | ---- | M] (Eset ) -- C:\Program Files\Eset\nod32kui.exe PRC - [2009/10/30 14:06:59 | 000,552,064 | ---- | M] (Eset ) -- C:\Program Files\Eset\nod32krn.exe PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/02/23 14:05:34 | 000,111,856 | ---- | M] (Yahoo! Inc) -- C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe PRC - [2008/11/09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe PRC - [2008/08/04 10:16:46 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008/07/16 13:00:00 | 000,024,576 | ---- | M] () -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe PRC - [2008/01/21 03:23:24 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe PRC - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ========== Modules (SafeList) ========== MOD - [2011/02/15 18:11:31 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\boul\Desktop\OTL.exe MOD - [2010/08/31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2011/01/20 14:44:03 | 000,797,184 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\FntCache.dll -- (FontCache) SRV - [2010/09/23 00:21:24 | 001,493,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc) SRV - [2010/09/22 16:33:04 | 000,051,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2010/09/22 12:03:38 | 000,249,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort) SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/10/30 14:06:59 | 000,552,064 | ---- | M] (Eset ) [Auto | Running] -- C:\Program Files\Eset\nod32krn.exe -- (NOD32krn) SRV - [2009/01/08 13:27:35 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009/01/08 13:24:16 | 000,030,192 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager-092308-165331) SRV - [2008/11/09 21:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService) SRV - [2008/07/16 13:00:00 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe -- (ETService) SRV - [2008/02/03 11:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc) SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2008/01/21 03:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008/01/21 03:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0) ========== Driver Services (SafeList) ========== DRV - [2010/09/23 00:21:24 | 000,039,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr) DRV - [2009/10/30 14:06:59 | 000,512,096 | ---- | M] (Eset ) [Kernel | Auto | Running] -- C:\Windows\system32\drivers\amon.sys -- (AMON) DRV - [2009/10/30 14:06:59 | 000,015,424 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\nod32drv.sys -- (nod32drv) DRV - [2008/08/06 09:26:08 | 000,124,928 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2008/08/04 10:02:46 | 002,161,496 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008/07/29 04:48:56 | 000,418,816 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr28.sys -- (netr28) DRV - [2008/07/16 12:56:06 | 000,015,392 | ---- | M] (Acer, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15) DRV - [2008/07/11 03:20:10 | 002,381,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx) DRV - [2008/04/27 23:29:26 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Pilote de carte Intel® DRV - [2008/02/20 21:01:08 | 000,060,416 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTSTOR.sys -- (RTSTOR) DRV - [2008/01/21 03:23:27 | 000,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR) DRV - [2008/01/21 03:23:27 | 000,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320) DRV - [2008/01/21 03:23:27 | 000,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas) DRV - [2008/01/21 03:23:26 | 000,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m) DRV - [2008/01/21 03:23:26 | 000,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4) DRV - [2008/01/21 03:23:26 | 000,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs) DRV - [2008/01/21 03:23:25 | 000,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci) DRV - [2008/01/21 03:23:25 | 000,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS) DRV - [2008/01/21 03:23:24 | 001,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300) DRV - [2008/01/21 03:23:24 | 000,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel® DRV - [2008/01/21 03:23:24 | 000,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas) DRV - [2008/01/21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV) DRV - [2008/01/21 03:23:23 | 000,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid) DRV - [2008/01/21 03:23:23 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2) DRV - [2008/01/21 03:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI) DRV - [2008/01/21 03:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC) DRV - [2008/01/21 03:23:23 | 000,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc) DRV - [2008/01/21 03:23:22 | 000,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor) DRV - [2008/01/21 03:23:21 | 000,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx) DRV - [2008/01/21 03:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid) DRV - [2008/01/21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor) DRV - [2008/01/21 03:23:20 | 000,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci) DRV - [2008/01/21 03:23:00 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide) DRV - [2008/01/21 03:23:00 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide) DRV - [2008/01/21 03:23:00 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide) DRV - [2007/06/08 03:53:56 | 000,187,448 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SynTP.sys -- (SynTP) DRV - [2006/11/02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx) DRV - [2006/11/02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata) DRV - [2006/11/02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960) DRV - [2006/11/02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp) DRV - [2006/11/02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx) DRV - [2006/11/02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid) DRV - [2006/11/02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi) DRV - [2006/11/02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx) DRV - [2006/11/02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3) DRV - [2006/11/02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x) DRV - [2006/11/02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi) DRV - [2006/11/02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM) DRV - [2006/11/02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer) DRV - [2006/11/02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp) DRV - [2006/11/02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo) DRV - [2006/11/02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm) DRV - [2006/11/02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm) DRV - [2006/11/02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Yahoo! France IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Web Search" FF - prefs.js..browser.search.defaulturl: "http://fr.search.yahoo.com/search?fr=ffsp1&p=" FF - prefs.js..browser.search.order.1: "Web Search" FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm" FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm" FF - prefs.js..browser.search.param.yahoo-type: "${8}" FF - prefs.js..browser.search.selectedEngine: "Wikipédia (fr)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.fr/" FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:2.2.2 FF - prefs.js..extensions.enabledItems: {31ea9703-204e-4307-8815-e9a3e087b91a}:1.3.5.3 FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655 FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0 FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.67 FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/08/20 12:58:02 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/29 16:08:54 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/13 17:42:25 | 000,000,000 | ---D | M] [2009/12/02 18:24:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boul\AppData\Roaming\mozilla\Extensions [2011/02/14 23:09:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions [2010/04/28 20:09:00 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/12/10 13:41:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{31ea9703-204e-4307-8815-e9a3e087b91a} [2010/10/02 13:40:21 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010/12/10 13:41:06 | 000,000,000 | ---D | M] (ColorZilla) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} [2011/02/10 18:37:38 | 000,000,000 | ---D | M] ("BitDefender QuickScan") -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2010/10/03 13:51:13 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Users\boul\AppData\Roaming\mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\firefox@bandoo.com [2009/11/27 15:16:51 | 000,002,163 | ---- | M] () -- C:\Users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchplugins\bing.xml [2009/11/27 13:12:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2009/12/02 18:24:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org [2010/07/29 16:08:48 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml [2010/07/29 16:08:48 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/07/29 16:08:48 | 000,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml [2010/01/18 12:48:33 | 000,000,748 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MediaDICO-fr.xml [2010/07/29 16:08:48 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml [2010/07/29 16:08:48 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2011/02/13 19:58:06 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dll (Google Inc.) O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (Google Inc.) O3 - HKLM\..\Toolbar: (@C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (Google Inc.) O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset ) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [updateReminder] C:\Program Files\Eset\UpdateReminder.exe (ESET, spol. s r.o.) O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc) O4 - HKCU..\Run: [Messenger (Yahoo!)] File not found O4 - HKCU..\Run: [search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation) O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\imon.dll (Eset ) O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (c:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll) - c:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll (Google) O20 - AppInit_DLLs: (c:\PROGRA~1\Bandoo\BndHook.dll) - c:\PROGRA~1\Bandoo\BndHook.dll (Discordia Limited) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation) O24 - Desktop WallPaper: C:\Users\boul\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\boul\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS) Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011/02/15 18:11:15 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\boul\Desktop\OTL.exe [2011/02/13 19:59:37 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011/02/13 19:49:18 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011/02/13 19:49:18 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011/02/13 19:49:17 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011/02/13 19:49:11 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011/02/13 19:49:03 | 000,000,000 | ---D | C] -- C:\ComboFix [2011/02/13 19:48:15 | 000,000,000 | ---D | C] -- C:\Qoobox [2011/02/13 19:47:55 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe [2011/02/13 17:43:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2011/02/13 17:42:02 | 000,000,000 | ---D | C] -- C:\Config.Msi [2011/02/13 17:19:16 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011/02/13 17:19:16 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011/02/13 17:19:15 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2011/02/13 17:19:15 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011/02/13 17:19:15 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011/02/13 17:19:15 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011/02/13 17:19:14 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011/02/13 17:19:14 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011/02/13 17:19:14 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011/02/13 17:19:14 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011/02/13 17:19:14 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011/02/13 17:19:14 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011/02/13 17:19:14 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011/02/13 17:19:14 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011/02/13 17:19:14 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011/02/13 17:19:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011/02/13 17:19:14 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011/02/13 17:16:51 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/02/13 17:16:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/02/13 17:16:46 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/02/13 17:08:40 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011/02/13 17:08:39 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011/02/13 17:06:18 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe [2011/02/13 17:06:15 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll [2011/02/13 17:05:45 | 003,602,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2011/02/13 17:05:42 | 003,550,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2011/02/13 17:05:34 | 002,039,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011/02/13 17:05:21 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2011/02/13 17:05:21 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2011/02/13 17:05:21 | 000,979,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFH264Dec.dll [2011/02/13 17:05:21 | 000,797,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll [2011/02/13 17:05:21 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2011/02/13 17:05:20 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll [2011/02/13 17:05:20 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011/02/13 17:05:20 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFHEAACdec.dll [2011/02/13 17:05:20 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2011/02/13 17:05:20 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll [2011/02/13 17:05:19 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmp4src.dll [2011/02/13 17:05:19 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll [2011/02/13 17:05:18 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll [2011/02/13 17:05:18 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll [2011/02/13 17:05:18 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2011/02/13 17:05:18 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2011/02/13 17:05:16 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2011/02/13 17:05:16 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe [2011/02/13 17:05:16 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2011/02/13 17:05:16 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2011/02/13 17:05:15 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2011/02/13 17:05:15 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll [2011/02/13 17:05:14 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll [2011/02/13 17:05:14 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/02/13 17:05:14 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll [2011/02/13 17:00:45 | 007,734,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\boul\Desktop\mbam-setup-1.50.1.1100.exe [2011/02/10 18:40:47 | 000,000,000 | ---D | C] -- C:\Users\boul\AppData\Roaming\QuickScan [2011/02/07 19:07:08 | 000,000,000 | ---D | C] -- C:\Users\boul\AppData\Roaming\Malwarebytes [2011/02/07 19:06:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/02/07 19:06:38 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [1 C:\Users\boul\AppData\Local\*.tmp files -> C:\Users\boul\AppData\Local\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011/02/15 18:12:05 | 000,000,430 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{8F73B62D-AD95-43E4-8132-31C28FCB6747}.job [2011/02/15 18:11:31 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\boul\Desktop\OTL.exe [2011/02/15 18:11:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/02/15 18:03:49 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011/02/15 18:03:49 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011/02/15 16:41:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/02/15 16:04:02 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml [2011/02/15 16:03:55 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/02/15 16:03:42 | 3117,314,048 | -HS- | M] () -- C:\hiberfil.sys [2011/02/13 19:58:06 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2011/02/13 17:45:22 | 000,681,798 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/02/13 17:45:22 | 000,598,900 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/02/13 17:45:22 | 000,127,504 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/02/13 17:45:21 | 000,104,914 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/02/13 17:43:24 | 000,000,806 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011/02/13 17:42:25 | 000,001,889 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2011/02/13 17:37:26 | 000,345,640 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/02/13 17:16:51 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/02/13 17:03:14 | 007,734,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\boul\Desktop\mbam-setup-1.50.1.1100.exe [2011/02/13 17:02:52 | 000,879,047 | ---- | M] () -- C:\Users\boul\Desktop\SecurityCheck.exe [2011/02/08 00:22:14 | 000,001,356 | ---- | M] () -- C:\Users\boul\AppData\Local\d3d9caps.dat [2011/02/02 17:11:20 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2011/01/20 17:08:16 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2011/01/20 17:08:06 | 001,029,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2011/01/20 17:08:06 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2011/01/20 17:08:06 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2011/01/20 17:08:06 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2011/01/20 17:07:58 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2011/01/20 17:06:38 | 002,873,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll [2011/01/20 17:06:35 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll [2011/01/20 17:04:54 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll [2011/01/20 17:04:54 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll [2011/01/20 15:28:38 | 001,554,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll [2011/01/20 15:27:50 | 000,876,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011/01/20 15:26:30 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe [2011/01/20 15:25:25 | 000,847,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll [2011/01/20 15:24:32 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2011/01/20 15:24:26 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll [2011/01/20 15:15:10 | 000,979,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFH264Dec.dll [2011/01/20 15:14:39 | 000,357,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFHEAACdec.dll [2011/01/20 15:14:03 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfmp4src.dll [2011/01/20 15:14:03 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll [2011/01/20 15:12:46 | 001,172,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2011/01/20 15:11:34 | 000,486,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2011/01/20 14:47:51 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2011/01/20 14:44:05 | 001,068,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2011/01/20 14:44:03 | 000,797,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll [1 C:\Users\boul\AppData\Local\*.tmp files -> C:\Users\boul\AppData\Local\*.tmp -> ] ========== Files Created - No Company Name ========== [2011/02/13 20:01:26 | 000,000,430 | -H-- | C] () -- C:\Windows\tasks\User_Feed_Synchronization-{8F73B62D-AD95-43E4-8132-31C28FCB6747}.job [2011/02/13 19:49:18 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe [2011/02/13 19:49:18 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011/02/13 19:49:18 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe [2011/02/13 19:49:18 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011/02/13 19:49:18 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011/02/13 17:43:24 | 000,000,806 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011/02/13 17:16:51 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/02/13 17:02:33 | 000,879,047 | ---- | C] () -- C:\Users\boul\Desktop\SecurityCheck.exe [2011/02/12 18:46:13 | 3117,314,048 | -HS- | C] () -- C:\hiberfil.sys [2010/10/02 13:40:42 | 000,000,124 | ---- | C] () -- C:\Windows\wininit.ini [2010/10/02 12:59:40 | 000,024,206 | ---- | C] () -- C:\Users\boul\AppData\Roaming\UserTile.png [2010/08/20 12:34:24 | 000,002,055 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010/05/05 18:30:56 | 000,001,356 | ---- | C] () -- C:\Users\boul\AppData\Local\d3d9caps.dat [2010/03/23 23:54:43 | 000,000,000 | ---- | C] () -- C:\Users\boul\AppData\Roaming\wklnhst.dat [2010/01/07 18:34:12 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009/12/02 18:02:22 | 000,014,336 | ---- | C] () -- C:\Users\boul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/11/27 13:48:52 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009/10/30 14:07:26 | 000,015,424 | ---- | C] () -- C:\Windows\System32\drivers\nod32drv.sys [2009/05/09 11:09:26 | 000,487,424 | ---- | C] () -- C:\Windows\System32\INT15.dll [2009/01/08 20:47:57 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2009/01/08 20:47:44 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1527.dll [2009/01/08 13:25:44 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI [2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009/04/11 07:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr [2009/01/08 20:50:15 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK [2011/02/13 19:59:33 | 000,132,274 | ---- | M] () -- C:\ComboFix.txt [2006/09/18 22:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys [2011/02/15 16:03:42 | 3117,314,048 | -HS- | M] () -- C:\hiberfil.sys [2011/02/15 16:03:41 | 3430,920,192 | -HS- | M] () -- C:\pagefile.sys [2009/01/08 13:13:26 | 000,000,426 | ---- | M] () -- C:\RHDSetup.log < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2009/04/11 07:27:47 | 000,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll [2009/04/11 07:28:23 | 000,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav > [2008/01/21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008/01/21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008/01/21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006/11/02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006/11/02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV < %systemroot%\system32\drivers\*.sys /90 > [2011/01/20 17:37:37 | 000,638,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys [2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-13 16:30:04 < End of report >
  6. Bonsoir, Je refait un topic car le mien a sautée du à un trop lourd rapport (conbofix), de ce faite j'en refait un topic. lance_yien s'occupe déjà de mon problème. Voilà le lien demander lance_yien: © CJoint.com, 2010 Merci à toi. Bonne soirée.
  7. IE refonctionnent JE vais relancer une analyse pour voir si il trouve encore des choses. Voilà le rapport: ComboFix 11-02-12.02 - boul 13/02/2011 19:50:46.1.2 - x86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2972.1815 [GMT 1:00] Lancé depuis: c:\users\boul\Downloads\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Un antivirus résident est actif . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Bandoo\Plugins\IE\iePLugin.dll c:\program files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml c:\program files\Windows Searchqu Toolbar c:\program files\Windows Searchqu Toolbar\DataMngr\datamngr.dll c:\program files\Windows Searchqu Toolbar\DataMngr\DataMngrUI.exe c:\program files\Windows Searchqu Toolbar\INSTALL.LOG c:\program files\Windows Searchqu Toolbar\main.ico c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\.#searchqutb.js.1.3 c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\engines.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\search.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\about.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxpanelwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxprefwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\emailnotifierproviders.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\external.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\neterror.xhtml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\wmpstreamer.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\modules\datastore.jsm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\preferences.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\searchqutb.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluelite.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluesky.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn_settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ca.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\dictionary.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\divider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\downloadcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email_on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\games.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0_5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\grey.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\headsup.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ico-shield.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\images.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\aol.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-dn.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-right.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-up.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\blank.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\checkmark.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\chevron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\comcast.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\dtx.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\gmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_cyan.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_lime.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_magenta.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\hotmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\imap.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lock.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\mailcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_bg-basic.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_separator_bar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitem-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\move.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\movetarget.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupGames.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\footer.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameData.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameList.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gametype.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupGames.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupWidgets.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\pop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\manager.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\slider.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\music-note.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slideron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\managerpanel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\volumeslider.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rename.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\resize-box.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsschannelback.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\RSSLogo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsstabdivider.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search-go.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\text-ellipsis.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\toolbarsplitter.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\transparent_1px.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_02.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_03.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_04.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_06.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_07.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_08.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_09.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_10.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_11.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_12.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_13.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_14.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_15.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_16.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_18.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_19.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_20.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_21.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-normal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\proxy.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\templateFF.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\yahoo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lichen.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo-about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\maps.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\menuseparatorback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify-save.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modifyhot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\music.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\news.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-main.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-weather.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\orange.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\pixsy.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\relatedlinks.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-feed.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-rename.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-reload.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-subscribe.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rssback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rsstopback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchqutb.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\shopping.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\siteinfo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluelite.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluesky.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-lichen.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\technorati.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\toolbarsplitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\video.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\web.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_allocine.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_bliptv.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calcal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calculator.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_gservices.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_sudoku.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.jpg c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_trio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_uconverter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\wikipedia.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yahoosearch.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yellow.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\youtube.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\zoom.png c:\program files\Windows Searchqu Toolbar\ToolBar\components\windowmediator.js c:\program files\Windows Searchqu Toolbar\ToolBar\manifest.xml c:\program files\Windows Searchqu Toolbar\ToolBar\SeARchqudx.dll c:\program files\Windows Searchqu Toolbar\ToolBar\SearchquTb.dll c:\program files\Windows Searchqu Toolbar\ToolBar\uninstall.exe c:\program files\Windows Searchqu Toolbar\UNWISE.EXE c:\program files\Windows Searchqu Toolbar\UnwiseLauncher.exe c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome.manifest c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\.#searchqutb.js.1.3 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\engines.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\search.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\about.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxpanelwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxprefwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\emailnotifierproviders.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\external.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\neterror.xhtml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\wmpstreamer.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\modules\datastore.jsm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\preferences.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\searchqutb.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\toolbar.htm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\toolbar.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluelite.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluesky.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn_settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back-ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back-ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ca.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\dictionary.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\divider.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\downloadcom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email_on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\games.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0_5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\grey.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\headsup.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ico-shield.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\images.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\aol.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-dn.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-right.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-up.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-end.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl_ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-start.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-end.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl_ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-start.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\blank.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\checkmark.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\chevron.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\collapse.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\comcast.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\dtx.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back-hot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\expand.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\found.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\gmail.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_cyan.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_lime.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_magenta.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_yellow.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\hotmail.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\imap.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lastsearch-thumb-back.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\loadingMid.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lock.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\mailcom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_bg-basic.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_separator_bar.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitem-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\move.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\movetarget.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupAbout.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupGames.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupWidgets.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\footer.htm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gamecategory.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameData.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameList.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gametype.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-aboutbox.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-btnover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-drag.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb2-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-calendar.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-download.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-joystick24.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-tags.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-download.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Info.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-shop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg-206.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-topwin.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-disable.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-disable.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\TRUSTe_about.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-16px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-24px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupGames.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupWidgets.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\pop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\manager.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\slider.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\bg-pnl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\collapsed_button.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\expanded_button.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-radio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\music-note.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-bg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-on.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-warning.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-0.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-1.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-2.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-3.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-mute.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-handle.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-track.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slider.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slideron.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\track.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\managerpanel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\volumeslider.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\remove.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rename.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\resize-box.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rss.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsschannelback.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\RSSLogo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsstabdivider.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search-go.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\text-ellipsis.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\toolbarsplitter.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\transparent_1px.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_02.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_03.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_04.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_06.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_07.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_08.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_09.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_10.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_11.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_12.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_13.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_14.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_15.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_16.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_18.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_19.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_20.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_21.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-hot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-normal.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\loadingMid.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\proxy.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\templateFF.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\cond999.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\icons.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na-s.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\yahoo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lichen.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo-about.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\maps.bmp c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\menuseparatorback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify-save.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modifyhot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\music.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\news.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-main.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-weather.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\orange.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\pixsy.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\relatedlinks.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-collapse.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-delete.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-expand.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-feed.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-remove.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-rename.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-found.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-reload.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-subscribe.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rssback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rsstopback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-middle.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchqutb.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\shopping.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\siteinfo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluelite.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluesky.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-lichen.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-yellow.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\technorati.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\toolbarsplitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\video.bmp c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\web.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_allocine.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_bliptv.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calcal.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calculator.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_gservices.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_sudoku.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.jpg c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_trio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_uconverter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets-square-16px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\wikipedia.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yahoosearch.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yellow.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\youtube.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\zoom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\components\windowmediator.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\install.rdf c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\manifest.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchplugins\SearchquWebSearch.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\00d2dfc64c07a4f32824abac1d6f735b c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\3e4265e00cbc4a9cf22a105046a46d8a c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\44a5d79f5451d3036ba3986425e234c8 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\GameCategories.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\GameTypes.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\guid.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\preferences.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\search\searchqutb-search-history.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\stats.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\uninstallFF.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\52a4277fe85b5548d16b09a7ad019f91 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\58a2e914b712469d545d186ed5522574 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\forecasts_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\observations_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weatherbutton_prefs.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\1fcf78eb82203c1c18b17d44a9cee667 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\84b70525cff6359fdeca553342c23e4c c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\bf5b6317ae07da699882fc948f22eda4 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\category_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\widget_cache.xml c:\windows\system32\Install.cmd . ((((((((((((((((((((((((((((( Fichiers créés du 2011-01-13 au 2011-02-13 )))))))))))))))))))))))))))))))))))) . 2011-02-13 18:58 . 2011-02-13 18:58 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-13 16:20 . 2011-02-02 16:10 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{64C6DD77-9112-44EC-94FC-9068EA6CB2A4}\mpengine.dll 2011-02-13 16:16 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-02-13 16:16 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-02-13 16:08 . 2011-01-08 06:28 292352 ----a-w- c:\windows\system32\atmfd.dll 2011-02-13 16:08 . 2011-01-08 08:47 34304 ----a-w- c:\windows\system32\atmlib.dll 2011-02-13 16:06 . 2010-12-14 14:49 1169408 ----a-w- c:\windows\system32\sdclt.exe 2011-02-13 16:06 . 2010-12-28 15:55 413696 ----a-w- c:\windows\system32\odbc32.dll 2011-02-13 16:06 . 2010-12-28 15:53 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll 2011-02-13 16:06 . 2010-12-28 15:53 253952 ----a-w- c:\program files\Common Files\System\ado\msadox.dll 2011-02-13 16:06 . 2010-12-28 15:53 241664 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll 2011-02-13 16:06 . 2010-12-28 15:53 57344 ----a-w- c:\program files\Common Files\System\msadc\msadcs.dll 2011-02-13 16:06 . 2010-12-28 15:53 180224 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll 2011-02-13 16:04 . 2011-01-06 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2011-02-10 17:40 . 2011-02-10 17:40 -------- d-----w- c:\users\boul\AppData\Roaming\QuickScan 2011-02-07 18:07 . 2011-02-07 18:07 -------- d-----w- c:\users\boul\AppData\Roaming\Malwarebytes 2011-02-07 18:06 . 2011-02-07 18:06 -------- d-----w- c:\programdata\Malwarebytes 2011-02-07 18:06 . 2011-02-13 16:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2011-02-02 16:11 . 2009-10-30 13:16 222080 ------w- c:\windows\system32\MpSigStub.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-09-02 13351304] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] "Messenger (Yahoo!)"="c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe" [2010-06-01 5252408] "Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-08-04 6265376] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 150040] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 170520] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 145944] "nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-10-30 949376] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576] "Skytel"="Skytel.exe" [2008-08-04 1833504] "Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552] "YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "UpdateReminder"="c:\program files\Eset\UpdateReminder.exe" [2010-12-10 434176] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\progra~1\Bandoo\BndHook.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2011-01-31 08:44 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] 2009-01-08 12:24 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys] 2008-07-07 15:26 1038136 ----a-w- c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000001 R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate1ca6f5af876fdc0;Service Google Update (gupdate1ca6f5af876fdc0);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 133104] R3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-08 30192] R3 NETw5v32;Pilote de carte Intel® Wireless WiFi Link pour Windows Vista 32 bits ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-27 3658752] R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040] S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2009-10-30 15424] S2 ETService;Empowering Technology Service;c:\program files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [2008-07-16 24576] S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504] S3 netr28;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28.sys [2008-07-29 418816] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache WindowsMobile REG_MULTI_SZ wcescomm rapimgr LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contenu du dossier 'Tâches planifiées' 2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 12:12] 2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 12:12] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.searchqu.com/ mStart Page = hxxp://fr.yahoo.com IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 LSP: c:\windows\system32\imon.dll FF - ProfilePath - c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\ FF - prefs.js: browser.search.defaulturl - hxxp://fr.search.yahoo.com/search?fr=ffsp1&p= FF - prefs.js: browser.search.selectedEngine - Wikipédia (fr) FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/ FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: ColorZilla: {6AC85730-7D0F-4de0-B3FA-21142DD85326} - %profile%\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} FF - Ext: <?xmlversion=1.0?><RDF xmlns=http://www.w3.org/1999/02/22-rdf-syntax-ns# xmlns:em=http://www.mozilla.org/2004/em-rdf#><Description about=urn:mozilla:install-manifest><em:id>{31ea9703-204e-4307-8815-e9a3e087b91a}: {31ea9703-204e-4307-8815-e9a3e087b91a} - %profile%\extensions\{31ea9703-204e-4307-8815-e9a3e087b91a} FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} FF - Ext: Bandoo for Firefox: firefox@bandoo.com - %profile%\extensions\firefox@bandoo.com FF - user.js: yahoo.ytff.general.dontshowhpoffer - true . - - - - ORPHELINS SUPPRIMES - - - - HKLM-Run-eRecoveryService - (no file) HKLM-Run-DataMngr - c:\progra~1\WI9130~1\DataMngr\DataMngrUI.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-02-13 19:58 Windows 6.0.6002 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2011-02-13 19:59:32 ComboFix-quarantined-files.txt 2011-02-13 18:59 Avant-CF: 222 768 926 720 octets libres Après-CF: 222 706 024 448 octets libres - - End Of File - - 06D85B4A3989D1161935325D32BC8416
  8. IE refonctionnent JE vais relancer une analyse pour voir si il trouve encore des choses. Voilà le rapport: ComboFix 11-02-12.02 - boul 13/02/2011 19:50:46.1.2 - x86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2972.1815 [GMT 1:00] Lancé depuis: c:\users\boul\Downloads\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Un antivirus résident est actif . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Bandoo\Plugins\IE\iePLugin.dll c:\program files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml c:\program files\Windows Searchqu Toolbar c:\program files\Windows Searchqu Toolbar\DataMngr\datamngr.dll c:\program files\Windows Searchqu Toolbar\DataMngr\DataMngrUI.exe c:\program files\Windows Searchqu Toolbar\INSTALL.LOG c:\program files\Windows Searchqu Toolbar\main.ico c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\.#searchqutb.js.1.3 c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\engines.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\data\search\search.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\about.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxpanelwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxprefwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\dtxwin.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\emailnotifierproviders.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\external.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\neterror.xhtml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\lib\wmpstreamer.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\modules\datastore.jsm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\preferences.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\searchqutb.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\toolbar.xul c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluelite.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\bluesky.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\btn_settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-down-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-drop-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back-ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\button-hover-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ca.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\dictionary.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\divider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\downloadcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\email_on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\games.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\graphred0_5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\grey.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\headsup.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\ico-shield.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\images.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\aol.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-dn.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-right.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\arrow-up.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btn-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-end.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\bg-btnover-start.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\blank.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\btnright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\button-splitter-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\checkmark.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\chevron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\comcast.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\dtx.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\edit-back.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\gmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_cyan.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_lime.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_magenta.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\highlight_yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\hotmail.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\imap.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\lock.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\mailcom.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_bg-basic.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menu_separator_bar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitem-splitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemback-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemleft-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\menuitemright-vista.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\move.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\movetarget.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupGames.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\footer.htm c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameData.js c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gameList.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\gametype.xsl c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-download.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollb.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\scrollt.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupGames.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\panels\popupWidgets.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\pop.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\manager.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\css\slider.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\music-note.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-options.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slider.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\slideron.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\images\track.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\managerpanel.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\radio\volumeslider.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rename.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\resize-box.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsschannelback.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\RSSLogo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\rsstabdivider.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\scroll-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search-go.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\text-ellipsis.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\toolbarsplitter.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\transparent_1px.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_02.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_03.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_04.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_06.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_07.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_08.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_09.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_10.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_11.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_12.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_13.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_14.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_15.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_16.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_18.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_19.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_20.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\border_21.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-hot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\close-normal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\proxy.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\template.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\templateFF.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\uwa\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\icons\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lib\yahoo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\lichen.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo-about.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\logo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\maps.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\menuseparatorback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify-save.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modify.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\modifyhot.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\music.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\news.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-main.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-weather.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\options\options-widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\orange.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\pixsy.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\relatedlinks.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-collapse.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-delete.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-expand.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-feed.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-remove.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder-rename.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-folder.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-found.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-reload.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss-subscribe.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rss.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rssback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\rsstopback.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search-over.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\search.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\searchqutb.css c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\settings.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\shopping.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\siteinfo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluelite.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-bluesky.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-grey.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-lichen.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-orange.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\skin-yellow.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\technorati.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\throbber.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\toolbarsplitter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\video.bmp c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\weather.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\web.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_allocine.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_bliptv.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calcal.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_calculator.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_gservices.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_sudoku.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.jpg c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_todo.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_trio.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widget_uconverter.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets-square-16px.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\widgets.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\wikipedia.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yahoosearch.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\yellow.gif c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\youtube.png c:\program files\Windows Searchqu Toolbar\ToolBar\chrome\skin\zoom.png c:\program files\Windows Searchqu Toolbar\ToolBar\components\windowmediator.js c:\program files\Windows Searchqu Toolbar\ToolBar\manifest.xml c:\program files\Windows Searchqu Toolbar\ToolBar\SeARchqudx.dll c:\program files\Windows Searchqu Toolbar\ToolBar\SearchquTb.dll c:\program files\Windows Searchqu Toolbar\ToolBar\uninstall.exe c:\program files\Windows Searchqu Toolbar\UNWISE.EXE c:\program files\Windows Searchqu Toolbar\UnwiseLauncher.exe c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020} c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome.manifest c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\.#searchqutb.js.1.3 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\engines.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\data\search\search.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\about.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxpanelwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxprefwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\dtxwin.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\emailnotifierproviders.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\external.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\neterror.xhtml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\lib\wmpstreamer.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\modules\datastore.jsm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\preferences.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\searchqutb.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\toolbar.htm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\toolbar.xul c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1255\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.Twitter.1257\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217.zip c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluelite.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\bluesky.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn-widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\btn_settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back-ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-down-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-drop-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back-ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\button-hover-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ca.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\dictionary.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\divider.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\downloadcom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\email_on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\games.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\graphred0_5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\grey.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\headsup.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\ico-shield.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\images.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\aol.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-dn.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-right.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\arrow-up.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-end.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-mdl_ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btn-start.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-end.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-mdl_ff.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\bg-btnover-start.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\blank.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnback-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnleft-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\btnright-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\button-splitter-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\checkmark.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\chevron.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\collapse.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\comcast.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\dtx.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back-hot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\edit-back.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\expand.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\found.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\gmail.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_cyan.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_lime.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_magenta.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\highlight_yellow.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\hotmail.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\imap.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lastsearch-thumb-back.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\loadingMid.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\lock.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\mailcom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_bg-basic.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menu_separator_bar.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitem-splitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemback-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemleft-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-down-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\menuitemright-vista.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\move.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\movetarget.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupAbout.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupGames.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\css\popupWidgets.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\footer.htm c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gamecategory.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameData.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gameList.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\gametype.xsl c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrow-sml.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-aboutbox.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-btnover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-drag.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\gamethumb2-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-calendar.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-download.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-joystick24.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\ico-tags.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-download.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-Info.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\icon-shop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgon.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\menul-bgover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg-206.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-bg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scroll-topwin.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-disable.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollb.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-disable.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\scrollt.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\star_x_orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\TRUSTe_about.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-detailed-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\view-thumb-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-16px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\images\widgets-square-24px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupGames.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\panels\popupWidgets.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\pop.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\manager.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\css\slider.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\bg-pnl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\collapsed_button.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\expanded_button.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-down.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-playstation.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\ico-radio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\music-note.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-pause.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-btn-play.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-bg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-on.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-eq-warning.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-design.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options-on.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-options.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-0.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-1.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-2.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-3.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\radio-volume-mute.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-handle.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\scrollbar-track.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slider.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\slideron.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\images\track.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\managerpanel.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\radio\volumeslider.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\remove.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rename.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\resize-box.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rss.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsschannelback.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\RSSLogo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\rsstabdivider.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\scroll-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search-go.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\text-ellipsis.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\toolbarsplitter.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\transparent_1px.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_02.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_03.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_04.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_06.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_07.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_08.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_09.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_10.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_11.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_12.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_13.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_14.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_15.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_16.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_18.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_19.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_20.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\border_21.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-hot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\close-normal.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\loadingMid.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\proxy.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\template.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\templateFF.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\uwa\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\cond999.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\icons.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na-s.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\na.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\icons\weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\add.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lib\yahoo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\lichen.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo-about.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\logo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\maps.bmp c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\menuseparatorback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify-save.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modify.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\modifyhot.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\music.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\news.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-main.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-weather.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\options\options-widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\orange.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\pixsy.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\relatedlinks.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-collapse.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-delete.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-expand.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-feed.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-remove.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder-rename.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-folder.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-found.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-reload.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss-subscribe.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rss.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rssback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\rsstopback.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search-over.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\search.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-left.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-middle.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchbar\searchbar-background-right.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\searchqutb.css c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\settings.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\shopping.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\siteinfo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluelite.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-bluesky.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-grey.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-lichen.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-orange.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\skin-yellow.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\technorati.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\throbber.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\toolbarsplitter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\video.bmp c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\weather.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\web.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_allocine.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_bliptv.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calcal.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_calculator.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_gservices.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_sudoku.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.jpg c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_todo.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_trio.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widget_uconverter.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets-square-16px.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\widgets.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\wikipedia.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yahoosearch.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\yellow.gif c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\youtube.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\chrome\skin\zoom.png c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\components\windowmediator.js c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\install.rdf c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}\manifest.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchplugins\SearchquWebSearch.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\00d2dfc64c07a4f32824abac1d6f735b c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\3e4265e00cbc4a9cf22a105046a46d8a c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\44a5d79f5451d3036ba3986425e234c8 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\GameCategories.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\games\GameTypes.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\guid.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\preferences.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\search\searchqutb-search-history.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\stats.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\uninstallFF.dat c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\52a4277fe85b5548d16b09a7ad019f91 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\58a2e914b712469d545d186ed5522574 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\forecasts_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weather\observations_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\weatherbutton_prefs.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\1fcf78eb82203c1c18b17d44a9cee667 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\84b70525cff6359fdeca553342c23e4c c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\bf5b6317ae07da699882fc948f22eda4 c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\category_cache.xml c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\searchqutb\widgets_cache\widget_cache.xml c:\windows\system32\Install.cmd . ((((((((((((((((((((((((((((( Fichiers créés du 2011-01-13 au 2011-02-13 )))))))))))))))))))))))))))))))))))) . 2011-02-13 18:58 . 2011-02-13 18:58 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-02-13 16:20 . 2011-02-02 16:10 5890896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{64C6DD77-9112-44EC-94FC-9068EA6CB2A4}\mpengine.dll 2011-02-13 16:16 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-02-13 16:16 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-02-13 16:08 . 2011-01-08 06:28 292352 ----a-w- c:\windows\system32\atmfd.dll 2011-02-13 16:08 . 2011-01-08 08:47 34304 ----a-w- c:\windows\system32\atmlib.dll 2011-02-13 16:06 . 2010-12-14 14:49 1169408 ----a-w- c:\windows\system32\sdclt.exe 2011-02-13 16:06 . 2010-12-28 15:55 413696 ----a-w- c:\windows\system32\odbc32.dll 2011-02-13 16:06 . 2010-12-28 15:53 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll 2011-02-13 16:06 . 2010-12-28 15:53 253952 ----a-w- c:\program files\Common Files\System\ado\msadox.dll 2011-02-13 16:06 . 2010-12-28 15:53 241664 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll 2011-02-13 16:06 . 2010-12-28 15:53 57344 ----a-w- c:\program files\Common Files\System\msadc\msadcs.dll 2011-02-13 16:06 . 2010-12-28 15:53 180224 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll 2011-02-13 16:04 . 2011-01-06 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2011-02-10 17:40 . 2011-02-10 17:40 -------- d-----w- c:\users\boul\AppData\Roaming\QuickScan 2011-02-07 18:07 . 2011-02-07 18:07 -------- d-----w- c:\users\boul\AppData\Roaming\Malwarebytes 2011-02-07 18:06 . 2011-02-07 18:06 -------- d-----w- c:\programdata\Malwarebytes 2011-02-07 18:06 . 2011-02-13 16:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2011-02-02 16:11 . 2009-10-30 13:16 222080 ------w- c:\windows\system32\MpSigStub.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-09-02 13351304] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] "Messenger (Yahoo!)"="c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe" [2010-06-01 5252408] "Search Protection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-08-04 6265376] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 150040] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 170520] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 145944] "nod32kui"="c:\program files\Eset\nod32kui.exe" [2009-10-30 949376] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576] "Skytel"="Skytel.exe" [2008-08-04 1833504] "Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552] "YSearchProtection"="c:\program files\Yahoo!\Search Protection\SearchProtection.exe" [2009-02-23 111856] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "UpdateReminder"="c:\program files\Eset\UpdateReminder.exe" [2010-12-10 434176] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\progra~1\Bandoo\BndHook.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2011-01-31 08:44 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] 2009-01-08 12:24 30192 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys] 2008-07-07 15:26 1038136 ----a-w- c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000001 R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate1ca6f5af876fdc0;Service Google Update (gupdate1ca6f5af876fdc0);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 133104] R3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-08 30192] R3 NETw5v32;Pilote de carte Intel® Wireless WiFi Link pour Windows Vista 32 bits ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-27 3658752] R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040] S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2009-10-30 15424] S2 ETService;Empowering Technology Service;c:\program files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [2008-07-16 24576] S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504] S3 netr28;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28.sys [2008-07-29 418816] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache WindowsMobile REG_MULTI_SZ wcescomm rapimgr LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . Contenu du dossier 'Tâches planifiées' 2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 12:12] 2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-11-27 12:12] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.searchqu.com/ mStart Page = hxxp://fr.yahoo.com IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 LSP: c:\windows\system32\imon.dll FF - ProfilePath - c:\users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\ FF - prefs.js: browser.search.defaulturl - hxxp://fr.search.yahoo.com/search?fr=ffsp1&p= FF - prefs.js: browser.search.selectedEngine - Wikipédia (fr) FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/ FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&q= FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: ColorZilla: {6AC85730-7D0F-4de0-B3FA-21142DD85326} - %profile%\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} FF - Ext: <?xmlversion=1.0?><RDF xmlns=http://www.w3.org/1999/02/22-rdf-syntax-ns# xmlns:em=http://www.mozilla.org/2004/em-rdf#><Description about=urn:mozilla:install-manifest><em:id>{31ea9703-204e-4307-8815-e9a3e087b91a}: {31ea9703-204e-4307-8815-e9a3e087b91a} - %profile%\extensions\{31ea9703-204e-4307-8815-e9a3e087b91a} FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} FF - Ext: Bandoo for Firefox: firefox@bandoo.com - %profile%\extensions\firefox@bandoo.com FF - user.js: yahoo.ytff.general.dontshowhpoffer - true . - - - - ORPHELINS SUPPRIMES - - - - HKLM-Run-eRecoveryService - (no file) HKLM-Run-DataMngr - c:\progra~1\WI9130~1\DataMngr\DataMngrUI.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2011-02-13 19:58 Windows 6.0.6002 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2011-02-13 19:59:32 ComboFix-quarantined-files.txt 2011-02-13 18:59 Avant-CF: 222 768 926 720 octets libres Après-CF: 222 706 024 448 octets libres - - End Of File - - 06D85B4A3989D1161935325D32BC8416
  9. Voilà les rapports: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5754 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18999 13/02/2011 17:28:56 mbam-log-2011-02-13 (17-28-56).txt Type d'examen: Examen rapide Elément(s) analysé(s): 147647 Temps écoulé: 10 minute(s), 27 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): Results of screen317's Security Check version 0.99.8 Windows Vista Service Pack 2 (UAC is enabled) Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: NOD32 Antivirus System WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: CCleaner (remove only) Adobe Flash Player 10.0.32.18 Adobe Reader 9.4.1 - Français Out of date Adobe Reader installed! Mozilla Firefox (3.6.6) ```````````````````````````````` Process Check: objlist.exe by Laurent Windows Defender MSASCui.exe Eset nod32krn.exe Eset nod32kui.exe Windows Defender MSASCui.exe ``````````End of Log```````````` En attendant vos prochaine manip, je vous souhaite une bonne fin de journée
  10. Bonjour, dsl de la petite absence, les rapports arrivent. La restauration n'a pas marcher...
  11. Bonsoir, J'ai scanner le pc de ma soeur avec son antivirus et 38 menaces ont était détectées. De plus je ne peut plus ouvrir IE je clic sur l'icône et rien ne se passe... Analyse exécutée le: 06/02/2011 22:01:43 Date: 7.2.2011 Heure: 15:30:53 La technologie Anti-furtif est activée. Disques, répertoires et fichiers analysés: C: C:\hiberfil.sys - erreur à l'ouverture (le fichier est verrouillé) [4] C:\pagefile.sys - erreur à l'ouverture (le fichier est verrouillé) [4] C:\ACER\Preload\Autorun\APP\Nero 8 Essentials\Installation\Data\E4060BF5.cab »CAB »rootFEAA0A71.img »GZ - archive endommagée C:\Boot\BCD - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Boot\BCD.LOG - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Program Files\Google\Chrome\Application\9.0.597.84\Installer\chrome.7z »7ZIP »Chrome-bin/9.0.597.84/Resources/Inspector/Images/warningsErrors.png - erreur - méthode de compression inconnue C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___.obj - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___S01A01.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___SxxIco.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___SxxIdt.txt - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___SxxInf.rtf - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »DB___SxxZon.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___.obj - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___S01A01.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___SxxIco.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___SxxIdt.txt - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___SxxInf.rtf - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »EN___SxxZon.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___.obj - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___S01A01.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___SxxIco.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___SxxIdt.txt - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___SxxInf.rtf - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JM___SxxZon.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___.obj - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___S01A01.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___SxxIco.smk - Somme de contrôle CRC incorrecte, le fichier peut être endommagé. C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___SxxIdt.txt - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___SxxInf.rtf - erreur - le fichier est protégé par mot de passe C:\Program Files\Mindscape\Gdg7\Gdg.zat »ZIP »JQ___SxxZon.smk - erreur - le fichier est protégé par mot de passe C:\Program Files\Nero\Nero8\Nero BackItUp\BackItUp_ImageTool\root.img »GZ - archive endommagée C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\06297a953431a836315db4a605d29ee9_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\06ae17e8d640e6b60d844e026a093987_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\09fe1c9c34ee35891a795b5aef984a7e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0ba812da3f37aec269833d0224e5c9b6_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\132d23e7f0057e1676f38191c2806739_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\18aa97bf2394e2fb6671b17f2a753cd1_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\21bd0bf32a72c9a6cea5b5e1c65a15bb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2667b2af1feda6cb8ac895db1a26558e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2ed851c853394182bbc4f3b726eebc70_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\45923b62b96368b3a5e627308cc1ed96_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\578f9cb212ce3a17de6f95d25c7e84cb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\63ca12810f392eebdc3c6d6d8bca63da_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\69e4f0bb767ab69d032d4f0233bf8450_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\70ce7a9a452d929447c4df2e03588526_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\76a4b2ff463dce6e66e35c800ffb794d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8053cce9cda89108f7b100f8988abe64_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\877a0fbbaee805dd4dd5ada47e24440a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\88a3438a43f286c96e05eace18d26c53_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8cb3bdfb0ee49dd1f732eeb81d9f822d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9052179e694eb94f5fa09ae47f9433dd_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\95c92bdbc4a8671814fc9ef499eacf11_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\acb204f5631766b456ee96cf83465e69_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\af8f4d65a321d5fa2a174d15bbbf2f1f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b8f45bc55a0f1568bec3dba3bf817192_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d85e958b496f9656bca80d0f6c3d8de4_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d909bd8a59b853d064ddb78c225703ec_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd6680527f9be37804eb83509ecc706a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e755a691add03d857939d4fcf1ec870f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\edafc2070c6bfd6c5e5bc23d1c65cb95_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f9df5f10b8d220065c06c7a228c71971_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fdb912196a010ffb2a23b55fc4525604_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log - erreur à l'ouverture (le fichier est verrouillé) [4] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\System Volume Information\MountPointManagerRemoteDatabase - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{0171ad8f-2bc7-11e0-9f9a-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{09118b9a-0dab-11e0-b24c-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{30455d8e-2c73-11e0-ac71-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{312f942d-2ee6-11e0-947f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{4bbf731a-1843-11e0-b658-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{4bbf7332-1843-11e0-b658-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{577b920e-2fc7-11e0-812f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{57da7d3d-2b2a-11e0-9173-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{6bf32fa7-3165-11e0-b0f7-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{7c7f4dc2-0914-11e0-b1df-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{7c7f4dc7-0914-11e0-b1df-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{8bf4aead-2d73-11e0-893f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{8e43958e-1992-11e0-b04f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{94e6b5bb-1bef-11e0-82df-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{94e6b5c1-1bef-11e0-82df-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{98dd3787-2e37-11e0-b003-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{9c54b62d-1c19-11e0-bcb7-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{9c54b667-1c19-11e0-bcb7-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{a96c3f42-13ad-11e0-8407-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{a96c3f53-13ad-11e0-8407-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{d4cfdc9d-0519-11e0-b163-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{d4cfdcaa-0519-11e0-b163-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{d4cfdcc1-0519-11e0-b163-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{ea997f41-1087-11e0-bbe2-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{ea997f60-1087-11e0-bbe2-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{ef9dea0e-15c9-11e0-942f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{ef9dea1b-15c9-11e0-942f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{ef9dea2a-15c9-11e0-942f-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{f4b24507-09de-11e0-a39d-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{f4b2451a-09de-11e0-a39d-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\System Volume Information\{fb11222c-3055-11e0-a902-00238babe1ec}{3808876b-c176-4e48-b7ae-04046e6cc752} - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06297a953431a836315db4a605d29ee9_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06ae17e8d640e6b60d844e026a093987_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\09fe1c9c34ee35891a795b5aef984a7e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ba812da3f37aec269833d0224e5c9b6_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\132d23e7f0057e1676f38191c2806739_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18aa97bf2394e2fb6671b17f2a753cd1_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21bd0bf32a72c9a6cea5b5e1c65a15bb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2667b2af1feda6cb8ac895db1a26558e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ed851c853394182bbc4f3b726eebc70_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\45923b62b96368b3a5e627308cc1ed96_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\578f9cb212ce3a17de6f95d25c7e84cb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\63ca12810f392eebdc3c6d6d8bca63da_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\69e4f0bb767ab69d032d4f0233bf8450_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\70ce7a9a452d929447c4df2e03588526_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\76a4b2ff463dce6e66e35c800ffb794d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8053cce9cda89108f7b100f8988abe64_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\877a0fbbaee805dd4dd5ada47e24440a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88a3438a43f286c96e05eace18d26c53_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8cb3bdfb0ee49dd1f732eeb81d9f822d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9052179e694eb94f5fa09ae47f9433dd_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\95c92bdbc4a8671814fc9ef499eacf11_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\acb204f5631766b456ee96cf83465e69_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af8f4d65a321d5fa2a174d15bbbf2f1f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b8f45bc55a0f1568bec3dba3bf817192_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d85e958b496f9656bca80d0f6c3d8de4_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d909bd8a59b853d064ddb78c225703ec_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dd6680527f9be37804eb83509ecc706a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e755a691add03d857939d4fcf1ec870f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\edafc2070c6bfd6c5e5bc23d1c65cb95_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9df5f10b8d220065c06c7a228c71971_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fdb912196a010ffb2a23b55fc4525604_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tmp.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Windows.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\06297a953431a836315db4a605d29ee9_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\06ae17e8d640e6b60d844e026a093987_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\09fe1c9c34ee35891a795b5aef984a7e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\0ba812da3f37aec269833d0224e5c9b6_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\132d23e7f0057e1676f38191c2806739_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\18aa97bf2394e2fb6671b17f2a753cd1_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\21bd0bf32a72c9a6cea5b5e1c65a15bb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2667b2af1feda6cb8ac895db1a26558e_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\2ed851c853394182bbc4f3b726eebc70_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\45923b62b96368b3a5e627308cc1ed96_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\578f9cb212ce3a17de6f95d25c7e84cb_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\63ca12810f392eebdc3c6d6d8bca63da_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\69e4f0bb767ab69d032d4f0233bf8450_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\70ce7a9a452d929447c4df2e03588526_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\76a4b2ff463dce6e66e35c800ffb794d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8053cce9cda89108f7b100f8988abe64_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\877a0fbbaee805dd4dd5ada47e24440a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\88a3438a43f286c96e05eace18d26c53_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\8cb3bdfb0ee49dd1f732eeb81d9f822d_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\9052179e694eb94f5fa09ae47f9433dd_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\95c92bdbc4a8671814fc9ef499eacf11_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\acb204f5631766b456ee96cf83465e69_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\af8f4d65a321d5fa2a174d15bbbf2f1f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\b8f45bc55a0f1568bec3dba3bf817192_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d85e958b496f9656bca80d0f6c3d8de4_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\d909bd8a59b853d064ddb78c225703ec_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\dd6680527f9be37804eb83509ecc706a_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\e755a691add03d857939d4fcf1ec870f_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\edafc2070c6bfd6c5e5bc23d1c65cb95_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\f9df5f10b8d220065c06c7a228c71971_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\fdb912196a010ffb2a23b55fc4525604_2add40ee-5f04-4f77-a9fd-5aa64636c5b1 - erreur à l'ouverture (accès refusé) [4] C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\MSS.log - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\tmp.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\All Users\Microsoft\Search\Data\Applications\Windows\Windows.edb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\ntuser.dat.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\ntuser.dat.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Microsoft\Windows\UsrClass.dat - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Microsoft\Windows Defender\FileTracker\{5F29AA8C-AAC4-41B8-8F40-4C7032D51E7E} - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Temp\FFoxPackage.exe »7ZIP »components/FFPlugin.dll - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\flaC63C.tmp - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\AppData\Local\Temp\nsw991A.tmp.exe »WISE »SearchquMediaBar.exe »NSIS »script.nsi - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\nsw991A.tmp.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquTb.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\nsw991A.tmp.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquDx.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\nsw991A.tmp.exe »WISE »SearchquMediaBar.exe »NSIS »searchqutb.js - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »script.nsi - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquTb.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquDx.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »searchqutb.js - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/Bandoo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/BandooGo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/BandooUI.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/BndCore.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/ExtensionsManager.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Bin/FFoxPackage.exe »7ZIP »components/FFPlugin.dll - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Static/SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »script.nsi - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Static/SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquTb.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Static/SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquDx.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\files.exe »7ZIP »Static/SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »searchqutb.js - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\Bin\FFoxPackage.exe »7ZIP »components/FFPlugin.dll - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\AppData\Local\Temp\GLF7807\Static\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »script.nsi - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\Static\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquTb.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\Static\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »SearchquDx.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\GLF7807\Static\SetupDataMngr_Searchqu.exe »NSIS »ý€€.exe »WISE »SearchquMediaBar.exe »NSIS »searchqutb.js - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\MediaBarFiles\Bin\Static\Searchqu\SearchquMediaBar.exe »NSIS »script.nsi - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\MediaBarFiles\Bin\Static\Searchqu\SearchquMediaBar.exe »NSIS »SearchquTb.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\MediaBarFiles\Bin\Static\Searchqu\SearchquMediaBar.exe »NSIS »SearchquDx.dll - Win32/Adware.Bandoo application C:\Users\boul\AppData\Local\Temp\MediaBarFiles\Bin\Static\Searchqu\SearchquMediaBar.exe »NSIS »searchqutb.js - Win32/Adware.Bandoo application C:\Users\boul\AppData\Roaming\Mozilla\Firefox\Profiles\8xk8iq2k.default\parent.lock - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Users\boul\Downloads\BandooV5(2).exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/Bandoo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5(2).exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/BandooGo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5(2).exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/BandooUI.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5(2).exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/ExtensionsManager.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5(2).exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/FFoxPackage.exe »7ZIP »components/FFPlugin.dll - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5.exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/Bandoo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5.exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/BandooGo.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5.exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/BandooUI.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5.exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/ExtensionsManager.exe - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\BandooV5.exe »NSIS »ý€€.exe »WISE »SFX »7ZIP »Bin/FFoxPackage.exe »7ZIP »components/FFPlugin.dll - une variante de Win32/Adware.Bandoo.AA application C:\Users\boul\Downloads\Firefox Setup 2.0.0.20.exe »7ZIP »optional/extensions/talkback@mozilla.org/components/qfaservices.xpt - erreur - méthode de compression inconnue C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\catroot2\edb.log - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\COMPONENTS - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\COMPONENTS.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\COMPONENTS.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\DEFAULT - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\DEFAULT.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\DEFAULT.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SAM - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SAM.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SAM.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SECURITY - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SECURITY.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SECURITY.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SOFTWARE - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SOFTWARE.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SOFTWARE.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SYSTEM - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SYSTEM.LOG1 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\SYSTEM.LOG2 - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\COMPONENTS - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\DEFAULT - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\SAM - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\SECURITY - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\SOFTWARE - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\config\RegBack\SYSTEM - erreur à l'ouverture (le fichier est verrouillé) [4] C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl - erreur à l'ouverture (accès refusé) [4] C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl - erreur à l'ouverture (accès refusé) [4] C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl - erreur à l'ouverture (accès refusé) [4] C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl - erreur à l'ouverture (accès refusé) [4] C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl - erreur à l'ouverture (accès refusé) [4] Nombre de fichiers analysés: 297885 Nombre de menaces détectées: 38 Nombre de menaces actives: 9 Heure d'achèvement: 17:47:23 Temps total d'analyse : 8190 sec (02:16:30) Notes: [4] Ouverture du fichier impossible. Il est utilisé exclusivement par une autre application ou le système d'exploitation. Merci de votre réponse. Bonne soirée
  12. rapasse

    Lenteur

    Bonsoir, Merci pour vos réponse, dsl de mon retard :/. Je suis bien en SP3 et en IE8, et j'ai effectuer les vérification mais rien a changer :/ Bonne soirée
  13. Bonjour, Après être passer dans la section désinfection, on ma dit de me rabattre sur celle là car je n'est plus d'infection mais encore des lenteurs. Donc, mon pc rame en général, il cherche sans cesse ( même si je ne touche pas au PC). Cordialement
  14. Salut lance_yien , La vérification c'est faite. Je doit faire quoi avec le lien que je t'es passé ? Cordialement
  15. Bonsoir, Voilà le lien de PC Pitstop: PC Pitstop OverDrive Tests Overview Sans l'anti-virus cela ne change rien. La vérification ce fait se soir. Cordialement
  16. Bonsoir, Il y a une amélioration mais il rame tjrs au démarrage, et quand je veux ouvrir un programme. Sinon bitdefender se met beaucoup moins en gris. Cordialement
  17. Bonsoir, Je suis entrain de faire ce que tu ma dit mais en voulant faire MBAM' S le lien est mort pour le télécharger :/
  18. Bonsoir, Le lien DeFogger est mort, ce me met adresse introuvable. Voilà le rapport de ComboFix: ComboFix 10-11-17.01 - HP_Administrateur 17/11/2010 20:30:10.1.2 - x86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2046.1419 [GMT 1:00] Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB} FW: BitDefender Pare-feu *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242} . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\404Fix.exe c:\windows\system32\Agent.OMZ.Fix.exe c:\windows\system32\dumphive.exe c:\windows\system32\IEDFix.C.exe c:\windows\system32\IEDFix.exe c:\windows\system32\o4Patch.exe c:\windows\system32\SrchSTS.exe c:\windows\system32\tmp.reg c:\windows\system32\VACFix.exe c:\windows\system32\VCCLSID.exe c:\windows\system32\WS2Fix.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_USNJSVC -------\Service_usnjsvc ((((((((((((((((((((((((((((( Fichiers créés du 2010-10-17 au 2010-11-17 )))))))))))))))))))))))))))))))))))) . 2010-11-16 17:47 . 2010-11-16 17:47 -------- d-----w- c:\program files\ESET 2010-11-16 14:34 . 2010-11-16 14:34 -------- d-----w- C:\_OTL 2010-11-15 17:34 . 2010-11-15 17:34 -------- d-----w- c:\program files\VS Revo Group 2010-11-14 20:19 . 2010-11-14 21:01 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\U3 2010-10-31 14:43 . 2010-10-31 14:43 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google 2010-10-31 14:39 . 2010-10-31 14:41 -------- d-----w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\Temp 2010-10-31 14:39 . 2010-10-31 14:39 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google 2010-10-31 14:06 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll 2010-10-31 14:06 . 2010-01-17 15:18 151552 ----a-w- c:\windows\system32\ac3acm.acm 2010-10-31 14:06 . 2008-09-24 18:41 839680 ----a-w- c:\windows\system32\lameACM.acm 2010-10-31 14:05 . 2010-06-08 16:10 790528 ----a-w- c:\windows\system32\xvidcore.dll 2010-10-31 14:05 . 2010-06-08 16:10 134144 ----a-w- c:\windows\system32\xvidvfw.dll 2010-10-31 14:05 . 2010-10-18 08:00 108032 ----a-w- c:\windows\system32\ff_vfw.dll 2010-10-31 14:05 . 2010-10-31 14:07 -------- d-----w- c:\program files\K-Lite Codec Pack . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-09-18 10:23 . 2004-08-10 11:00 974848 ----a-w- c:\windows\system32\mfc42u.dll 2010-09-18 06:53 . 2004-08-10 11:00 974848 ----a-w- c:\windows\system32\mfc42.dll 2010-09-18 06:53 . 2004-08-10 04:00 954368 ----a-w- c:\windows\system32\mfc40.dll 2010-09-18 06:53 . 2004-08-10 04:00 953856 ----a-w- c:\windows\system32\mfc40u.dll 2010-09-10 05:50 . 2004-08-10 11:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-09-10 05:50 . 2004-08-10 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll 2010-09-10 05:50 . 2004-08-10 11:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl 2010-09-01 11:51 . 2004-08-10 11:00 285824 ----a-w- c:\windows\system32\atmfd.dll 2010-09-01 07:55 . 2004-08-10 11:00 1852928 ----a-w- c:\windows\system32\win32k.sys 2010-08-27 08:02 . 2004-08-10 11:00 119808 ----a-w- c:\windows\system32\t2embed.dll 2010-08-27 05:58 . 2004-08-10 11:00 99840 ----a-w- c:\windows\system32\srvsvc.dll 2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll 2010-08-26 13:39 . 2004-08-10 11:00 357248 ----a-w- c:\windows\system32\drivers\srv.sys 2010-08-23 16:12 . 2004-08-10 11:00 617472 ----a-w- c:\windows\system32\comctl32.dll 2006-05-03 10:06 163328 --sh--r- c:\windows\system32\flvDX.dll 2007-02-21 11:47 31232 --sh--r- c:\windows\system32\msfDX.dll 2008-03-16 13:30 216064 --sh--r- c:\windows\system32\nbDX.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-04-01 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2010-01-12 71152] "ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2006-07-06 151552] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-03-30 198160] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-07-09 110696] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-07-09 13923432] "Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] c:\documents and settings\Default User\Menu D‚marrer\Programmes\D‚marrage\ Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-1-3 27136] PinMcLnk.lnk - c:\hp\bin\cloaker.exe [2006-1-3 27136] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1700:TCP"= 1700:TCP:MioNet Remote Drive Access "1641:TCP"= 1641:TCP:MioNet Remote Drive Verification [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings] "AllowInboundEchoRequest"= 1 (0x1) R1 is-GQI3Ndrv;is-GQI3Ndrv;c:\windows\system32\drivers\64425156.sys [25/01/2009 00:23 148496] R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [01/04/2009 11:25 85128] R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [24/08/2010 10:38 92008] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [03/01/2006 02:35 2829696] R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [29/06/2009 14:12 153448] R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [26/06/2009 18:01 111312] S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [31/10/2010 15:38 136176] S3 Arrakis3;BitDefender Serveur Arrakis;c:\program files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [26/06/2009 14:40 183880] S3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [03/01/2006 02:34 468768] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bdx REG_MULTI_SZ scan . Contenu du dossier 'Tâches planifiées' 2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-10-31 14:38] 2010-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-10-31 14:38] 2010-11-17 c:\windows\Tasks\HPpromotions journeysoftware.job - c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe [2005-04-22 16:36] . . ------- Examen supplémentaire ------- . IE: &Traduire à partir de l'anglais - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 IE: Pages liées - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html IE: Pages similaires - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html IE: Recherche &Google - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html IE: Version de la page actuelle disponible dans le cache Google - c:\program files\Google\GoogleToolbar1.dll/cmcache.html DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/ FF - prefs.js: keyword.URL - FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- PARAMETRES FIREFOX ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . - - - - ORPHELINS SUPPRIMES - - - - SafeBoot-AVG Anti-Spyware Driver SafeBoot-AVG Anti-Spyware Guard AddRemove-Ad-Remover - c:\program files\Ad-Remover\Uninstall.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-11-17 20:45 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(3556) c:\windows\system32\msi.dll c:\windows\system32\eappprxy.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\nvsvc32.exe c:\program files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe c:\program files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe c:\windows\eHome\ehRecvr.exe c:\windows\eHome\ehSched.exe c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Fichiers communs\LightScribe\LSSrvc.exe c:\program files\NVIDIA Corporation\nTune\nTuneService.exe c:\windows\system32\HPZipm12.exe c:\windows\ehome\mcrdsvc.exe c:\program files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe c:\windows\system32\RUNDLL32.EXE c:\windows\system32\dllhost.exe c:\windows\system32\wscntfy.exe c:\windows\system32\wbem\wmiapsrv.exe c:\hp\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe . ************************************************************************** . Heure de fin: 2010-11-17 20:51:29 - La machine a redémarré ComboFix-quarantined-files.txt 2010-11-17 19:51 Avant-CF: 164 060 782 592 octets libres Après-CF: 164 095 913 984 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect - - End Of File - - 6CEFE5AB7AF46F088CC98C6426A032F6
  19. Bonsoir, Alors cacaoweb n'est pas non plus dans Ajout/ Suppression de programme. La dernière analyse a durée plus de 8h00 c'est normal ? Voilà les rapports: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 5127 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 16/11/2010 15:58:34 mbam-log-2010-11-16 (15-58-34).txt Type d'examen: Examen rapide Elément(s) analysé(s): 154720 Temps écoulé: 9 minute(s), 14 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\nwiz deleted successfully. C:\Program Files\NVIDIA Corporation\nView\nwiz.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Recguard deleted successfully. C:\WINDOWS\SMINST\Recguard.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cacaoweb deleted successfully. C:\Program Files\cacaoweb\cacaoweb.exe moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1f9502f8-68b0-11dd-a569-00c0a8c4911d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f9502f8-68b0-11dd-a569-00c0a8c4911d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8503f77c-b544-11df-9678-00c0a8c4911d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8503f77c-b544-11df-9678-00c0a8c4911d}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8503f77c-b544-11df-9678-00c0a8c4911d}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8503f77c-b544-11df-9678-00c0a8c4911d}\ not found. File F:\LaunchU3.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{92a3cff2-9b49-11df-962c-00c0a8c4911d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{92a3cff2-9b49-11df-962c-00c0a8c4911d}\ not found. File F:\InstallTomTomHOME.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d83c835a-bd91-11df-968e-00c0a8c4911d}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d83c835a-bd91-11df-968e-00c0a8c4911d}\ not found. File K:\InstallTomTomHOME.exe not found. C:\Documents and Settings\HP_Administrateur\Application Data\cacaoweb folder moved successfully. C:\Program Files\cacaoweb folder moved successfully. C:\Program Files\Ad-Remover\res\Images folder moved successfully. C:\Program Files\Ad-Remover\res\Icons folder moved successfully. C:\Program Files\Ad-Remover\res folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com\logs folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com\datastore folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default\extensions folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur\Application Data folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings\HP_Administrateur folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C\Documents and Settings folder moved successfully. C:\Program Files\Ad-Remover\Quarantine\C folder moved successfully. C:\Program Files\Ad-Remover\Quarantine folder moved successfully. C:\Program Files\Ad-Remover\Lang folder moved successfully. C:\Program Files\Ad-Remover\Erunt folder moved successfully. C:\Program Files\Ad-Remover\bin folder moved successfully. C:\Program Files\Ad-Remover\Backup\Registry-18-10-2010\Users\00000002 folder moved successfully. C:\Program Files\Ad-Remover\Backup\Registry-18-10-2010\Users\00000001 folder moved successfully. C:\Program Files\Ad-Remover\Backup\Registry-18-10-2010\Users folder moved successfully. C:\Program Files\Ad-Remover\Backup\Registry-18-10-2010 folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles\zvqk8qrw.default folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox\Profiles folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla\FireFox folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur\Application Data\Mozilla folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur\Application Data folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings\HP_Administrateur folder moved successfully. C:\Program Files\Ad-Remover\Backup\C\Documents and Settings folder moved successfully. C:\Program Files\Ad-Remover\Backup\C folder moved successfully. C:\Program Files\Ad-Remover\Backup folder moved successfully. C:\Program Files\Ad-Remover folder moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Administrateur ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 71271 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 205815 bytes ->Flash cache emptied: 525 bytes User: HP_Administrateur ->Temp folder emptied: 9055220 bytes ->Temporary Internet Files folder emptied: 269431548 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 414218532 bytes ->Google Chrome cache emptied: 5185264 bytes ->Flash cache emptied: 12214 bytes User: LocalService ->Temp folder emptied: 115616 bytes ->Temporary Internet Files folder emptied: 47412 bytes ->FireFox cache emptied: 973226 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 29721083 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 23254012 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 68075 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 10442204 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 206083 bytes RecycleBin emptied: 567603739 bytes Total Files Cleaned = 1 269,00 mb OTL by OldTimer - Version 3.2.17.3 log created on 11162010_153407 Files\Folders moved on Reboot... Registry entries deleted on Reboot... L:\Mes documents\Petits Fichiers\MsgPlusLive-470.exe a variant of Win32/MessengerPlus application cleaned by deleting - quarantined L:\System Volume Information\_restore{512DF77D-45B5-4AE1-9C2A-EC48B0F584C1}\RP519\A0098386.exe a variant of Win32/MessengerPlus application cleaned by deleting - quarantined Oui, j'ai toujours ma machine qui rame, à des moment firfox ne répond plus, sinon Bitdefender ne répond plus non plus ( il ce met en gris )et là les lenteurs sont encore plus accru. J'ai remarquer que l'ordi cherche en permanence comme si je lui demander de faire plein de chose à la fois alors que je ne touche même pas la souris... Cordialement, Bonne soirée
  20. Et pour finir voilà le dernier rapport: Results of screen317's Security Check version 0.99.5 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: BitDefender Internet Security 2010 Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware HijackThis 2.0.2 CCleaner Java 6 Update 21 Adobe Flash Player 10.1.102.64 Adobe Reader 9.4.0 - Français Mozilla Firefox (3.6.12) Firefox Out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent BitDefender BitDefender 2010 vsserv.exe Fichiers communs BitDefender BitDefender Communicator xcommsvr.exe Fichiers communs BitDefender BitDefender Update Service livesrv.exe BitDefender BitDefender 2010 bdagent.exe BitDefender BitDefender 2010 seccenter.exe ```````````````````````````````` DNS Vulnerability Check: Unknown. This method cannot test your vulnerability to DNS cache poisoning. (Wireless connection?) ``````````End of Log```````````` En attendant votre aide je vous remercie et vous souhaite une bonne soirée
  21. Bonsoir, Un grand merci de me venir en aide, il n'y a pas cacaoweb, dans la liste, ainsi que avancer n'est pas en bas ,j'ai pas réussi à faire cette partis demander... Alors voici le rapport OTL: OTL logfile created on: 15/11/2010 20:01:08 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\HP_Administrateur\Bureau Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 86,00% Paging File free Paging file location(s): C:\pagefile.sys 3072 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 226,07 Gb Total Space | 153,11 Gb Free Space | 67,73% Space Free | Partition Type: NTFS Drive D: | 6,80 Gb Total Space | 0,83 Gb Free Space | 12,25% Space Free | Partition Type: FAT32 Drive I: | 124,94 Mb Total Space | 95,94 Mb Free Space | 76,79% Space Free | Partition Type: FAT Drive K: | 3,85 Gb Total Space | 0,85 Gb Free Space | 22,15% Space Free | Partition Type: FAT32 Drive L: | 298,09 Gb Total Space | 172,42 Gb Free Space | 57,84% Space Free | Partition Type: NTFS Computer Name: NOM-FB9B15D2723 | User Name: HP_Administrateur | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2010/11/15 18:43:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe PRC - [2010/11/13 12:11:50 | 000,299,536 | ---- | M] () -- C:\Program Files\cacaoweb\cacaoweb.exe PRC - [2010/10/29 10:39:51 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010/10/29 10:39:49 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010/08/24 10:38:18 | 000,092,008 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe PRC - [2010/05/05 12:54:46 | 001,615,688 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe PRC - [2010/04/01 15:40:02 | 001,123,360 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe PRC - [2010/04/01 15:39:55 | 001,091,984 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe PRC - [2010/01/28 14:31:49 | 000,308,552 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe PRC - [2009/03/30 21:03:26 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe PRC - [2008/12/27 19:52:09 | 000,086,016 | ---- | M] (BitDefender) -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe PRC - [2008/04/14 03:34:03 | 001,037,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007/09/04 18:25:44 | 000,131,072 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe PRC - [2007/08/09 08:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe PRC - [2006/07/06 14:15:00 | 000,151,552 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2006/07/06 14:14:30 | 000,090,112 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2006/06/21 04:08:48 | 000,049,152 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe PRC - [2006/06/01 23:25:00 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ELService.exe PRC - [2004/07/27 23:50:18 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe ========== Modules (SafeList) ========== MOD - [2010/11/15 18:43:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe MOD - [2010/10/14 17:32:36 | 000,286,720 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_nt.m32 MOD - [2010/10/14 17:32:36 | 000,176,128 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_extra.m32 MOD - [2010/10/14 17:32:36 | 000,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_net.m32 MOD - [2010/10/14 17:32:35 | 000,667,648 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_fragments.m32 MOD - [2010/10/14 17:32:35 | 000,237,504 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\midas32.dll MOD - [2010/10/14 17:32:35 | 000,151,552 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_base.m32 MOD - [2010/10/14 17:32:35 | 000,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- C:\Program Files\BitDefender\BitDefender 2010\Active Virus Control\midas32-v2_68\plugin_registry.m32 MOD - [2010/08/23 17:12:39 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2010/08/24 10:38:18 | 000,092,008 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2010/05/05 12:54:46 | 001,615,688 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV) SRV - [2010/04/01 15:39:55 | 000,315,392 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan) SRV - [2010/01/28 14:31:49 | 000,308,552 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV) SRV - [2010/01/12 18:36:57 | 000,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3) SRV - [2008/12/27 19:52:09 | 000,086,016 | ---- | M] (BitDefender) [Auto | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe -- (XCOMM) SRV - [2008/11/04 00:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2007/10/25 14:27:54 | 000,266,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc) SRV - [2007/09/04 18:25:44 | 000,131,072 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService) SRV - [2007/08/09 08:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) SRV - [2006/10/26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2006/07/06 14:14:30 | 000,090,112 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel® SRV - [2006/06/21 04:08:48 | 000,049,152 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe -- (LightScribeService) SRV - [2006/06/01 23:25:00 | 000,180,224 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\ELService.exe -- (ELService) Intel® SRV - [2005/04/03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\usbVM31b.sys -- (ZSMC301b) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\usbaapl.sys -- (USBAAPL) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\mcdbus.sys -- (mcdbus) DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys -- (ASInsHelp) DRV - [2010/07/10 04:38:00 | 010,604,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2010/06/04 11:29:04 | 001,606,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416) DRV - [2010/05/05 12:54:52 | 000,119,504 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys -- (bdftdif) DRV - [2010/05/05 12:54:52 | 000,058,368 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr) DRV - [2010/05/05 12:54:48 | 000,085,128 | ---- | M] (BitDefender) [Kernel | Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys -- (BDVEDISK) DRV - [2010/05/05 12:54:44 | 000,111,312 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfndisf.sys -- (Bdfndisf) DRV - [2010/04/01 15:39:56 | 000,291,352 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\bdfsfltr.sys -- (bdfsfltr) DRV - [2010/02/13 20:17:00 | 000,153,448 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bdfm.sys -- (bdfm) DRV - [2010/01/12 18:37:46 | 000,014,720 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\profos.sys -- (Profos) DRV - [2009/05/07 04:22:06 | 000,039,808 | ---- | M] (BitDefender S.R.L.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BitDefender\BitDefender Threat Scanner\trufos.sys -- (Trufos) DRV - [2008/07/08 13:54:02 | 000,148,496 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\64425156.sys -- (is-GQI3Ndrv) DRV - [2008/04/13 19:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE) DRV - [2008/04/13 19:45:36 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irbus.sys -- (IrBus) DRV - [2008/04/13 17:36:06 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007/12/11 20:34:40 | 000,242,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel® DRV - [2007/09/04 18:26:32 | 000,029,696 | ---- | M] (NVidia Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\nvoclock.sys -- (NVR0Dev) DRV - [2006/09/24 14:28:46 | 000,005,248 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2006/07/25 00:15:04 | 004,353,024 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2006/07/06 14:59:42 | 000,246,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\iastor.sys -- (iaStor) DRV - [2006/05/09 22:36:44 | 000,009,728 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ELacpi.sys -- (ELacpi) DRV - [2006/05/09 22:36:42 | 000,007,040 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elmon.sys -- (ELmon) DRV - [2006/05/09 22:36:22 | 000,006,912 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elkbd.sys -- (ELkbd) DRV - [2006/05/09 22:36:20 | 000,006,400 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elmou.sys -- (ELmou) DRV - [2006/05/09 22:36:18 | 000,010,112 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Elhid.sys -- (ELhid) DRV - [2006/04/12 04:36:56 | 002,829,696 | ---- | M] (ASUSTek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid) DRV - [2005/12/13 01:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2) DRV - [2005/10/05 03:44:06 | 000,468,768 | ---- | M] (Liteon Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wn5301.sys -- (WN5301) DRV - [2005/06/29 16:03:18 | 000,175,104 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ftsata2.sys -- (ftsata2) DRV - [2004/08/03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C) DRV - [2003/11/05 06:45:12 | 000,017,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\bb-run.sys -- (bb-run) DRV - [2003/05/14 12:42:56 | 000,021,216 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter) DRV - [2003/05/14 12:42:50 | 000,010,144 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum) DRV - [2003/05/14 12:42:48 | 000,005,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid) DRV - [2003/05/14 12:42:44 | 000,044,288 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore) DRV - [1996/04/03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.fr/" FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0 FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.50 FF - prefs.js..extensions.enabledItems: fr-FR@dictionaries.addons.mozilla.org:3.5 FF - prefs.js..extensions.enabledItems: fr@dictionaries.addons.mozilla.org:3.5 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1 FF - prefs.js..extensions.enabledItems: illimitux@illimitux.net:4.0 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.6.2.119 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..keyword.URL: "" FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2009/03/30 21:04:17 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2010/09/20 17:01:41 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/29 10:39:52 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/29 10:39:52 | 000,000,000 | ---D | M] [2008/09/20 11:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions [2008/09/20 11:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Extensions\home2@tomtom.com [2010/11/15 18:52:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions [2010/05/02 20:04:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/10/18 17:07:55 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010/10/31 15:25:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2010/01/12 18:06:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2) [2007/12/01 19:22:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla(2).org [2010/02/15 20:59:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr@dictionaries.addons.mozilla.org [2010/02/15 20:59:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\fr-FR@dictionaries.addons.mozilla.org [2010/11/10 22:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\illimitux@illimitux.net [2010/10/18 20:32:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\extensions\toolbar@ask.com [2008/12/17 15:10:35 | 000,001,775 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\zvqk8qrw.default\searchplugins\live-search.xml [2010/11/15 18:52:56 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/10/09 13:30:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010/07/17 04:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2007/07/09 11:59:00 | 002,113,536 | ---- | M] (Rawflow Ltd) -- C:\Program Files\Mozilla Firefox\plugins\npicdclient.dll [2010/06/25 17:24:56 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml [2010/06/25 17:24:56 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml [2010/06/25 17:24:56 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml [2010/06/25 17:24:56 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml [2010/06/25 17:24:56 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2004/08/10 12:00:00 | 000,000,790 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [bDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [bitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [iSUSPM Startup] C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe () O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [cacaoweb] C:\Program Files\cacaoweb\cacaoweb.exe () O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0 O9 - Extra Button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm () O9 - Extra 'Tools' menuitem : Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm () O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab (Reg Error: Key error.) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab (BDSCANONLINE Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Ma page d'accueil) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/01/03 02:48:17 | 000,000,100 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010/03/24 16:00:00 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2001/07/27 08:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2010/03/24 16:00:02 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ FAT32 ] O32 - AutoRun File - [2010/03/24 16:00:00 | 000,000,000 | RHSD | M] - L:\autorun.inf -- [ NTFS ] O33 - MountPoints2\{1f9502f8-68b0-11dd-a569-00c0a8c4911d}\Shell - "" = AutoRun O33 - MountPoints2\{8503f77c-b544-11df-9678-00c0a8c4911d}\Shell - "" = AutoRun O33 - MountPoints2\{8503f77c-b544-11df-9678-00c0a8c4911d}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found O33 - MountPoints2\{92a3cff2-9b49-11df-962c-00c0a8c4911d}\Shell\AutoRun\command - "" = F:\InstallTomTomHOME.exe -- File not found O33 - MountPoints2\{d83c835a-bd91-11df-968e-00c0a8c4911d}\Shell\AutoRun\command - "" = K:\InstallTomTomHOME.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found ========== Files/Folders - Created Within 30 Days ========== [2010/11/15 18:43:16 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe [2010/11/15 18:34:42 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group [2010/11/14 21:19:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Application Data\U3 [2010/11/10 22:46:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Application Data\cacaoweb [2010/11/10 22:46:24 | 000,000,000 | ---D | C] -- C:\Program Files\cacaoweb [2010/11/04 19:05:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\HP_Administrateur\Recent [2010/10/31 15:43:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google [2010/10/31 15:39:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Temp [2010/10/31 15:39:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google [2010/10/31 15:06:00 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2010/10/31 15:06:00 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2010/10/31 15:05:55 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2010/10/18 19:54:06 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2010/10/18 19:14:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Sony [2010/10/18 19:13:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Mes documents\My Podcasts [2010/10/18 19:13:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Mes documents\Media Go [2010/10/18 19:10:17 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Sony Shared [2010/10/18 19:08:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Downloaded Installations [2010/10/18 19:08:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony Corporation [2010/10/18 19:08:26 | 000,000,000 | ---D | C] -- C:\Program Files\Sony [2010/10/18 19:06:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Application Data\Sony [2010/10/18 19:05:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\Sony Ericsson [2010/10/18 19:04:36 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson [2010/10/18 19:04:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony Ericsson [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010/11/15 20:00:00 | 000,000,390 | ---- | M] () -- C:\WINDOWS\tasks\HPpromotions journeysoftware.job [2010/11/15 19:43:00 | 000,000,908 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010/11/15 18:43:34 | 000,869,051 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\SecurityCheck.exe [2010/11/15 18:43:16 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrateur\Bureau\OTL.exe [2010/11/15 18:34:42 | 000,000,928 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Revo Uninstaller.lnk [2010/11/15 18:29:36 | 002,409,944 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\revosetup.exe [2010/11/15 18:19:34 | 000,000,376 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Application Dataprivacy.xml [2010/11/15 18:18:58 | 000,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat [2010/11/15 18:18:27 | 000,000,904 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010/11/15 18:18:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/11/14 23:43:13 | 034,600,916 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx [2010/11/14 23:43:12 | 2952,163,360 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2010/11/14 23:43:07 | 000,000,052 | ---- | M] () -- C:\WINDOWS\System32\ashttpstats.csv [2010/11/14 22:59:16 | 000,000,597 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Mes dossiers de partage.lnk [2010/11/14 21:30:25 | 000,146,944 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/11/13 14:49:44 | 733,401,088 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Steppin' 2.avi [2010/11/13 13:20:42 | 000,290,709 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Diapo messe 14 novembre 2010 JP.pptx [2010/11/13 12:00:15 | 000,021,005 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Jesus-et-disciples.jpg [2010/11/10 10:00:53 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/11/08 21:44:38 | 000,084,992 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\dm loéna.odt [2010/11/05 00:43:44 | 000,080,460 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\couverutre Loéna.odt [2010/11/04 22:48:54 | 000,033,694 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\2042436_7055543_la-nuit-des-temps.jpg [2010/11/04 18:46:26 | 000,000,693 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\CCleaner.lnk [2010/10/31 15:46:09 | 000,001,926 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk [2010/10/31 10:12:53 | 000,515,048 | ---- | M] () -- C:\WINDOWS\System32\perfh00C.dat [2010/10/31 10:12:53 | 000,445,506 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/10/31 10:12:53 | 000,086,514 | ---- | M] () -- C:\WINDOWS\System32\perfc00C.dat [2010/10/31 10:12:53 | 000,072,712 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/10/21 09:42:58 | 019,792,940 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\.wav [2010/10/21 09:16:08 | 000,000,335 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Mes documents.lnk [2010/10/18 19:54:26 | 000,001,565 | ---- | M] () -- C:\Documents and Settings\HP_Administrateur\Bureau\AD-R.lnk [2010/10/18 19:10:23 | 000,001,633 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Media Go.lnk [2010/10/18 19:04:49 | 000,001,916 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Sony Ericsson PC Companion 1.6.lnk [2010/10/18 09:00:00 | 000,108,032 | ---- | M] () -- C:\WINDOWS\System32\ff_vfw.dll [2010/10/18 09:00:00 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini [2010/10/17 20:45:27 | 000,001,740 | ---- | M] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files Created - No Company Name ========== [2010/11/15 18:43:34 | 000,869,051 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\SecurityCheck.exe [2010/11/15 18:34:42 | 000,000,928 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Revo Uninstaller.lnk [2010/11/15 18:29:21 | 002,409,944 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\revosetup.exe [2010/11/13 13:23:45 | 733,401,088 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Steppin' 2.avi [2010/11/13 12:00:15 | 000,021,005 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\Jesus-et-disciples.jpg [2010/11/13 11:17:35 | 000,290,709 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Diapo messe 14 novembre 2010 JP.pptx [2010/11/08 21:13:30 | 000,084,992 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\dm loéna.odt [2010/11/04 22:52:26 | 000,080,460 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\couverutre Loéna.odt [2010/11/04 21:52:03 | 000,033,694 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\2042436_7055543_la-nuit-des-temps.jpg [2010/11/04 18:46:26 | 000,000,693 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\CCleaner.lnk [2010/10/31 15:46:09 | 000,001,926 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Google Earth.lnk [2010/10/31 15:38:58 | 000,000,908 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010/10/31 15:38:58 | 000,000,904 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010/10/31 15:06:02 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010/10/31 15:06:01 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2010/10/31 15:06:00 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2010/10/31 15:05:59 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010/10/31 15:05:59 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010/10/31 15:05:58 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010/10/21 09:42:58 | 019,792,940 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\.wav [2010/10/21 09:16:08 | 000,000,335 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Mes documents\Mes documents.lnk [2010/10/18 19:54:25 | 000,001,565 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Bureau\AD-R.lnk [2010/10/18 19:10:23 | 000,001,633 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Media Go.lnk [2010/10/18 19:04:49 | 000,001,916 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Sony Ericsson PC Companion 1.6.lnk [2010/10/17 20:45:27 | 000,001,740 | ---- | C] () -- C:\Documents and Settings\All Users\Bureau\Adobe Reader 9.lnk [2010/02/21 22:36:34 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2010/02/13 23:31:14 | 000,000,025 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\bdfvconp.ini [2009/01/15 13:45:34 | 000,181,248 | ---- | C] () -- C:\WINDOWS\System32\txmlutil.dll [2008/10/07 08:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll [2008/10/07 08:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2008/08/27 18:13:19 | 000,041,422 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log [2008/08/27 18:13:19 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini [2008/08/27 18:08:59 | 000,043,593 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\Update_HP_RedboxHprblog_HPSU.log [2008/08/27 18:08:59 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini [2008/08/22 00:22:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll [2008/08/12 15:39:40 | 000,000,140 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\fusioncache.dat [2008/05/18 20:03:15 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2008/01/12 17:21:45 | 000,000,121 | ---- | C] () -- C:\WINDOWS\bdagent.INI [2007/12/27 19:37:44 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt [2007/12/04 18:41:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2007/11/14 23:02:57 | 000,003,120 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\118300.34 [2007/05/05 11:57:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2007/03/12 11:01:30 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll [2007/01/31 14:50:32 | 000,913,408 | ---- | C] () -- C:\WINDOWS\System32\xreglib.dll [2007/01/16 11:46:40 | 000,000,251 | ---- | C] () -- C:\Program Files\wt3d.ini [2007/01/06 18:50:58 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2006/12/30 23:37:26 | 000,000,187 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\G-Force Prefs (WindowsMediaPlayer).txt [2006/12/30 20:11:37 | 000,022,586 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Application Data\wklnhst.dat [2006/11/25 11:34:10 | 000,146,944 | ---- | C] () -- C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006/06/16 19:58:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini [2006/01/03 03:20:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2006/01/03 02:55:56 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys [2006/01/03 02:51:11 | 000,014,397 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS [2006/01/03 02:51:06 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll [2006/01/03 02:43:39 | 000,000,157 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2006/01/03 02:39:57 | 000,000,752 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log [2006/01/03 02:39:04 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2006/01/03 02:35:00 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll [2006/01/03 02:18:33 | 000,000,821 | ---- | C] () -- C:\WINDOWS\orun32.ini [2006/01/03 02:14:01 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll [2006/01/03 02:14:01 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll [2006/01/03 02:13:49 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll [2005/10/10 12:33:42 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2005/08/05 22:38:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2005/03/14 13:38:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini [2004/09/17 04:24:26 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll [2003/06/24 18:20:22 | 000,000,651 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [1996/04/03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys < End of report > Voilà le rapport Extra: OTL Extras logfile created on: 15/11/2010 20:01:08 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\HP_Administrateur\Bureau Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 86,00% Paging File free Paging file location(s): C:\pagefile.sys 3072 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 226,07 Gb Total Space | 153,11 Gb Free Space | 67,73% Space Free | Partition Type: NTFS Drive D: | 6,80 Gb Total Space | 0,83 Gb Free Space | 12,25% Space Free | Partition Type: FAT32 Drive I: | 124,94 Mb Total Space | 95,94 Mb Free Space | 76,79% Space Free | Partition Type: FAT Drive K: | 3,85 Gb Total Space | 0,85 Gb Free Space | 22,15% Space Free | Partition Type: FAT32 Drive L: | 298,09 Gb Total Space | 172,42 Gb Free Space | 57,84% Space Free | Partition Type: NTFS Computer Name: NOM-FB9B15D2723 | User Name: HP_Administrateur | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" File not found https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" File not found piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1700:TCP" = 1700:TCP:*:Enabled:MioNet Remote Drive Access "1641:TCP" = 1641:TCP:*:Enabled:MioNet Remote Drive Verification "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp "48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AOL 9.0\waol.exe" = C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL France -- File not found "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( ) "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.) "C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- File not found "C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\WNt500x86\RpcSandraSrv.exe" = C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found "C:\Program Files\cacaoweb\cacaoweb.exe" = C:\Program Files\cacaoweb\cacaoweb.exe:*:Enabled:cacaoweb -- () ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data "{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow "{0BD83598-C2EF-3343-847B-7D2E84599128}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - FRA "{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation®Store "{1341D838-719C-4A05-B50F-49420CA1B4BB}" = HP Boot Optimizer "{1572F66F-F9AD-4D45-B0D2-0F45A0D5A0F6}" = OpenOffice.org 3.0 "{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus "{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress "{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java 6 Update 21 "{2DD388FF-6422-43C9-86A1-C7A99C83E946}" = ASUS nVidia Driver "{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK "{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager "{33BF0960-DBA3-4187-B6CC-C969FCFA2D25}" = SkinsHP1 "{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder "{3A316611-45D1-429C-AA26-B71259C44689}" = HP Photosmart, Officejet and Deskjet 7.0.A "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1 "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder "{5FDD0538-C67A-4F67-B3F8-09D1AAF04D99}" = muvee autoProducer unPlugged 2.0 "{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler "{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update "{72AD53CC-CCC0-3757-8480-9EE176866A7C}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - FRA "{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune "{82081779-4175-4666-A457-AB711CD37EF0}" = cp_LightScribeConfig "{829DAAD6-BB11-4BB7-921B-07FFB703F944}" = CP_Package_Variety3 "{82E55892-6FFD-403F-AA97-D726846768AA}" = CP_AtenaShokunin1Config "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{866A0078-DEA7-4348-9C9A-999AF2991EAA}" = SlideShowMusic "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A534F71-3202-4464-A422-B767295E67B9}" = CP_Package_Variety2 "{8B7917E0-AF55-4E8A-9473-017F0AA03AC8}" = QuickTime "{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (French) 12 "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007 "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 "{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 "{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{93E5A317-24EC-4744-812C-16FECFE86E6A}" = CP_Package_Variety1 "{93EC14D5-7AAA-4EAD-BB75-013817A96598}" = Logitech Gaming Software "{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack "{9F7AF7CD-E3D0-4C68-A3BA-C76C359B3AA8}" = LightScribe 1.4.105.1 "{A059DE09-1B49-4450-B340-7AE097EC3F04}" = Microsoft Works "{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio "{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.0 - Français "{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9 "{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4 "{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy "{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig "{B6286A44-7505-471A-A72B-04EC2DB2F442}" = CueTour "{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation®Network Downloader "{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config "{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX "{BADF6744-3787-48F6-B8C9-4C4995401D65}" = Windows Live Messenger "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C1BD77B7-C3BD-4932-BE85-39C249CCA225}" = BitDefender Internet Security 2010 "{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery "{C3FAA091-B278-44A7-BF48-190811C5F9F7}" = cp_UpdateProjectsConfig "{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp "{E7A02A01-C75A-4490-A168-5CA709A3D862}" = MainConcept for Software Encoder "{EBD5E7A9-DBB8-4E24-AE3A-CF9390AF1CCB}" = Choice Guard "{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1 "{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia l'Ame du Guerrier "{EEFEBB48-329E-46F6-AEB8-929A5BAFDB2F}" = Le logiciel Intel® Viiv™ "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 1.60.13 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan "{F80239D8-7811-4D5E-B033-0D0BBFE32920}" = HP DigitalMedia Archive "{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations "{FB4740B3-2530-452D-A825-F7AB246CA7DF}" = muvee autoProducer 5.0 "{FBE5AA96-22F0-4C4A-8E92-4BE3498D4CCB}" = Media Go "{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}" = Windows Live installer "0D20D36D-A11C-444c-9AF7-70CBFED42ECF" = Otto "99A88D57-2C93-491B-87B8-E41A870FB6BE" = GemMaster Mystic "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Ad-Remover" = Ad-Remover By C_XX "CCleaner" = CCleaner "DVD Shrink_is1" = DVD Shrink 3.2 "EL" = Intel® Quick Resume Technology Drivers "HijackThis" = HijackThis 2.0.2 "HP Imaging Device Functions" = HP Imaging Device Functions 7.0 "HP Photo & Imaging" = HP Photosmart Premier Software 6.5 "HP Photosmart for Media Center PC" = HP Photosmart for Media Center PC "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "ie8" = Windows Internet Explorer 8 "InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune "InstallShield_{E7A02A01-C75A-4490-A168-5CA709A3D862}" = MainConcept for Software Encoder "KLiteCodecPack_is1" = K-Lite Codec Pack 6.5.0 (Full) "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Messenger Plus! Live" = Messenger Plus! Live "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Midtown Madness 2.0" = Microsoft Midtown Madness 2 "Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12) "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "MyDefrag v4.2.8_is1" = MyDefrag v4.2.8 "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "NVIDIA Drivers" = NVIDIA Drivers "NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager "PROPLUS" = Microsoft Office Professional Plus 2007 "PROSet" = Intel® Network Connections Drivers "Python 2.2.3" = Python 2.2.3 "pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203) "RealPlayer 6.0" = RealPlayer "Revo Uninstaller" = Revo Uninstaller 1.90 "SpeedFan" = SpeedFan (remove only) "StepMania" = StepMania (remove only) "SUPER ©" = SUPER © Version 2010.bld.37 (Jan 2, 2010) "SuperCopier2" = SuperCopier2 "SystemRequirementsLab" = System Requirements Lab "TomTom HOME" = TomTom HOME 2.7.6.2056 "WChat" = Westwood Online "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Lecteur Windows Media 11 "Windows XP Service" = Windows XP Service Pack 3 "WinRAR archiver" = Archiveur WinRAR "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Live Search" = Notification Live Search ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 20/08/2010 12:33:11 | Computer Name = NOM-FB9B15D2723 | Source = ESENT | ID = 490 Description = svchost (1784) Une tentative d'ouverture du fichier "C:\WINDOWS\system32\CatRoot2\edb.chk" pour accès en lecture/écriture a échoué en indiquant l'erreur système 32 (0x00000020) : "Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus. ". L'opération d'ouverture de fichier échouera en indiquant l'erreur -1032 (0xfffffbf8). Error - 20/08/2010 12:33:11 | Computer Name = NOM-FB9B15D2723 | Source = ESENT | ID = 439 Description = Catalog Database (1784) Impossible d'écrire un en-tête de sauvegarde pour le fichier C:\WINDOWS\system32\CatRoot2\edb.chk. Erreur -1032. Error - 11/09/2010 06:55:33 | Computer Name = NOM-FB9B15D2723 | Source = TomTomHOMEService | ID = 10000 Description = Error - 19/09/2010 09:21:42 | Computer Name = NOM-FB9B15D2723 | Source = Application Error | ID = 1000 Description = Application défaillante divx plus player.exe, version 10.2.1.13, module défaillant qtcore4.dll, version 4.5.0.0, adresse de défaillance 0x000e1b16. Error - 18/10/2010 14:14:37 | Computer Name = NOM-FB9B15D2723 | Source = Application Error | ID = 1000 Description = Application défaillante pccompanion.exe, version 1.5.0.0, module défaillant kernel32.dll, version 5.1.2600.5781, adresse de défaillance 0x00012afb. [ OSession Events ] Error - 22/06/2010 12:06:22 | Computer Name = NOM-FB9B15D2723 | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6535.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 10/11/2010 20:22:19 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 11/11/2010 04:56:16 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 12/11/2010 03:55:44 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 12/11/2010 19:05:23 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 13/11/2010 05:11:57 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 13/11/2010 17:31:49 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 14/11/2010 06:46:14 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 14/11/2010 11:02:54 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 14/11/2010 11:22:42 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 Error - 15/11/2010 13:19:12 | Computer Name = NOM-FB9B15D2723 | Source = Service Control Manager | ID = 7000 Description = Le service ASInsHelp n'a pas pu démarrer en raison de l'erreur : %%2 < End of report > Je ferme tout est lance SecurityCheck.exe Merci
  22. Bonjour, Depuis 2 semaine ma machine rame de nouveau ceci est général au PC, programme qui se bloque, firfox qui ne répond plus, il lui est arriver de s'éteindre tout seul (avant hier il a rebooter seul), je me suis aperçue qu'il chercher sans cesse même si je ne fait rien. Je vous poste un log HijackThis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:52:26, on 13/11/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\cacaoweb\cacaoweb.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - HKCU\..\Run: [cacaoweb] "C:\Program Files\cacaoweb\cacaoweb.exe" -noplayer O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. Antivirus Software – BitDefender - Virus Protection Security Now! - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Intel® Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe -- End of file - 9588 bytes En vous remerciant de votre aide. Bonne journée à tous
  23. Up
  24. Bonjour, Je me permet de relancer le sujet car mon pc rame de nouveau, trés lent, firfox à des moments ne répond plus durant quelque seconde ainsi que d'autre programme. Je poste un log HijackThis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:33:49, on 25/10/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe C:\WINDOWS\system32\dllhost.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Actualité, Sport et Vidéo R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O23 - Service: BitDefender Serveur Arrakis (Arrakis3) - BitDefender S.R.L. Antivirus Software – BitDefender - Virus Protection Security Now! - C:\Program Files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Intel® Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe -- End of file - 9306 bytes En vous remerciant, je vous souhaite bonne journée.
  25. Ok merci j'ai réglé CCleaner que je posséder déjà. Je te remercie pour ton aide. Je te recontacte si les lenteurs reviennent. Une dernière question Glary Utilities est utile ?
×
×
  • Créer...